$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: drxFSyK/dvUESn8Qq10UbPeWmLKuXdjyf1D7IOJ9Db0= Subject key identifier: A8:27:F8:97:89:2A:CD:28:98:57:5E:B4:C7:FF:DD:6F:28:07:98:F4 Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 4F1FD0338CF78F1D307F5A7359D4B27A3CACB230 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 018B Signing time: Mon 08 Sep 2025 19:00:57 +0000 Manifest this update: Mon 08 Sep 2025 18:55:57 +0000 Manifest next update: Fri 12 Sep 2025 04:46:57 +0000 Files and hashes: 1: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: JVYs2u33ZW1TxBHnkdq2GigxLFPliQXMCGmJW87Gmfw=) 2: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: paFKt6o0V+erS5HMhIrJfWgyUpdeSz8l0mwrNctd67E=) 3: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: 907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=) 4: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: H3EtcLEE0IGvam9Auuq3QSB3PLABMBbWzZsAbxF8fnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1f:d0:33:8c:f7:8f:1d:30:7f:5a:73:59:d4:b2:7a:3c:ac:b2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Sep 8 18:55:57 2025 GMT Not After : Sep 12 04:46:57 2025 GMT Subject: CN=A827F897892ACD2898575EB4C7FFDD6F280798F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:82:aa:1e:ce:c3:06:23:26:2b:f2:bc:af: 4e:03:19:ba:1f:e7:86:34:35:fa:41:ff:bc:b2:a2: 83:b1:5a:ff:7a:a0:b1:f4:10:cf:05:da:35:23:95: ec:8e:cb:b1:2f:d1:8b:d1:8a:9d:30:7e:36:0c:8f: 48:73:bc:14:8b:18:9f:42:3b:b3:d1:eb:d3:e0:17: 2c:63:3c:1f:fc:dd:f1:98:90:16:0b:b8:e8:24:c8: 9b:59:1a:fb:a8:57:a5:23:f9:ae:9c:93:71:05:59: 0f:f0:4a:90:15:0c:6f:37:48:cd:dd:55:fa:d9:5b: 0c:b9:b1:11:ca:7b:28:01:b3:77:76:65:00:81:04: c3:8d:64:81:10:e9:7c:f9:9e:f1:86:42:31:78:06: dd:6b:fc:d2:dd:5b:99:26:32:15:df:fa:a9:1f:a7: de:5f:21:91:cc:bb:f6:27:ba:c3:e3:f1:88:b3:2c: 86:16:aa:b2:13:ed:36:b5:5e:7f:37:af:18:19:96: ba:0f:2a:76:6f:8b:8c:8c:78:b8:05:fd:12:01:05: f3:06:95:ac:05:56:0b:bf:14:c6:a6:e6:ef:3a:a8: d7:36:e9:43:7e:96:0f:aa:35:42:79:bc:07:a0:78: dc:3b:d8:97:6f:5c:e4:ba:f1:72:cd:b3:6e:ce:bb: d0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:27:F8:97:89:2A:CD:28:98:57:5E:B4:C7:FF:DD:6F:28:07:98:F4 X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:01:73:ab:ff:f8:35:27:02:c0:47:e2:6f:79:d2:9f:10:84: 45:8e:69:2c:ea:f6:ce:71:b4:36:89:f5:b0:e4:da:75:99:73: 4d:99:8d:cf:4b:5b:e9:60:1b:f2:a5:95:85:dc:b6:9d:45:a8: ec:ff:54:c0:ee:d4:f0:10:ca:36:c7:27:3e:2c:8e:26:f4:30: 37:50:f7:c3:fe:c3:73:f9:48:89:77:9a:25:3b:0d:cf:24:6e: bd:49:c9:47:15:6b:e6:83:f8:16:f6:1c:7a:3a:11:59:27:53: 9f:80:c1:00:4e:52:4f:16:66:92:64:7d:4e:ba:f6:74:4b:2b: b5:68:29:b9:f9:61:a8:17:23:1a:c5:df:56:d8:52:8f:be:d8: cc:d8:d6:d3:25:dd:7a:41:06:b2:9b:1d:9c:22:3e:87:05:d4: 2b:0a:1f:0e:92:1d:c5:24:72:a5:a8:5e:85:22:d9:53:a3:f4: 8a:37:34:55:83:5a:37:6c:b3:aa:01:80:64:1b:41:85:82:37: 66:6c:80:a1:2e:3d:01:ae:f8:76:85:d3:30:13:d1:b4:f4:46: 94:d7:0c:04:be:50:aa:da:e2:c5:64:c4:8f:98:c4:60:39:e9: 92:91:0a:44:69:1f:05:16:c4:97:ef:33:3b:7c:18:3e:4c:ec: 70:42:89:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTx/QM4z3jx0wf1pzWdSyejyssjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNTA5MDgxODU1NTdaFw0yNTA5MTIwNDQ2NTdaMDMxMTAvBgNV BAMTKEE4MjdGODk3ODkyQUNEMjg5ODU3NUVCNEM3RkZERDZGMjgwNzk4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5YKqHs7DBiMmK/K8r04DGbof 54Y0NfpB/7yyooOxWv96oLH0EM8F2jUjleyOy7Ev0YvRip0wfjYMj0hzvBSLGJ9C O7PR69PgFyxjPB/83fGYkBYLuOgkyJtZGvuoV6Uj+a6ck3EFWQ/wSpAVDG83SM3d VfrZWwy5sRHKeygBs3d2ZQCBBMONZIEQ6Xz5nvGGQjF4Bt1r/NLdW5kmMhXf+qkf p95fIZHMu/YnusPj8YizLIYWqrIT7Ta1Xn83rxgZlroPKnZvi4yMeLgF/RIBBfMG lawFVgu/FMam5u86qNc26UN+lg+qNUJ5vAegeNw72JdvXOS68XLNs27Ou9CFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqCf4l4kqzSiYV160x//dbygHmPQwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcBc6v/+DUnAsBH4m950p8QhEWOaSzq9s5x tDaJ9bDk2nWZc02Zjc9LW+lgG/KllYXctp1FqOz/VMDu1PAQyjbHJz4sjib0MDdQ 98P+w3P5SIl3miU7Dc8kbr1JyUcVa+aD+Bb2HHo6EVknU5+AwQBOUk8WZpJkfU66 9nRLK7VoKbn5YagXIxrF31bYUo++2MzY1tMl3XpBBrKbHZwiPocF1CsKHw6SHcUk cqWoXoUi2VOj9Io3NFWDWjdss6oBgGQbQYWCN2ZsgKEuPQGu+HaF0zAT0bT0RpTX DAS+UKra4sVkxI+YxGA56ZKRCkRpHwUWxJfvMzt8GD5M7HBCias= -----END CERTIFICATE-----Generated at Tue Sep 9 02:06:50 2025 by rpki-client