$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: 4TuXJLFs8rVxwuScEDleJ9eaPX/b7cmDGgIYKcKwu70= Subject key identifier: 97:9A:A8:F5:34:06:60:23:EA:3C:A5:52:42:DA:AD:C5:56:C8:FB:6E Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 6F97119598E95BF3F92FB2A57025C586E95BD25C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 01A3 Signing time: Sat 01 Nov 2025 02:40:56 +0000 Manifest this update: Sat 01 Nov 2025 02:35:56 +0000 Manifest next update: Tue 04 Nov 2025 04:36:56 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: H3EtcLEE0IGvam9Auuq3QSB3PLABMBbWzZsAbxF8fnQ=) 2: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: QnnYf3oarAUricsA9H5aW6t9JCY+fBBLa5+mq6zLL2g=) 3: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: 907swenfI16Aft6qzAi5dpyEs6BxfNg+Ndea03NJnvc=) 4: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: JhgF1MSWlQxw36SgZrQfFzd6pgr9ZX5Xk0n79qTJS9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 04:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:97:11:95:98:e9:5b:f3:f9:2f:b2:a5:70:25:c5:86:e9:5b:d2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Nov 1 02:35:56 2025 GMT Not After : Nov 4 04:36:56 2025 GMT Subject: CN=979AA8F534066023EA3CA55242DAADC556C8FB6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:82:68:f8:41:55:2d:c4:82:d9:56:e4:bd:43: f9:30:4b:4e:02:d6:af:e9:9a:2d:d0:a7:21:f6:0c: 71:a4:c3:d8:b2:28:37:3f:56:07:c1:0e:6f:c1:50: 89:d5:dc:bd:77:59:4e:e9:b5:c2:65:e1:26:5a:fc: ce:f3:8d:ee:58:e3:a0:cc:2d:31:5b:9b:34:ee:5b: 08:fa:4a:42:3b:91:da:58:39:d4:51:e2:d7:9a:1e: 2e:ef:60:65:86:33:e4:3d:29:83:c7:fd:02:60:30: 1f:12:8a:94:06:a8:4c:3b:55:62:a5:77:ad:3c:da: b7:2b:dd:c7:11:23:79:ba:9e:cd:75:0c:93:ba:19: 34:7c:6b:82:88:de:d5:62:0e:58:a5:74:89:6d:c8: d2:15:83:8e:d5:cd:a3:dc:28:19:d2:23:bb:d3:e0: 49:1c:86:e2:ee:45:ba:2a:cf:93:3a:02:e2:5e:48: ad:4f:11:a7:7d:bb:08:94:57:17:59:d8:69:fb:7d: 3f:45:03:4f:00:8e:cc:42:f1:dd:f0:85:c9:6e:1d: bd:ee:82:67:50:ab:e6:f7:ae:34:2f:28:da:46:47: a4:a1:82:70:20:58:1b:52:26:bf:af:08:99:f4:a7: 44:56:a6:23:40:be:e7:84:2a:0a:43:50:1f:34:59: f9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9A:A8:F5:34:06:60:23:EA:3C:A5:52:42:DA:AD:C5:56:C8:FB:6E X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:22:9f:07:3c:dc:3f:5c:b1:60:b6:43:cc:68:48:73:3c:27: 29:ed:e3:57:08:d4:ad:19:44:70:60:8f:36:a0:4f:65:c3:71: d3:7c:64:e4:1d:14:44:da:3a:92:a2:8b:9a:23:8f:f6:8e:7e: 75:15:06:05:5b:5e:83:45:4a:70:54:5f:0d:23:8f:71:78:ec: 1c:ab:41:18:ed:ca:3c:74:36:a2:41:1e:9a:09:92:4d:60:da: a0:69:af:56:0e:53:cd:84:fa:66:62:45:63:c0:c8:d1:41:a3: 4a:86:86:80:96:92:8b:ae:82:72:35:6c:a5:47:93:27:77:ae: 1e:b5:4e:aa:99:f2:8a:c4:ad:6c:29:41:b4:e7:5a:ab:89:29: f6:0d:98:31:91:0b:9a:c9:7e:d3:0b:27:89:b4:cc:36:b6:c8: 35:0c:42:ec:a3:81:73:53:cd:05:e6:ff:0f:16:a4:dd:d1:c9: e8:05:35:d3:a4:df:4b:fc:73:f7:03:2b:87:33:87:bd:1c:01: 0b:de:eb:d1:57:5b:de:78:62:8e:e7:97:24:be:7f:b8:6c:a3: 77:39:1e:98:8c:84:26:02:f4:21:24:9c:d9:2b:29:a0:df:4f: 00:c0:6f:fa:57:46:09:d2:43:cc:2f:46:f2:73:77:96:11:28: df:3e:86:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5cRlZjpW/P5L7KlcCXFhulb0lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNTExMDEwMjM1NTZaFw0yNTExMDQwNDM2NTZaMDMxMTAvBgNV BAMTKDk3OUFBOEY1MzQwNjYwMjNFQTNDQTU1MjQyREFBREM1NTZDOEZCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0gmj4QVUtxILZVuS9Q/kwS04C 1q/pmi3QpyH2DHGkw9iyKDc/VgfBDm/BUInV3L13WU7ptcJl4SZa/M7zje5Y46DM LTFbmzTuWwj6SkI7kdpYOdRR4teaHi7vYGWGM+Q9KYPH/QJgMB8SipQGqEw7VWKl d6082rcr3ccRI3m6ns11DJO6GTR8a4KI3tViDlildIltyNIVg47VzaPcKBnSI7vT 4EkchuLuRboqz5M6AuJeSK1PEad9uwiUVxdZ2Gn7fT9FA08AjsxC8d3whcluHb3u gmdQq+b3rjQvKNpGR6ShgnAgWBtSJr+vCJn0p0RWpiNAvueEKgpDUB80Wfl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl5qo9TQGYCPqPKVSQtqtxVbI+24wHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMinwc83D9csWC2Q8xoSHM8Jynt41cI1K0Z RHBgjzagT2XDcdN8ZOQdFETaOpKii5ojj/aOfnUVBgVbXoNFSnBUXw0jj3F47Byr QRjtyjx0NqJBHpoJkk1g2qBpr1YOU82E+mZiRWPAyNFBo0qGhoCWkouugnI1bKVH kyd3rh61TqqZ8orErWwpQbTnWquJKfYNmDGRC5rJftMLJ4m0zDa2yDUMQuyjgXNT zQXm/w8WpN3RyegFNdOk30v8c/cDK4czh70cAQve69FXW954Yo7nlyS+f7hso3c5 HpiMhCYC9CEknNkrKaDfTwDAb/pXRgnSQ8wvRvJzd5YRKN8+hko= -----END CERTIFICATE-----Generated at Sun Nov 2 06:18:20 2025 by rpki-client