$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: CD0I04TNeSz9/WpYIJdkAts6zFen3VtPtqtf+nV8YnU= Subject key identifier: 8E:60:FA:63:F8:5B:E0:1F:5A:BA:91:9E:27:2F:5C:D4:4C:E1:87:32 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 18CDE02D67F005B630C31B33EC5E30025927162C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 020F Signing time: Fri 17 Oct 2025 14:51:56 +0000 Manifest this update: Fri 17 Oct 2025 14:46:56 +0000 Manifest next update: Tue 21 Oct 2025 00:24:56 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: tZ0ZIGj7rJgnoU/xRZQpHY4KVpcNEJXGZWhqdgVJesM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 00:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:cd:e0:2d:67:f0:05:b6:30:c3:1b:33:ec:5e:30:02:59:27:16:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Oct 17 14:46:56 2025 GMT Not After : Oct 21 00:24:56 2025 GMT Subject: CN=8E60FA63F85BE01F5ABA919E272F5CD44CE18732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:70:73:77:f2:8a:01:24:ab:3f:e7:35:ca: 33:60:44:c5:0c:1f:bc:fd:74:71:a3:eb:c4:da:a1: 9b:de:29:ae:c9:f9:ee:3d:80:c3:c3:83:77:96:c6: 03:4d:b5:4c:c6:a6:7b:9b:2a:ff:04:0c:83:bd:e3: 59:5c:95:67:45:84:2f:4c:1d:8c:b1:63:11:0e:4b: 46:f6:a3:6f:fc:d7:27:22:7b:34:76:9b:40:cc:da: 81:40:c0:6a:b3:74:1f:58:7d:c9:6d:a3:a1:b2:b6: 79:f9:1b:db:9c:e0:e8:41:e6:64:ee:e7:b8:c8:f6: 87:f4:c8:33:5a:f0:ec:69:25:b2:de:4b:8b:de:5e: 83:cb:07:09:f9:54:c1:40:de:95:80:e6:81:5c:aa: ae:43:6b:8b:72:5b:e3:99:78:a3:8e:1a:44:4b:96: c6:20:04:dc:e2:3d:a5:86:80:00:4b:aa:ab:41:ab: d1:d8:4b:81:46:61:78:b1:e8:8f:99:8b:19:c4:bc: 95:50:67:1b:1e:ec:10:28:db:2d:10:27:ab:39:f8: 87:d3:80:13:96:69:ef:30:14:89:b2:af:64:b5:5d: 8a:00:9a:70:52:df:2f:67:ed:6d:5a:9f:24:af:f5: 0f:fb:24:e3:06:9e:a8:9a:f0:95:c6:62:3c:57:9e: ec:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:60:FA:63:F8:5B:E0:1F:5A:BA:91:9E:27:2F:5C:D4:4C:E1:87:32 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3e:23:fe:95:ee:8f:e5:ec:d0:ee:03:bf:7a:77:2e:98:cc: d4:2d:48:4a:92:91:48:c5:be:da:06:12:15:87:d6:11:6a:90: b9:30:2f:47:a7:9d:ab:8c:b2:9c:64:45:3c:d0:86:64:46:37: 9e:61:ec:a5:1e:8c:e6:b2:ae:ea:51:92:26:76:89:c9:45:1c: d0:ec:56:86:33:6b:18:13:03:44:70:82:63:50:c2:1e:12:6e: 91:54:4a:87:57:e9:c4:6a:e1:32:c9:2f:e3:d0:1d:46:1e:c3: e2:a6:cd:b0:bd:fa:de:f5:39:85:30:5a:0a:d2:1d:76:b8:7c: 5c:31:bb:1f:b0:cf:2f:95:a3:ca:f8:0f:fb:d7:29:6c:a4:2d: 5e:ca:bf:d4:d6:3a:8d:6a:3e:6a:6e:c7:06:1b:60:ba:80:75: 56:15:58:c5:0f:da:d6:a2:af:ef:c9:5f:60:15:98:b8:6b:6c: d5:d9:c9:05:d8:4a:a3:24:2e:4a:96:e6:7e:79:c3:98:05:d1: f9:1d:2a:22:02:09:8b:d5:95:bf:36:70:0e:51:91:cc:bd:08: 84:e3:a4:10:f7:d9:38:f1:9c:8e:2f:17:b1:9f:b4:ee:fd:5b: 1d:15:9b:17:29:a1:71:3e:94:db:99:f5:6f:6e:43:5e:27:5f: 43:f7:69:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGM3gLWfwBbYwwxsz7F4wAlknFiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTEwMTcxNDQ2NTZaFw0yNTEwMjEwMDI0NTZaMDMxMTAvBgNV BAMTKDhFNjBGQTYzRjg1QkUwMUY1QUJBOTE5RTI3MkY1Q0Q0NENFMTg3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDConBzd/KKASSrP+c1yjNgRMUM H7z9dHGj68TaoZveKa7J+e49gMPDg3eWxgNNtUzGpnubKv8EDIO941lclWdFhC9M HYyxYxEOS0b2o2/81yciezR2m0DM2oFAwGqzdB9Yfclto6Gytnn5G9uc4OhB5mTu 57jI9of0yDNa8OxpJbLeS4veXoPLBwn5VMFA3pWA5oFcqq5Da4tyW+OZeKOOGkRL lsYgBNziPaWGgABLqqtBq9HYS4FGYXix6I+ZixnEvJVQZxse7BAo2y0QJ6s5+IfT gBOWae8wFImyr2S1XYoAmnBS3y9n7W1anySv9Q/7JOMGnqia8JXGYjxXnuwhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjmD6Y/hb4B9aupGeJy9c1EzhhzIwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk+I/6V7o/l7NDuA796dy6YzNQtSEqSkUjF vtoGEhWH1hFqkLkwL0ennauMspxkRTzQhmRGN55h7KUejOayrupRkiZ2iclFHNDs VoYzaxgTA0RwgmNQwh4SbpFUSodX6cRq4TLJL+PQHUYew+KmzbC9+t71OYUwWgrS HXa4fFwxux+wzy+Vo8r4D/vXKWykLV7Kv9TWOo1qPmpuxwYbYLqAdVYVWMUP2tai r+/JX2AVmLhrbNXZyQXYSqMkLkqW5n55w5gF0fkdKiICCYvVlb82cA5Rkcy9CITj pBD32TjxnI4vF7GftO79Wx0VmxcpoXE+lNuZ9W9uQ14nX0P3ab4= -----END CERTIFICATE-----Generated at Sun Oct 19 17:59:51 2025 by rpki-client