$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: jlrpVgBna8IRo5E5RadJJOWMLDlWvg6kmpigEctod5Q= Subject key identifier: 89:79:CA:ED:A7:DC:03:DF:F0:D1:C0:A0:DC:74:28:D2:AE:F1:82:E1 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 476E9DB13CBCB3272C6F01FA93B4EF3A7FAD7B52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 016D Signing time: Thu 04 Sep 2025 14:31:40 +0000 Manifest this update: Thu 04 Sep 2025 14:26:40 +0000 Manifest next update: Mon 08 Sep 2025 00:28:40 +0000 Files and hashes: 1: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: RWbHMk/ZYlpn20BdW7EyHlfjW1Sy4Yt8D441QTIPaGc=) 2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=) 3: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6e:9d:b1:3c:bc:b3:27:2c:6f:01:fa:93:b4:ef:3a:7f:ad:7b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Sep 4 14:26:40 2025 GMT Not After : Sep 8 00:28:40 2025 GMT Subject: CN=8979CAEDA7DC03DFF0D1C0A0DC7428D2AEF182E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:3f:8d:6b:b5:8c:1f:a3:4c:b5:d1:05:af: ac:91:a2:7b:17:c7:68:cd:24:7d:43:78:b2:82:80: 74:c2:01:4a:20:ab:f0:b5:ef:ae:10:ad:76:86:71: b8:5e:2e:13:21:02:2a:f0:82:fb:af:a4:7a:9c:06: d1:21:c9:f7:43:79:b4:9a:bf:c6:3f:ed:9e:fb:6d: 54:ca:45:1b:82:6f:58:11:25:a6:45:6a:fb:e7:da: 10:4f:b6:b7:79:5a:6f:e2:87:37:b5:88:dd:df:8b: 52:84:dd:da:1c:45:25:43:fa:f2:6a:3f:02:b6:d3: c5:45:e4:12:7b:81:ab:26:e2:2d:6f:40:29:fa:5b: b2:50:65:0d:89:2a:66:94:5c:ef:0d:c7:a1:1b:4d: 69:2b:c1:25:6a:87:49:be:3b:16:08:ee:a7:d3:d6: dc:7d:99:90:fa:46:11:05:04:31:be:5c:cb:ee:60: a0:ef:b5:a9:fe:c5:f3:d8:74:21:c0:98:7a:ba:3a: 9a:a2:8b:f5:c1:01:7c:cc:28:3a:8d:8d:92:9b:c0: 1c:aa:bf:93:dd:42:4b:5c:6e:8d:51:36:99:20:10: 74:c9:eb:9f:57:dd:f7:eb:3d:55:99:33:6d:f4:eb: a2:11:52:36:46:d0:0a:67:20:48:32:23:25:eb:bc: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:79:CA:ED:A7:DC:03:DF:F0:D1:C0:A0:DC:74:28:D2:AE:F1:82:E1 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:cd:65:5c:39:88:f6:3d:c5:75:27:e3:14:6e:b0:bb:7e:64: a8:dc:79:9a:31:cb:6d:c9:e2:2c:1c:26:23:0c:c1:d7:2f:62: f5:2e:c1:c5:ae:0f:8d:6a:0a:88:33:91:e2:41:a3:3a:64:7a: b7:d6:04:49:7c:6c:9a:04:20:01:92:09:a7:e4:ad:b4:91:55: d2:46:3a:d4:11:dc:d1:c1:58:8f:61:f9:8b:10:e3:3a:61:4b: a8:80:3f:5f:2c:6f:7f:0b:7c:10:3c:ec:0b:7c:2f:d4:72:2c: f5:de:0e:6b:d1:cb:76:80:61:61:51:54:19:c5:c1:2f:b9:66: d0:d1:60:eb:ad:e6:a2:70:d4:4d:81:93:76:3b:4a:e1:81:32: 78:45:c0:7b:be:ff:af:d1:cd:63:31:2b:9a:84:a4:2d:0e:79: 25:fb:8e:7b:1f:bf:43:7b:89:04:c9:cf:5f:07:2a:90:d5:25: 44:39:6b:76:c2:37:94:97:1c:41:00:bc:f3:3f:74:b0:d9:a8: 40:fb:30:b2:6c:c9:8b:c2:7c:9d:2e:dc:e6:f4:f2:52:4f:f3: 1a:4a:58:16:10:64:11:a7:d4:4f:ae:eb:54:da:7c:ad:8e:6a: 62:cf:a4:34:73:33:a9:9c:5d:ce:36:8c:a1:51:c6:0e:60:0b: 83:2c:a5:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR26dsTy8sycsbwH6k7TvOn+te1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNTA5MDQxNDI2NDBaFw0yNTA5MDgwMDI4NDBaMDMxMTAvBgNV BAMTKDg5NzlDQUVEQTdEQzAzREZGMEQxQzBBMERDNzQyOEQyQUVGMTgyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kT+Na7WMH6NMtdEFr6yRonsX x2jNJH1DeLKCgHTCAUogq/C1764QrXaGcbheLhMhAirwgvuvpHqcBtEhyfdDebSa v8Y/7Z77bVTKRRuCb1gRJaZFavvn2hBPtrd5Wm/ihze1iN3fi1KE3docRSVD+vJq PwK208VF5BJ7gasm4i1vQCn6W7JQZQ2JKmaUXO8Nx6EbTWkrwSVqh0m+OxYI7qfT 1tx9mZD6RhEFBDG+XMvuYKDvtan+xfPYdCHAmHq6Opqii/XBAXzMKDqNjZKbwByq v5PdQktcbo1RNpkgEHTJ659X3ffrPVWZM23066IRUjZG0ApnIEgyIyXrvHw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXnK7afcA9/w0cCg3HQo0q7xguEwHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLNZVw5iPY9xXUn4xRusLt+ZKjceZoxy23J 4iwcJiMMwdcvYvUuwcWuD41qCogzkeJBozpkerfWBEl8bJoEIAGSCafkrbSRVdJG OtQR3NHBWI9h+YsQ4zphS6iAP18sb38LfBA87At8L9RyLPXeDmvRy3aAYWFRVBnF wS+5ZtDRYOut5qJw1E2Bk3Y7SuGBMnhFwHu+/6/RzWMxK5qEpC0OeSX7jnsfv0N7 iQTJz18HKpDVJUQ5a3bCN5SXHEEAvPM/dLDZqED7MLJsyYvCfJ0u3Ob08lJP8xpK WBYQZBGn1E+u61TafK2OamLPpDRzM6mcXc42jKFRxg5gC4MspQA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:10:39 2025 by rpki-client