$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft File: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json) Hash identifier: 19T01OL+bPfx1V3rRl3sMHHrbjBfcAU++5C9sKU+TGY= Subject key identifier: 5D:B6:8D:84:D4:39:F1:B6:98:7E:57:8E:B9:F0:61:02:B6:DB:64:CD Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Certificate serial: 70380CBBDE55F5E6FD3E1B329C499E3842D47250 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft Manifest number: 04BB Signing time: Tue 21 Oct 2025 20:01:18 +0000 Manifest this update: Tue 21 Oct 2025 19:56:18 +0000 Manifest next update: Sat 25 Oct 2025 06:19:18 +0000 Files and hashes: 1: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: YKavG5BYX35gN+X57HnRTPxNk5gszMrLuRrboILgThk=) 2: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: MItE47EaO9IAk0e+oiW0dyxlfEYvief1VP6PIxAt77c=) 3: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: yIuwDJ7Q95tfvD77KhegvlF4CTHEd3Lu6i61741Xn4E=) 4: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: AO7wu2Q7QW+RPhPuz6APgWm6cf6PGEEupVDtRJV53rE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 06:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:38:0c:bb:de:55:f5:e6:fd:3e:1b:32:9c:49:9e:38:42:d4:72:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Validity Not Before: Oct 21 19:56:18 2025 GMT Not After : Oct 25 06:19:18 2025 GMT Subject: CN=5DB68D84D439F1B6987E578EB9F06102B6DB64CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:bd:bc:61:67:56:17:31:1d:59:c6:01:9d: 51:d4:86:1b:21:8a:1e:ef:82:ad:02:39:c9:98:f0: de:f9:39:be:04:33:93:37:cb:5d:df:8c:c7:9b:5c: 78:ee:8e:19:3f:75:64:58:6a:d2:2a:10:ca:16:04: 08:4b:42:d8:2c:c0:ee:d4:71:25:d1:ec:a9:82:42: 13:0a:e4:56:f2:92:c0:1e:3d:e1:75:82:73:d1:7e: 6e:dd:f8:a3:1c:e9:34:64:76:6a:96:b7:76:1f:17: cb:f1:ba:76:9d:a6:a3:1e:cb:fc:01:d4:a3:35:af: ef:00:80:fc:a3:ad:14:b9:40:ee:1e:78:f7:10:81: e2:74:6a:9a:b0:80:13:b5:a1:7a:0d:d7:5d:cd:6f: 20:df:ed:e0:fe:ef:73:f6:de:ae:f6:59:6f:51:98: 7e:20:30:99:5d:41:ce:79:cd:47:c2:fc:d0:6c:d3: 02:1a:68:17:0b:70:4d:71:06:d1:4c:c5:be:a3:47: 96:c4:39:6b:99:95:3c:f1:a1:43:97:f7:86:33:60: 91:bb:e3:88:91:7f:e9:47:d8:12:c4:1c:19:50:1a: a7:22:4d:27:e6:81:39:1b:7a:ea:20:5d:14:39:e7: 9a:64:39:9e:14:05:57:ee:39:67:98:f2:4f:37:b0: fa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B6:8D:84:D4:39:F1:B6:98:7E:57:8E:B9:F0:61:02:B6:DB:64:CD X509v3 Authority Key Identifier: keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5a:06:81:a5:b9:69:99:fe:22:94:34:60:cf:15:c2:d5:25: 5d:cc:8d:d2:0b:af:d2:ba:70:64:d6:ac:93:70:5a:8b:f3:06: 10:74:64:a0:d6:a8:c0:32:83:95:42:db:50:26:21:75:57:ad: ae:6b:73:cc:a6:b7:ef:e1:7b:b4:a1:f8:d8:de:87:8b:bf:8d: ae:a5:10:5b:75:aa:60:86:6b:ab:5d:ea:cf:10:35:9a:5e:62: 3c:14:aa:20:49:f2:82:02:d9:1c:43:36:7d:28:8b:f9:51:66: 44:75:6c:36:cd:ac:da:5a:a5:f3:8d:07:7c:44:92:1c:8e:23: 1c:6f:a9:00:de:98:c7:f8:53:14:5a:a8:b2:a8:76:0b:18:25: 65:5b:90:b9:92:fc:e0:23:93:e3:db:f4:c3:87:5c:cc:8a:af: 53:8a:b2:3e:4b:2b:9b:be:79:56:15:b6:41:7d:5a:f8:56:04: 20:c3:d4:2f:82:79:fd:42:5b:9a:2c:8e:d4:ac:f8:a0:0d:c5: 3c:1c:23:e9:23:d5:b4:b9:d8:e7:d9:e0:a9:1b:84:07:57:b3: 46:bc:fc:a8:04:11:1e:89:8a:8a:a1:9a:e6:04:5a:f9:b3:d5: c3:98:cb:82:37:17:5e:6f:24:ed:48:77:1d:77:fe:e3:54:fc: 44:d6:eb:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDgMu95V9eb9PhsynEmeOELUclAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3 QjQ1Q0IzNTAeFw0yNTEwMjExOTU2MThaFw0yNTEwMjUwNjE5MThaMDMxMTAvBgNV BAMTKDVEQjY4RDg0RDQzOUYxQjY5ODdFNTc4RUI5RjA2MTAyQjZEQjY0Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUHb28YWdWFzEdWcYBnVHUhhsh ih7vgq0COcmY8N75Ob4EM5M3y13fjMebXHjujhk/dWRYatIqEMoWBAhLQtgswO7U cSXR7KmCQhMK5FbyksAePeF1gnPRfm7d+KMc6TRkdmqWt3YfF8vxunadpqMey/wB 1KM1r+8AgPyjrRS5QO4eePcQgeJ0apqwgBO1oXoN113NbyDf7eD+73P23q72WW9R mH4gMJldQc55zUfC/NBs0wIaaBcLcE1xBtFMxb6jR5bEOWuZlTzxoUOX94YzYJG7 44iRf+lH2BLEHBlQGqciTSfmgTkbeuogXRQ555pkOZ4UBVfuOWeY8k83sPrfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXbaNhNQ58baYfleOufBhArbbZM0wHwYDVR0j BBgwFoAUFbfr+Ss1/bW8aZC7jsosKXtFyzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjU1MWFiOS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC8xNUI3RUJGOTJC MzVGREI1QkM2OTkwQkI4RUNBMkMyOTdCNDVDQjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3QjQ1 Q0IzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJD Mjk3QjQ1Q0IzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1aBoGluWmZ/iKUNGDPFcLVJV3MjdILr9K6 cGTWrJNwWovzBhB0ZKDWqMAyg5VC21AmIXVXra5rc8ymt+/he7Sh+Njeh4u/ja6l EFt1qmCGa6td6s8QNZpeYjwUqiBJ8oIC2RxDNn0oi/lRZkR1bDbNrNpapfONB3xE khyOIxxvqQDemMf4UxRaqLKodgsYJWVbkLmS/OAjk+Pb9MOHXMyKr1OKsj5LK5u+ eVYVtkF9WvhWBCDD1C+Cef1CW5osjtSs+KANxTwcI+kj1bS52OfZ4KkbhAdXs0a8 /KgEER6JioqhmuYEWvmz1cOYy4I3F15vJO1Idx13/uNU/ETW6xM= -----END CERTIFICATE-----Generated at Thu Oct 23 05:52:39 2025 by rpki-client