$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft File: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json) Hash identifier: xenbKjMrmVHjSPhgFmcQ81+ZtuPxUcaRCngFhCdv7Lg= Subject key identifier: DF:AA:7E:13:1D:F5:00:D8:59:E6:CB:00:5C:8D:FE:6E:FE:17:8C:6C Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Certificate serial: 1FA68E8E71A44448F944E84832B2149DA71DA3F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft Manifest number: 04A7 Signing time: Sat 06 Sep 2025 23:41:16 +0000 Manifest this update: Sat 06 Sep 2025 23:36:16 +0000 Manifest next update: Wed 10 Sep 2025 02:37:16 +0000 Files and hashes: 1: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: yIuwDJ7Q95tfvD77KhegvlF4CTHEd3Lu6i61741Xn4E=) 2: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: I4sKsSPelQmdsjCKTijYrzIdxwka+Ron6W8OxS93edk=) 3: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: AO7wu2Q7QW+RPhPuz6APgWm6cf6PGEEupVDtRJV53rE=) 4: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: MItE47EaO9IAk0e+oiW0dyxlfEYvief1VP6PIxAt77c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a6:8e:8e:71:a4:44:48:f9:44:e8:48:32:b2:14:9d:a7:1d:a3:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Validity Not Before: Sep 6 23:36:16 2025 GMT Not After : Sep 10 02:37:16 2025 GMT Subject: CN=DFAA7E131DF500D859E6CB005C8DFE6EFE178C6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:96:d9:cc:d3:29:34:53:0c:67:e0:2c:97: 98:f5:11:7e:4f:e7:e5:ab:e5:e0:9e:21:14:69:4e: 3d:b5:54:2f:9e:f1:e4:51:aa:0f:e9:16:5f:30:c7: 2e:44:39:45:85:38:3d:2f:c7:38:9d:9a:26:f8:94: 16:52:e7:0e:4f:0a:ab:81:87:0f:ad:82:80:9c:84: 45:e8:2b:89:66:b5:82:3b:b0:73:81:56:44:7e:92: b2:3e:57:7e:fd:9d:49:ff:d4:88:64:f6:61:d8:43: 7e:e7:25:38:74:a1:a9:ad:f0:67:39:70:0f:ad:36: ad:d9:7a:0b:f5:30:67:aa:c8:6d:f3:89:25:93:32: be:44:8e:0d:5f:61:24:d4:99:84:bb:b8:9d:96:47: 0a:ce:6c:06:d9:97:90:83:6b:4e:9f:d0:12:8f:51: 5d:f0:f5:b0:b4:3d:8e:a1:c1:dd:2e:7e:1b:da:c5: 89:71:27:78:66:7c:7b:48:af:8e:99:f9:3e:75:f9: 5d:9a:ee:cd:98:73:59:06:33:91:8a:96:9f:17:ff: c3:8d:0b:1f:e3:14:bc:9c:29:91:c7:e7:c4:fb:e2: 6a:a5:0f:39:d5:a1:45:3d:53:91:b2:2a:38:eb:87: cf:86:c3:d7:b1:c5:a4:9d:d9:52:36:a9:35:a0:9c: 70:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:AA:7E:13:1D:F5:00:D8:59:E6:CB:00:5C:8D:FE:6E:FE:17:8C:6C X509v3 Authority Key Identifier: keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:4f:54:7f:63:6b:f7:7f:44:2a:95:8e:13:ee:a5:15:48:4f: 95:2a:ee:8c:21:6c:11:bf:ef:9b:eb:e2:a0:ea:50:2b:b4:07: 1e:3e:df:11:88:26:fa:06:37:43:da:b0:62:19:eb:b2:fe:f2: 22:39:e9:31:52:ec:51:5d:bf:28:d3:70:8a:81:3a:7d:a6:0d: 5b:27:2b:4f:45:4a:25:1b:ee:e6:df:f5:59:92:ae:e2:10:c8: e0:96:9c:55:cf:df:4b:b5:9f:d6:cc:33:e7:28:c4:d7:67:cc: 10:21:64:39:f7:42:d7:5a:22:77:0d:17:44:5b:4a:1e:16:4a: 27:32:27:25:b6:50:c6:0a:aa:d5:f3:29:b7:75:56:b9:a3:39: 15:7d:4c:8d:4a:a7:0c:cc:5d:f8:3d:4e:80:72:cf:bc:b0:79: ec:d3:89:1b:2b:98:57:64:44:c8:10:c7:fb:b1:5d:66:37:8a: ef:b6:20:71:13:39:3e:d9:08:3e:b5:ff:80:06:51:b7:d0:d1: a6:bb:31:60:8e:08:46:d1:02:fe:b0:6b:3e:e3:66:c7:7b:d6: 4e:9e:e6:73:c0:28:ae:f1:a6:8d:06:7b:6e:dd:bb:f6:f7:56: 66:6f:9c:1d:96:57:be:a9:f0:40:5c:ae:3a:75:3f:53:ad:0c: 21:4b:c2:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6aOjnGkREj5ROhIMrIUnacdo/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3 QjQ1Q0IzNTAeFw0yNTA5MDYyMzM2MTZaFw0yNTA5MTAwMjM3MTZaMDMxMTAvBgNV BAMTKERGQUE3RTEzMURGNTAwRDg1OUU2Q0IwMDVDOERGRTZFRkUxNzhDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXTpbZzNMpNFMMZ+Asl5j1EX5P 5+Wr5eCeIRRpTj21VC+e8eRRqg/pFl8wxy5EOUWFOD0vxzidmib4lBZS5w5PCquB hw+tgoCchEXoK4lmtYI7sHOBVkR+krI+V379nUn/1Ihk9mHYQ37nJTh0oamt8Gc5 cA+tNq3Zegv1MGeqyG3ziSWTMr5Ejg1fYSTUmYS7uJ2WRwrObAbZl5CDa06f0BKP UV3w9bC0PY6hwd0ufhvaxYlxJ3hmfHtIr46Z+T51+V2a7s2Yc1kGM5GKlp8X/8ON Cx/jFLycKZHH58T74mqlDznVoUU9U5GyKjjrh8+Gw9exxaSd2VI2qTWgnHCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU36p+Ex31ANhZ5ssAXI3+bv4XjGwwHwYDVR0j BBgwFoAUFbfr+Ss1/bW8aZC7jsosKXtFyzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjU1MWFiOS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC8xNUI3RUJGOTJC MzVGREI1QkM2OTkwQkI4RUNBMkMyOTdCNDVDQjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3QjQ1 Q0IzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJD Mjk3QjQ1Q0IzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENPVH9ja/d/RCqVjhPupRVIT5Uq7owhbBG/ 75vr4qDqUCu0Bx4+3xGIJvoGN0PasGIZ67L+8iI56TFS7FFdvyjTcIqBOn2mDVsn K09FSiUb7ubf9VmSruIQyOCWnFXP30u1n9bMM+coxNdnzBAhZDn3QtdaIncNF0Rb Sh4WSicyJyW2UMYKqtXzKbd1VrmjORV9TI1KpwzMXfg9ToByz7yweezTiRsrmFdk RMgQx/uxXWY3iu+2IHETOT7ZCD61/4AGUbfQ0aa7MWCOCEbRAv6waz7jZsd71k6e 5nPAKK7xpo0Ge27du/b3VmZvnB2WV76p8EBcrjp1P1OtDCFLwsw= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:40 2025 by rpki-client