$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft File: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json) Hash identifier: /rA22xHAGWuFgSoTWqmUjUU/08MlwDxaD90xYT04XUU= Subject key identifier: 20:D4:83:4A:38:EB:60:8E:85:3C:61:BD:AD:B2:FF:01:6A:01:95:6A Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 6812A8901E7370A23805999B3D7E555990D25BD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft Manifest number: 01F5 Signing time: Thu 21 Aug 2025 08:51:18 +0000 Manifest this update: Thu 21 Aug 2025 08:46:18 +0000 Manifest next update: Sun 24 Aug 2025 18:29:18 +0000 Files and hashes: 1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=) 2: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: YeTfy/sK/kIXsh2vJdNvl+TpIPw5an0s8zuNvZ1ZQKM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:12:a8:90:1e:73:70:a2:38:05:99:9b:3d:7e:55:59:90:d2:5b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: Aug 21 08:46:18 2025 GMT Not After : Aug 24 18:29:18 2025 GMT Subject: CN=20D4834A38EB608E853C61BDADB2FF016A01956A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:28:5f:e6:c0:17:c2:d2:66:bd:b2:48:a0: e8:b6:58:bb:cf:ba:c4:62:31:c3:27:60:9f:b2:3e: 61:30:de:cb:71:5a:cc:c9:f4:45:e0:cf:e5:a9:9e: 9c:83:1f:5d:3c:84:c1:30:e0:a4:2e:dc:83:7e:84: 01:1e:f4:04:94:f3:70:57:26:28:16:9d:75:ca:b3: dd:a0:c6:f0:e6:0f:fe:38:a9:25:92:af:05:b0:7f: 8d:8e:13:9a:34:22:bb:c1:06:9c:09:24:2d:22:37: ea:19:1d:cd:40:c6:1d:e1:f2:9e:01:5f:f4:0e:d7: 09:10:90:08:5b:2b:33:3b:55:07:b2:b5:39:e8:14: d9:26:48:31:cf:29:ac:0c:fe:e9:73:f1:55:f2:e4: 03:85:3d:d3:5e:a8:83:dc:66:ad:9f:a1:7d:5e:6b: c7:d2:74:83:3e:88:ef:88:4a:05:f9:1c:fe:28:3c: 03:e0:9d:35:49:7d:3b:23:5e:7f:ee:22:35:a1:61: 7f:5e:41:aa:30:cd:17:56:37:c8:9a:53:66:2e:5f: b4:28:54:d3:48:7c:d1:9e:46:4a:4c:97:ce:cc:d5: e3:c4:cc:d2:15:d3:84:f7:38:8f:99:b1:b9:0e:d4: 85:fc:7d:f0:b6:d6:71:8d:de:53:52:df:2f:4f:00: 31:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D4:83:4A:38:EB:60:8E:85:3C:61:BD:AD:B2:FF:01:6A:01:95:6A X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2a:66:5a:61:57:5e:70:96:8c:3e:26:66:a9:f6:40:9c:e4: e2:3f:dd:1c:4d:df:11:7e:00:52:b8:e2:61:4b:cb:59:15:6b: d6:4e:43:1d:d8:2b:4e:61:4e:35:7a:20:a0:70:80:16:3e:61: 68:da:6b:ca:54:91:48:48:c6:db:ee:bb:59:5b:28:09:47:d6: 3a:16:21:a2:34:c1:ec:bb:af:5b:30:c6:6e:a9:22:ba:e2:96: 2e:c1:b0:ac:58:4b:12:1e:4e:a4:7d:b0:37:98:67:1b:24:20: 99:e8:b8:29:2b:e7:69:09:79:48:00:cb:fd:26:06:3d:a8:da: af:a7:cd:fc:59:ef:ca:7f:d3:77:7f:5e:76:7f:57:4b:34:73: 5f:92:64:fd:cb:54:58:5e:4b:e0:4b:78:bb:c5:37:54:27:18: 79:4d:02:57:f8:c9:e7:a6:16:db:f1:c2:6c:5b:bc:e9:ce:e7: da:cc:a1:89:48:06:a4:96:f6:0c:a1:ac:04:4c:aa:4e:a5:29: 9a:d3:64:51:14:f2:33:7d:b7:73:9a:f0:0c:42:0f:da:5c:20: 3b:7d:63:68:ec:fa:4f:a7:5a:47:db:22:21:a7:af:57:4d:03: 42:bd:8d:b2:d9:45:63:2d:fa:75:f5:0c:bc:45:43:7a:a7:40: c2:42:29:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBKokB5zcKI4BZmbPX5VWZDSW9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yNTA4MjEwODQ2MThaFw0yNTA4MjQxODI5MThaMDMxMTAvBgNV BAMTKDIwRDQ4MzRBMzhFQjYwOEU4NTNDNjFCREFEQjJGRjAxNkEwMTk1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Tihf5sAXwtJmvbJIoOi2WLvP usRiMcMnYJ+yPmEw3stxWszJ9EXgz+WpnpyDH108hMEw4KQu3IN+hAEe9ASU83BX JigWnXXKs92gxvDmD/44qSWSrwWwf42OE5o0IrvBBpwJJC0iN+oZHc1Axh3h8p4B X/QO1wkQkAhbKzM7VQeytTnoFNkmSDHPKawM/ulz8VXy5AOFPdNeqIPcZq2foX1e a8fSdIM+iO+ISgX5HP4oPAPgnTVJfTsjXn/uIjWhYX9eQaowzRdWN8iaU2YuX7Qo VNNIfNGeRkpMl87M1ePEzNIV04T3OI+ZsbkO1IX8ffC21nGN3lNS3y9PADG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUINSDSjjrYI6FPGG9rbL/AWoBlWowHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy ZmItOTk4ZTAxODU0NTUxLzAvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAy N0U4RDFFQkFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwqZlphV15wlow+Jmap9kCc5OI/3RxN3xF+ AFK44mFLy1kVa9ZOQx3YK05hTjV6IKBwgBY+YWjaa8pUkUhIxtvuu1lbKAlH1joW IaI0wey7r1swxm6pIrrili7BsKxYSxIeTqR9sDeYZxskIJnouCkr52kJeUgAy/0m Bj2o2q+nzfxZ78p/03d/XnZ/V0s0c1+SZP3LVFheS+BLeLvFN1QnGHlNAlf4yeem FtvxwmxbvOnO59rMoYlIBqSW9gyhrARMqk6lKZrTZFEU8jN9t3Oa8AxCD9pcIDt9 Y2js+k+nWkfbIiGnr1dNA0K9jbLZRWMt+nX1DLxFQ3qnQMJCKXM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:49:02 2025 by rpki-client