$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: DN0hVFbGyV9cpJOCjokoY4FoLytuy7G2GOvyBJbTQdw= Subject key identifier: CD:56:4D:83:7D:37:EF:7E:8D:62:3C:E5:16:C8:50:23:A0:BB:B8:DE Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 1F7EC96779C2BCD7D265FB7837B9AB796E2930BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 04FD Signing time: Thu 21 Aug 2025 20:50:03 +0000 Manifest this update: Thu 21 Aug 2025 20:45:03 +0000 Manifest next update: Mon 25 Aug 2025 00:30:03 +0000 Files and hashes: 1: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) 2: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) 3: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: CbCvQkyrhhAcEOCAYi2c0GiMfFvNND5jtjk5X1wHAZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7e:c9:67:79:c2:bc:d7:d2:65:fb:78:37:b9:ab:79:6e:29:30:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Aug 21 20:45:03 2025 GMT Not After : Aug 25 00:30:03 2025 GMT Subject: CN=CD564D837D37EF7E8D623CE516C85023A0BBB8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:04:37:62:50:69:15:6a:b9:59:1b:b5:64: 7e:8d:2f:91:1f:d1:09:19:c0:e7:9e:86:1e:e5:66: 1d:cc:52:fe:a8:91:fb:1a:d6:74:d9:17:75:c3:eb: 00:67:9b:2c:7c:b0:69:8f:3c:34:72:d7:df:f5:6b: c8:6c:fd:2a:fe:32:2c:e7:5e:13:d6:c6:e1:43:4b: 83:bc:91:94:76:02:1c:ce:dc:33:be:00:7b:c1:68: 12:a6:c1:38:4b:71:28:7f:72:39:80:d3:2b:00:1b: dd:a7:31:ca:8c:8a:f3:9e:16:96:e2:09:b0:f8:8a: 74:a2:10:41:9c:38:07:81:18:ff:e5:0c:56:a4:4d: 1a:78:8f:74:95:4f:f8:6b:3b:db:d6:53:44:20:57: b7:55:e1:16:12:d7:d4:32:94:98:c9:bd:0c:a6:05: a5:5b:ec:df:95:98:02:4b:61:b0:d4:aa:58:50:00: 2f:4c:66:f4:2c:22:43:09:33:a3:07:93:65:ad:56: 43:57:a3:8d:4b:eb:66:c8:d4:93:15:95:6a:36:a8: fd:af:45:96:ca:72:41:e8:f0:6c:f3:7c:f5:97:e9: 6b:15:74:e2:81:43:ff:81:b5:c9:d5:81:71:ca:1a: 3e:12:a7:18:ea:6b:d6:78:91:fc:2c:f0:08:11:f1: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:56:4D:83:7D:37:EF:7E:8D:62:3C:E5:16:C8:50:23:A0:BB:B8:DE X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:51:19:b6:3d:3e:41:ee:58:7f:14:11:79:84:a1:f2:c1:1a: 97:51:b0:4e:da:96:94:30:6b:cf:47:1a:9a:04:91:dd:bc:a7: c6:3b:1e:a3:98:d6:ea:94:da:8a:59:d5:2a:e2:ef:db:fd:a5: e9:5f:41:7c:53:35:bc:95:b0:68:1e:61:e0:ab:04:5f:0b:e7: ad:f6:cb:db:f7:e2:bd:3b:c4:71:8a:ef:f0:e4:0a:d6:89:27: e4:1c:2b:e9:e8:7b:9f:9e:12:0a:78:3c:35:59:2f:81:a8:e3: ea:55:46:21:6b:1b:e2:b5:01:d7:c5:8a:b2:3b:b4:d7:ca:b0: 58:34:d6:7b:b8:98:2b:89:26:28:e4:23:23:66:ba:0f:52:8b: be:b1:86:60:35:39:a9:e3:e2:5f:81:fe:21:3b:5d:27:8d:dc: 70:5a:73:f4:23:59:8e:ab:5c:f8:38:c5:c3:e9:ce:4a:03:1b: 12:82:26:50:85:1e:93:10:98:f8:ae:68:4f:ef:bb:d8:03:4d: 17:55:b9:1d:14:e4:b9:0d:d8:09:3a:8c:a7:aa:44:39:83:fe: ec:9f:27:79:e9:69:48:70:31:22:21:a8:66:15:ef:91:66:a6: a6:0b:20:ff:9a:ab:08:74:d4:b4:9e:07:40:b9:1e:de:36:a5: ed:e5:a0:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH37JZ3nCvNfSZft4N7mreW4pML4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTA4MjEyMDQ1MDNaFw0yNTA4MjUwMDMwMDNaMDMxMTAvBgNV BAMTKENENTY0RDgzN0QzN0VGN0U4RDYyM0NFNTE2Qzg1MDIzQTBCQkI4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+QQ3YlBpFWq5WRu1ZH6NL5Ef 0QkZwOeehh7lZh3MUv6okfsa1nTZF3XD6wBnmyx8sGmPPDRy19/1a8hs/Sr+Mizn XhPWxuFDS4O8kZR2AhzO3DO+AHvBaBKmwThLcSh/cjmA0ysAG92nMcqMivOeFpbi CbD4inSiEEGcOAeBGP/lDFakTRp4j3SVT/hrO9vWU0QgV7dV4RYS19QylJjJvQym BaVb7N+VmAJLYbDUqlhQAC9MZvQsIkMJM6MHk2WtVkNXo41L62bI1JMVlWo2qP2v RZbKckHo8GzzfPWX6WsVdOKBQ/+BtcnVgXHKGj4Spxjqa9Z4kfws8AgR8YxtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzVZNg303736NYjzlFshQI6C7uN4wHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJRGbY9PkHuWH8UEXmEofLBGpdRsE7alpQw a89HGpoEkd28p8Y7HqOY1uqU2opZ1Sri79v9pelfQXxTNbyVsGgeYeCrBF8L5632 y9v34r07xHGK7/DkCtaJJ+QcK+noe5+eEgp4PDVZL4Go4+pVRiFrG+K1AdfFirI7 tNfKsFg01nu4mCuJJijkIyNmug9Si76xhmA1Oanj4l+B/iE7XSeN3HBac/QjWY6r XPg4xcPpzkoDGxKCJlCFHpMQmPiuaE/vu9gDTRdVuR0U5LkN2Ak6jKeqRDmD/uyf J3npaUhwMSIhqGYV75FmpqYLIP+aqwh01LSeB0C5Ht42pe3loE8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:41 2025 by rpki-client