$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: mnIiFGxDznSpK9Ya4JwBA2cqGEHrdezydmzirdGTN+Q= Subject key identifier: 58:DD:C3:67:5A:85:05:B0:D7:36:A9:26:CD:E2:A8:29:D4:91:13:4E Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 6D00914D50ADB4A6C039D70304B4F59A07498DC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 06:30:03 +0000 Manifest this update: Sun 19 Oct 2025 06:25:03 +0000 Manifest next update: Wed 22 Oct 2025 08:34:03 +0000 Files and hashes: 1: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) 2: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: 9uI9gbLb7hn66xHm92g4PqpjCpz+a68YO5D23/8lhTI=) 3: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 08:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:00:91:4d:50:ad:b4:a6:c0:39:d7:03:04:b4:f5:9a:07:49:8d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Oct 19 06:25:03 2025 GMT Not After : Oct 22 08:34:03 2025 GMT Subject: CN=58DDC3675A8505B0D736A926CDE2A829D491134E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:27:89:2c:d7:c4:cf:0f:b2:23:64:4d:40:4f: 66:c8:10:2e:02:54:f9:9c:55:48:bd:5a:eb:18:de: 2f:fc:e9:6b:31:ac:da:dd:cc:db:32:ea:90:17:77: 11:05:8a:9b:e7:53:eb:1b:9b:80:96:4a:dc:34:eb: 8d:96:42:31:84:1b:42:f2:74:54:74:95:a5:b6:bf: c9:c0:c7:d2:50:7c:3a:94:c3:ac:19:cc:b7:09:01: 7c:96:99:0d:81:5c:16:e4:5b:c8:9c:24:9b:1e:cb: 13:db:86:95:b9:80:bd:eb:de:49:a7:24:60:52:49: ea:24:fd:19:b6:74:ba:39:6b:17:6a:ab:c3:c0:05: ce:21:c0:23:06:3d:86:3e:fe:6e:bb:1d:36:7d:ca: 88:7a:65:a0:bf:93:b8:9c:96:8e:99:a1:c2:66:c7: 88:96:b1:f9:8c:8d:ff:49:fa:5f:5c:9e:92:e4:cc: cb:9f:3b:ab:64:1f:9a:60:ef:d6:d6:83:b1:4a:a8: c1:c7:fe:b3:5b:bf:ae:cd:ee:4e:2c:2b:88:15:5b: bf:da:23:2f:44:3c:43:ee:26:c0:07:a7:ea:6c:fe: 31:0a:68:21:b8:96:32:89:8c:ea:04:e8:74:5a:b7: bb:c3:42:bb:de:51:f7:69:d0:7c:1a:e0:ed:d2:27: 0e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DD:C3:67:5A:85:05:B0:D7:36:A9:26:CD:E2:A8:29:D4:91:13:4E X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:20:33:76:f5:f6:8c:6e:fd:37:06:99:8f:b8:d3:cf:d0:d7: 3a:7e:36:1c:cb:a1:2d:06:f1:07:4d:7b:e4:a2:8c:08:53:4c: 5b:c8:89:e2:32:42:ef:54:ea:0d:90:60:f6:1e:87:ec:7e:4c: 30:cf:42:89:1e:7a:30:d1:f2:b6:18:46:d9:73:f5:4f:71:53: 4e:ff:02:13:7b:ba:5e:74:16:f0:8b:99:aa:c0:9e:18:8a:30: 48:5b:7f:91:04:3d:8e:a5:f1:f3:74:42:0d:47:a7:f5:7b:45: 04:5f:9c:27:0e:ba:86:fb:6c:d1:58:5f:7d:bd:5d:e0:63:c0: e1:66:74:36:f4:f8:cb:8a:67:d7:0c:1f:a8:9f:ba:8b:50:76: fb:c9:b1:55:11:44:97:a7:54:be:6d:06:6b:70:ce:fd:ce:6d: 3e:93:eb:65:b8:a1:92:2a:e3:25:14:2e:9b:6f:7d:f9:d2:ad: 04:95:fe:c1:9f:fc:38:e6:60:71:5e:b1:c6:5f:17:82:6d:22: 8b:b7:1e:f6:81:a1:b6:7d:ed:0a:13:06:3b:ab:05:99:3c:17: 86:66:bf:bd:11:7c:80:8e:bd:2a:ed:34:ed:4a:70:26:f2:ae: 0e:ed:fd:ae:43:4f:ef:6a:e0:bb:ac:fb:1c:f5:c3:60:dc:1e: 68:ea:e8:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbQCRTVCttKbAOdcDBLT1mgdJjcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTEwMTkwNjI1MDNaFw0yNTEwMjIwODM0MDNaMDMxMTAvBgNV BAMTKDU4RERDMzY3NUE4NTA1QjBENzM2QTkyNkNERTJBODI5RDQ5MTEzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXJ4ks18TPD7IjZE1AT2bIEC4C VPmcVUi9WusY3i/86WsxrNrdzNsy6pAXdxEFipvnU+sbm4CWStw0642WQjGEG0Ly dFR0laW2v8nAx9JQfDqUw6wZzLcJAXyWmQ2BXBbkW8icJJseyxPbhpW5gL3r3kmn JGBSSeok/Rm2dLo5axdqq8PABc4hwCMGPYY+/m67HTZ9yoh6ZaC/k7iclo6ZocJm x4iWsfmMjf9J+l9cnpLkzMufO6tkH5pg79bWg7FKqMHH/rNbv67N7k4sK4gVW7/a Iy9EPEPuJsAHp+ps/jEKaCG4ljKJjOoE6HRat7vDQrveUfdp0Hwa4O3SJw4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWN3DZ1qFBbDXNqkmzeKoKdSRE04wHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4gM3b19oxu/TcGmY+408/Q1zp+NhzLoS0G 8QdNe+SijAhTTFvIieIyQu9U6g2QYPYeh+x+TDDPQokeejDR8rYYRtlz9U9xU07/ AhN7ul50FvCLmarAnhiKMEhbf5EEPY6l8fN0Qg1Hp/V7RQRfnCcOuob7bNFYX329 XeBjwOFmdDb0+MuKZ9cMH6ifuotQdvvJsVURRJenVL5tBmtwzv3ObT6T62W4oZIq 4yUULptvffnSrQSV/sGf/DjmYHFescZfF4JtIou3HvaBobZ97QoTBjurBZk8F4Zm v70RfICOvSrtNO1KcCbyrg7t/a5DT+9q4Lus+xz1w2DcHmjq6KM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:30 2025 by rpki-client