$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json) Hash identifier: 31jlO1Ihxx7Ze5NREsEH4+Pl+FbQNBBHOOMhcN9GBYM= Subject key identifier: 40:7C:F0:8A:02:62:5E:4D:43:16:A4:D2:BD:99:E3:48:63:15:3E:7B Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98 Certificate serial: 20AF223C7599FFE91D0B79F0533656BA32A26442 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft Manifest number: 0395 Signing time: Sun 19 Oct 2025 20:41:26 +0000 Manifest this update: Sun 19 Oct 2025 20:36:26 +0000 Manifest next update: Thu 23 Oct 2025 08:26:26 +0000 Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=) 2: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: S4T94HI8R8bZbAhP5avGgchei6iqgl4xaJ51sJhOxcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:af:22:3c:75:99:ff:e9:1d:0b:79:f0:53:36:56:ba:32:a2:64:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98 Validity Not Before: Oct 19 20:36:26 2025 GMT Not After : Oct 23 08:26:26 2025 GMT Subject: CN=407CF08A02625E4D4316A4D2BD99E34863153E7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:40:bf:de:28:35:11:65:70:eb:ac:9c:b0: 87:38:6f:f3:f7:5e:42:ab:3f:35:38:a8:23:55:5f: 74:c6:19:48:35:1d:2d:5b:28:ca:b4:d1:15:c5:ac: 30:63:9e:8d:6a:14:b8:ee:d8:c0:59:eb:83:9f:6e: f7:90:38:9e:14:2f:37:95:2d:9d:88:e0:ea:89:72: 2f:07:31:d6:1a:47:db:68:00:30:25:5f:ab:5d:f5: 12:62:b7:02:5c:ec:74:4c:44:f4:82:6e:07:74:ee: c8:6c:78:a0:19:d5:35:80:1a:06:6a:fa:ae:e2:83: 78:7b:94:57:23:f8:9a:86:ce:40:7a:45:9d:bd:de: 39:96:d6:19:1d:98:2b:f2:b4:5c:c7:51:81:d2:7b: 7b:45:a1:5a:6c:9a:4d:be:30:e1:ac:85:58:17:cd: 0b:d2:fa:dd:6b:3d:2c:44:25:80:17:ed:75:a7:a9: 6f:dc:71:15:f4:bd:33:fe:2d:32:24:84:9b:44:a5: 31:3c:25:3e:ac:92:5f:f7:a0:32:ad:7b:8d:91:f6: cb:9d:25:36:82:30:49:65:76:b1:d7:62:1a:4a:2a: 4b:c5:ef:a3:20:73:63:cb:39:fa:97:32:14:31:75: 5a:c9:5f:22:29:85:92:7b:b5:23:e9:6e:47:e9:4c: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7C:F0:8A:02:62:5E:4D:43:16:A4:D2:BD:99:E3:48:63:15:3E:7B X509v3 Authority Key Identifier: keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:09:67:fe:19:d3:92:d9:47:8d:6a:ce:56:70:7a:93:b3:37: 05:ea:c7:82:0e:9a:c5:f4:41:61:5e:f5:c0:38:d3:04:31:fd: 03:37:b0:89:92:d3:21:63:9a:14:03:45:d3:4e:27:e0:83:e7: 1d:0c:d2:92:55:fa:c2:dc:39:67:11:b9:96:84:09:0f:29:ab: 36:f7:d2:ab:97:06:83:1e:ff:9f:3b:e3:f5:09:96:df:5a:88: 7d:ac:a4:e2:78:54:8d:c2:d0:a5:d6:3e:d2:03:9d:c4:59:dc: 73:3c:ca:4f:82:20:c4:b1:92:01:72:9d:56:11:84:32:28:65: c8:7d:58:41:38:c9:d5:03:56:93:18:b9:c3:13:db:87:98:80: f2:ee:2f:99:f1:11:56:74:28:98:b1:1b:21:1d:f0:45:4d:ee: f2:0a:bc:97:73:37:35:d2:75:18:32:7a:7c:c8:e7:04:89:87: b8:cd:e6:47:61:a5:ff:ac:75:03:2f:d8:3f:41:76:62:11:61: 15:ae:55:ba:37:97:63:8d:6d:85:e7:15:87:c8:77:c7:e2:d2: 88:95:63:73:68:77:84:d1:6c:eb:c1:3a:b3:59:5e:c0:97:4d: 3d:88:35:8f:eb:44:e2:1d:03:3d:68:b7:c6:c2:6a:be:9a:4e: 7b:12:4d:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIK8iPHWZ/+kdC3nwUzZWujKiZEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlG MDA3RkE5ODAeFw0yNTEwMTkyMDM2MjZaFw0yNTEwMjMwODI2MjZaMDMxMTAvBgNV BAMTKDQwN0NGMDhBMDI2MjVFNEQ0MzE2QTREMkJEOTlFMzQ4NjMxNTNFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vUC/3ig1EWVw66ycsIc4b/P3 XkKrPzU4qCNVX3TGGUg1HS1bKMq00RXFrDBjno1qFLju2MBZ64OfbveQOJ4ULzeV LZ2I4OqJci8HMdYaR9toADAlX6td9RJitwJc7HRMRPSCbgd07shseKAZ1TWAGgZq +q7ig3h7lFcj+JqGzkB6RZ293jmW1hkdmCvytFzHUYHSe3tFoVpsmk2+MOGshVgX zQvS+t1rPSxEJYAX7XWnqW/ccRX0vTP+LTIkhJtEpTE8JT6skl/3oDKte42R9sud JTaCMElldrHXYhpKKkvF76Mgc2PLOfqXMhQxdVrJXyIphZJ7tSPpbkfpTH91AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQHzwigJiXk1DFqTSvZnjSGMVPnswHwYDVR0j BBgwFoAUMFP/p6ASOwMvyUWCgQY8ifAH+pgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmRiNGNiOC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMC8zMDUzRkZBN0Ew MTIzQjAzMkZDOTQ1ODI4MTA2M0M4OUYwMDdGQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlGMDA3 RkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjND ODlGMDA3RkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAJZ/4Z05LZR41qzlZwepOzNwXqx4IOmsX0 QWFe9cA40wQx/QM3sImS0yFjmhQDRdNOJ+CD5x0M0pJV+sLcOWcRuZaECQ8pqzb3 0quXBoMe/5874/UJlt9aiH2spOJ4VI3C0KXWPtIDncRZ3HM8yk+CIMSxkgFynVYR hDIoZch9WEE4ydUDVpMYucMT24eYgPLuL5nxEVZ0KJixGyEd8EVN7vIKvJdzNzXS dRgyenzI5wSJh7jN5kdhpf+sdQMv2D9BdmIRYRWuVbo3l2ONbYXnFYfId8fi0oiV Y3Nod4TRbOvBOrNZXsCXTT2INY/rROIdAz1ot8bCar6aTnsSTa4= -----END CERTIFICATE-----Generated at Mon Oct 20 22:42:00 2025 by rpki-client