$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: 3WjreU97wUpw6+jLJcw5FATYVxyfKTG/hJItxvFl6ks= Subject key identifier: 8F:0D:01:CD:D7:9E:97:33:97:FB:1D:EA:07:C4:CC:B7:C5:CA:6A:10 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 1D5FDD3C8E1DE6A1CAECA7E60BDB468FFD1AD8CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0233 Signing time: Fri 22 Aug 2025 23:30:37 +0000 Manifest this update: Fri 22 Aug 2025 23:25:37 +0000 Manifest next update: Tue 26 Aug 2025 09:54:37 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) 2: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 3: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) 4: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: l9P/C3y5r3lH8sA5P+wUFK5AbaKDwcrN28dh0IUk3vg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:54:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:5f:dd:3c:8e:1d:e6:a1:ca:ec:a7:e6:0b:db:46:8f:fd:1a:d8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Aug 22 23:25:37 2025 GMT Not After : Aug 26 09:54:37 2025 GMT Subject: CN=8F0D01CDD79E973397FB1DEA07C4CCB7C5CA6A10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:11:26:75:a8:4f:18:ab:0c:26:c1:5d:33: b1:94:37:46:d3:79:42:7c:8c:e6:64:90:ab:22:1d: 28:23:af:81:80:5f:1a:29:dc:a6:30:d3:b9:b4:be: 23:1d:56:cb:53:8e:d6:02:04:c8:59:fd:c1:18:ed: fb:a1:3e:5b:77:95:79:52:0f:ae:fe:80:01:e3:db: c3:a2:82:67:7e:71:47:6a:4c:ec:15:b8:f6:81:07: 85:af:a4:99:89:96:91:0a:8f:7a:f6:f5:34:f7:cf: 2c:90:f6:c6:e7:6d:0b:58:f6:e1:9c:11:39:b6:ea: 2f:b1:80:b8:b3:23:6d:e6:77:a6:af:72:5f:aa:24: 0f:fb:7d:df:0e:2a:21:60:60:9f:a6:cd:f1:4e:95: 77:0a:06:bf:78:fb:78:ee:6d:c3:bf:1f:73:d6:9f: 88:a3:4d:59:2d:9b:77:9b:2d:5f:49:95:00:57:eb: 3b:32:29:ae:fe:ba:c5:51:66:99:a4:b0:b9:c6:83: 79:db:42:42:a1:ea:48:83:33:5c:48:31:92:73:11: 27:f8:fe:3c:3d:37:b9:57:c6:76:b6:98:c8:b2:9a: 4a:2f:14:0b:fe:bf:e9:7b:7b:f4:2e:aa:29:19:a8: dc:ba:8b:cb:69:ee:35:6c:e7:90:18:85:cb:2e:8d: fc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0D:01:CD:D7:9E:97:33:97:FB:1D:EA:07:C4:CC:B7:C5:CA:6A:10 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:38:0a:e8:ae:48:99:f1:32:b1:9b:76:a2:ca:6d:ec:c6:30: 48:df:0c:b0:4c:d2:94:c9:ff:7d:93:c2:6d:40:63:95:41:b3: fc:93:d0:9a:fe:3d:82:db:e3:4e:73:dc:f1:3e:a7:cc:f5:8b: a2:6d:00:bc:6d:18:6d:77:ac:79:96:ba:34:00:11:56:62:24: db:0b:32:39:1f:f4:c5:5a:1a:b6:c1:b0:ed:56:05:da:e9:35: 91:85:c5:24:39:2f:41:8d:49:6f:57:ae:88:5a:e7:a7:42:5b: 65:ab:5b:d7:a3:8d:cd:5b:e9:a7:d3:b6:2c:73:5c:11:cc:86: 0c:22:da:be:1a:d9:e1:ea:9b:99:46:4d:46:b6:df:f3:cb:63: dc:04:80:52:ac:22:63:0c:2d:f2:00:6c:9c:26:88:74:c7:b9: 21:11:0c:88:e2:26:7c:b8:89:68:47:f2:40:50:3e:48:0a:a3: 38:1e:bd:b0:05:5d:66:c1:c8:31:6f:df:9b:68:98:92:3c:ea: 60:5e:c4:bc:11:a0:38:f3:00:eb:63:a0:09:85:2b:4d:af:20: e1:40:37:07:6a:ce:b2:80:ac:48:5e:1a:d2:a9:62:c5:05:b0: 3b:c8:07:a6:7f:91:30:f8:d4:93:ed:bd:d6:2f:03:67:be:65: cf:5e:83:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHV/dPI4d5qHK7KfmC9tGj/0a2MswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTA4MjIyMzI1MzdaFw0yNTA4MjYwOTU0MzdaMDMxMTAvBgNV BAMTKDhGMEQwMUNERDc5RTk3MzM5N0ZCMURFQTA3QzRDQ0I3QzVDQTZBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OxEmdahPGKsMJsFdM7GUN0bT eUJ8jOZkkKsiHSgjr4GAXxop3KYw07m0viMdVstTjtYCBMhZ/cEY7fuhPlt3lXlS D67+gAHj28Oigmd+cUdqTOwVuPaBB4WvpJmJlpEKj3r29TT3zyyQ9sbnbQtY9uGc ETm26i+xgLizI23md6avcl+qJA/7fd8OKiFgYJ+mzfFOlXcKBr94+3jubcO/H3PW n4ijTVktm3ebLV9JlQBX6zsyKa7+usVRZpmksLnGg3nbQkKh6kiDM1xIMZJzESf4 /jw9N7lXxna2mMiymkovFAv+v+l7e/QuqikZqNy6i8tp7jVs55AYhcsujfwbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjw0BzdeelzOX+x3qB8TMt8XKahAwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFM4CuiuSJnxMrGbdqLKbezGMEjfDLBM0pTJ /32Twm1AY5VBs/yT0Jr+PYLb405z3PE+p8z1i6JtALxtGG13rHmWujQAEVZiJNsL Mjkf9MVaGrbBsO1WBdrpNZGFxSQ5L0GNSW9Xroha56dCW2WrW9ejjc1b6afTtixz XBHMhgwi2r4a2eHqm5lGTUa23/PLY9wEgFKsImMMLfIAbJwmiHTHuSERDIjiJny4 iWhH8kBQPkgKozgevbAFXWbByDFv35tomJI86mBexLwRoDjzAOtjoAmFK02vIOFA NwdqzrKArEheGtKpYsUFsDvIB6Z/kTD41JPtvdYvA2e+Zc9eg74= -----END CERTIFICATE-----Generated at Sat Aug 23 16:16:06 2025 by rpki-client