$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: 5/TAUBl9mQ82lO9B1KRiKtKWd9FyLPLg1vUGC6lOVGI= Subject key identifier: 84:00:5D:76:6E:C7:9A:17:4C:78:36:B1:D0:9B:5D:9C:BD:A4:C0:97 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 3B3C1499DEC02299CD9BE681F0B938FE01D02C1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 024C Signing time: Sat 18 Oct 2025 23:50:36 +0000 Manifest this update: Sat 18 Oct 2025 23:45:36 +0000 Manifest next update: Wed 22 Oct 2025 00:25:36 +0000 Files and hashes: 1: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: +kO/Vlh9SlfokJLLRqThI3QtnIpS/DhRAuvPpxmFzH8=) 2: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) 3: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 4: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3c:14:99:de:c0:22:99:cd:9b:e6:81:f0:b9:38:fe:01:d0:2c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Oct 18 23:45:36 2025 GMT Not After : Oct 22 00:25:36 2025 GMT Subject: CN=84005D766EC79A174C7836B1D09B5D9CBDA4C097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e4:b4:8a:41:c8:3b:ea:dc:44:11:23:c4:2f: 6c:9a:ab:e4:97:de:45:c1:8f:82:da:56:17:07:01: 66:cb:82:1e:17:04:8c:89:3a:34:6e:17:06:04:09: ef:e1:61:7d:b8:7e:7b:fa:7f:c2:7c:07:23:53:27: 2a:84:ef:4f:c8:69:83:9b:a5:f1:c6:0a:77:70:e3: 60:44:05:c6:13:9b:28:7c:5d:6e:f6:e7:b5:43:a8: ed:70:4a:8d:57:98:7b:dc:e1:e3:db:93:88:b1:b0: 54:de:fa:17:00:ab:9d:1b:5d:c1:35:c8:0f:2a:85: 58:9b:81:22:9d:ed:b5:19:5e:94:e9:4d:42:b1:bd: 69:79:0c:30:99:b2:98:f7:b1:04:0a:5f:40:08:48: 79:5e:f3:ef:64:53:67:25:2d:bd:a7:27:c0:10:3e: 89:b7:32:4c:cd:6a:9a:b6:86:6f:bc:aa:a9:8f:2a: 33:c5:c2:b9:ab:e5:fd:e3:9b:16:0a:e8:a0:cb:b7: c1:3e:68:83:31:e0:d5:90:32:df:12:fa:12:9a:80: 90:f4:80:d2:8e:9b:f6:6a:6b:6d:32:7c:ea:4e:c6: 05:9e:d5:0e:0a:fb:ac:24:bf:25:85:c2:8e:20:e6: c9:92:f9:79:13:30:e9:02:1e:c9:e3:38:e9:3c:d6: c8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:00:5D:76:6E:C7:9A:17:4C:78:36:B1:D0:9B:5D:9C:BD:A4:C0:97 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d2:fe:38:59:65:d0:31:92:d8:0d:f2:72:21:0b:17:50:bd: bf:7a:be:73:ed:0a:70:53:5d:19:7f:08:c5:66:7f:4a:e0:4c: 4b:d1:04:82:c0:b8:62:34:e4:55:5f:64:f3:20:74:7d:f6:b0: 2f:ee:83:3d:d7:7d:d6:0d:65:15:db:73:67:ef:73:bc:b2:02: 02:b5:71:48:d5:e9:36:2c:ef:14:75:4e:13:88:41:d3:8a:47: 6b:7f:b9:62:58:17:0c:11:81:31:1c:3b:dd:c9:3c:f5:a6:69: d4:d4:c6:2f:9b:83:7b:d4:fe:15:f2:7c:be:95:a8:8f:12:19: 39:48:c7:2d:df:32:36:02:48:ca:5c:13:85:fc:3a:88:e9:1b: b6:a3:a3:cf:44:c7:45:6e:8a:95:4d:30:8f:e2:52:fc:1b:72: b4:a3:f1:9b:7f:18:eb:64:ac:34:9c:9e:5b:e9:b5:12:08:10: c9:dd:f5:0d:8d:c6:ba:da:6a:7d:4d:00:eb:b2:ef:29:0d:13: 6c:57:72:03:cc:ed:ea:fe:38:29:7b:40:8e:75:d5:98:7f:6d: 7a:21:9b:4b:9f:54:81:69:34:a9:e4:2f:57:ba:a1:00:68:5f: ca:e0:ed:57:a7:6f:62:1e:18:c7:a8:e9:04:d9:5c:5b:45:f1: 61:49:b2:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzwUmd7AIpnNm+aB8Lk4/gHQLB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTEwMTgyMzQ1MzZaFw0yNTEwMjIwMDI1MzZaMDMxMTAvBgNV BAMTKDg0MDA1RDc2NkVDNzlBMTc0Qzc4MzZCMUQwOUI1RDlDQkRBNEMwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl5LSKQcg76txEESPEL2yaq+SX 3kXBj4LaVhcHAWbLgh4XBIyJOjRuFwYECe/hYX24fnv6f8J8ByNTJyqE70/IaYOb pfHGCndw42BEBcYTmyh8XW7257VDqO1wSo1XmHvc4ePbk4ixsFTe+hcAq50bXcE1 yA8qhVibgSKd7bUZXpTpTUKxvWl5DDCZspj3sQQKX0AISHle8+9kU2clLb2nJ8AQ Pom3MkzNapq2hm+8qqmPKjPFwrmr5f3jmxYK6KDLt8E+aIMx4NWQMt8S+hKagJD0 gNKOm/Zqa20yfOpOxgWe1Q4K+6wkvyWFwo4g5smS+XkTMOkCHsnjOOk81sgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhABddm7HmhdMeDax0JtdnL2kwJcwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbS/jhZZdAxktgN8nIhCxdQvb96vnPtCnBT XRl/CMVmf0rgTEvRBILAuGI05FVfZPMgdH32sC/ugz3XfdYNZRXbc2fvc7yyAgK1 cUjV6TYs7xR1ThOIQdOKR2t/uWJYFwwRgTEcO93JPPWmadTUxi+bg3vU/hXyfL6V qI8SGTlIxy3fMjYCSMpcE4X8OojpG7ajo89Ex0VuipVNMI/iUvwbcrSj8Zt/GOtk rDScnlvptRIIEMnd9Q2Nxrraan1NAOuy7ykNE2xXcgPM7er+OCl7QI511Zh/bXoh m0ufVIFpNKnkL1e6oQBoX8rg7Venb2IeGMeo6QTZXFtF8WFJskY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:48 2025 by rpki-client