$ rpki-client -vvf repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft File: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft (raw, json) Hash identifier: kVcy419GdwcMquYuQEuuMKED2iBVruhunRpRviFPMFI= Subject key identifier: 32:BC:4C:34:1D:6C:D4:C9:FD:8E:21:C3:7E:C3:13:FA:7E:99:FF:26 Authority key identifier: 53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B Certificate issuer: /CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Certificate serial: 587F71EA561302BFF9F31A1CF603140CA9238623 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft Manifest number: 0126 Signing time: Thu 21 Aug 2025 13:31:37 +0000 Manifest this update: Thu 21 Aug 2025 13:26:37 +0000 Manifest next update: Sun 24 Aug 2025 21:35:37 +0000 Files and hashes: 1: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl (hash: 9I42sFwdfiNNBAJ3wvkW08mhYvTl/8NbZ6mb7I5uEXY=) 2: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: kaVFMH8foRRe9PZ1pgPoo5ASjB6/BVJQS9mBarSuCWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7f:71:ea:56:13:02:bf:f9:f3:1a:1c:f6:03:14:0c:a9:23:86:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Validity Not Before: Aug 21 13:26:37 2025 GMT Not After : Aug 24 21:35:37 2025 GMT Subject: CN=32BC4C341D6CD4C9FD8E21C37EC313FA7E99FF26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:2d:74:07:b6:bd:b7:72:33:10:e6:62:c8: 6e:d6:e2:c8:c2:a4:3a:fb:cb:be:1a:90:9c:4b:8d: 54:76:22:aa:b2:85:1b:d6:3f:5a:99:1e:38:be:81: d3:d2:6f:d9:c8:65:37:91:15:18:12:0e:fc:e1:d5: 1e:68:28:48:6f:c3:e0:28:0f:1e:cf:37:29:58:71: 02:32:41:56:58:b7:b2:ca:90:a6:b8:c4:61:11:cf: fd:61:db:d1:76:5f:b1:99:ac:b6:d6:59:40:d7:89: c3:5e:65:60:ec:fd:d2:14:b8:4e:ef:50:05:f6:78: 50:be:c4:db:06:39:12:46:db:26:f8:9d:63:77:33: 74:0f:84:d2:84:a6:88:3d:b8:4d:0d:07:bb:a5:66: e4:81:11:c0:9f:9c:6d:91:97:eb:4c:11:13:b1:f5: 21:97:1e:30:f2:e3:8e:1d:8d:6b:e7:0f:c8:7d:74: b8:a2:80:81:d1:ca:11:02:21:7e:eb:d1:06:38:73: d7:3b:63:61:a5:83:ab:d3:02:f7:01:37:ac:36:fd: e0:3f:0c:1e:d6:75:bc:3d:86:70:8a:6a:34:00:4c: 08:bc:35:85:10:5b:60:59:88:fe:1f:c2:42:99:78: 23:1b:01:20:79:ce:24:64:51:39:93:6e:8f:d4:8f: 89:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BC:4C:34:1D:6C:D4:C9:FD:8E:21:C3:7E:C3:13:FA:7E:99:FF:26 X509v3 Authority Key Identifier: keyid:53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:d9:3b:31:10:00:1e:7b:83:d7:f0:85:4c:07:a4:89:a5:ec: 66:7e:a6:5b:f9:52:3e:7d:56:f7:78:ab:57:b7:01:96:24:ed: 31:88:50:bb:1b:4b:a1:c4:2d:1c:93:ae:0a:c7:16:8e:c9:a3: f2:3c:e3:3f:4d:88:18:65:1f:e2:07:0b:7c:f8:84:11:12:67: 4f:f0:f3:55:5f:2c:2b:35:06:87:cc:0d:a5:1f:85:09:28:fe: a2:23:46:bb:4e:5e:dc:3b:62:f4:7f:85:5a:69:95:e6:8a:2d: 07:1d:f4:a5:4f:08:ac:2e:17:d4:65:e6:58:bb:98:13:a0:bd: c7:f2:01:59:f1:13:0f:7c:a0:73:d2:c0:01:93:4b:93:56:0b: ba:ab:bb:e4:05:be:46:fb:28:52:db:d3:e7:c3:db:08:2b:43: ce:76:5a:16:ac:92:dc:98:58:12:ef:e7:78:09:aa:5d:15:b4: 38:a3:0b:60:02:98:63:05:28:07:13:f1:f6:81:f0:a0:46:20: 0c:c3:ff:ad:3f:80:90:60:a7:f0:2d:a8:8b:c9:4b:2a:a8:b7: 29:8b:69:ef:72:28:e2:26:1b:73:b8:b6:c8:b3:54:b7:c2:69: e0:44:28:ec:e3:0e:fc:b5:e4:b2:a0:cb:79:82:d4:a1:a3:5f: f7:bf:8c:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWH9x6lYTAr/58xoc9gMUDKkjhiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5 QkNDNEY2QjAeFw0yNTA4MjExMzI2MzdaFw0yNTA4MjQyMTM1MzdaMDMxMTAvBgNV BAMTKDMyQkM0QzM0MUQ2Q0Q0QzlGRDhFMjFDMzdFQzMxM0ZBN0U5OUZGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5S10B7a9t3IzEOZiyG7W4sjC pDr7y74akJxLjVR2IqqyhRvWP1qZHji+gdPSb9nIZTeRFRgSDvzh1R5oKEhvw+Ao Dx7PNylYcQIyQVZYt7LKkKa4xGERz/1h29F2X7GZrLbWWUDXicNeZWDs/dIUuE7v UAX2eFC+xNsGORJG2yb4nWN3M3QPhNKEpog9uE0NB7ulZuSBEcCfnG2Rl+tMEROx 9SGXHjDy444djWvnD8h9dLiigIHRyhECIX7r0QY4c9c7Y2Glg6vTAvcBN6w2/eA/ DB7Wdbw9hnCKajQATAi8NYUQW2BZiP4fwkKZeCMbASB5ziRkUTmTbo/Uj4nBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMrxMNB1s1Mn9jiHDfsMT+n6Z/yYwHwYDVR0j BBgwFoAUUxNXQ81Z60OJVP62UaXZLZvMT2swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGQ4ZGEyZC1hNTA2LTQ3NjMtYmMzYy1lMjgwYmY3NTE3YTQvMC81MzEzNTc0M0NE NTlFQjQzODk1NEZFQjY1MUE1RDkyRDlCQ0M0RjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5QkND NEY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkOGRhMmQtYTUwNi00NzYzLWJj M2MtZTI4MGJmNzUxN2E0LzAvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5 MkQ5QkNDNEY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMfZOzEQAB57g9fwhUwHpIml7GZ+plv5Uj59 Vvd4q1e3AZYk7TGIULsbS6HELRyTrgrHFo7Jo/I84z9NiBhlH+IHC3z4hBESZ0/w 81VfLCs1BofMDaUfhQko/qIjRrtOXtw7YvR/hVppleaKLQcd9KVPCKwuF9Rl5li7 mBOgvcfyAVnxEw98oHPSwAGTS5NWC7qru+QFvkb7KFLb0+fD2wgrQ852WhasktyY WBLv53gJql0VtDijC2ACmGMFKAcT8faB8KBGIAzD/60/gJBgp/AtqIvJSyqotymL ae9yKOImG3O4tsizVLfCaeBEKOzjDvy15LKgy3mC1KGjX/e/jDA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:11:53 2025 by rpki-client