$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft File: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json) Hash identifier: vvzcnqhuwCZMZ3MKhOti3UvT/wpW4VhMi2hRg2uhGhI= Subject key identifier: BF:9E:F0:57:1D:54:8D:A2:00:95:57:9B:DD:28:0E:3D:21:53:A8:A8 Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 10D70B2BDA797AC1E3CF7E751B1242C656CD8384 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft Manifest number: 01E7 Signing time: Sun 20 Jul 2025 08:01:16 +0000 Manifest this update: Sun 20 Jul 2025 07:56:16 +0000 Manifest next update: Wed 23 Jul 2025 18:04:16 +0000 Files and hashes: 1: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: OwZk1UWVcB+khrV3iCkvqvgkgiMOuRZ3kwgluwcHlAA=) 2: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 18:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d7:0b:2b:da:79:7a:c1:e3:cf:7e:75:1b:12:42:c6:56:cd:83:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: Jul 20 07:56:16 2025 GMT Not After : Jul 23 18:04:16 2025 GMT Subject: CN=BF9EF0571D548DA20095579BDD280E3D2153A8A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:d6:ac:5e:3d:a8:36:f1:e1:59:45:ed:43: f8:84:0f:36:a0:e1:f1:23:d8:24:70:81:d5:22:e2: 8a:a6:3b:47:22:29:40:3b:f8:20:91:74:3d:1f:a3: 33:95:f8:1e:55:6c:29:dd:7c:18:56:b7:5b:7f:a8: bb:9d:4a:e5:a4:02:af:e7:31:f7:1d:f2:7a:dc:af: 7e:fc:4a:6c:8b:72:f2:63:38:51:f5:20:cf:ef:dc: 9a:f7:7d:cf:b7:da:4b:d5:5a:76:47:70:92:4a:16: 45:3c:04:f4:ae:62:8b:e5:de:11:9e:be:33:ee:90: c5:c9:5b:a1:5b:2b:27:6e:88:7d:44:6e:ae:49:d2: ad:fe:20:08:c2:36:32:a7:9e:b9:be:16:a1:63:23: 3f:db:93:b1:fa:8d:39:ac:0c:16:ea:5b:25:cf:a8: 78:a1:13:45:d6:8d:d5:fa:70:5e:82:21:6a:55:94: 2a:32:be:d5:51:5a:c4:4d:5d:0b:be:ee:36:4c:89: 23:e2:71:ef:6a:ec:4a:92:ae:d3:7e:56:81:8f:f7: 59:c6:48:40:fe:5c:c5:f8:6f:1c:93:44:31:f0:f0: b8:2b:57:4a:16:0d:c1:fb:a6:5f:69:e1:52:d0:cf: 18:4c:b7:f6:44:02:bf:fc:40:27:62:a7:32:d9:0e: c6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9E:F0:57:1D:54:8D:A2:00:95:57:9B:DD:28:0E:3D:21:53:A8:A8 X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:87:73:40:00:7c:a7:fd:e3:de:ee:fb:5b:b9:04:5a:8f:93: 80:86:12:95:ae:2e:35:7e:88:87:df:95:9a:52:5d:c1:26:c2: 74:b0:74:d4:32:6f:59:71:39:0f:68:99:ea:7c:e8:0c:f8:11: 84:75:1e:62:6c:7f:76:6f:17:2c:14:e7:ea:11:62:a8:8c:b0: f9:8e:17:80:03:d0:dc:6c:50:82:01:77:c4:be:b4:58:ae:cb: 39:55:60:4e:b7:72:a9:4d:4f:24:97:43:e5:bb:7a:f2:1d:f8: 81:31:54:ef:23:bd:8c:53:e6:26:17:70:cd:4b:5e:a8:cf:50: 9f:35:e6:dc:07:6f:c4:0e:c8:76:a0:cf:0f:36:cb:60:a4:e0: a7:81:bc:e2:d2:88:f0:8d:78:96:c3:31:88:e7:9f:0b:47:82: f2:4f:12:40:0a:dc:6e:f4:94:09:fa:42:3e:c6:e2:e3:25:8d: 87:53:2a:2a:d5:bf:1e:90:72:45:9e:e3:83:50:bb:8d:18:34: b9:a6:ac:eb:c2:a3:01:8a:a3:7c:96:67:80:40:6f:db:f9:f1: 0f:a6:4f:b1:3e:11:5d:c2:90:92:c4:cf:24:34:be:24:b2:93: 88:3f:78:31:a1:35:fa:92:b5:86:e3:42:aa:ae:b5:e5:91:d4: ea:56:9b:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENcLK9p5esHjz351GxJCxlbNg4QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yNTA3MjAwNzU2MTZaFw0yNTA3MjMxODA0MTZaMDMxMTAvBgNV BAMTKEJGOUVGMDU3MUQ1NDhEQTIwMDk1NTc5QkREMjgwRTNEMjE1M0E4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9NasXj2oNvHhWUXtQ/iEDzag 4fEj2CRwgdUi4oqmO0ciKUA7+CCRdD0fozOV+B5VbCndfBhWt1t/qLudSuWkAq/n Mfcd8nrcr378SmyLcvJjOFH1IM/v3Jr3fc+32kvVWnZHcJJKFkU8BPSuYovl3hGe vjPukMXJW6FbKyduiH1Ebq5J0q3+IAjCNjKnnrm+FqFjIz/bk7H6jTmsDBbqWyXP qHihE0XWjdX6cF6CIWpVlCoyvtVRWsRNXQu+7jZMiSPice9q7EqSrtN+VoGP91nG SED+XMX4bxyTRDHw8LgrV0oWDcH7pl9p4VLQzxhMt/ZEAr/8QCdipzLZDsb7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv57wVx1UjaIAlVeb3SgOPSFTqKgwHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy ZmItOTk4ZTAxODU0NTUxLzAvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAy N0U4RDFFQkFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaHc0AAfKf9497u+1u5BFqPk4CGEpWuLjV+ iIfflZpSXcEmwnSwdNQyb1lxOQ9omep86Az4EYR1HmJsf3ZvFywU5+oRYqiMsPmO F4AD0NxsUIIBd8S+tFiuyzlVYE63cqlNTySXQ+W7evId+IExVO8jvYxT5iYXcM1L XqjPUJ815twHb8QOyHagzw82y2Ck4KeBvOLSiPCNeJbDMYjnnwtHgvJPEkAK3G70 lAn6Qj7G4uMljYdTKirVvx6QckWe44NQu40YNLmmrOvCowGKo3yWZ4BAb9v58Q+m T7E+EV3CkJLEzyQ0viSyk4g/eDGhNfqStYbjQqquteWR1OpWm1s= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:22 2025 by rpki-client