$ rpki-client -vvf repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft File: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft (raw, json) Hash identifier: sR2zl+oIE1ALkstRMvTfznaSXgaZgkxQrUfjSRlZM38= Subject key identifier: E0:1A:B7:F6:62:88:E0:24:47:54:95:0C:A5:F8:45:A2:C2:82:62:FB Authority key identifier: 53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B Certificate issuer: /CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Certificate serial: 6DDEF530513AFB64DAB2522A4E49D7288A77E0B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft Manifest number: 0118 Signing time: Tue 22 Jul 2025 02:11:36 +0000 Manifest this update: Tue 22 Jul 2025 02:06:36 +0000 Manifest next update: Fri 25 Jul 2025 14:09:36 +0000 Files and hashes: 1: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl (hash: Etnq6lIMY/xfzYinB6cUYsR/KByNZ3DGUfEKsxxBfrU=) 2: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: kaVFMH8foRRe9PZ1pgPoo5ASjB6/BVJQS9mBarSuCWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:de:f5:30:51:3a:fb:64:da:b2:52:2a:4e:49:d7:28:8a:77:e0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Validity Not Before: Jul 22 02:06:36 2025 GMT Not After : Jul 25 14:09:36 2025 GMT Subject: CN=E01AB7F66288E0244754950CA5F845A2C28262FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d0:43:6f:35:49:d0:66:e7:dd:4e:8b:56:29: c1:bd:56:fe:76:92:ba:c2:b9:3e:f8:e1:05:c5:a1: 87:05:19:63:ad:16:56:a5:06:a0:4a:ce:cc:8e:84: 62:cb:4b:01:00:a6:68:73:3c:5c:84:b2:b7:3a:d4: 42:05:2a:d2:32:2f:78:92:a4:29:14:c7:7b:ae:d5: 15:4f:34:2b:64:5f:74:8d:e2:d2:44:79:bc:04:5d: 83:03:74:e8:57:55:a0:17:f4:6f:92:d0:1f:7a:31: 16:e7:1c:3f:7e:77:92:28:2f:f3:78:ce:37:35:0d: a3:78:f5:d7:66:4d:44:79:3e:43:b7:89:49:f2:28: 01:b6:60:93:1e:7d:85:16:ce:c0:ba:5a:f2:d0:cf: 35:c3:02:b9:8f:1d:25:46:ca:be:a6:62:d8:6a:ed: c1:c3:8f:8f:69:f7:54:26:ce:3a:93:f4:6b:51:f0: ab:e2:39:6c:d5:2b:05:1f:68:fc:6e:1b:e4:90:87: 22:9b:e4:0d:0f:d4:55:45:7c:1a:55:df:cb:41:b2: 77:75:be:ea:e2:ab:2e:16:9a:fa:77:aa:f1:62:eb: 2f:a1:a6:a2:88:e0:13:0a:b2:ac:7e:5d:71:a7:64: ce:d1:c9:46:19:28:b4:7b:8f:e9:4b:19:23:ff:64: 71:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1A:B7:F6:62:88:E0:24:47:54:95:0C:A5:F8:45:A2:C2:82:62:FB X509v3 Authority Key Identifier: keyid:53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a2:4f:f9:74:c7:b2:2d:20:c8:92:cf:f3:8a:11:99:68:0b: 2e:f2:b8:3a:37:cc:07:6a:f7:ae:cc:fe:97:b9:2e:fe:1d:91: 84:50:15:8d:58:f0:08:97:fe:8a:90:af:e1:e4:41:55:90:d7: 26:e4:65:32:28:ba:a7:de:6e:5e:d7:55:c4:13:3e:f8:9f:9a: 96:d2:43:f9:02:db:93:64:5e:6a:6d:54:dd:34:3a:63:aa:96: bd:de:55:0a:b8:dc:6e:12:a1:3c:f6:96:2e:f5:44:68:79:50: 6e:17:95:23:d2:14:a6:fe:45:b9:0e:e7:82:da:72:71:55:e6: 22:28:29:73:32:e1:df:7f:1e:87:80:0c:b6:5e:12:c3:2a:b9: 19:f0:c4:46:1f:b1:48:83:4c:dc:b5:ee:6b:45:61:92:2e:b1: 81:06:4b:f2:fc:d0:e5:71:a1:98:77:97:40:55:a1:07:36:3b: 8f:bf:73:43:65:86:10:d1:23:09:f4:d0:05:65:7b:29:23:5c: 10:75:44:a0:00:dc:77:28:9b:6d:0f:a9:1a:a1:6a:03:c5:34: d2:40:b4:5f:05:ae:3a:96:46:7f:0d:ec:31:d4:c1:6a:dd:04: 01:52:1c:3d:6e:f6:e6:f9:e0:90:a1:cb:12:2f:32:22:a3:11: 5a:03:f2:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbd71MFE6+2TaslIqTknXKIp34LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5 QkNDNEY2QjAeFw0yNTA3MjIwMjA2MzZaFw0yNTA3MjUxNDA5MzZaMDMxMTAvBgNV BAMTKEUwMUFCN0Y2NjI4OEUwMjQ0NzU0OTUwQ0E1Rjg0NUEyQzI4MjYyRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0ENvNUnQZufdTotWKcG9Vv52 krrCuT744QXFoYcFGWOtFlalBqBKzsyOhGLLSwEApmhzPFyEsrc61EIFKtIyL3iS pCkUx3uu1RVPNCtkX3SN4tJEebwEXYMDdOhXVaAX9G+S0B96MRbnHD9+d5IoL/N4 zjc1DaN49ddmTUR5PkO3iUnyKAG2YJMefYUWzsC6WvLQzzXDArmPHSVGyr6mYthq 7cHDj49p91QmzjqT9GtR8KviOWzVKwUfaPxuG+SQhyKb5A0P1FVFfBpV38tBsnd1 vuriqy4Wmvp3qvFi6y+hpqKI4BMKsqx+XXGnZM7RyUYZKLR7j+lLGSP/ZHGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Bq39mKI4CRHVJUMpfhFosKCYvswHwYDVR0j BBgwFoAUUxNXQ81Z60OJVP62UaXZLZvMT2swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGQ4ZGEyZC1hNTA2LTQ3NjMtYmMzYy1lMjgwYmY3NTE3YTQvMC81MzEzNTc0M0NE NTlFQjQzODk1NEZFQjY1MUE1RDkyRDlCQ0M0RjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5QkND NEY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkOGRhMmQtYTUwNi00NzYzLWJj M2MtZTI4MGJmNzUxN2E0LzAvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5 MkQ5QkNDNEY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeiT/l0x7ItIMiSz/OKEZloCy7yuDo3zAdq 967M/pe5Lv4dkYRQFY1Y8AiX/oqQr+HkQVWQ1ybkZTIouqfebl7XVcQTPvifmpbS Q/kC25NkXmptVN00OmOqlr3eVQq43G4SoTz2li71RGh5UG4XlSPSFKb+RbkO54La cnFV5iIoKXMy4d9/HoeADLZeEsMquRnwxEYfsUiDTNy17mtFYZIusYEGS/L80OVx oZh3l0BVoQc2O4+/c0NlhhDRIwn00AVleykjXBB1RKAA3Hcom20PqRqhagPFNNJA tF8FrjqWRn8N7DHUwWrdBAFSHD1u9ub54JChyxIvMiKjEVoD8rY= -----END CERTIFICATE-----Generated at Wed Jul 23 12:10:29 2025 by rpki-client