$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: 7LU0VD4B5K0waF05roMSOWSyjsfN5WFj6sZqpmG+VEs= Subject key identifier: 53:D5:AF:FD:A6:05:82:9C:BB:A5:93:C6:A9:00:FD:4B:BA:72:A3:07 Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 091D82214A945924EFD4DDF6C13B0B20B4CAC2E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 0143 Signing time: Thu 04 Sep 2025 13:10:38 +0000 Manifest this update: Thu 04 Sep 2025 13:05:38 +0000 Manifest next update: Sun 07 Sep 2025 15:23:38 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: fgdfE2CZFquKtCSaqRhm3PV0Q2eEiRIR4kh3YikAve8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 15:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:1d:82:21:4a:94:59:24:ef:d4:dd:f6:c1:3b:0b:20:b4:ca:c2:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: Sep 4 13:05:38 2025 GMT Not After : Sep 7 15:23:38 2025 GMT Subject: CN=53D5AFFDA605829CBBA593C6A900FD4BBA72A307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:05:63:45:dd:8b:68:35:65:56:a2:fe:07: 49:9c:f5:c8:82:c0:16:01:ca:ce:c6:14:f2:c7:96: a8:31:99:40:90:ab:29:55:c9:52:74:57:34:6c:42: e3:b3:e1:43:b4:c6:77:bd:48:a6:73:75:1c:f6:42: e0:97:e8:bf:ce:61:9b:a6:ea:47:ba:8d:f9:f7:82: 46:e9:ce:52:a4:f8:78:35:83:fb:3f:11:24:71:66: 1c:6a:9e:66:36:4c:e0:5f:7c:39:1d:58:6e:80:57: 6d:6f:b6:56:b3:82:d4:56:1f:22:7b:ee:f9:4a:ed: d6:98:ca:95:9a:c8:07:f1:92:63:21:c3:bc:af:ed: b2:61:ca:26:5f:01:44:04:0f:56:48:17:60:85:e1: fa:09:f1:f6:38:25:40:5d:03:ca:db:68:72:fa:3a: 61:23:ab:59:b3:cc:fa:ae:d9:1e:ca:9d:4b:59:78: 0a:f1:24:4e:db:86:56:d6:bf:f6:6f:0f:b1:0d:ce: 9b:18:40:64:01:5e:f7:3d:5b:dd:cd:6c:a1:52:ca: b7:fc:57:5c:90:62:17:5a:be:c1:b9:22:18:75:37: 11:42:eb:66:8c:de:9b:79:db:f2:e5:ae:58:27:bd: 22:28:00:a3:de:2a:7f:c7:84:20:c0:70:5c:1a:5f: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D5:AF:FD:A6:05:82:9C:BB:A5:93:C6:A9:00:FD:4B:BA:72:A3:07 X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6d:0d:09:3d:de:4f:82:88:51:bd:85:00:1b:6a:97:56:7d: ea:11:34:2b:3e:6d:42:be:4d:13:cd:1c:76:44:9a:84:52:80: 94:2b:d8:d0:8b:de:22:c4:13:5a:fa:ed:0d:69:6b:10:d8:35: 96:53:45:15:f5:f7:85:98:49:ee:6c:f1:6c:8a:6e:38:c3:6c: a6:6f:a3:c6:4f:df:45:ad:f9:36:b1:a3:a4:d0:fe:bc:ad:fb: 39:e3:55:6b:db:9e:8e:7b:13:33:f8:16:d4:6e:cb:05:32:04: c4:19:da:44:5e:33:cd:b2:9e:1f:d9:58:90:12:06:af:4f:44: 0b:f9:73:a9:6a:70:55:b4:09:f7:ee:68:82:42:a1:eb:04:b8: 34:e7:23:cd:62:f4:f8:1e:22:fa:79:88:40:81:7c:88:af:a6: 0a:ff:0d:ce:63:1c:15:87:1d:d9:89:3a:b6:20:c9:b1:cf:d6: c7:52:94:c7:4b:f2:09:ba:f3:b2:1f:a6:3b:30:cb:dd:c6:b0: ed:e7:a6:31:1f:51:cc:87:cd:82:13:4a:63:c7:70:24:d4:87: d7:43:f1:03:ff:59:ce:45:43:a6:50:6d:a4:2e:fa:26:d7:66: 4d:01:ee:2d:82:73:2b:72:f2:ce:1e:25:10:51:6d:e9:93:0c: c9:17:5a:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCR2CIUqUWSTv1N32wTsLILTKwukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNTA5MDQxMzA1MzhaFw0yNTA5MDcxNTIzMzhaMDMxMTAvBgNV BAMTKDUzRDVBRkZEQTYwNTgyOUNCQkE1OTNDNkE5MDBGRDRCQkE3MkEzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLQVjRd2LaDVlVqL+B0mc9ciC wBYBys7GFPLHlqgxmUCQqylVyVJ0VzRsQuOz4UO0xne9SKZzdRz2QuCX6L/OYZum 6ke6jfn3gkbpzlKk+Hg1g/s/ESRxZhxqnmY2TOBffDkdWG6AV21vtlazgtRWHyJ7 7vlK7daYypWayAfxkmMhw7yv7bJhyiZfAUQED1ZIF2CF4foJ8fY4JUBdA8rbaHL6 OmEjq1mzzPqu2R7KnUtZeArxJE7bhlbWv/ZvD7ENzpsYQGQBXvc9W93NbKFSyrf8 V1yQYhdavsG5Ihh1NxFC62aM3pt52/LlrlgnvSIoAKPeKn/HhCDAcFwaX2TTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU9Wv/aYFgpy7pZPGqQD9S7pyowcwHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBtDQk93k+CiFG9hQAbapdWfeoRNCs+bUK+ TRPNHHZEmoRSgJQr2NCL3iLEE1r67Q1paxDYNZZTRRX194WYSe5s8WyKbjjDbKZv o8ZP30Wt+Taxo6TQ/ryt+znjVWvbno57EzP4FtRuywUyBMQZ2kReM82ynh/ZWJAS Bq9PRAv5c6lqcFW0CffuaIJCoesEuDTnI81i9PgeIvp5iECBfIivpgr/Dc5jHBWH HdmJOrYgybHP1sdSlMdL8gm687Ifpjswy93GsO3npjEfUcyHzYITSmPHcCTUh9dD 8QP/Wc5FQ6ZQbaQu+ibXZk0B7i2Ccyty8s4eJRBRbemTDMkXWkI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:52 2025 by rpki-client