$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: qztMzoLpKVF9szxrcOBy5J3xeXDvIIcpDmYpwYGkJdE= Subject key identifier: DF:63:53:6A:9D:43:4E:AE:12:BE:E9:05:02:56:4B:B5:12:54:B2:3B Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 5F2BD1EB022ED190188790DB007382131FA729E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 0504 Signing time: Fri 05 Sep 2025 20:30:03 +0000 Manifest this update: Fri 05 Sep 2025 20:25:03 +0000 Manifest next update: Tue 09 Sep 2025 03:11:03 +0000 Files and hashes: 1: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: cp+pPTb2cnqu9yKXhWlrVhwAr6NZXwNYswz0DziNlcg=) 2: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) 3: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2b:d1:eb:02:2e:d1:90:18:87:90:db:00:73:82:13:1f:a7:29:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Sep 5 20:25:03 2025 GMT Not After : Sep 9 03:11:03 2025 GMT Subject: CN=DF63536A9D434EAE12BEE90502564BB51254B23B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:10:72:32:5e:74:1a:01:f1:a1:44:8f:49:7a: ab:d5:e4:85:55:7d:aa:1b:53:63:99:a6:16:32:3c: e2:bf:6a:ec:9f:f6:a3:a1:7f:ff:7d:a2:84:ce:eb: 12:1d:c8:a8:42:86:e2:fb:e3:76:be:71:cf:37:a2: c2:8c:2e:85:12:19:c6:02:38:a0:d0:c3:f8:5a:ec: 3f:99:a5:a8:37:bd:c1:e5:1b:51:d2:62:29:be:08: 16:5b:8e:62:2c:89:91:2f:ed:03:0c:c5:b3:67:42: 49:93:e0:24:b6:a1:d6:7c:2b:f6:6e:19:78:49:d4: 7d:bc:97:c8:9c:0f:de:fd:f1:49:de:5c:04:4c:b0: 17:e9:10:98:8c:03:db:bc:51:c1:bb:70:79:0f:f1: 2b:e6:3e:b9:3e:ab:41:49:85:7a:c2:8e:87:f4:2f: d1:05:ad:27:16:c4:21:a3:34:93:17:d6:04:da:f7: 3d:3d:71:1c:ee:84:34:69:00:40:d0:11:a9:9b:66: 12:a7:a8:1d:50:fd:c6:09:40:81:bb:89:40:f8:df: 87:aa:d3:a9:70:a7:03:e9:1c:ab:09:05:7b:2e:3a: bb:f4:ca:7f:f9:72:96:d1:8f:ba:6d:05:8d:1e:c9: 0e:38:0c:00:aa:85:bd:f8:8d:b0:ee:b2:62:cf:1c: 1e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:63:53:6A:9D:43:4E:AE:12:BE:E9:05:02:56:4B:B5:12:54:B2:3B X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4e:27:f9:52:79:0b:dc:4c:6e:84:20:71:c4:ad:38:12:9b: 35:8e:e6:ba:46:f7:29:bf:2e:e3:28:00:b5:b6:ef:3f:bf:f1: 76:fd:f4:ad:32:8f:7b:db:52:d0:d9:aa:ed:a1:25:5b:27:fe: e7:e3:70:55:09:cd:13:5f:d7:29:2c:8b:05:97:c5:de:5d:18: 7c:61:56:78:ed:82:e3:73:16:0d:ea:62:02:24:2c:c0:a4:7f: dc:d2:6e:8a:e5:a0:4f:2c:63:bd:f0:24:02:08:bf:9a:e5:93: d3:18:60:84:ee:8d:43:f3:74:b5:30:17:9a:3d:9d:a8:54:4f: 14:fa:1d:32:4a:86:4e:68:4e:84:e2:a7:82:84:1d:7f:dc:85: d3:98:b2:11:d7:d9:48:9e:5f:63:e2:9c:ef:8f:a5:73:f4:72: 2e:01:53:47:97:1e:d8:95:c4:64:16:13:4a:10:48:cb:39:3c: a1:69:bc:33:0a:ea:ce:6a:ee:c7:6b:dc:29:9b:a8:e7:46:9e: 0c:7f:bc:27:6c:bf:94:fc:19:4c:82:66:86:87:5d:25:85:53: 59:2d:90:2f:c4:48:f6:ba:86:6a:1a:ce:bd:70:6d:3b:d0:80: 9d:4f:3f:d1:7c:b2:44:1b:f4:d8:5f:ba:44:1f:19:06:d0:bf: ef:39:cd:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyvR6wIu0ZAYh5DbAHOCEx+nKeAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTA5MDUyMDI1MDNaFw0yNTA5MDkwMzExMDNaMDMxMTAvBgNV BAMTKERGNjM1MzZBOUQ0MzRFQUUxMkJFRTkwNTAyNTY0QkI1MTI1NEIyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtEHIyXnQaAfGhRI9JeqvV5IVV faobU2OZphYyPOK/auyf9qOhf/99ooTO6xIdyKhChuL743a+cc83osKMLoUSGcYC OKDQw/ha7D+Zpag3vcHlG1HSYim+CBZbjmIsiZEv7QMMxbNnQkmT4CS2odZ8K/Zu GXhJ1H28l8icD9798UneXARMsBfpEJiMA9u8UcG7cHkP8SvmPrk+q0FJhXrCjof0 L9EFrScWxCGjNJMX1gTa9z09cRzuhDRpAEDQEambZhKnqB1Q/cYJQIG7iUD434eq 06lwpwPpHKsJBXsuOrv0yn/5cpbRj7ptBY0eyQ44DACqhb34jbDusmLPHB5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU32NTap1DTq4SvukFAlZLtRJUsjswHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlOJ/lSeQvcTG6EIHHErTgSmzWO5rpG9ym/ LuMoALW27z+/8Xb99K0yj3vbUtDZqu2hJVsn/ufjcFUJzRNf1yksiwWXxd5dGHxh VnjtguNzFg3qYgIkLMCkf9zSborloE8sY73wJAIIv5rlk9MYYITujUPzdLUwF5o9 nahUTxT6HTJKhk5oToTip4KEHX/chdOYshHX2UieX2PinO+PpXP0ci4BU0eXHtiV xGQWE0oQSMs5PKFpvDMK6s5q7sdr3CmbqOdGngx/vCdsv5T8GUyCZoaHXSWFU1kt kC/ESPa6hmoazr1wbTvQgJ1PP9F8skQb9NhfukQfGQbQv+85zVg= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:42 2025 by rpki-client