$ rpki-client -vvf repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft File: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft (raw, json) Hash identifier: +7sDKg5xv9SNLu9vDJelBB61eVMnZJkxGeXw/gQvztI= Subject key identifier: 3F:A8:73:9D:72:DD:59:B6:EB:67:92:55:FD:7F:41:11:65:83:7C:4C Authority key identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E Certificate issuer: /CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Certificate serial: 476D77E5A8B0598672FF88BE22F9EC907E28972D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft Manifest number: 01C9 Signing time: Wed 03 Sep 2025 07:41:15 +0000 Manifest this update: Wed 03 Sep 2025 07:36:15 +0000 Manifest next update: Sat 06 Sep 2025 17:36:15 +0000 Files and hashes: 1: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl (hash: CIdLKbXFUlbS92zpap2evnsJ62dpcT8dzTURw6i0axM=) 2: 3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (hash: Xr1e6YuIMSI5rKzC7+hK1bIDu6gOhNq675X/0EmA45E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 17:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:6d:77:e5:a8:b0:59:86:72:ff:88:be:22:f9:ec:90:7e:28:97:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Validity Not Before: Sep 3 07:36:15 2025 GMT Not After : Sep 6 17:36:15 2025 GMT Subject: CN=3FA8739D72DD59B6EB679255FD7F411165837C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:61:87:69:ef:2b:ec:1b:fa:db:c8:c6:7d:f7: 67:ad:66:1c:87:16:30:02:5e:05:e6:5c:f6:08:92: ff:51:ae:fa:dd:94:da:da:4d:11:84:c7:67:a9:30: 7f:34:67:12:cd:b6:07:1a:93:97:71:ee:73:97:04: 47:d2:5b:ed:4d:2d:44:2e:02:43:cd:98:84:82:97: 55:fe:82:be:50:5d:b3:d9:d7:bf:76:1a:8a:ca:d2: 17:65:0c:ec:c5:91:e4:13:4c:ea:cd:50:2a:30:11: 09:f5:e1:51:3f:75:0e:3e:7f:39:65:36:f8:28:9d: 55:a5:49:96:68:24:ef:7b:2f:da:be:94:c5:5f:aa: 8c:a0:77:26:2d:2f:56:cf:bf:eb:08:25:1a:b4:9d: 2d:da:20:ca:d1:ad:4d:34:92:e0:f1:9f:ce:c9:0a: fe:d0:f7:f5:85:36:01:ee:4c:ca:33:f9:40:55:5b: 4b:64:ce:b1:c2:ba:72:64:62:60:45:9a:50:dd:0e: b9:ab:84:69:19:c2:0c:53:00:ac:1b:1c:db:73:70: fd:99:ea:9f:85:97:5f:6b:03:47:ee:09:f6:83:16: 15:c2:4c:7f:ed:98:d4:45:b6:68:4a:84:a8:02:8f: 65:7f:c9:fd:35:76:7e:ab:bb:7c:a3:61:1f:58:80: 52:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A8:73:9D:72:DD:59:B6:EB:67:92:55:FD:7F:41:11:65:83:7C:4C X509v3 Authority Key Identifier: keyid:53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:7d:d2:a4:fa:bc:91:ea:33:20:db:c7:79:16:f2:dc:5c:df: a4:44:e6:0f:6b:49:7d:ef:8d:e0:23:95:2a:34:4d:66:d7:60: 2e:4a:87:4b:c7:b0:82:c8:74:0f:7f:80:a2:70:6e:0b:c6:9e: 99:bb:a0:68:83:bf:83:bf:ba:9c:54:37:bb:4f:fd:89:e9:c0: 4e:40:d7:aa:bc:a4:35:e6:c7:e5:67:4e:8d:2f:b2:c7:77:5a: 1c:4e:36:63:90:7e:7b:46:9b:de:d7:d3:12:bb:6b:57:2c:76: 8d:b5:96:6a:d6:8b:09:dc:b5:bb:07:84:cf:4f:bb:88:c2:27: 2f:ed:c8:6c:de:c6:a4:f3:4b:b6:52:4e:2e:84:72:e9:4b:bf: 23:5a:41:fe:0f:67:b4:a1:70:26:95:3a:9f:c6:56:47:40:b2: 55:98:dc:9a:c0:1d:e0:56:e8:25:d5:95:65:a5:a8:2a:42:c8: 25:77:81:c4:49:a1:d5:e6:2b:c9:9f:dd:dc:f3:22:43:49:d8: a9:39:f2:04:77:65:36:42:71:4b:1e:94:00:75:10:c9:41:d2: ec:b6:de:f9:36:95:b6:da:e6:53:d4:8b:62:51:0d:c1:2b:bb: d7:1c:3c:dd:18:b7:47:ac:88:33:fe:7c:26:94:fc:c7:b0:19: 18:d9:31:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR2135aiwWYZy/4i+IvnskH4oly0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2RDI5 RUJGQjY0RTAeFw0yNTA5MDMwNzM2MTVaFw0yNTA5MDYxNzM2MTVaMDMxMTAvBgNV BAMTKDNGQTg3MzlENzJERDU5QjZFQjY3OTI1NUZEN0Y0MTExNjU4MzdDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeYYdp7yvsG/rbyMZ992etZhyH FjACXgXmXPYIkv9RrvrdlNraTRGEx2epMH80ZxLNtgcak5dx7nOXBEfSW+1NLUQu AkPNmISCl1X+gr5QXbPZ1792GorK0hdlDOzFkeQTTOrNUCowEQn14VE/dQ4+fzll NvgonVWlSZZoJO97L9q+lMVfqoygdyYtL1bPv+sIJRq0nS3aIMrRrU00kuDxn87J Cv7Q9/WFNgHuTMoz+UBVW0tkzrHCunJkYmBFmlDdDrmrhGkZwgxTAKwbHNtzcP2Z 6p+Fl19rA0fuCfaDFhXCTH/tmNRFtmhKhKgCj2V/yf01dn6ru3yjYR9YgFK/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP6hznXLdWbbrZ5JV/X9BEWWDfEwwHwYDVR0j BBgwFoAUU7LKMALbjfz1SC+OCamG0p6/tk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjcxZmM2ZC1hYTNiLTRlZDctOGZlYy03NDI3YWEwNjFmOGUvMC81M0IyQ0EzMDAy REI4REZDRjU0ODJGOEUwOUE5ODZEMjlFQkZCNjRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2RDI5RUJG QjY0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I3MWZjNmQtYWEzYi00ZWQ3LThm ZWMtNzQyN2FhMDYxZjhlLzAvNTNCMkNBMzAwMkRCOERGQ0Y1NDgyRjhFMDlBOTg2 RDI5RUJGQjY0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJl90qT6vJHqMyDbx3kW8txc36RE5g9rSX3v jeAjlSo0TWbXYC5Kh0vHsILIdA9/gKJwbgvGnpm7oGiDv4O/upxUN7tP/YnpwE5A 16q8pDXmx+VnTo0vssd3WhxONmOQfntGm97X0xK7a1csdo21lmrWiwnctbsHhM9P u4jCJy/tyGzexqTzS7ZSTi6EculLvyNaQf4PZ7ShcCaVOp/GVkdAslWY3JrAHeBW 6CXVlWWlqCpCyCV3gcRJodXmK8mf3dzzIkNJ2Kk58gR3ZTZCcUselAB1EMlB0uy2 3vk2lbba5lPUi2JRDcEru9ccPN0Yt0esiDP+fCaU/MewGRjZMXc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:56 2025 by rpki-client