$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: 8aKIALI3mHYD7nWmIxqhwfMCWyqyDDyC5Q1TANbU6Vc= Subject key identifier: C3:F1:0F:0D:FD:88:CD:DE:CB:C0:7B:00:E5:55:50:E2:A0:CC:E9:90 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 588C8DF2815DCDBB5EB3BAEB021C06FB6CD7CC3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0250 Signing time: Mon 27 Oct 2025 22:10:38 +0000 Manifest this update: Mon 27 Oct 2025 22:05:38 +0000 Manifest next update: Thu 30 Oct 2025 23:32:38 +0000 Files and hashes: 1: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: 0ZtXsv58rzHU1o/SL/OO0fD3Gch2Y/l+TLeTP0ImwaE=) 2: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 3: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) 4: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 23:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:8c:8d:f2:81:5d:cd:bb:5e:b3:ba:eb:02:1c:06:fb:6c:d7:cc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Oct 27 22:05:38 2025 GMT Not After : Oct 30 23:32:38 2025 GMT Subject: CN=C3F10F0DFD88CDDECBC07B00E55550E2A0CCE990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6f:cf:4e:4d:e6:53:bb:42:4f:51:b0:55:43: 0e:fa:8c:86:25:03:00:09:4b:c7:a2:59:f4:a6:2f: 1d:a0:b6:6a:d0:bf:73:fa:32:1f:03:a0:28:11:71: 60:3a:c9:1b:8d:a6:bc:29:da:e0:55:59:17:4b:56: 06:90:67:a9:bb:73:44:18:93:ee:d6:8a:09:e2:af: 7c:7f:d2:be:cf:0f:80:5b:da:69:8f:e4:f6:5b:48: be:30:b7:41:45:a0:0c:bb:40:9f:9c:a0:0f:f8:70: 02:d3:76:7e:fd:e4:8c:75:6c:bb:fb:03:9c:17:d3: c9:3c:ea:b9:32:69:21:9c:f6:8a:24:00:41:7d:9f: bf:63:a6:0b:42:2f:44:55:99:cd:dd:d0:6d:54:86: 32:07:4d:8a:61:88:c9:e3:72:1b:2a:2c:83:21:e4: 5f:83:71:44:37:b5:ea:3c:31:21:cd:81:bc:98:d8: 3b:0c:5b:00:c8:2e:d3:59:f4:cf:a3:19:37:f7:83: a4:4a:d7:c7:0c:23:b7:ef:13:66:0e:52:04:c1:25: 66:01:96:75:e3:b3:2e:5c:94:62:4d:3b:53:3a:4a: 0a:17:42:99:31:7b:84:8c:11:33:7c:b1:15:a8:4e: 96:53:36:37:88:5e:3f:ad:41:78:c8:63:bf:86:eb: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F1:0F:0D:FD:88:CD:DE:CB:C0:7B:00:E5:55:50:E2:A0:CC:E9:90 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:be:41:fe:65:8c:15:57:df:0f:9f:86:ba:b5:5f:42:4c:98: 3f:e3:6f:6e:e0:b9:2e:08:4d:78:84:17:9a:f4:23:ba:6b:eb: bc:1f:96:68:be:cc:04:93:b4:38:7e:28:4d:68:8d:10:ea:f1: 6c:2e:99:8b:26:48:15:7f:48:d0:32:45:21:4c:23:fa:96:26: 54:1c:27:b8:d2:da:61:82:e4:4f:86:31:f1:d7:d3:97:79:8a: 4f:27:86:63:63:3f:eb:aa:2f:50:9a:a0:08:92:53:56:bc:a0: b7:0b:b4:f4:7f:bd:ba:3f:c2:1d:eb:44:6f:cb:dd:06:3e:49: 26:ab:3e:93:7f:09:bf:30:5d:1a:ce:75:98:88:cb:44:a5:f8: a5:2e:3b:26:f9:9c:2c:ed:80:81:a4:68:be:48:d2:22:af:4e: f1:ca:ba:da:29:c2:04:44:01:cb:43:bd:03:6c:c2:eb:81:fd: 87:ac:99:e7:48:12:32:43:fb:ba:79:7c:d7:6d:38:07:00:3a: 7d:93:26:a0:07:d6:4d:f4:8a:34:d3:19:e5:91:10:40:1d:26: a6:5a:12:42:cc:7e:32:c4:5f:b5:7b:b7:d3:2d:d8:58:95:fb: 44:41:4e:27:88:27:11:ef:8f:aa:11:c1:d9:3d:14:38:5a:21: 1f:96:2c:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIyN8oFdzbtes7rrAhwG+2zXzD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTEwMjcyMjA1MzhaFw0yNTEwMzAyMzMyMzhaMDMxMTAvBgNV BAMTKEMzRjEwRjBERkQ4OENEREVDQkMwN0IwMEU1NTU1MEUyQTBDQ0U5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4b89OTeZTu0JPUbBVQw76jIYl AwAJS8eiWfSmLx2gtmrQv3P6Mh8DoCgRcWA6yRuNprwp2uBVWRdLVgaQZ6m7c0QY k+7Wignir3x/0r7PD4Bb2mmP5PZbSL4wt0FFoAy7QJ+coA/4cALTdn795Ix1bLv7 A5wX08k86rkyaSGc9ookAEF9n79jpgtCL0RVmc3d0G1UhjIHTYphiMnjchsqLIMh 5F+DcUQ3teo8MSHNgbyY2DsMWwDILtNZ9M+jGTf3g6RK18cMI7fvE2YOUgTBJWYB lnXjsy5clGJNO1M6SgoXQpkxe4SMETN8sRWoTpZTNjeIXj+tQXjIY7+G6zH3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/EPDf2Izd7LwHsA5VVQ4qDM6ZAwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC++Qf5ljBVX3w+fhrq1X0JMmD/jb27guS4I TXiEF5r0I7pr67wflmi+zASTtDh+KE1ojRDq8WwumYsmSBV/SNAyRSFMI/qWJlQc J7jS2mGC5E+GMfHX05d5ik8nhmNjP+uqL1CaoAiSU1a8oLcLtPR/vbo/wh3rRG/L 3QY+SSarPpN/Cb8wXRrOdZiIy0Sl+KUuOyb5nCztgIGkaL5I0iKvTvHKutopwgRE ActDvQNswuuB/YesmedIEjJD+7p5fNdtOAcAOn2TJqAH1k30ijTTGeWREEAdJqZa EkLMfjLEX7V7t9Mt2FiV+0RBTieIJxHvj6oRwdk9FDhaIR+WLC4= -----END CERTIFICATE-----Generated at Wed Oct 29 11:32:47 2025 by rpki-client