$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: eoSvx45VGFghHY8BXKXQLXhDPdsZVROl6FYR/EquqqY= Subject key identifier: 91:E2:2C:20:31:08:A7:1C:74:2E:DF:85:71:AF:09:74:FA:4F:20:3B Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 5E5B70A9CF9488952CA8BB8FE70B03156D2DEC07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 023A Signing time: Mon 08 Sep 2025 06:40:36 +0000 Manifest this update: Mon 08 Sep 2025 06:35:36 +0000 Manifest next update: Thu 11 Sep 2025 14:35:36 +0000 Files and hashes: 1: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) 2: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) 3: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: xr4xnAC1RYT4wTa5zhKOOsf3ona1wLFCozeKv2drcmM=) 4: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:35:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5b:70:a9:cf:94:88:95:2c:a8:bb:8f:e7:0b:03:15:6d:2d:ec:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Sep 8 06:35:36 2025 GMT Not After : Sep 11 14:35:36 2025 GMT Subject: CN=91E22C203108A71C742EDF8571AF0974FA4F203B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cf:47:bc:54:f9:13:7a:55:9c:b8:36:8a:d0: c7:10:26:ea:c2:65:24:0f:20:b6:47:be:3d:ef:1c: 0e:b0:1c:28:ed:8f:e8:32:14:a5:28:13:5c:84:3a: dc:37:cb:db:b5:46:da:d7:65:7c:c2:bb:f4:07:29: 3f:78:49:b4:7c:99:00:01:ed:79:53:ab:fe:77:d9: 52:76:d0:0c:4f:9e:c2:11:a9:d5:55:02:08:77:ec: 7e:8e:94:9b:55:5b:5b:67:23:73:36:f7:0c:e8:ac: 98:d4:a7:95:0e:38:72:f3:82:1b:35:23:6f:9c:dc: 6e:3c:18:da:39:3d:6c:dc:20:a3:90:b3:a6:98:9e: b9:e8:12:7c:a5:6a:35:8e:f9:91:0f:c8:a3:ff:6e: 81:81:21:c2:ad:30:c4:5d:42:5c:aa:90:d3:e1:22: 9b:56:5a:7e:40:d7:19:1a:eb:46:ce:7b:12:29:7f: d3:d2:69:01:06:6e:dc:83:e7:8c:94:6f:a1:3e:6b: e7:03:1c:48:db:93:55:a6:7f:7f:0b:2f:d5:6e:f0: 59:2f:ef:63:a2:e1:bb:a6:92:44:fb:a8:fa:d6:b2: 9e:bc:41:29:a1:dd:d9:27:23:54:64:21:7c:f1:fc: a0:ff:bf:90:34:bf:58:04:1b:58:78:82:3c:77:0f: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E2:2C:20:31:08:A7:1C:74:2E:DF:85:71:AF:09:74:FA:4F:20:3B X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:e3:f9:b5:ff:f8:cf:3d:85:e7:8d:e9:1f:8e:52:a5:3b:78: 8b:d6:ab:07:68:c7:ec:2a:c3:37:45:70:90:30:06:31:5c:11: b3:f1:c6:b6:e1:df:00:b5:7c:2e:9a:6d:6a:47:dc:d6:e3:f4: 22:45:00:ec:15:96:d8:3d:cc:39:28:8a:d6:c5:39:3b:97:70: 8e:2d:41:55:33:e3:d9:7d:e5:0c:f6:fc:dc:0e:93:7a:8c:09: 89:d7:f6:d6:cd:4f:e8:aa:98:e5:af:de:4e:a2:d7:db:72:9f: 9d:40:3c:9c:3c:7b:cc:b4:29:17:03:12:af:ee:c6:8c:b2:9e: 13:50:69:e9:d2:60:28:23:5b:fa:72:21:0b:29:d1:05:02:26: 0f:ea:05:aa:e1:a5:e2:c8:33:53:58:ff:36:db:47:8c:c9:ff: b9:5d:d9:fb:e8:2f:03:1f:86:a4:84:a8:b9:78:91:b6:0c:9f: 75:c5:4e:00:f8:e4:71:ec:5a:64:68:39:f6:22:1a:8a:e2:2e: be:37:d2:1f:f7:a4:37:3c:af:3a:66:a2:d4:82:0b:53:c4:81: 09:1c:da:1e:7b:5f:93:cb:df:f2:4d:37:eb:57:38:e0:50:57: 72:4a:97:24:71:d6:10:14:bc:00:2e:42:00:94:0c:48:c1:f5: 9d:8e:9c:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXltwqc+UiJUsqLuP5wsDFW0t7AcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTA5MDgwNjM1MzZaFw0yNTA5MTExNDM1MzZaMDMxMTAvBgNV BAMTKDkxRTIyQzIwMzEwOEE3MUM3NDJFREY4NTcxQUYwOTc0RkE0RjIwM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrz0e8VPkTelWcuDaK0McQJurC ZSQPILZHvj3vHA6wHCjtj+gyFKUoE1yEOtw3y9u1RtrXZXzCu/QHKT94SbR8mQAB 7XlTq/532VJ20AxPnsIRqdVVAgh37H6OlJtVW1tnI3M29wzorJjUp5UOOHLzghs1 I2+c3G48GNo5PWzcIKOQs6aYnrnoEnylajWO+ZEPyKP/boGBIcKtMMRdQlyqkNPh IptWWn5A1xka60bOexIpf9PSaQEGbtyD54yUb6E+a+cDHEjbk1Wmf38LL9Vu8Fkv 72Oi4bumkkT7qPrWsp68QSmh3dknI1RkIXzx/KD/v5A0v1gEG1h4gjx3D7h9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkeIsIDEIpxx0Lt+Fca8JdPpPIDswHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvj+bX/+M89heeN6R+OUqU7eIvWqwdox+wq wzdFcJAwBjFcEbPxxrbh3wC1fC6abWpH3Nbj9CJFAOwVltg9zDkoitbFOTuXcI4t QVUz49l95Qz2/NwOk3qMCYnX9tbNT+iqmOWv3k6i19tyn51APJw8e8y0KRcDEq/u xoyynhNQaenSYCgjW/pyIQsp0QUCJg/qBarhpeLIM1NY/zbbR4zJ/7ld2fvoLwMf hqSEqLl4kbYMn3XFTgD45HHsWmRoOfYiGoriLr430h/3pDc8rzpmotSCC1PEgQkc 2h57X5PL3/JNN+tXOOBQV3JKlyRx1hAUvAAuQgCUDEjB9Z2OnFc= -----END CERTIFICATE-----Generated at Tue Sep 9 13:45:38 2025 by rpki-client