$ rpki-client -vvf repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft File: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft (raw, json) Hash identifier: jwQiksRJZieY2zwHbCJH+IUUGhqTv4ri63p6mTbXKX8= Subject key identifier: FE:39:08:B3:35:B1:E7:27:1A:51:33:63:BE:BF:04:2A:08:99:84:ED Authority key identifier: 53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B Certificate issuer: /CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Certificate serial: 028CBB07352F409D6A3DB03960FB17F2DC165A07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft Manifest number: 0140 Signing time: Sun 19 Oct 2025 01:01:37 +0000 Manifest this update: Sun 19 Oct 2025 00:56:37 +0000 Manifest next update: Wed 22 Oct 2025 07:15:37 +0000 Files and hashes: 1: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl (hash: bNiOntx5FBjLzrkkF2z7WrOsjlHR1cIJRrxLaO6SXao=) 2: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: 6UY/R+UdRsBhwgNfBVY0MjOGp2DSj7k+K0sc21L+Is0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8c:bb:07:35:2f:40:9d:6a:3d:b0:39:60:fb:17:f2:dc:16:5a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Validity Not Before: Oct 19 00:56:37 2025 GMT Not After : Oct 22 07:15:37 2025 GMT Subject: CN=FE3908B335B1E7271A513363BEBF042A089984ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:01:ad:53:c3:90:ff:a3:7c:12:83:a4:4b:9c: 3d:38:f6:5f:17:e8:a7:d2:5d:0f:54:73:d2:1c:74: bc:e0:84:8c:0c:ee:22:dc:5c:71:1f:bd:25:ba:f4: 85:48:2a:31:ae:8c:6a:04:f3:71:fe:9c:9b:3f:31: 46:94:ce:37:8a:76:9f:1e:0a:9b:64:55:d3:e9:1b: ad:37:3c:2e:36:77:aa:27:2b:c0:e2:f2:f9:21:7c: 15:19:8a:ab:f2:d1:cc:ba:02:0b:42:2d:34:77:70: 93:de:8c:e8:ef:f1:f2:86:98:57:c4:ab:cb:df:b2: 7e:64:ca:01:13:21:6f:62:68:b5:af:de:b8:1b:2b: 3c:bb:7b:92:9a:aa:4a:fc:72:77:59:6d:b5:64:e5: f7:f9:b7:88:46:f2:cf:e7:95:11:23:45:f2:7f:52: 20:c8:b3:d1:35:d9:24:59:10:56:eb:ab:9d:7f:ef: 02:a4:1f:b3:28:70:5c:a0:e8:3b:42:57:9e:24:88: 8d:9c:8c:71:fb:71:20:43:57:77:da:e6:c2:20:be: 5c:f0:39:b8:2a:0c:3d:99:80:65:ab:92:7e:9e:fb: e2:91:f7:68:a1:ef:7d:5b:d1:58:ff:ff:76:c1:09: 59:8b:e6:4f:a8:2f:f0:6d:36:1f:a1:2c:a4:b9:77: 45:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:39:08:B3:35:B1:E7:27:1A:51:33:63:BE:BF:04:2A:08:99:84:ED X509v3 Authority Key Identifier: keyid:53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:64:9f:4f:9b:77:21:96:58:55:dc:03:59:92:b8:60:9c:61: c9:52:11:e1:1e:d8:e7:b4:8e:94:b1:49:36:bc:37:65:76:f9: 6e:a1:c5:3e:78:28:2e:d8:87:73:c3:e2:bf:78:c3:76:e4:1f: c1:c3:f0:34:59:d6:07:81:ce:2b:8e:cd:6a:0e:a7:d3:ad:3c: 05:37:73:56:6e:aa:53:66:b4:75:ab:5f:d0:1f:3c:17:53:0a: e1:22:66:f0:cf:4c:df:c6:4c:f0:90:26:20:5c:43:2f:26:7c: dc:79:91:bd:a1:05:b7:81:2f:35:86:87:59:8a:15:c9:ee:84: 1c:9a:49:32:07:6c:6e:d5:7a:a3:9d:e8:ac:9e:27:20:d2:12: c9:81:77:0e:11:bc:41:62:f4:1a:3f:f9:f9:fa:f4:2d:4b:84: 14:de:a9:26:6d:26:d9:81:7b:7d:e0:f1:2e:c4:e2:c3:23:30: 31:f2:ff:da:cb:ef:23:f6:00:d5:8c:4b:a0:ea:cb:cb:59:48: 5c:28:b6:ee:5c:fe:f4:ed:e1:2b:19:4b:7f:85:95:3f:d2:f0: d0:d3:b0:d7:29:7c:2b:4a:fc:79:a2:a7:1b:65:d7:0e:e7:f5: 99:a8:48:23:3a:1e:00:d3:bc:63:7c:c0:90:dd:0a:07:e3:7c: 8b:35:f7:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAoy7BzUvQJ1qPbA5YPsX8twWWgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5 QkNDNEY2QjAeFw0yNTEwMTkwMDU2MzdaFw0yNTEwMjIwNzE1MzdaMDMxMTAvBgNV BAMTKEZFMzkwOEIzMzVCMUU3MjcxQTUxMzM2M0JFQkYwNDJBMDg5OTg0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqAa1Tw5D/o3wSg6RLnD049l8X 6KfSXQ9Uc9IcdLzghIwM7iLcXHEfvSW69IVIKjGujGoE83H+nJs/MUaUzjeKdp8e CptkVdPpG603PC42d6onK8Di8vkhfBUZiqvy0cy6AgtCLTR3cJPejOjv8fKGmFfE q8vfsn5kygETIW9iaLWv3rgbKzy7e5Kaqkr8cndZbbVk5ff5t4hG8s/nlREjRfJ/ UiDIs9E12SRZEFbrq51/7wKkH7MocFyg6DtCV54kiI2cjHH7cSBDV3fa5sIgvlzw ObgqDD2ZgGWrkn6e++KR92ih731b0Vj//3bBCVmL5k+oL/BtNh+hLKS5d0VpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/jkIszWx5ycaUTNjvr8EKgiZhO0wHwYDVR0j BBgwFoAUUxNXQ81Z60OJVP62UaXZLZvMT2swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGQ4ZGEyZC1hNTA2LTQ3NjMtYmMzYy1lMjgwYmY3NTE3YTQvMC81MzEzNTc0M0NE NTlFQjQzODk1NEZFQjY1MUE1RDkyRDlCQ0M0RjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5QkND NEY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkOGRhMmQtYTUwNi00NzYzLWJj M2MtZTI4MGJmNzUxN2E0LzAvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5 MkQ5QkNDNEY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINkn0+bdyGWWFXcA1mSuGCcYclSEeEe2Oe0 jpSxSTa8N2V2+W6hxT54KC7Yh3PD4r94w3bkH8HD8DRZ1geBziuOzWoOp9OtPAU3 c1ZuqlNmtHWrX9AfPBdTCuEiZvDPTN/GTPCQJiBcQy8mfNx5kb2hBbeBLzWGh1mK FcnuhByaSTIHbG7VeqOd6KyeJyDSEsmBdw4RvEFi9Bo/+fn69C1LhBTeqSZtJtmB e33g8S7E4sMjMDHy/9rL7yP2ANWMS6Dqy8tZSFwotu5c/vTt4SsZS3+FlT/S8NDT sNcpfCtK/Hmipxtl1w7n9ZmoSCM6HgDTvGN8wJDdCgfjfIs192E= -----END CERTIFICATE-----Generated at Sun Oct 19 17:54:10 2025 by rpki-client