$ rpki-client -vvf repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.mft (raw, json) Hash identifier: kUGt9TLYsxmaBWgs8SE/kEIykrfphO3kEds8VYI/Pn0= Subject key identifier: 14:EA:7E:BB:2B:DF:D9:DB:82:1F:01:20:8E:49:51:F1:5D:CB:9A:89 Authority key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Certificate issuer: /CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Certificate serial: 02FAAE34A85690E7E9B109098C9BDEE7C219F640 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft Manifest number: 015E Signing time: Tue 04 Nov 2025 20:10:41 +0000 Manifest this update: Tue 04 Nov 2025 20:05:41 +0000 Manifest next update: Sat 08 Nov 2025 02:24:41 +0000 Files and hashes: 1: 53576544C2D7C29DEC5245A4A81C19686D1160AA.crl (hash: SY2E+ZYoCtjzye/g8ozf5THZ9J/XO1rKEum2l0SBrCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:fa:ae:34:a8:56:90:e7:e9:b1:09:09:8c:9b:de:e7:c2:19:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Validity Not Before: Nov 4 20:05:41 2025 GMT Not After : Nov 8 02:24:41 2025 GMT Subject: CN=14EA7EBB2BDFD9DB821F01208E4951F15DCB9A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ed:d8:e5:17:e1:15:8e:18:37:bf:87:c9:95: f7:b9:35:8b:b5:c3:e0:f8:4e:65:81:1a:fa:41:99: 0b:76:57:9c:4f:a0:ed:8f:f5:2c:eb:e9:0d:b2:89: 95:f6:89:ca:f1:c0:0d:17:fd:74:65:78:98:be:43: 21:39:46:74:4a:72:d8:17:b5:96:87:04:43:52:9c: 96:96:04:d1:c5:05:34:02:3b:da:4c:85:44:38:1c: 09:bd:56:f9:4e:4b:da:40:92:e7:7f:af:51:df:e0: 59:22:09:da:44:ff:4b:5b:eb:9f:d6:51:21:ac:bc: dd:c6:9d:9e:d1:96:e6:72:98:f2:d7:b9:78:50:39: 1f:ea:00:b8:4e:21:27:17:94:43:7d:40:f6:84:48: 20:51:59:bd:25:16:43:73:21:eb:9a:1f:c5:d7:48: 1a:f7:fb:db:33:39:d7:80:0f:35:e1:89:7a:89:2a: 0c:28:88:dd:83:8f:07:71:8a:12:16:30:3e:25:92: 06:50:20:c9:ef:2a:f7:74:f0:08:c9:0c:f9:62:76: 02:1e:50:b8:74:3b:c1:84:bf:4a:f8:e8:41:f8:c0: 6c:04:ad:6d:0e:3c:e6:ee:ad:f8:c3:4a:e0:96:05: 18:4f:35:03:ad:1d:93:64:5d:e4:aa:a8:94:25:8f: bc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EA:7E:BB:2B:DF:D9:DB:82:1F:01:20:8E:49:51:F1:5D:CB:9A:89 X509v3 Authority Key Identifier: keyid:53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:6a:75:69:d3:ba:7f:f4:a7:ff:26:0c:10:74:67:dc:89:ad: 04:df:b8:4d:b4:72:ea:0e:d1:54:78:cc:92:39:ea:53:20:03: ea:23:e8:d3:d1:69:1f:d0:e8:34:9d:dc:21:64:62:d4:2e:44: 4c:cb:3b:5c:50:1b:86:9a:69:7e:f5:df:dc:6c:9c:90:5d:50: 35:cd:a8:69:46:46:d6:d9:85:1a:45:4b:ed:a7:5a:0b:25:56: 29:9e:4e:09:7c:f9:71:66:02:b0:49:b7:f0:62:fe:5a:23:d0: 06:37:c6:52:ce:df:86:b2:1a:80:0f:44:38:22:4e:6e:87:a5: ca:92:92:fd:12:54:56:6f:94:6c:aa:b2:d3:94:f9:69:8e:52: 44:bf:8d:32:13:ca:4c:6c:75:2d:1f:12:59:75:c7:24:26:09: 0a:6f:a1:b8:37:49:26:bd:64:8e:00:f5:40:82:4b:e4:30:ba: 6f:28:c3:96:82:37:64:d8:41:8a:0f:e9:2a:ef:93:f2:1c:9a: e8:ac:d7:87:2f:57:af:e1:e7:90:f1:e8:7e:2e:4c:b8:66:62: 8e:b9:20:0e:5e:0f:e1:1b:e7:0f:fc:e6:11:a2:76:31:9d:a4: 47:02:fe:e0:00:84:1e:5c:58:13:a1:76:a8:f7:c8:33:41:d6: 4e:66:28:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvquNKhWkOfpsQkJjJve58IZ9kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2 RDExNjBBQTAeFw0yNTExMDQyMDA1NDFaFw0yNTExMDgwMjI0NDFaMDMxMTAvBgNV BAMTKDE0RUE3RUJCMkJERkQ5REI4MjFGMDEyMDhFNDk1MUYxNURDQjlBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7djlF+EVjhg3v4fJlfe5NYu1 w+D4TmWBGvpBmQt2V5xPoO2P9Szr6Q2yiZX2icrxwA0X/XRleJi+QyE5RnRKctgX tZaHBENSnJaWBNHFBTQCO9pMhUQ4HAm9VvlOS9pAkud/r1Hf4FkiCdpE/0tb65/W USGsvN3GnZ7RluZymPLXuXhQOR/qALhOIScXlEN9QPaESCBRWb0lFkNzIeuaH8XX SBr3+9szOdeADzXhiXqJKgwoiN2DjwdxihIWMD4lkgZQIMnvKvd08AjJDPlidgIe ULh0O8GEv0r46EH4wGwErW0OPOburfjDSuCWBRhPNQOtHZNkXeSqqJQlj7x9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOp+uyvf2duCHwEgjklR8V3LmokwHwYDVR0j BBgwFoAUU1dlRMLXwp3sUkWkqBwZaG0RYKowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMC81MzU3NjU0NEMy RDdDMjlERUM1MjQ1QTRBODFDMTk2ODZEMTE2MEFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5Njg2RDEx NjBBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTE3ZWEwZTYtNDNlYS00MzFlLWEw MTMtMGIyMDFiMmMwZDllLzAvNTM1NzY1NDRDMkQ3QzI5REVDNTI0NUE0QTgxQzE5 Njg2RDExNjBBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5qdWnTun/0p/8mDBB0Z9yJrQTfuE20cuoO 0VR4zJI56lMgA+oj6NPRaR/Q6DSd3CFkYtQuREzLO1xQG4aaaX7139xsnJBdUDXN qGlGRtbZhRpFS+2nWgslVimeTgl8+XFmArBJt/Bi/loj0AY3xlLO34ayGoAPRDgi Tm6HpcqSkv0SVFZvlGyqstOU+WmOUkS/jTITykxsdS0fEll1xyQmCQpvobg3SSa9 ZI4A9UCCS+Qwum8ow5aCN2TYQYoP6Srvk/Icmuis14cvV6/h55Dx6H4uTLhmYo65 IA5eD+Eb5w/85hGidjGdpEcC/uAAhB5cWBOhdqj3yDNB1k5mKFM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:09:30 2025 by rpki-client