$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft File: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json) Hash identifier: 5syw13+9fPU9JQDVnMVtYSKFc3NmMD7ZU+j+hB4hW0g= Subject key identifier: 81:B4:86:30:0A:56:9B:4E:DD:7C:1A:AB:7F:5B:5F:59:2C:22:40:D3 Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 5A3DBAFF3E7A15428F48F725CA3C2861EB76A563 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft Manifest number: 01EE Signing time: Tue 05 Aug 2025 10:21:17 +0000 Manifest this update: Tue 05 Aug 2025 10:16:17 +0000 Manifest next update: Fri 08 Aug 2025 13:37:17 +0000 Files and hashes: 1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=) 2: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: V7nqiH2lPA4cg/Y6dU5slmzPQXPmrPozYiWT/+hViEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3d:ba:ff:3e:7a:15:42:8f:48:f7:25:ca:3c:28:61:eb:76:a5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: Aug 5 10:16:17 2025 GMT Not After : Aug 8 13:37:17 2025 GMT Subject: CN=81B486300A569B4EDD7C1AAB7F5B5F592C2240D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fe:51:37:5d:51:9b:2e:a9:99:13:36:5c:f5: dc:83:94:5d:41:ac:67:c9:32:01:95:d9:2d:a4:7a: e3:0d:56:1d:11:7e:e2:86:23:67:2e:1c:40:a2:0e: 1d:21:18:0a:06:a9:e7:e5:79:02:bd:83:ca:7e:f1: ce:83:69:c8:ef:ff:b5:c9:26:83:9c:cf:61:c4:74: d3:66:a7:cc:a0:0b:df:1e:09:2f:fe:ac:f2:71:18: a6:f9:db:be:2f:b5:eb:5f:56:b0:0b:12:f1:85:69: 9c:69:17:e3:2b:7e:98:4b:e3:da:38:67:0f:d0:dd: a2:1f:5e:4f:e4:f3:8d:23:94:e2:4f:bc:d8:46:fe: 28:a3:31:40:9a:44:66:46:57:13:fc:71:ff:8f:3b: 53:43:fa:50:ee:c2:ce:51:ee:d9:cc:8a:f4:c5:2d: b3:2c:62:01:73:ba:6e:c0:5d:d2:ca:b0:f7:8c:79: 55:63:7a:d6:bb:a7:e4:42:ec:69:79:e8:ab:ea:39: a6:88:52:c1:a3:c0:1d:a2:77:cd:48:08:a2:60:48: 6d:f9:c2:41:41:33:b2:5b:e0:d2:78:dd:ba:f4:6d: 09:62:fb:b0:51:1a:b5:d5:16:da:84:81:68:4f:0e: 80:b1:9d:4f:92:2b:7a:c5:26:93:ed:05:30:48:cd: 6d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B4:86:30:0A:56:9B:4E:DD:7C:1A:AB:7F:5B:5F:59:2C:22:40:D3 X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:83:22:ea:38:2c:b8:49:25:47:a0:63:c3:6f:14:4a:0c:79: 48:99:41:3f:d8:d5:03:a7:a6:c3:18:f6:64:6e:b3:f0:51:45: 4a:66:5a:b6:99:c5:13:77:d2:c7:c1:6f:52:1a:93:df:ad:fd: 74:b9:0e:e7:c7:38:f9:d1:01:40:e9:b5:9d:0a:97:fe:9d:d5: 9e:08:a8:b0:31:6a:28:49:a9:7c:3c:41:92:17:20:e3:a3:d0: 3d:72:37:a9:31:ff:4c:ab:30:9c:c2:6d:2f:4b:9f:2f:58:6f: 8b:ff:14:cd:17:f4:de:62:69:8d:c6:e8:b1:ed:94:74:d4:02: 7d:1a:08:1e:ca:e8:56:57:76:7f:64:b2:6f:37:af:07:1a:8e: 49:44:34:da:73:a0:ad:a5:73:eb:97:0c:0c:d3:0a:95:63:28: 1a:cd:61:7d:28:61:b8:1f:6b:3d:f4:6b:08:6a:39:f3:ba:e3: 30:5f:e8:29:26:7f:6a:95:53:ee:d0:78:cb:1f:0f:50:88:9c: 98:29:34:e7:27:54:ad:aa:78:66:0f:59:1f:e1:3a:ac:8d:cb: f8:01:aa:85:f3:b7:21:0a:78:cd:21:48:26:ee:25:e2:c4:e3: a2:a5:75:5d:76:55:ca:0b:de:c3:2b:67:32:4b:7b:cd:cf:e6: 07:24:a9:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWj26/z56FUKPSPclyjwoYet2pWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yNTA4MDUxMDE2MTdaFw0yNTA4MDgxMzM3MTdaMDMxMTAvBgNV BAMTKDgxQjQ4NjMwMEE1NjlCNEVERDdDMUFBQjdGNUI1RjU5MkMyMjQwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn/lE3XVGbLqmZEzZc9dyDlF1B rGfJMgGV2S2keuMNVh0RfuKGI2cuHECiDh0hGAoGqefleQK9g8p+8c6Dacjv/7XJ JoOcz2HEdNNmp8ygC98eCS/+rPJxGKb5274vtetfVrALEvGFaZxpF+MrfphL49o4 Zw/Q3aIfXk/k840jlOJPvNhG/iijMUCaRGZGVxP8cf+PO1ND+lDuws5R7tnMivTF LbMsYgFzum7AXdLKsPeMeVVjeta7p+RC7Gl56KvqOaaIUsGjwB2id81ICKJgSG35 wkFBM7Jb4NJ43br0bQli+7BRGrXVFtqEgWhPDoCxnU+SK3rFJpPtBTBIzW3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgbSGMApWm07dfBqrf1tfWSwiQNMwHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy ZmItOTk4ZTAxODU0NTUxLzAvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAy N0U4RDFFQkFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmDIuo4LLhJJUegY8NvFEoMeUiZQT/Y1QOn psMY9mRus/BRRUpmWraZxRN30sfBb1Iak9+t/XS5DufHOPnRAUDptZ0Kl/6d1Z4I qLAxaihJqXw8QZIXIOOj0D1yN6kx/0yrMJzCbS9Lny9Yb4v/FM0X9N5iaY3G6LHt lHTUAn0aCB7K6FZXdn9ksm83rwcajklENNpzoK2lc+uXDAzTCpVjKBrNYX0oYbgf az30awhqOfO64zBf6Ckmf2qVU+7QeMsfD1CInJgpNOcnVK2qeGYPWR/hOqyNy/gB qoXztyEKeM0hSCbuJeLE46KldV12VcoL3sMrZzJLe83P5gckqTo= -----END CERTIFICATE-----Generated at Wed Aug 6 12:31:34 2025 by rpki-client