$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft File: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json) Hash identifier: +OFGA4OiAFn/vTd9RY3fzbTKI/2IxCoNjtUZ+qu57ig= Subject key identifier: 18:7D:FA:74:7B:CA:F5:2F:3D:98:53:73:3E:E2:A7:93:E6:01:07:DF Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 68B3E487F63C0466C8C0C4BC925761144BE89043 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft Manifest number: 0216 Signing time: Wed 05 Nov 2025 02:01:18 +0000 Manifest this update: Wed 05 Nov 2025 01:56:18 +0000 Manifest next update: Sat 08 Nov 2025 04:06:18 +0000 Files and hashes: 1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=) 2: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: 1z7fXoq7TCNAC8pssbgNZ6U4ZfduGHqsqFOdDejiVXc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 04:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:b3:e4:87:f6:3c:04:66:c8:c0:c4:bc:92:57:61:14:4b:e8:90:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: Nov 5 01:56:18 2025 GMT Not After : Nov 8 04:06:18 2025 GMT Subject: CN=187DFA747BCAF52F3D9853733EE2A793E60107DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:c8:d6:63:10:23:d9:37:c5:67:4e:75:49: bc:bc:a0:75:2d:8e:0d:c4:bc:7b:2a:b3:2e:65:a4: d2:33:98:54:51:66:f8:22:ce:d0:ee:5a:50:87:2c: 7a:e5:60:20:83:25:6b:b7:c9:6b:4e:7c:ad:72:11: f9:f3:c4:b5:ba:ca:88:ff:34:23:e6:67:5e:5a:71: f2:5e:75:f8:72:5d:4b:2d:70:10:1b:27:a9:36:05: 56:ca:96:22:d1:8e:c1:b7:f3:41:3c:d5:6b:49:09: 51:13:4c:81:a9:98:2b:94:af:f0:f6:81:c3:94:06: 87:bb:0d:5e:7b:1c:da:96:73:23:0c:4b:b9:bd:c1: df:9c:1f:ca:a5:56:28:47:a3:b1:09:b5:91:09:80: 05:80:30:7f:79:e9:bb:1e:84:b7:39:09:86:3c:79: dd:47:2f:45:85:da:e8:f3:41:49:e0:39:2a:a7:58: 55:75:5d:ba:cf:de:e5:16:4f:36:91:0d:91:1d:53: c4:bd:8f:2d:16:2d:4a:cf:79:98:0c:83:16:0d:e7: a1:2e:b0:af:d1:b7:da:5b:05:3b:64:fc:c1:1f:1d: 6b:47:ed:16:27:cb:ad:f1:bb:0f:ff:ee:4c:50:0b: cc:40:6c:90:93:5b:f5:4d:88:21:bd:d4:25:00:46: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7D:FA:74:7B:CA:F5:2F:3D:98:53:73:3E:E2:A7:93:E6:01:07:DF X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b6:45:ff:32:ac:01:e1:a4:6c:26:49:01:38:b4:a4:66:3b: 50:39:8d:22:76:3d:c1:91:a1:9f:91:a0:ed:53:0d:fe:3c:c5: c1:64:8f:1b:fd:23:4c:fb:1d:6d:28:32:9c:ff:1d:50:3b:ce: 26:b9:22:2c:87:86:25:42:cf:2f:68:5d:87:73:cb:c1:c4:17: a0:0f:51:bf:29:95:a3:29:a2:a6:00:ee:f1:65:ac:4a:2e:d8: 39:cd:b4:d2:b1:c6:8b:5a:e2:5e:13:04:06:ff:a9:8d:07:e7: e4:f8:a4:b6:46:bd:df:ff:ca:e6:36:b0:b5:d4:a3:f2:46:ff: f4:91:b7:24:28:34:83:79:31:ce:5a:af:58:23:77:11:fb:2b: 56:27:fc:6e:93:43:da:51:ff:83:1b:4e:45:ce:f5:22:13:d5: 2e:ea:78:69:a8:14:9c:7f:a4:7a:93:71:d6:5f:c2:93:66:77: 7a:fe:0c:05:c3:53:3b:fe:e4:0a:05:f1:a3:09:86:50:03:ba: 12:f5:6c:f1:02:1a:ef:55:86:d9:f9:46:7c:f0:35:b0:43:44: 9c:39:75:eb:39:8e:ed:a5:8a:2f:3a:3b:37:01:c9:50:4d:39: a6:c4:9c:28:f0:ca:c7:fa:d5:e8:91:e3:8b:66:39:db:17:9f: bd:33:73:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaLPkh/Y8BGbIwMS8kldhFEvokEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yNTExMDUwMTU2MThaFw0yNTExMDgwNDA2MThaMDMxMTAvBgNV BAMTKDE4N0RGQTc0N0JDQUY1MkYzRDk4NTM3MzNFRTJBNzkzRTYwMTA3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDILsjWYxAj2TfFZ051Sby8oHUt jg3EvHsqsy5lpNIzmFRRZvgiztDuWlCHLHrlYCCDJWu3yWtOfK1yEfnzxLW6yoj/ NCPmZ15acfJedfhyXUstcBAbJ6k2BVbKliLRjsG380E81WtJCVETTIGpmCuUr/D2 gcOUBoe7DV57HNqWcyMMS7m9wd+cH8qlVihHo7EJtZEJgAWAMH956bsehLc5CYY8 ed1HL0WF2ujzQUngOSqnWFV1XbrP3uUWTzaRDZEdU8S9jy0WLUrPeZgMgxYN56Eu sK/Rt9pbBTtk/MEfHWtH7RYny63xuw//7kxQC8xAbJCTW/VNiCG91CUARlWrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGH36dHvK9S89mFNzPuKnk+YBB98wHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy ZmItOTk4ZTAxODU0NTUxLzAvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAy N0U4RDFFQkFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm2Rf8yrAHhpGwmSQE4tKRmO1A5jSJ2PcGR oZ+RoO1TDf48xcFkjxv9I0z7HW0oMpz/HVA7zia5IiyHhiVCzy9oXYdzy8HEF6AP Ub8plaMpoqYA7vFlrEou2DnNtNKxxota4l4TBAb/qY0H5+T4pLZGvd//yuY2sLXU o/JG//SRtyQoNIN5Mc5ar1gjdxH7K1Yn/G6TQ9pR/4MbTkXO9SIT1S7qeGmoFJx/ pHqTcdZfwpNmd3r+DAXDUzv+5AoF8aMJhlADuhL1bPECGu9Vhtn5RnzwNbBDRJw5 des5ju2lii86OzcByVBNOabEnCjwysf61eiR44tmOdsXn70zc18= -----END CERTIFICATE-----Generated at Wed Nov 5 06:55:04 2025 by rpki-client