$ rpki-client -vvf repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft File: D296B71263A794DB76A99329A0A6CD91F03F997C.mft (raw, json) Hash identifier: R8iQFmaZZp1HBLU8reP6LKUOvdKarWnm65MTgWycumI= Subject key identifier: 8C:11:00:91:32:7A:BA:B3:66:1C:4C:F9:97:92:4C:C5:48:49:19:D5 Authority key identifier: D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C Certificate issuer: /CN=D296B71263A794DB76A99329A0A6CD91F03F997C Certificate serial: 56B5E8D339157F0FA807CFE3CAF0C28AA1C48177 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft Manifest number: 051E Signing time: Mon 03 Nov 2025 15:00:03 +0000 Manifest this update: Mon 03 Nov 2025 14:55:03 +0000 Manifest next update: Fri 07 Nov 2025 01:35:03 +0000 Files and hashes: 1: 3230332e3230372e35322e302f32322d3234203d3e203138333531.roa (hash: GkkNG9FcAuiztsaFs7LArOPHFVmugjMRyr9b42+liyc=) 2: 3130332e3233312e3130382e302f32322d3234203d3e203138333531.roa (hash: H/9gUkMoKOxaM6bJMIhdfazqxPd02FQG7yEvZqg/6f4=) 3: D296B71263A794DB76A99329A0A6CD91F03F997C.crl (hash: HYNpW92Tzh1ZrhPk3F251wIBPqYymYf2eZJLspg65+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b5:e8:d3:39:15:7f:0f:a8:07:cf:e3:ca:f0:c2:8a:a1:c4:81:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D296B71263A794DB76A99329A0A6CD91F03F997C Validity Not Before: Nov 3 14:55:03 2025 GMT Not After : Nov 7 01:35:03 2025 GMT Subject: CN=8C110091327ABAB3661C4CF997924CC5484919D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:d9:10:60:15:5e:79:0a:45:22:a1:b0:ec: 58:ff:74:c6:2d:8f:f6:80:aa:0f:7e:71:77:ac:fb: 11:b9:08:88:92:4b:ce:b9:1b:fb:8c:c0:b5:79:00: 2c:b6:1e:57:48:b0:26:5f:31:81:4f:a3:cd:55:ae: a4:f2:07:24:7b:1f:4d:e3:3b:55:7a:dd:60:c6:d1: f1:c2:45:06:f8:5c:8f:f8:ce:54:17:2d:b0:44:07: 6b:51:0e:c6:5d:79:dc:77:0b:c8:24:02:e0:32:6e: df:fc:9f:75:4b:c8:5a:5e:34:04:d7:78:6a:cd:ec: 0a:0a:be:7d:5d:cc:28:73:77:45:99:ed:ed:95:64: b4:79:47:4e:f8:23:41:20:2b:16:b4:c4:82:9d:6a: c8:96:be:79:54:15:c3:8f:da:08:8b:15:c4:0a:2e: ae:60:b1:28:a5:1a:8f:48:fd:c6:e7:82:89:cc:3e: 8d:fc:d2:fa:8d:2d:23:36:6d:69:c9:8e:e9:88:d5: 46:d5:bd:70:61:66:c1:ed:f1:2b:b5:48:9f:2b:56: cc:ed:b4:4e:e6:c8:34:3d:b1:fe:0d:b8:be:8b:40: fb:6b:2a:09:41:31:d7:e5:62:94:f1:d9:63:86:f5: e6:c4:63:f4:4e:62:24:94:1f:a0:d9:e2:cb:20:4c: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:11:00:91:32:7A:BA:B3:66:1C:4C:F9:97:92:4C:C5:48:49:19:D5 X509v3 Authority Key Identifier: keyid:D2:96:B7:12:63:A7:94:DB:76:A9:93:29:A0:A6:CD:91:F0:3F:99:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D296B71263A794DB76A99329A0A6CD91F03F997C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53f75e98-14ef-4457-94f3-e5b73a922fc5/0/D296B71263A794DB76A99329A0A6CD91F03F997C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:54:fc:0b:14:84:bf:62:7b:19:24:92:0e:f4:ec:18:e2:d8: a6:9a:0d:95:f4:62:b7:a8:a5:73:9e:58:dc:8c:0e:28:a8:64: bb:6b:38:b4:8d:7f:82:1a:b3:bc:ae:bb:89:bc:fc:f1:db:08: b5:ac:f1:1d:a0:ad:d9:b9:71:a5:a6:af:05:b7:d4:74:68:fb: 2e:a3:ce:69:57:91:69:71:b4:d4:fb:54:f0:12:6d:b2:bf:0b: 23:87:77:f7:06:3e:6e:0f:ae:ff:26:24:3b:a6:cf:9d:5e:c2: 44:02:64:2b:05:ea:8c:9a:ee:31:ef:2f:61:54:c3:86:c3:dc: db:aa:7f:60:9e:f7:70:a1:07:42:b5:8b:9f:4a:b0:eb:bb:96: ad:4e:cc:fe:03:93:96:f6:dd:19:8c:0c:0e:76:88:bd:2f:02: 69:2f:1a:5c:b7:f6:fb:be:43:8e:8a:3f:e0:1f:b4:26:e0:2d: 02:03:91:ad:94:cb:98:f2:43:a0:06:71:2a:6d:04:8d:8c:4e: 36:fc:d6:d9:30:a8:4c:d6:4f:1b:2b:c9:3f:b3:e2:9a:13:d3: 85:7d:51:39:61:09:bc:49:69:d2:9a:83:46:ec:e8:39:96:22: cc:5d:b3:13:ba:e6:9f:bc:2e:29:43:56:8f:c3:c0:32:fb:7d: 83:32:cf:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrXo0zkVfw+oB8/jyvDCiqHEgXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFG MDNGOTk3QzAeFw0yNTExMDMxNDU1MDNaFw0yNTExMDcwMTM1MDNaMDMxMTAvBgNV BAMTKDhDMTEwMDkxMzI3QUJBQjM2NjFDNENGOTk3OTI0Q0M1NDg0OTE5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbX9kQYBVeeQpFIqGw7Fj/dMYt j/aAqg9+cXes+xG5CIiSS865G/uMwLV5ACy2HldIsCZfMYFPo81VrqTyByR7H03j O1V63WDG0fHCRQb4XI/4zlQXLbBEB2tRDsZdedx3C8gkAuAybt/8n3VLyFpeNATX eGrN7AoKvn1dzChzd0WZ7e2VZLR5R074I0EgKxa0xIKdasiWvnlUFcOP2giLFcQK Lq5gsSilGo9I/cbngonMPo380vqNLSM2bWnJjumI1UbVvXBhZsHt8Su1SJ8rVszt tE7myDQ9sf4NuL6LQPtrKglBMdflYpTx2WOG9ebEY/ROYiSUH6DZ4ssgTO7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjBEAkTJ6urNmHEz5l5JMxUhJGdUwHwYDVR0j BBgwFoAU0pa3EmOnlNt2qZMpoKbNkfA/mXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2Y3NWU5OC0xNGVmLTQ0NTctOTRmMy1lNWI3M2E5MjJmYzUvMC9EMjk2QjcxMjYz QTc5NERCNzZBOTkzMjlBMEE2Q0Q5MUYwM0Y5OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNEOTFGMDNG OTk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNmNzVlOTgtMTRlZi00NDU3LTk0 ZjMtZTViNzNhOTIyZmM1LzAvRDI5NkI3MTI2M0E3OTREQjc2QTk5MzI5QTBBNkNE OTFGMDNGOTk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxU/AsUhL9iexkkkg707Bji2KaaDZX0Yreo pXOeWNyMDiioZLtrOLSNf4Ias7yuu4m8/PHbCLWs8R2grdm5caWmrwW31HRo+y6j zmlXkWlxtNT7VPASbbK/CyOHd/cGPm4Prv8mJDumz51ewkQCZCsF6oya7jHvL2FU w4bD3Nuqf2Ce93ChB0K1i59KsOu7lq1OzP4Dk5b23RmMDA52iL0vAmkvGly39vu+ Q46KP+AftCbgLQIDka2Uy5jyQ6AGcSptBI2MTjb81tkwqEzWTxsryT+z4poT04V9 UTlhCbxJadKag0bs6DmWIsxdsxO65p+8LilDVo/DwDL7fYMyz+0= -----END CERTIFICATE-----Generated at Wed Nov 5 22:13:48 2025 by rpki-client