$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json) Hash identifier: To+vxu+7dsqK7gyjXoQz1c5dKCn8h8D0RMIpzzAvdPA= Subject key identifier: D7:FA:FA:8C:77:BD:48:CB:BE:5E:29:B9:A2:E4:9B:FE:0C:0C:63:2F Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98 Certificate serial: 23D4C7BCB3D6D4E0AB0E96BB5C3792F7BC076BA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft Manifest number: 039C Signing time: Wed 05 Nov 2025 03:01:26 +0000 Manifest this update: Wed 05 Nov 2025 02:56:26 +0000 Manifest next update: Sat 08 Nov 2025 07:53:26 +0000 Files and hashes: 1: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: pDSd1sipryHJI1WKKjXIHHKOypTsnzT6j+RuKm6khwI=) 2: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 07:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d4:c7:bc:b3:d6:d4:e0:ab:0e:96:bb:5c:37:92:f7:bc:07:6b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98 Validity Not Before: Nov 5 02:56:26 2025 GMT Not After : Nov 8 07:53:26 2025 GMT Subject: CN=D7FAFA8C77BD48CBBE5E29B9A2E49BFE0C0C632F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:9f:a3:b7:06:a8:6c:df:b6:a0:63:0b:47: f5:29:70:c8:2c:6f:1c:1f:51:fc:28:5a:bb:2d:a2: 96:36:fb:85:e8:54:ab:b8:51:6e:84:01:2d:13:7e: 2e:18:b0:da:b4:73:5a:36:da:8a:db:8f:fc:c4:bd: 12:3a:8f:c0:0b:47:48:3d:41:a0:78:e0:fe:40:7e: 11:49:bc:1a:28:20:61:56:94:6c:83:26:27:08:50: c6:0e:1f:ae:2a:12:0d:29:84:a4:dd:a4:09:5c:fe: cc:a4:ea:09:38:91:1b:b9:66:bf:a8:79:39:56:23: 77:b0:45:74:61:20:be:ed:96:d8:24:94:d2:71:d2: cb:df:2e:1e:69:3c:21:96:fe:97:a1:b4:64:93:24: ed:36:fa:4f:e6:78:70:7a:aa:ec:60:fe:53:a6:47: b7:8b:6d:b3:fe:45:22:d8:f4:87:15:da:f5:4e:19: c8:84:e8:94:dc:ab:41:92:f4:a0:52:76:26:9d:37: 1e:a2:f0:5f:fb:1b:22:51:35:02:a9:71:c6:ba:14: 13:48:c6:0b:75:e3:22:fa:af:ae:cb:e6:e8:3f:9f: 93:e6:60:9c:c2:f2:bc:83:16:af:81:0b:f0:cb:03: c3:cb:ce:ad:d2:f1:c4:bf:59:1a:1f:4b:32:7d:c0: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FA:FA:8C:77:BD:48:CB:BE:5E:29:B9:A2:E4:9B:FE:0C:0C:63:2F X509v3 Authority Key Identifier: keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:75:26:b1:5e:58:e6:77:54:bb:45:8a:fa:93:64:b2:b9:09: 91:56:e9:45:2d:04:f5:13:57:09:8c:e7:01:79:7a:95:4e:63: 9f:45:ac:3e:66:aa:52:34:85:f6:40:f5:50:40:96:a3:7d:9a: b7:94:47:bf:cd:e8:56:8f:a2:9d:61:45:62:12:1b:33:14:a3: 0a:63:71:5b:82:aa:4e:80:d4:8c:9d:4c:96:e0:90:19:c7:2d: 4c:60:54:62:3d:81:1f:06:6e:c5:bb:03:18:50:8f:1b:f9:03: 2a:c6:28:15:ff:4f:8b:30:67:79:aa:5a:25:54:e1:e6:b1:c0: 05:27:db:13:6c:9c:5a:53:78:90:9b:fd:8e:74:35:1c:ed:dc: 14:cb:91:af:48:92:13:e7:4d:7b:e9:36:98:d3:32:03:2a:33: 80:5c:d7:c5:b8:ab:ff:2e:96:86:a8:df:e0:b7:f2:ed:94:6b: 14:02:19:4f:38:f1:8d:92:05:08:15:32:bb:b6:fc:d2:1b:22: e2:16:e0:93:22:89:32:ac:34:1c:dd:46:b1:8c:d2:17:b4:f6: e3:c2:51:81:50:e5:13:dc:de:8f:ad:f3:5e:ad:4a:ad:c9:b1: 26:16:af:0f:c9:18:b4:90:9e:fb:14:c5:6b:12:45:76:b9:df: 47:54:85:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9THvLPW1OCrDpa7XDeS97wHa6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlG MDA3RkE5ODAeFw0yNTExMDUwMjU2MjZaFw0yNTExMDgwNzUzMjZaMDMxMTAvBgNV BAMTKEQ3RkFGQThDNzdCRDQ4Q0JCRTVFMjlCOUEyRTQ5QkZFMEMwQzYzMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KZ+jtwaobN+2oGMLR/UpcMgs bxwfUfwoWrstopY2+4XoVKu4UW6EAS0Tfi4YsNq0c1o22orbj/zEvRI6j8ALR0g9 QaB44P5AfhFJvBooIGFWlGyDJicIUMYOH64qEg0phKTdpAlc/syk6gk4kRu5Zr+o eTlWI3ewRXRhIL7tltgklNJx0svfLh5pPCGW/pehtGSTJO02+k/meHB6quxg/lOm R7eLbbP+RSLY9IcV2vVOGciE6JTcq0GS9KBSdiadNx6i8F/7GyJRNQKpcca6FBNI xgt14yL6r67L5ug/n5PmYJzC8ryDFq+BC/DLA8PLzq3S8cS/WRofSzJ9wLfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1/r6jHe9SMu+Xim5ouSb/gwMYy8wHwYDVR0j BBgwFoAUMFP/p6ASOwMvyUWCgQY8ifAH+pgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmRiNGNiOC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMC8zMDUzRkZBN0Ew MTIzQjAzMkZDOTQ1ODI4MTA2M0M4OUYwMDdGQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlGMDA3 RkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjND ODlGMDA3RkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGN1JrFeWOZ3VLtFivqTZLK5CZFW6UUtBPUT VwmM5wF5epVOY59FrD5mqlI0hfZA9VBAlqN9mreUR7/N6FaPop1hRWISGzMUowpj cVuCqk6A1IydTJbgkBnHLUxgVGI9gR8GbsW7AxhQjxv5AyrGKBX/T4swZ3mqWiVU 4eaxwAUn2xNsnFpTeJCb/Y50NRzt3BTLka9IkhPnTXvpNpjTMgMqM4Bc18W4q/8u loao3+C38u2UaxQCGU848Y2SBQgVMru2/NIbIuIW4JMiiTKsNBzdRrGM0he09uPC UYFQ5RPc3o+t816tSq3JsSYWrw/JGLSQnvsUxWsSRXa530dUhUw= -----END CERTIFICATE-----Generated at Wed Nov 5 11:42:34 2025 by rpki-client