$ rpki-client -vvf repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft File: 3053FFA7A0123B032FC9458281063C89F007FA98.mft (raw, json) Hash identifier: WqQGLaol62l23COpgmH4Kz/2V8R4IX2vrQtTDttiAjE= Subject key identifier: 4D:8A:B0:9C:7D:62:E5:A8:A9:90:D8:04:88:EF:A8:AE:67:79:58:C6 Authority key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 Certificate issuer: /CN=3053FFA7A0123B032FC9458281063C89F007FA98 Certificate serial: 625675628E0D6ADE7126616306F5648BFAAEC8FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft Manifest number: 0374 Signing time: Tue 05 Aug 2025 09:31:25 +0000 Manifest this update: Tue 05 Aug 2025 09:26:25 +0000 Manifest next update: Fri 08 Aug 2025 20:36:25 +0000 Files and hashes: 1: 3130332e3136382e3138382e302f32332d3234203d3e203137393935.roa (hash: X8fSVyl/ekaFc0qdxtX72tyLH/RXxnJtVkW2HtewxfI=) 2: 3053FFA7A0123B032FC9458281063C89F007FA98.crl (hash: Ziciuov8c3DD5JwjeHAiM96GVHFqHjuKxNpR8/HJQqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:56:75:62:8e:0d:6a:de:71:26:61:63:06:f5:64:8b:fa:ae:c8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3053FFA7A0123B032FC9458281063C89F007FA98 Validity Not Before: Aug 5 09:26:25 2025 GMT Not After : Aug 8 20:36:25 2025 GMT Subject: CN=4D8AB09C7D62E5A8A990D80488EFA8AE677958C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:f8:ae:86:b3:bd:be:3e:fd:2c:45:7a:98: 2a:32:7b:45:b2:50:9b:5b:d5:26:51:fc:0d:75:4e: 8f:56:fd:6d:9a:91:26:05:f8:e4:ca:fa:7e:b8:9a: e4:cf:36:76:57:ef:58:e5:8f:ff:f1:82:85:77:06: af:b3:ad:69:56:32:5a:d8:26:cf:4d:50:c0:92:d8: d0:e1:c1:d2:4d:c6:05:7b:26:ff:c8:b8:29:a9:f9: 48:11:12:1d:69:8b:62:fb:1f:17:0b:94:47:11:a7: 6c:e1:ac:38:02:62:15:8b:37:02:6e:10:7f:14:76: df:3a:02:ea:55:d7:19:58:33:e4:04:5e:7f:f8:c4: 84:a4:2f:76:65:81:74:93:3e:b2:89:11:b6:37:e7: ec:df:d7:28:bf:bc:22:d5:91:80:ee:fb:1c:b8:8b: bb:d6:59:9e:31:e8:af:85:da:8a:45:05:53:f6:40: 03:6a:ae:df:28:8d:46:3d:a8:17:33:ff:8a:f2:21: ae:78:41:dc:65:78:1f:cc:1a:87:f4:1f:4a:2e:b2: c4:1a:e5:0e:26:21:2e:01:3e:02:d1:9d:ca:01:04: 7c:27:6e:a3:91:fc:6f:1b:43:f6:83:88:e3:78:77: 87:17:eb:22:e4:8c:57:39:b0:c2:b8:1c:b1:87:df: 11:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8A:B0:9C:7D:62:E5:A8:A9:90:D8:04:88:EF:A8:AE:67:79:58:C6 X509v3 Authority Key Identifier: keyid:30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ec:c0:7e:cf:2c:02:d2:03:02:50:5e:7f:00:c6:10:f4:e4: a9:b2:55:96:d2:55:78:3f:d6:9b:61:b2:ef:05:a8:f6:0b:b1: 7a:53:fe:da:78:df:28:25:dd:6b:f6:2c:7b:68:20:f8:5a:80: 0e:c8:49:8d:56:d5:1b:4b:1e:b1:a4:07:00:4d:58:71:6c:89: 45:aa:4b:fa:da:5d:69:e6:31:ba:ec:c4:69:af:9b:60:de:a9: 9c:20:cd:a8:a5:9b:3b:c5:cc:f0:96:34:7f:a9:ac:6d:b6:a2: 3e:f6:19:e8:c3:be:46:4d:af:cf:7b:d0:e9:db:df:ee:1a:18: f1:fe:3f:6c:6a:7d:61:a4:ed:b4:05:0b:be:1c:0a:d5:3d:88: 78:07:0a:5d:f2:22:32:91:b7:8e:ff:59:71:d6:f5:8d:bf:58: 53:77:7a:94:c7:1d:c5:8b:26:cd:0d:12:3d:71:03:2e:33:b2: 7e:48:3d:a3:7b:46:bb:0a:5a:09:05:0d:e5:c2:7a:45:a0:8c: 8c:9e:22:bc:56:ec:3d:43:91:af:3b:80:b5:4b:6d:94:66:19: 0e:5f:62:f4:4f:29:c4:7d:58:00:b2:8a:e4:16:6b:5f:58:37: 71:1a:aa:a7:b3:93:7b:e0:7f:99:c4:5d:27:e1:ab:47:f7:14: 2e:20:1d:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYlZ1Yo4Nat5xJmFjBvVki/quyP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlG MDA3RkE5ODAeFw0yNTA4MDUwOTI2MjVaFw0yNTA4MDgyMDM2MjVaMDMxMTAvBgNV BAMTKDREOEFCMDlDN0Q2MkU1QThBOTkwRDgwNDg4RUZBOEFFNjc3OTU4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDPiuhrO9vj79LEV6mCoye0Wy UJtb1SZR/A11To9W/W2akSYF+OTK+n64muTPNnZX71jlj//xgoV3Bq+zrWlWMlrY Js9NUMCS2NDhwdJNxgV7Jv/IuCmp+UgREh1pi2L7HxcLlEcRp2zhrDgCYhWLNwJu EH8Udt86AupV1xlYM+QEXn/4xISkL3ZlgXSTPrKJEbY35+zf1yi/vCLVkYDu+xy4 i7vWWZ4x6K+F2opFBVP2QANqrt8ojUY9qBcz/4ryIa54QdxleB/MGof0H0oussQa 5Q4mIS4BPgLRncoBBHwnbqOR/G8bQ/aDiON4d4cX6yLkjFc5sMK4HLGH3xHXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTYqwnH1i5aipkNgEiO+ormd5WMYwHwYDVR0j BBgwFoAUMFP/p6ASOwMvyUWCgQY8ifAH+pgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmRiNGNiOC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMC8zMDUzRkZBN0Ew MTIzQjAzMkZDOTQ1ODI4MTA2M0M4OUYwMDdGQTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjNDODlGMDA3 RkE5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkYjRjYjgtZmFlYS00NTMwLWIy OWUtMGI3YTRhZmZjMzE2LzAvMzA1M0ZGQTdBMDEyM0IwMzJGQzk0NTgyODEwNjND ODlGMDA3RkE5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHswH7PLALSAwJQXn8AxhD05KmyVZbSVXg/ 1pthsu8FqPYLsXpT/tp43ygl3Wv2LHtoIPhagA7ISY1W1RtLHrGkBwBNWHFsiUWq S/raXWnmMbrsxGmvm2DeqZwgzailmzvFzPCWNH+prG22oj72GejDvkZNr8970Onb 3+4aGPH+P2xqfWGk7bQFC74cCtU9iHgHCl3yIjKRt47/WXHW9Y2/WFN3epTHHcWL Js0NEj1xAy4zsn5IPaN7RrsKWgkFDeXCekWgjIyeIrxW7D1Dka87gLVLbZRmGQ5f YvRPKcR9WACyiuQWa19YN3Eaqqezk3vgf5nEXSfhq0f3FC4gHUY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:22 2025 by rpki-client