$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft File: D1553F19BBD3B70719E720005FDB3145CC910A1F.mft (raw, json) Hash identifier: fwdW17t4bFPZOww70QE8Ql+JOSb/6BmQsPwapafCwmM= Subject key identifier: 78:41:DA:FE:B1:C1:9F:A0:72:97:D1:B2:20:56:C9:D5:69:2F:33:41 Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F Certificate issuer: /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Certificate serial: 695BD4E1E17E6E07D64167E33152F3ACD8B12468 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft Manifest number: 0253 Signing time: Mon 03 Nov 2025 13:30:37 +0000 Manifest this update: Mon 03 Nov 2025 13:25:37 +0000 Manifest next update: Thu 06 Nov 2025 19:39:37 +0000 Files and hashes: 1: D1553F19BBD3B70719E720005FDB3145CC910A1F.crl (hash: rU93GDwVIorAdesyAZI/i55CxkcQUlkSZMwI7Xwn1oA=) 2: 3130332e3138332e35392e302f32342d3234203d3e20313439343039.roa (hash: vMllDWXQKOFp/LXz2039GVQEOHmucr5NlyL4beN8AaE=) 3: 3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (hash: wDDHmfXbcVqw0smbG6As8acn9RHt973MQSaDFYdjQNM=) 4: 3130332e3138332e35382e302f32342d3234203d3e20313439343039.roa (hash: VbrMhF5/NgCAVgxme528zhOBb1Z3HAdEz6QJSucgsYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:5b:d4:e1:e1:7e:6e:07:d6:41:67:e3:31:52:f3:ac:d8:b1:24:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F Validity Not Before: Nov 3 13:25:37 2025 GMT Not After : Nov 6 19:39:37 2025 GMT Subject: CN=7841DAFEB1C19FA07297D1B22056C9D5692F3341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:a7:5e:52:ae:f0:a9:a3:6b:36:43:c7:42: 43:9b:bc:a7:56:4d:28:13:49:33:73:71:cf:b4:08: 66:c7:b9:b5:11:f0:82:88:a0:3f:bf:bb:2f:04:48: 63:7f:1c:ba:39:3f:3b:4f:86:55:12:a8:1f:cd:e2: 92:03:d9:00:3e:52:5d:59:5d:ba:96:d4:be:03:88: 64:3b:38:16:f8:16:60:52:7e:4a:9e:59:e6:5e:81: 5a:81:74:0d:32:4e:9c:2c:be:60:32:14:b7:ad:9a: b9:67:ff:dd:ac:1a:ea:f3:49:d7:28:d0:14:0d:96: 7a:f4:36:ca:e1:b1:21:7e:d0:ea:25:2a:a2:27:b4: 0f:91:f2:bf:80:c8:4a:e7:08:71:cd:8c:71:af:f2: 6d:c7:02:1d:43:2a:49:63:0d:17:5b:4c:c5:82:56: 10:47:20:a5:75:99:bf:01:79:17:56:2c:6a:bf:44: 9f:6d:36:6d:4f:e5:ce:3f:d6:4e:26:2c:65:c0:95: e6:8d:93:20:6e:64:46:0a:88:29:f6:23:fa:77:42: 6a:52:3d:ee:a9:f3:f3:51:9a:b0:68:0c:32:e8:a4: 16:2c:2f:c1:34:e8:e1:4a:8d:49:6e:b5:35:cd:6a: dd:c6:21:51:06:7e:9c:c8:81:61:c2:0a:6b:0b:69: ff:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:41:DA:FE:B1:C1:9F:A0:72:97:D1:B2:20:56:C9:D5:69:2F:33:41 X509v3 Authority Key Identifier: keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:67:26:21:e5:8f:eb:3a:c5:92:ea:19:a1:40:72:20:77:da: dd:8a:64:a4:8f:68:04:5d:2e:21:23:7b:db:44:ee:ff:e4:49: e9:d0:a1:25:93:86:3b:ee:2c:bc:2d:99:4d:d6:10:71:49:db: dc:53:69:78:c0:e4:a1:3a:29:8f:6a:e7:eb:9b:96:f0:53:c7: 24:a5:60:35:1f:f7:df:a7:b5:cc:e6:ef:82:86:4e:19:64:d6: 9b:d5:74:23:06:ab:a2:67:0c:a3:ba:bc:d8:c7:1a:c3:29:45: 71:e8:08:c0:a0:3d:39:e2:84:1c:7f:6a:da:46:7f:00:3a:d2: 6f:b1:55:9c:5f:3d:d0:e6:52:dc:07:96:6e:08:b8:52:8d:71: 56:9b:66:02:f9:15:de:3f:80:2f:9f:e1:1c:c1:fb:8d:52:fb: 28:29:a8:af:4c:f1:c1:13:66:2d:b7:14:c5:8f:aa:31:3b:f8: 02:ca:18:df:0b:70:b7:b3:55:26:c9:f2:f7:9a:bf:5e:9b:d8: 61:d4:e7:a0:75:1d:a2:7f:1f:41:db:1b:90:d1:a1:65:28:76: 13:c7:59:a1:d5:33:b3:bd:a6:64:a4:27:99:d5:ff:20:23:4e: c4:3b:37:45:ad:77:03:bd:ee:ce:dc:d7:39:0b:73:01:90:6c: 38:54:16:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaVvU4eF+bgfWQWfjMVLzrNixJGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVD QzkxMEExRjAeFw0yNTExMDMxMzI1MzdaFw0yNTExMDYxOTM5MzdaMDMxMTAvBgNV BAMTKDc4NDFEQUZFQjFDMTlGQTA3Mjk3RDFCMjIwNTZDOUQ1NjkyRjMzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC83qdeUq7wqaNrNkPHQkObvKdW TSgTSTNzcc+0CGbHubUR8IKIoD+/uy8ESGN/HLo5PztPhlUSqB/N4pID2QA+Ul1Z XbqW1L4DiGQ7OBb4FmBSfkqeWeZegVqBdA0yTpwsvmAyFLetmrln/92sGurzSdco 0BQNlnr0NsrhsSF+0OolKqIntA+R8r+AyErnCHHNjHGv8m3HAh1DKkljDRdbTMWC VhBHIKV1mb8BeRdWLGq/RJ9tNm1P5c4/1k4mLGXAleaNkyBuZEYKiCn2I/p3QmpS Pe6p8/NRmrBoDDLopBYsL8E06OFKjUlutTXNat3GIVEGfpzIgWHCCmsLaf8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeEHa/rHBn6Byl9GyIFbJ1WkvM0EwHwYDVR0j BBgwFoAU0VU/GbvTtwcZ5yAAX9sxRcyRCh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTliNjA0Zi0xNTc4LTRhMGItOGY3YS01OGQ5ZjEzYzk3NjkvMC9EMTU1M0YxOUJC RDNCNzA3MTlFNzIwMDA1RkRCMzE0NUNDOTEwQTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMxNDVDQzkx MEExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk5YjYwNGYtMTU3OC00YTBiLThm N2EtNThkOWYxM2M5NzY5LzAvRDE1NTNGMTlCQkQzQjcwNzE5RTcyMDAwNUZEQjMx NDVDQzkxMEExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFnJiHlj+s6xZLqGaFAciB32t2KZKSPaARd LiEje9tE7v/kSenQoSWThjvuLLwtmU3WEHFJ29xTaXjA5KE6KY9q5+ublvBTxySl YDUf99+ntczm74KGThlk1pvVdCMGq6JnDKO6vNjHGsMpRXHoCMCgPTnihBx/atpG fwA60m+xVZxfPdDmUtwHlm4IuFKNcVabZgL5Fd4/gC+f4RzB+41S+ygpqK9M8cET Zi23FMWPqjE7+ALKGN8LcLezVSbJ8veav16b2GHU56B1HaJ/H0HbG5DRoWUodhPH WaHVM7O9pmSkJ5nV/yAjTsQ7N0WtdwO97s7c1zkLcwGQbDhUFrE= -----END CERTIFICATE-----Generated at Wed Nov 5 16:38:00 2025 by rpki-client