$ rpki-client -vvf repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft File: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft (raw, json) Hash identifier: QDvg1BkZLNVrxfCMZQABlB9GrB7IcUny3vsN9i42HbU= Subject key identifier: 2A:11:10:9D:8D:75:7B:0F:86:1F:55:48:6C:91:12:64:41:DC:0B:00 Authority key identifier: 53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B Certificate issuer: /CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Certificate serial: 13B88979E8E8E6C95D06F27A8A47B2E3BC9DB639 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft Manifest number: 0147 Signing time: Tue 04 Nov 2025 03:41:36 +0000 Manifest this update: Tue 04 Nov 2025 03:36:36 +0000 Manifest next update: Fri 07 Nov 2025 11:28:36 +0000 Files and hashes: 1: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl (hash: OnSOT3OzGhZ66UzNsXv8trMclOcEkzz7I7si/2rPb+w=) 2: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: 6UY/R+UdRsBhwgNfBVY0MjOGp2DSj7k+K0sc21L+Is0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b8:89:79:e8:e8:e6:c9:5d:06:f2:7a:8a:47:b2:e3:bc:9d:b6:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Validity Not Before: Nov 4 03:36:36 2025 GMT Not After : Nov 7 11:28:36 2025 GMT Subject: CN=2A11109D8D757B0F861F55486C91126441DC0B00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d6:83:89:7a:93:4e:7c:5a:67:25:6e:74:06: d5:66:59:49:2d:a0:9d:98:0f:39:ac:30:60:46:12: bb:17:6c:49:7f:db:70:95:07:78:3a:8f:5c:d4:99: 08:93:73:c5:e5:6b:02:4b:c4:12:9f:a9:70:ec:37: 11:97:00:88:28:6a:28:5d:6a:d8:d5:df:f0:5b:f4: 8f:8c:6d:33:54:d0:59:c4:92:c8:eb:1b:50:d9:06: 32:80:1f:e9:4e:8c:bd:98:f2:33:a7:5e:a4:fe:2e: cc:a6:87:54:e5:39:37:e9:c0:95:40:d2:ad:5c:d9: 90:65:48:1d:63:3f:f5:75:1c:32:c1:5f:77:76:f1: db:f0:88:49:37:f6:52:73:dc:0e:16:c0:7f:0c:4d: f2:20:c4:99:e1:9d:bb:43:90:f9:21:4c:df:2a:19: 40:9e:64:d0:8f:73:55:16:b0:29:f9:b2:a7:7c:6f: d5:76:f6:55:34:ff:3e:30:23:6c:29:19:b4:13:0d: 81:1c:aa:6b:96:c3:f4:7d:a6:8b:52:ee:8a:a3:fe: 40:8a:0e:dc:92:9e:cd:aa:d5:e6:ff:91:f5:8b:c1: 11:a1:0e:52:54:90:37:fd:79:af:e8:92:43:14:c2: b2:36:0a:63:26:f0:61:17:68:a5:47:5e:e7:76:68: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:11:10:9D:8D:75:7B:0F:86:1F:55:48:6C:91:12:64:41:DC:0B:00 X509v3 Authority Key Identifier: keyid:53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:cd:82:0c:10:0a:73:ad:06:3c:d7:e8:80:b9:b3:6b:30:38: 98:50:74:12:2d:b7:72:37:37:78:bd:0d:ed:2a:a3:f9:95:bd: 94:98:79:73:ee:07:29:72:b7:04:ce:73:7d:fc:f2:7b:5b:6a: 4e:00:7a:94:26:c6:b2:3e:31:9d:00:6f:4c:aa:59:5b:e6:83: cf:1e:44:4a:96:52:3b:30:d5:6e:26:c8:b3:20:a9:3b:0d:0b: bc:22:dc:6f:b0:da:a2:6e:6e:11:dc:29:fd:bf:d9:b3:fd:2f: 9e:89:4c:b5:4e:6d:30:96:a0:b3:44:ef:70:65:f3:82:d3:2a: 71:9f:e4:7b:69:5f:a6:4b:7a:32:b3:c2:f6:e4:7a:3d:5d:be: e5:e0:f2:a8:d7:74:c6:fa:f7:f8:96:3f:e5:49:37:fe:ff:cd: 16:fa:66:12:6c:4c:fd:54:2d:0a:e0:21:8d:8e:b6:c9:50:86: 29:4f:a8:bd:dd:40:ea:24:7d:27:e0:fc:c0:40:a6:52:40:a1: 17:6b:c9:cd:77:0c:d3:6c:7f:72:d6:e8:05:ee:36:09:8f:5b: 62:2c:e0:b8:25:fc:f0:98:55:0d:2d:11:ef:32:c7:5c:5a:20: 72:81:e8:38:fb:54:20:47:58:94:e7:64:3c:63:0a:3b:b4:b4: c0:87:03:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7iJeejo5sldBvJ6ikey47ydtjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5 QkNDNEY2QjAeFw0yNTExMDQwMzM2MzZaFw0yNTExMDcxMTI4MzZaMDMxMTAvBgNV BAMTKDJBMTExMDlEOEQ3NTdCMEY4NjFGNTU0ODZDOTExMjY0NDFEQzBCMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs1oOJepNOfFpnJW50BtVmWUkt oJ2YDzmsMGBGErsXbEl/23CVB3g6j1zUmQiTc8XlawJLxBKfqXDsNxGXAIgoaihd atjV3/Bb9I+MbTNU0FnEksjrG1DZBjKAH+lOjL2Y8jOnXqT+Lsymh1TlOTfpwJVA 0q1c2ZBlSB1jP/V1HDLBX3d28dvwiEk39lJz3A4WwH8MTfIgxJnhnbtDkPkhTN8q GUCeZNCPc1UWsCn5sqd8b9V29lU0/z4wI2wpGbQTDYEcqmuWw/R9potS7oqj/kCK DtySns2q1eb/kfWLwRGhDlJUkDf9ea/okkMUwrI2CmMm8GEXaKVHXud2aMaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKhEQnY11ew+GH1VIbJESZEHcCwAwHwYDVR0j BBgwFoAUUxNXQ81Z60OJVP62UaXZLZvMT2swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGQ4ZGEyZC1hNTA2LTQ3NjMtYmMzYy1lMjgwYmY3NTE3YTQvMC81MzEzNTc0M0NE NTlFQjQzODk1NEZFQjY1MUE1RDkyRDlCQ0M0RjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5QkND NEY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkOGRhMmQtYTUwNi00NzYzLWJj M2MtZTI4MGJmNzUxN2E0LzAvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5 MkQ5QkNDNEY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLNggwQCnOtBjzX6IC5s2swOJhQdBItt3I3 N3i9De0qo/mVvZSYeXPuBylytwTOc3388ntbak4AepQmxrI+MZ0Ab0yqWVvmg88e REqWUjsw1W4myLMgqTsNC7wi3G+w2qJubhHcKf2/2bP9L56JTLVObTCWoLNE73Bl 84LTKnGf5HtpX6ZLejKzwvbkej1dvuXg8qjXdMb69/iWP+VJN/7/zRb6ZhJsTP1U LQrgIY2OtslQhilPqL3dQOokfSfg/MBAplJAoRdryc13DNNsf3LW6AXuNgmPW2Is 4Lgl/PCYVQ0tEe8yx1xaIHKB6Dj7VCBHWJTnZDxjCju0tMCHA5A= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:14 2025 by rpki-client