$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft File: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft (raw, json) Hash identifier: mpIq20L+mQLwkc9PNp9SUXUNMMBMUtZoZTx1tmstjwE= Subject key identifier: 72:7F:C9:29:5F:B2:5A:B2:EC:F1:AD:58:1C:17:51:11:03:E5:B9:FA Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 690F557DA270DBA346A246F462EF81136EDBBBEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft Manifest number: 04F9 Signing time: Wed 06 Aug 2025 09:21:34 +0000 Manifest this update: Wed 06 Aug 2025 09:16:34 +0000 Manifest next update: Sat 09 Aug 2025 17:22:34 +0000 Files and hashes: 1: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: gI7OgYv6GfwsEVRaXvd5tRlYtRW/gCZ+OwdOGTRV5w8=) 2: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl (hash: u1K3U6mTOThuXFt5aSyAGvrauk2PMsRCR7BHWmojBBA=) 3: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: N2YGkCBG++ItZbATxx+8Wnv+w5mJADtnDrbFxCasjwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0f:55:7d:a2:70:db:a3:46:a2:46:f4:62:ef:81:13:6e:db:bb:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: Aug 6 09:16:34 2025 GMT Not After : Aug 9 17:22:34 2025 GMT Subject: CN=727FC9295FB25AB2ECF1AD581C17511103E5B9FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:48:59:d8:74:13:f3:37:a0:4e:5e:f3:76:37: 6b:a6:db:89:07:38:fb:82:9b:e4:51:4e:98:14:0a: f2:3e:94:95:83:a4:a3:4c:fc:68:6c:04:2c:ea:30: a0:62:7f:68:03:a6:01:7c:53:e8:a1:d4:1a:4d:44: c7:33:51:ed:d7:54:7e:aa:ec:73:62:a0:95:94:ee: 8b:44:7e:1c:e4:03:21:af:8c:51:d9:4c:42:16:13: 9f:e3:03:1f:87:0d:c3:6d:2a:02:cc:cb:5b:8d:c0: 67:3d:3c:2c:f4:68:fc:e0:7f:41:06:1c:84:d8:e4: 7a:df:68:94:c5:0c:e6:54:f7:03:5a:86:a5:11:25: 94:b0:ed:6b:00:07:a7:72:af:7b:54:d3:48:7f:54: 7c:d6:c4:9c:c6:09:f8:d8:30:96:85:4d:cb:d7:f4: f2:f5:56:05:37:1d:58:c8:75:54:80:11:4b:88:10: 95:30:17:b6:0d:7a:96:63:ed:7e:15:32:3d:a8:94: 39:07:f0:00:6f:86:35:87:b7:32:55:d9:02:08:02: 2a:3d:57:35:8c:48:2a:6e:a0:9c:4b:74:7b:94:87: c8:bb:83:7b:43:b3:0d:86:9d:2a:9b:96:bf:9f:73: e0:9e:b0:ee:09:27:04:ee:14:81:e5:a9:63:54:76: b7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7F:C9:29:5F:B2:5A:B2:EC:F1:AD:58:1C:17:51:11:03:E5:B9:FA X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:6c:b7:3c:fa:a4:58:75:55:90:e1:18:7d:08:e6:dc:fe:cd: 37:10:6b:6e:b5:e9:e9:cc:56:6e:a9:9a:70:ea:62:7a:11:db: e3:65:3c:03:b0:0e:74:21:90:34:3f:38:be:b9:23:53:60:d1: 1a:ea:5c:b4:c5:4c:15:e9:3e:62:1a:28:9c:33:fe:eb:3f:6d: c5:a6:31:63:eb:50:3c:76:39:3c:aa:d4:f6:a4:56:d6:8c:b7: 3a:dd:c1:c4:51:ed:74:b2:02:17:5c:5c:e6:e2:a7:97:4e:73: 2f:07:68:44:2e:70:4d:39:5c:17:0c:0d:13:70:2d:64:9b:22: b9:21:3d:9d:42:dc:b8:eb:c4:37:f3:22:5e:ca:05:35:19:3c: a7:ee:2f:92:f5:d3:fe:34:f5:c9:73:18:a7:ba:7a:a8:8d:31: 9d:8d:f6:d4:e4:78:22:99:6e:bb:d9:60:58:4c:7b:ba:f6:92: 68:73:97:5e:7d:df:02:2a:b9:42:c5:81:f2:dd:08:ed:38:16: 80:b6:8c:6a:16:f8:69:cd:5c:29:a6:c7:1e:51:e0:c0:e5:91: 27:f5:4e:c2:43:d6:f4:d1:db:21:0a:a6:12:73:46:93:69:99: 5d:aa:d2:b8:7e:77:e8:0f:67:47:9d:f9:a1:05:e6:4f:15:da: c1:12:f6:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQ9VfaJw26NGokb0Yu+BE27bu+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNTA4MDYwOTE2MzRaFw0yNTA4MDkxNzIyMzRaMDMxMTAvBgNV BAMTKDcyN0ZDOTI5NUZCMjVBQjJFQ0YxQUQ1ODFDMTc1MTExMDNFNUI5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCSFnYdBPzN6BOXvN2N2um24kH OPuCm+RRTpgUCvI+lJWDpKNM/GhsBCzqMKBif2gDpgF8U+ih1BpNRMczUe3XVH6q 7HNioJWU7otEfhzkAyGvjFHZTEIWE5/jAx+HDcNtKgLMy1uNwGc9PCz0aPzgf0EG HITY5HrfaJTFDOZU9wNahqURJZSw7WsAB6dyr3tU00h/VHzWxJzGCfjYMJaFTcvX 9PL1VgU3HVjIdVSAEUuIEJUwF7YNepZj7X4VMj2olDkH8ABvhjWHtzJV2QIIAio9 VzWMSCpuoJxLdHuUh8i7g3tDsw2GnSqblr+fc+CesO4JJwTuFIHlqWNUdrfNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcn/JKV+yWrLs8a1YHBdREQPlufowHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUz QkQwNThEQTEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZstzz6pFh1VZDhGH0I5tz+zTcQa2616enM Vm6pmnDqYnoR2+NlPAOwDnQhkDQ/OL65I1Ng0RrqXLTFTBXpPmIaKJwz/us/bcWm MWPrUDx2OTyq1PakVtaMtzrdwcRR7XSyAhdcXObip5dOcy8HaEQucE05XBcMDRNw LWSbIrkhPZ1C3LjrxDfzIl7KBTUZPKfuL5L10/409clzGKe6eqiNMZ2N9tTkeCKZ brvZYFhMe7r2kmhzl1593wIquULFgfLdCO04FoC2jGoW+GnNXCmmxx5R4MDlkSf1 TsJD1vTR2yEKphJzRpNpmV2q0rh+d+gPZ0ed+aEF5k8V2sES9oc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:37:55 2025 by rpki-client