$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: meXNh540SruWoOy/+nf9jZdFIUz1KVidOR0tUm+ljhE= Subject key identifier: B1:63:80:F8:2B:A5:9D:C2:DF:FD:F9:B0:1E:D0:7C:2F:84:14:FB:9C Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 2C812B4DD305DA08946A6163E92C2FCD0F93CB52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: 71 Signing time: Thu 01 May 2025 07:32:11 +0000 Manifest this update: Thu 01 May 2025 07:27:11 +0000 Manifest next update: Sun 04 May 2025 18:16:11 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: 6EIwOeG8wnGhepTYGXZ+EjCisca+UhZALkDiRfdLpb8=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: 8/2hNS7guiTYFXlr56GlGjm1J2B86v7siNi30CfEDuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 18:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:81:2b:4d:d3:05:da:08:94:6a:61:63:e9:2c:2f:cd:0f:93:cb:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: May 1 07:27:11 2025 GMT Not After : May 4 18:16:11 2025 GMT Subject: CN=B16380F82BA59DC2DFFDF9B01ED07C2F8414FB9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:de:58:e5:08:b0:90:fd:dd:02:b1:0e:a8: f8:f3:39:ab:7e:57:0b:87:b3:10:d4:bb:72:64:b7: a4:eb:91:a1:c2:56:e2:5d:1b:2c:76:da:f8:39:ea: 92:dc:51:ff:51:77:3e:99:be:c3:fc:76:a9:0f:42: 2c:55:a9:ad:98:1f:b8:7a:0c:d1:11:71:34:dd:5b: 1d:4f:e4:d1:b9:5a:5a:e3:2e:49:8b:bd:b2:0d:17: af:fd:96:a2:32:11:34:c2:5d:1a:4c:7c:9c:85:99: f6:61:ec:07:9f:49:95:65:87:13:9b:28:e6:cb:27: 6c:f7:9f:90:a1:b2:82:13:84:e2:70:13:62:33:69: 0b:87:c4:18:bd:9b:a2:22:69:5c:5a:71:d2:d0:97: 10:a5:ea:9a:df:aa:71:a3:5b:c8:18:1d:fe:0c:e3: 48:44:6b:a9:96:ec:44:a6:d2:ff:28:84:b3:be:a0: ad:dd:a5:fb:3e:67:66:12:99:2a:e9:b0:b3:79:19: 31:be:5a:ef:6f:15:3e:9c:db:62:db:1b:f3:b2:3b: d2:3e:6f:d4:0d:03:df:6a:21:76:0b:eb:a2:f1:a4: 3b:15:f6:42:cd:d8:25:23:bc:1a:0a:78:8e:e4:ce: 38:9c:4f:e9:0a:2c:4c:b9:5b:7e:68:69:61:4b:7d: 9f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:63:80:F8:2B:A5:9D:C2:DF:FD:F9:B0:1E:D0:7C:2F:84:14:FB:9C X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4b:e0:39:9a:7d:91:8d:99:ea:85:c9:85:35:27:f2:f9:75: fb:b3:86:6e:74:20:41:57:4b:bc:70:08:ad:4e:94:02:23:bf: eb:6e:b7:11:4c:2f:68:07:40:44:50:41:b5:03:4d:fb:2f:14: a8:4e:42:57:fa:b3:fc:6d:53:f3:63:bd:34:bd:30:06:65:f2: b0:ee:e2:55:41:95:29:17:a6:e8:12:d5:18:75:21:3d:2b:f8: 97:21:ab:58:91:f4:e6:e3:3e:79:3b:81:9c:32:b3:20:fc:aa: 81:66:4c:bf:f8:4f:84:71:66:5a:59:86:0c:47:c0:5c:94:39: fd:c9:b3:84:34:0b:cf:62:25:30:d7:ee:5c:d4:59:d6:a3:6f: 22:9c:ef:68:2c:b1:7a:e3:8d:55:32:d9:4b:70:fd:80:24:fd: 4d:c2:50:c2:2b:2d:c5:78:a3:f4:37:f7:6f:42:57:86:1e:70: 05:77:4c:e1:f9:9f:bc:c0:b3:46:66:4a:5b:ee:9e:5b:74:49: 17:27:6a:5d:71:96:f2:df:51:e8:25:db:11:9d:c4:62:0e:82: 1f:36:34:82:51:cb:1f:d3:91:d9:87:db:68:ef:2e:3b:f0:bb: 72:8d:99:26:5c:bf:32:e7:8c:cf:8e:27:c6:dc:56:f1:32:c5: c6:45:eb:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULIErTdMF2giUamFj6SwvzQ+Ty1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTA1MDEwNzI3MTFaFw0yNTA1MDQxODE2MTFaMDMxMTAvBgNV BAMTKEIxNjM4MEY4MkJBNTlEQzJERkZERjlCMDFFRDA3QzJGODQxNEZCOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXC95Y5QiwkP3dArEOqPjzOat+ VwuHsxDUu3Jkt6TrkaHCVuJdGyx22vg56pLcUf9Rdz6ZvsP8dqkPQixVqa2YH7h6 DNERcTTdWx1P5NG5WlrjLkmLvbINF6/9lqIyETTCXRpMfJyFmfZh7AefSZVlhxOb KObLJ2z3n5ChsoIThOJwE2IzaQuHxBi9m6IiaVxacdLQlxCl6prfqnGjW8gYHf4M 40hEa6mW7ESm0v8ohLO+oK3dpfs+Z2YSmSrpsLN5GTG+Wu9vFT6c22LbG/OyO9I+ b9QNA99qIXYL66LxpDsV9kLN2CUjvBoKeI7kzjicT+kKLEy5W35oaWFLfZ/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsWOA+CulncLf/fmwHtB8L4QU+5wwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZL4DmafZGNmeqFyYU1J/L5dfuzhm50IEFX S7xwCK1OlAIjv+tutxFML2gHQERQQbUDTfsvFKhOQlf6s/xtU/NjvTS9MAZl8rDu 4lVBlSkXpugS1Rh1IT0r+Jchq1iR9ObjPnk7gZwysyD8qoFmTL/4T4RxZlpZhgxH wFyUOf3Js4Q0C89iJTDX7lzUWdajbyKc72gssXrjjVUy2Utw/YAk/U3CUMIrLcV4 o/Q3929CV4YecAV3TOH5n7zAs0ZmSlvunlt0SRcnal1xlvLfUegl2xGdxGIOgh82 NIJRyx/TkdmH22jvLjvwu3KNmSZcvzLnjM+OJ8bcVvEyxcZF64Q= -----END CERTIFICATE-----Generated at Fri May 2 01:13:27 2025 by rpki-client