$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: yR6KGmfknDNs9wGS7Ixxf6tNsLpho50Rr4F2aIoR51w= Subject key identifier: 86:33:72:13:CF:9C:5C:D2:19:B2:91:CB:E5:6E:67:DF:FD:00:9A:A0 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 2EEA9EFB1530FEFCF817DBBCDF8BD6EBCBD960B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: C2 Signing time: Sun 02 Nov 2025 02:12:16 +0000 Manifest this update: Sun 02 Nov 2025 02:07:15 +0000 Manifest next update: Wed 05 Nov 2025 12:53:15 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: ZQQV3JULCr9bBKdhDgTtnvwa3kLle7opmKgkvGWd4bI=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: p2JbTeALyG9aK8WKnnAwuAWEvzJMkTyQIFNlD05DkyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 12:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ea:9e:fb:15:30:fe:fc:f8:17:db:bc:df:8b:d6:eb:cb:d9:60:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Nov 2 02:07:15 2025 GMT Not After : Nov 5 12:53:15 2025 GMT Subject: CN=86337213CF9C5CD219B291CBE56E67DFFD009AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d9:a8:e1:eb:cb:d1:d4:d9:f9:5f:b2:22:4c: 06:33:07:46:01:ab:ec:29:cc:4e:e9:e3:c7:60:45: 0b:4c:45:c1:5e:19:03:ce:bf:39:f1:db:0b:46:13: f1:b1:db:6f:6a:8c:aa:a3:4a:b4:9b:ab:67:5b:6b: 67:f5:1e:47:b4:be:db:2c:38:82:5b:9b:31:40:43: d7:b7:c1:d5:3c:d5:0a:c3:c6:43:49:76:dd:06:e2: 6a:ed:cb:37:2f:34:10:8a:97:98:8b:b0:0d:3b:35: 61:0a:07:47:f6:c9:98:f6:65:5f:47:8f:01:87:5b: 06:56:11:61:35:06:40:8b:fa:bd:6f:56:3e:27:ed: c4:16:4b:1d:62:d1:2e:c2:bc:de:a8:70:e1:1d:bf: 35:72:d3:2c:5c:97:58:08:4d:80:0e:cd:f5:5d:35: cd:b7:f5:86:9b:4d:56:91:8c:bc:c7:58:6f:46:07: a1:4c:c8:f2:71:4f:93:6b:1f:a5:a9:6c:e6:f6:3d: 1b:b7:ef:84:3a:15:16:e6:0e:d9:f2:a7:54:d8:b3: 39:29:f5:66:99:d8:5e:bf:53:fe:24:f6:e9:0c:43: a0:40:28:b2:12:c6:76:7d:bc:90:8b:1c:1a:95:1c: c1:f0:3f:19:16:d7:97:fe:d7:fc:76:7e:30:44:aa: 0f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:33:72:13:CF:9C:5C:D2:19:B2:91:CB:E5:6E:67:DF:FD:00:9A:A0 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0e:74:63:dd:bb:ea:92:88:33:41:e5:93:50:37:8c:0c:b7: a8:e5:c4:d4:d5:0d:96:e0:de:6e:0e:db:49:d3:26:cf:ab:fa: 0a:a8:1b:ce:95:c6:69:6a:7e:1f:88:9f:dc:e0:01:e6:d7:e1: ae:03:d0:6b:b8:5e:65:fb:3d:9e:f9:a8:77:b0:2b:bd:2e:0d: 00:77:78:ba:ef:06:07:c6:9e:de:f9:b5:38:a9:55:10:bf:18: c0:5b:02:c8:21:9f:7d:da:de:7b:a3:e4:c6:49:56:69:96:0f: f7:a6:5b:4a:21:6b:ec:4b:28:99:f9:1a:d5:44:65:d4:8d:cf: 2e:c5:86:6d:a3:0e:74:ca:4f:b3:fb:5c:41:44:54:63:3b:88: 98:e5:7b:11:54:b1:0e:ca:c7:2d:ee:06:26:37:64:76:bf:29: d1:44:43:90:bf:ba:9b:f9:6a:b4:b3:25:be:ca:d0:91:95:eb: 7e:27:97:d4:b7:20:ab:44:60:95:c5:c2:4c:61:c5:ea:e8:b9: d3:8d:03:3a:c8:96:0e:04:11:9c:35:bc:5c:73:2d:0d:bb:e5: df:ef:f9:49:1c:13:78:03:3c:46:2d:85:b8:69:83:f6:b0:d6: b9:c5:17:f9:2a:9c:b9:76:6f:51:64:69:60:a2:bc:4e:84:0e: f8:72:84:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULuqe+xUw/vz4F9u834vW68vZYLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTExMDIwMjA3MTVaFw0yNTExMDUxMjUzMTVaMDMxMTAvBgNV BAMTKDg2MzM3MjEzQ0Y5QzVDRDIxOUIyOTFDQkU1NkU2N0RGRkQwMDlBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2ajh68vR1Nn5X7IiTAYzB0YB q+wpzE7p48dgRQtMRcFeGQPOvznx2wtGE/Gx229qjKqjSrSbq2dba2f1Hke0vtss OIJbmzFAQ9e3wdU81QrDxkNJdt0G4mrtyzcvNBCKl5iLsA07NWEKB0f2yZj2ZV9H jwGHWwZWEWE1BkCL+r1vVj4n7cQWSx1i0S7CvN6ocOEdvzVy0yxcl1gITYAOzfVd Nc239YabTVaRjLzHWG9GB6FMyPJxT5NrH6WpbOb2PRu374Q6FRbmDtnyp1TYszkp 9WaZ2F6/U/4k9ukMQ6BAKLISxnZ9vJCLHBqVHMHwPxkW15f+1/x2fjBEqg8HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhjNyE8+cXNIZspHL5W5n3/0AmqAwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgOdGPdu+qSiDNB5ZNQN4wMt6jlxNTVDZbg 3m4O20nTJs+r+gqoG86Vxmlqfh+In9zgAebX4a4D0Gu4XmX7PZ75qHewK70uDQB3 eLrvBgfGnt75tTipVRC/GMBbAsghn33a3nuj5MZJVmmWD/emW0oha+xLKJn5GtVE ZdSNzy7Fhm2jDnTKT7P7XEFEVGM7iJjlexFUsQ7Kxy3uBiY3ZHa/KdFEQ5C/upv5 arSzJb7K0JGV634nl9S3IKtEYJXFwkxhxeroudONAzrIlg4EEZw1vFxzLQ275d/v +UkcE3gDPEYthbhpg/aw1rnFF/kqnLl2b1FkaWCivE6EDvhyhAU= -----END CERTIFICATE-----Generated at Tue Nov 4 02:18:53 2025 by rpki-client