$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: vkx2R5t2gY/tXjZMj7jdN+3Ucb32EtQo+QEBTRi463Y= Subject key identifier: 1F:B8:C2:B2:A6:80:78:15:84:C5:33:7B:32:A3:24:9E:76:87:CD:34 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 44AD544EB131F5D55B8410D9D3202684D49F9A03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: 86 Signing time: Tue 17 Jun 2025 19:42:29 +0000 Manifest this update: Tue 17 Jun 2025 19:37:29 +0000 Manifest next update: Sat 21 Jun 2025 00:44:29 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: ze3JeS0yPJIwBX0oB+gsTbfzL1je5p0cl8HpayYMeeo=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: 8/2hNS7guiTYFXlr56GlGjm1J2B86v7siNi30CfEDuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 00:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ad:54:4e:b1:31:f5:d5:5b:84:10:d9:d3:20:26:84:d4:9f:9a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Jun 17 19:37:29 2025 GMT Not After : Jun 21 00:44:29 2025 GMT Subject: CN=1FB8C2B2A680781584C5337B32A3249E7687CD34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:15:bf:62:0c:04:d1:5d:64:64:92:32:a4: e4:ab:f6:d8:f9:48:c6:8e:99:ae:cd:e6:0b:dd:62: b5:3b:d8:cd:7f:4c:58:d7:b2:2a:b8:61:75:18:7f: 5e:31:f3:7c:41:2d:6a:5f:c3:68:46:b5:17:10:e3: c8:5d:c2:23:58:dc:d1:f8:02:53:9b:f5:66:82:d9: a1:ef:bb:0d:93:72:c7:ca:7b:ac:42:44:d9:7f:e3: 33:3c:35:e3:f1:be:a2:e1:dc:64:8f:a8:df:bd:3b: 94:80:21:23:8f:b8:ac:c2:0a:9e:76:df:07:12:95: 06:a6:6b:d5:9a:7c:62:e0:06:16:3f:c6:db:57:02: 68:22:f1:cc:e8:00:0d:cb:73:33:1a:8c:b8:80:e7: 6a:ed:2b:c4:fd:14:79:44:95:f3:8f:dd:3c:da:84: b8:af:db:46:d9:7c:1a:bd:06:fc:c5:29:a2:50:80: 84:d3:12:af:38:07:b3:3a:96:43:f3:a5:7e:45:5c: bc:60:ad:b9:8d:9b:92:8b:e5:67:76:78:bc:19:5a: 10:06:bb:71:c5:cd:57:6b:fb:98:5b:36:81:6c:88: f6:41:61:59:4b:96:55:0f:2b:3f:46:3a:f6:c4:17: a0:95:ed:f8:72:e1:04:2b:d4:d1:b4:38:81:29:95: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B8:C2:B2:A6:80:78:15:84:C5:33:7B:32:A3:24:9E:76:87:CD:34 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:b0:c8:33:fd:b5:55:54:57:3f:78:57:df:0e:c3:05:20:1d: 5b:6e:3a:6a:e4:3d:81:c1:a0:e0:c3:93:69:2a:38:0a:21:fe: 7e:2c:a6:6a:66:d1:fc:02:90:d5:6e:0d:34:e5:b7:fa:58:63: be:b2:00:fb:89:54:e5:6a:27:9b:36:29:2f:05:80:78:88:d9: fe:61:d2:65:07:03:76:bd:c5:c3:e4:7e:23:68:c7:90:ca:58: 28:d0:f1:f2:56:22:af:d6:49:ef:b2:4e:b5:3b:0d:23:a7:bb: 73:2a:46:7c:d8:45:e5:8a:94:27:a7:10:d0:49:b8:c0:9d:27: b7:aa:8a:e8:ce:79:f4:28:f0:10:0f:f9:a6:57:b5:9f:af:eb: e8:ca:bf:bf:03:f3:a4:38:5b:9e:5d:29:92:69:57:86:17:40: 85:c0:45:85:89:85:46:6b:02:80:a0:3a:4b:1d:99:ce:a1:50: 5f:99:f4:af:0d:e9:6c:ac:28:c9:98:79:ed:43:8d:89:f3:08: 73:f7:38:63:ae:60:50:f7:c6:46:58:45:e4:bb:75:8b:ba:f9: af:98:28:c4:df:24:54:6d:84:f1:0e:94:49:8e:d7:ca:01:91: 9c:9c:fd:f2:df:8b:45:c7:ae:01:e5:54:5a:17:8f:c0:08:71: dc:5d:70:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURK1UTrEx9dVbhBDZ0yAmhNSfmgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTA2MTcxOTM3MjlaFw0yNTA2MjEwMDQ0MjlaMDMxMTAvBgNV BAMTKDFGQjhDMkIyQTY4MDc4MTU4NEM1MzM3QjMyQTMyNDlFNzY4N0NEMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XRW/YgwE0V1kZJIypOSr9tj5 SMaOma7N5gvdYrU72M1/TFjXsiq4YXUYf14x83xBLWpfw2hGtRcQ48hdwiNY3NH4 AlOb9WaC2aHvuw2TcsfKe6xCRNl/4zM8NePxvqLh3GSPqN+9O5SAISOPuKzCCp52 3wcSlQama9WafGLgBhY/xttXAmgi8czoAA3LczMajLiA52rtK8T9FHlElfOP3Tza hLiv20bZfBq9BvzFKaJQgITTEq84B7M6lkPzpX5FXLxgrbmNm5KL5Wd2eLwZWhAG u3HFzVdr+5hbNoFsiPZBYVlLllUPKz9GOvbEF6CV7fhy4QQr1NG0OIEplfu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH7jCsqaAeBWExTN7MqMknnaHzTQwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOwyDP9tVVUVz94V98OwwUgHVtuOmrkPYHB oODDk2kqOAoh/n4spmpm0fwCkNVuDTTlt/pYY76yAPuJVOVqJ5s2KS8FgHiI2f5h 0mUHA3a9xcPkfiNox5DKWCjQ8fJWIq/WSe+yTrU7DSOnu3MqRnzYReWKlCenENBJ uMCdJ7eqiujOefQo8BAP+aZXtZ+v6+jKv78D86Q4W55dKZJpV4YXQIXARYWJhUZr AoCgOksdmc6hUF+Z9K8N6WysKMmYee1DjYnzCHP3OGOuYFD3xkZYReS7dYu6+a+Y KMTfJFRthPEOlEmO18oBkZyc/fLfi0XHrgHlVFoXj8AIcdxdcM0= -----END CERTIFICATE-----Generated at Wed Jun 18 12:14:09 2025 by rpki-client