$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: KJQjAeiJ8z+TSB2azVun4TAo048l2dCQFxbIN4Oqzlk= Subject key identifier: A1:98:76:9F:0B:F1:CF:04:59:F9:B0:9C:5C:B2:8F:2C:A6:5F:27:AF Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 09F3418DEBB01BD4D02E00DACE85DEB5E20B22E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 04AB Signing time: Tue 22 Jul 2025 12:21:42 +0000 Manifest this update: Tue 22 Jul 2025 12:16:42 +0000 Manifest next update: Fri 25 Jul 2025 12:29:42 +0000 Files and hashes: 1: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: sGuZ949AervQFXJY8lGdE9UQu3pLwaxX5H+2ASfBYqU=) 2: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: BYunBd6Mr0h1D3lw/E6WNvZItUdqipXgIpnyyo/vyDo=) 3: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: alDRN92tlwgNSOsmGcO4bYs5k2yVLt0hg1F97xm610Y=) 4: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: igZUGj9WZ1hy1WLn/uUmoBiqqH+6kXF5u53eZj34KGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 12:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f3:41:8d:eb:b0:1b:d4:d0:2e:00:da:ce:85:de:b5:e2:0b:22:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Jul 22 12:16:42 2025 GMT Not After : Jul 25 12:29:42 2025 GMT Subject: CN=A198769F0BF1CF0459F9B09C5CB28F2CA65F27AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:65:d1:a5:37:b1:67:92:a3:8e:e3:23:76: 0e:0e:59:d8:6e:c0:f2:f8:56:b9:6a:23:a6:18:91: 9c:2d:41:21:8e:f7:a7:c1:98:3a:e5:d2:6c:23:c1: 4f:70:b1:3e:d5:63:6a:d6:e3:58:5a:71:da:43:3e: 8b:40:8b:77:4e:6c:2b:e7:e9:91:75:29:d7:27:c6: da:92:65:fc:56:b5:e6:23:e2:b7:a8:4f:48:7b:b0: 47:2a:19:79:a5:18:49:ee:5c:be:4f:16:e6:73:f0: e1:17:9a:46:7e:50:33:08:eb:fb:68:5c:25:d4:39: 7e:59:f6:98:43:4f:34:e4:71:5a:d5:8a:5f:34:dc: 5b:9a:86:d7:7a:40:84:b9:01:88:a1:9e:db:93:e6: 72:87:c7:01:f8:65:72:92:3e:ad:fa:da:aa:6b:bd: 69:1d:14:ae:dc:7a:c4:b0:71:0a:8b:67:bc:b9:67: db:c1:57:2b:eb:e4:05:c5:18:3b:50:e4:36:f7:2e: d0:be:99:ce:56:f6:43:bd:83:7b:c3:c4:b2:00:a4: 79:95:10:ab:a0:5f:2b:44:13:03:e4:73:02:ae:c0: 4b:57:92:c4:4a:c4:3c:22:1f:3b:87:a6:d5:98:fc: 49:62:8b:33:00:d7:35:e7:fa:37:ad:9d:33:20:5c: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:98:76:9F:0B:F1:CF:04:59:F9:B0:9C:5C:B2:8F:2C:A6:5F:27:AF X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:6d:32:5f:f5:95:ab:b3:a6:ee:43:9d:f7:b8:11:c9:fe:b2: 90:04:01:66:3d:86:a4:6f:2e:b8:26:33:b0:b8:a7:0d:5c:d7: 84:47:4c:40:5a:29:8c:f9:ef:9f:a9:9f:ae:5d:b1:35:0b:94: cc:15:8b:6f:5e:2d:ea:d2:50:ed:76:28:50:d0:f8:85:6d:96: 00:9e:d2:6f:32:4b:37:a4:9e:4f:f4:0b:c8:da:93:51:16:f4: e7:f3:45:2d:e9:7e:a3:fc:99:0c:8e:b5:c6:6a:df:3c:98:31: 46:dd:4e:4a:2d:ff:81:4a:62:2e:cc:92:26:0d:2c:b4:09:04: 64:e5:26:93:5f:14:12:72:a0:f3:9f:8c:56:43:8f:07:3e:c3: 33:09:ea:99:64:21:ce:a1:9a:5a:4d:d3:7b:fb:05:92:f8:d3: 38:04:11:f8:a8:85:49:1f:e9:e3:00:0c:96:94:3d:da:bc:50: 95:54:1f:47:6f:74:b4:4c:05:22:bd:8e:13:2e:cb:99:f6:55: 52:49:fd:b6:0a:2b:e0:6b:8e:61:86:38:0f:b0:57:e3:20:e8: dc:f3:c7:0d:a3:18:74:94:08:de:cd:bc:58:7d:73:f8:f7:50: 41:cf:66:9b:74:b8:b4:60:ec:17:5e:8d:3a:12:2f:72:e5:15: 67:a8:1d:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCfNBjeuwG9TQLgDazoXeteILIuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNTA3MjIxMjE2NDJaFw0yNTA3MjUxMjI5NDJaMDMxMTAvBgNV BAMTKEExOTg3NjlGMEJGMUNGMDQ1OUY5QjA5QzVDQjI4RjJDQTY1RjI3QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClomXRpTexZ5KjjuMjdg4OWdhu wPL4VrlqI6YYkZwtQSGO96fBmDrl0mwjwU9wsT7VY2rW41hacdpDPotAi3dObCvn 6ZF1KdcnxtqSZfxWteYj4reoT0h7sEcqGXmlGEnuXL5PFuZz8OEXmkZ+UDMI6/to XCXUOX5Z9phDTzTkcVrVil803Fuahtd6QIS5AYihntuT5nKHxwH4ZXKSPq362qpr vWkdFK7cesSwcQqLZ7y5Z9vBVyvr5AXFGDtQ5Db3LtC+mc5W9kO9g3vDxLIApHmV EKugXytEEwPkcwKuwEtXksRKxDwiHzuHptWY/EliizMA1zXn+jetnTMgXEv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoZh2nwvxzwRZ+bCcXLKPLKZfJ68wHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdtMl/1lauzpu5Dnfe4Ecn+spAEAWY9hqRv LrgmM7C4pw1c14RHTEBaKYz575+pn65dsTULlMwVi29eLerSUO12KFDQ+IVtlgCe 0m8ySzeknk/0C8jak1EW9OfzRS3pfqP8mQyOtcZq3zyYMUbdTkot/4FKYi7MkiYN LLQJBGTlJpNfFBJyoPOfjFZDjwc+wzMJ6plkIc6hmlpN03v7BZL40zgEEfiohUkf 6eMADJaUPdq8UJVUH0dvdLRMBSK9jhMuy5n2VVJJ/bYKK+BrjmGGOA+wV+Mg6Nzz xw2jGHSUCN7NvFh9c/j3UEHPZpt0uLRg7BdejToSL3LlFWeoHTs= -----END CERTIFICATE-----Generated at Wed Jul 23 02:00:01 2025 by rpki-client