$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft File: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft (raw, json) Hash identifier: lecfLLOK30E9Cfi3HaDfVsGl7TpBlDeZMoDAC8q0Szs= Subject key identifier: 67:43:1B:40:18:52:39:A1:1E:AF:51:A0:36:4F:D7:94:B2:76:22:37 Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 4F1BCB8689FAD48F450458E5923460A8D18B41EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft Manifest number: 04F2 Signing time: Mon 21 Jul 2025 03:03:24 +0000 Manifest this update: Mon 21 Jul 2025 02:58:24 +0000 Manifest next update: Thu 24 Jul 2025 07:58:24 +0000 Files and hashes: 1: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: gI7OgYv6GfwsEVRaXvd5tRlYtRW/gCZ+OwdOGTRV5w8=) 2: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: N2YGkCBG++ItZbATxx+8Wnv+w5mJADtnDrbFxCasjwk=) 3: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl (hash: fHK+lfohbVjrjhncmUnRuY7H93WXF1WML5ewZF3Znmw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1b:cb:86:89:fa:d4:8f:45:04:58:e5:92:34:60:a8:d1:8b:41:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: Jul 21 02:58:24 2025 GMT Not After : Jul 24 07:58:24 2025 GMT Subject: CN=67431B40185239A11EAF51A0364FD794B2762237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6f:d7:65:cc:d0:69:5b:ce:82:ec:cd:de:34: b2:4a:bf:17:ee:90:ca:a1:99:90:2a:6a:df:97:eb: 5e:8b:28:b0:3d:56:cf:11:67:25:c4:ba:93:dd:7e: 1e:9b:de:83:df:cb:7f:76:5c:9c:97:85:01:aa:26: 84:e8:a7:82:bc:25:15:b4:c1:b1:cc:d1:68:e6:8d: 20:b2:4d:50:ed:2a:d3:eb:24:f5:b7:2a:65:84:21: 60:d4:dc:60:b6:e8:ed:1c:59:e3:b2:0f:e8:cf:61: b7:7b:62:91:cc:ff:6d:5b:fc:69:20:46:04:7b:eb: d9:a9:97:7b:5b:73:4e:46:2c:0b:c4:3e:0f:e6:df: 4b:72:46:02:a9:a0:c9:55:30:e8:b1:80:da:5c:56: 32:9e:a1:6c:a6:9f:e4:9f:b0:aa:d4:d1:f5:26:37: 02:02:ff:22:55:51:be:4a:06:10:16:0c:32:7b:18: 11:2e:ed:f9:b6:a6:08:fa:ce:2d:6e:b8:e7:77:7f: 3c:9f:4d:24:c3:2c:7b:13:f9:be:19:4c:36:33:9a: 54:37:4d:79:2c:e7:53:ea:98:37:e9:a0:b3:41:88: 52:b8:e1:f1:c7:dd:83:22:3b:1f:89:51:69:bf:7a: 9e:df:53:6d:60:f6:d2:21:25:e2:8f:b7:4d:38:99: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:43:1B:40:18:52:39:A1:1E:AF:51:A0:36:4F:D7:94:B2:76:22:37 X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:4b:76:f0:d3:2b:9d:42:d0:19:b1:89:df:56:fc:dc:53:c9: 40:f8:80:b2:1d:29:0c:79:db:99:b9:fc:83:20:c5:16:d9:0b: b7:d9:95:1a:94:20:17:0b:f5:aa:5d:61:8f:72:23:7f:2c:83: 13:e2:ba:b4:1a:1e:ed:b2:3d:89:12:0f:f8:2e:14:9d:04:f9: 06:33:57:58:be:5c:83:c4:34:81:90:1d:28:7f:5f:b0:63:13: a2:9b:d8:32:ac:3e:f9:86:9f:38:1e:48:85:5f:4b:55:f1:ae: 75:52:2e:48:b3:85:f7:67:e9:de:3b:19:38:62:8b:fd:0e:6d: cd:06:7a:da:ca:1b:aa:bd:2d:8b:69:45:49:41:98:ed:5b:24: 18:0d:36:0c:31:2f:1d:12:00:38:bd:21:66:c4:7b:6f:fa:2b: e7:f1:3d:48:e8:7c:8d:21:e9:7f:2a:51:52:4a:6d:7b:7a:97: 26:42:f5:2b:4c:e6:fc:a4:3b:8f:be:27:4f:c9:77:1b:a7:89: 55:27:3e:4a:95:1c:6c:ee:2a:d6:44:27:29:8f:85:c4:0e:80: d4:88:7a:ad:b7:98:93:ba:66:f0:97:0f:9f:2f:0b:9c:58:e4: 23:d8:39:29:7b:67:18:1b:b4:39:ed:3c:50:63:05:ab:31:50: 5b:b3:a3:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxvLhon61I9FBFjlkjRgqNGLQe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNTA3MjEwMjU4MjRaFw0yNTA3MjQwNzU4MjRaMDMxMTAvBgNV BAMTKDY3NDMxQjQwMTg1MjM5QTExRUFGNTFBMDM2NEZENzk0QjI3NjIyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2b9dlzNBpW86C7M3eNLJKvxfu kMqhmZAqat+X616LKLA9Vs8RZyXEupPdfh6b3oPfy392XJyXhQGqJoTop4K8JRW0 wbHM0WjmjSCyTVDtKtPrJPW3KmWEIWDU3GC26O0cWeOyD+jPYbd7YpHM/21b/Gkg RgR769mpl3tbc05GLAvEPg/m30tyRgKpoMlVMOixgNpcVjKeoWymn+SfsKrU0fUm NwIC/yJVUb5KBhAWDDJ7GBEu7fm2pgj6zi1uuOd3fzyfTSTDLHsT+b4ZTDYzmlQ3 TXks51PqmDfpoLNBiFK44fHH3YMiOx+JUWm/ep7fU21g9tIhJeKPt004mUY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ0MbQBhSOaEer1GgNk/XlLJ2IjcwHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUz QkQwNThEQTEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVLdvDTK51C0Bmxid9W/NxTyUD4gLIdKQx5 25m5/IMgxRbZC7fZlRqUIBcL9apdYY9yI38sgxPiurQaHu2yPYkSD/guFJ0E+QYz V1i+XIPENIGQHSh/X7BjE6Kb2DKsPvmGnzgeSIVfS1XxrnVSLkizhfdn6d47GThi i/0Obc0GetrKG6q9LYtpRUlBmO1bJBgNNgwxLx0SADi9IWbEe2/6K+fxPUjofI0h 6X8qUVJKbXt6lyZC9StM5vykO4++J0/JdxuniVUnPkqVHGzuKtZEJymPhcQOgNSI eq23mJO6ZvCXD58vC5xY5CPYOSl7ZxgbtDntPFBjBasxUFuzo4o= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:21 2025 by rpki-client