$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft File: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft (raw, json) Hash identifier: AFrhPqrbqYua0yKBTGB+SE92KfFy0FHTvbv6GRYrYDU= Subject key identifier: E9:2B:5A:51:76:85:16:45:12:3F:71:66:3B:AB:15:B8:56:EE:E6:21 Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 0C8CBEB12C3FD4C4C53842F386960D02868EE395 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft Manifest number: 0507 Signing time: Sat 06 Sep 2025 09:21:32 +0000 Manifest this update: Sat 06 Sep 2025 09:16:32 +0000 Manifest next update: Tue 09 Sep 2025 20:32:32 +0000 Files and hashes: 1: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl (hash: RbL2pQYa2vz2TI1uO8wCJ8jeRu9NZ7QmjOtxKkPZlmM=) 2: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: gI7OgYv6GfwsEVRaXvd5tRlYtRW/gCZ+OwdOGTRV5w8=) 3: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: N2YGkCBG++ItZbATxx+8Wnv+w5mJADtnDrbFxCasjwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:8c:be:b1:2c:3f:d4:c4:c5:38:42:f3:86:96:0d:02:86:8e:e3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: Sep 6 09:16:32 2025 GMT Not After : Sep 9 20:32:32 2025 GMT Subject: CN=E92B5A5176851645123F71663BAB15B856EEE621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:82:d2:9a:03:74:43:c5:49:8e:55:ef:6c: 50:5e:4e:b5:44:ef:c6:bb:f2:ad:79:dd:26:73:05: b1:39:26:2b:9c:7f:3c:84:9c:58:44:ec:2b:fd:a8: 71:c8:7a:fe:95:7b:8c:b7:86:b1:32:92:02:c7:cc: 7a:4f:58:02:13:36:96:9f:92:27:91:c7:8e:40:39: 8b:02:ed:63:76:da:13:8e:d2:f2:d0:36:ca:cf:60: 6a:db:36:49:7a:11:d6:27:d3:5a:d6:48:82:7e:de: 1c:85:6f:b6:b5:39:1b:32:83:40:3e:c5:47:18:51: 4b:43:a8:0c:27:be:e0:66:f9:b3:14:73:ce:1d:51: 41:c9:36:b8:22:39:56:a3:8b:16:1b:38:95:64:a1: 17:5f:b6:f1:6e:8e:8c:e1:53:bc:61:1f:25:8f:e3: 76:93:88:66:0a:b4:70:8b:79:a5:55:e3:d7:e8:bf: f8:28:18:06:f3:f0:13:be:87:c0:13:bc:1c:53:57: 2b:dd:d9:44:e0:7b:0b:1c:dc:06:9f:ab:36:57:49: ec:54:05:88:db:fe:ef:c5:ab:10:6f:c3:aa:87:2b: 2a:15:4d:57:9f:ba:ab:61:6a:91:ae:ff:cb:f8:51: b4:46:8c:eb:6a:cf:68:24:5e:fc:ec:67:57:71:c2: c9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2B:5A:51:76:85:16:45:12:3F:71:66:3B:AB:15:B8:56:EE:E6:21 X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:13:76:f5:b3:74:79:47:8c:ad:31:33:51:0a:5d:45:de:d2: e4:e2:f8:cc:b3:b3:8e:a6:4b:8e:38:bc:ca:fe:75:ca:6b:5a: 7b:e0:b0:2a:d5:e2:84:f3:60:a7:fe:56:7b:f2:c8:8a:04:6c: 3d:f6:71:20:ee:6f:91:fe:7d:60:48:a3:43:52:58:96:af:22: 56:40:95:12:1c:e6:c2:78:43:8f:2f:7b:f5:c2:1e:9c:3b:e4: 24:33:5e:6a:bd:c4:b8:f2:8a:d6:91:3d:ca:48:9f:89:9b:24: f9:cd:8c:9b:37:4b:d4:44:03:65:67:14:e5:55:84:c1:79:4c: 15:e4:0b:6e:0d:6a:80:eb:07:18:ec:64:7a:5e:68:0f:8b:6e: e3:81:de:d4:f5:64:91:d7:ee:e0:fb:53:d7:e4:af:ef:da:1d: a9:c7:8e:94:7f:75:44:e7:27:c4:81:13:cf:2c:a3:50:d3:2a: 11:d2:b9:3b:80:50:de:b4:aa:90:76:dc:d2:97:77:63:f6:0e: b8:9b:01:49:52:b4:62:c3:70:9e:93:6f:99:dd:d0:7e:77:fd: 55:58:e9:c4:9c:c1:b5:e2:4a:b1:fe:4a:54:5a:22:10:e5:86: ac:94:86:5a:d7:7f:56:9b:50:bc:db:76:de:96:2f:88:ed:c0: fc:83:36:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDIy+sSw/1MTFOELzhpYNAoaO45UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNTA5MDYwOTE2MzJaFw0yNTA5MDkyMDMyMzJaMDMxMTAvBgNV BAMTKEU5MkI1QTUxNzY4NTE2NDUxMjNGNzE2NjNCQUIxNUI4NTZFRUU2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgYLSmgN0Q8VJjlXvbFBeTrVE 78a78q153SZzBbE5JiucfzyEnFhE7Cv9qHHIev6Ve4y3hrEykgLHzHpPWAITNpaf kieRx45AOYsC7WN22hOO0vLQNsrPYGrbNkl6EdYn01rWSIJ+3hyFb7a1ORsyg0A+ xUcYUUtDqAwnvuBm+bMUc84dUUHJNrgiOVajixYbOJVkoRdftvFujozhU7xhHyWP 43aTiGYKtHCLeaVV49fov/goGAbz8BO+h8ATvBxTVyvd2UTgewsc3AafqzZXSexU BYjb/u/FqxBvw6qHKyoVTVefuqthapGu/8v4UbRGjOtqz2gkXvzsZ1dxwsm9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6StaUXaFFkUSP3FmO6sVuFbu5iEwHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUz QkQwNThEQTEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkTdvWzdHlHjK0xM1EKXUXe0uTi+Myzs46m S444vMr+dcprWnvgsCrV4oTzYKf+VnvyyIoEbD32cSDub5H+fWBIo0NSWJavIlZA lRIc5sJ4Q48ve/XCHpw75CQzXmq9xLjyitaRPcpIn4mbJPnNjJs3S9REA2VnFOVV hMF5TBXkC24NaoDrBxjsZHpeaA+LbuOB3tT1ZJHX7uD7U9fkr+/aHanHjpR/dUTn J8SBE88so1DTKhHSuTuAUN60qpB23NKXd2P2DribAUlStGLDcJ6Tb5nd0H53/VVY 6cScwbXiSrH+SlRaIhDlhqyUhlrXf1abULzbdt6WL4jtwPyDNkw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:39 2025 by rpki-client