$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: MI32FUnESjfXVACF5roxCxJxWutkUvY84b9zR1B3EuE= Subject key identifier: DB:B8:3C:01:2E:1A:A3:4F:08:01:48:42:43:C8:05:FE:F6:1D:5B:28 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 79D5978A8F129C47206C98A0F95141BBF321AB76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: C3 Signing time: Tue 04 Nov 2025 13:02:14 +0000 Manifest this update: Tue 04 Nov 2025 12:57:14 +0000 Manifest next update: Fri 07 Nov 2025 13:41:14 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: k62m5e8KabuHBMYo8tSFZwr1jrw6auQ0afrO9M+AZN8=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: p2JbTeALyG9aK8WKnnAwuAWEvzJMkTyQIFNlD05DkyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d5:97:8a:8f:12:9c:47:20:6c:98:a0:f9:51:41:bb:f3:21:ab:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Nov 4 12:57:14 2025 GMT Not After : Nov 7 13:41:14 2025 GMT Subject: CN=DBB83C012E1AA34F0801484243C805FEF61D5B28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:81:26:4b:33:f2:d4:a5:f8:ad:9c:00:8e:15: f2:bf:05:7d:a5:88:c1:f9:00:f9:f1:81:80:8c:89: c7:53:af:99:73:b8:b1:54:c1:86:7b:7a:6e:72:37: 27:a0:ce:a8:87:56:41:e2:2f:ac:6a:07:6e:df:5c: 5b:cd:c6:bb:b4:fc:e1:60:f3:71:65:2e:c2:5a:6e: c9:ce:30:dc:8d:4a:14:b5:62:60:79:02:0c:3a:20: 47:43:42:78:fa:ef:68:20:c7:bf:6d:56:e2:25:62: d8:5f:76:2d:5c:c8:6f:39:e2:b9:cf:24:80:6f:9f: 27:0f:12:8d:88:f6:66:f4:2d:40:ed:58:79:99:8b: a6:c9:85:1e:02:f0:f4:11:d4:60:9b:d5:02:7f:52: 7a:cf:d8:9e:49:dc:c0:f8:d4:de:e1:05:95:ee:8d: d5:ba:7f:53:27:8e:96:ee:ee:2b:19:02:1c:3b:e8: f2:e5:75:b6:36:d3:3f:93:ba:2e:0a:01:9a:e3:24: cc:44:fa:17:01:5d:8e:0f:3c:f2:78:17:ed:54:9a: d7:65:d7:95:e7:36:0f:09:86:00:8d:99:ee:60:02: b4:df:f7:0b:5b:97:a7:2a:cd:cb:53:7a:e0:2d:e2: 4d:fb:19:d1:b9:69:af:41:c1:cf:bb:37:2e:6e:70: c6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B8:3C:01:2E:1A:A3:4F:08:01:48:42:43:C8:05:FE:F6:1D:5B:28 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:00:43:13:83:70:5f:c3:dd:08:60:90:df:60:aa:b4:dd:1b: b4:92:9c:e0:40:8d:56:17:ee:0c:af:04:85:95:2f:95:2e:75: 56:42:35:a5:a1:8b:10:c1:a5:70:78:cd:93:a6:64:e2:23:15: bf:0d:c2:e6:7b:b4:67:c8:35:af:15:b8:49:4f:13:6d:1d:84: 75:a8:42:3f:8e:f6:b4:65:4c:c1:cd:d7:02:e8:c2:e8:31:9d: 9b:65:47:6a:db:64:f1:a9:7d:d5:f3:9b:3b:98:1b:67:85:1b: 8e:a5:c7:13:eb:93:20:cd:91:17:ee:87:f8:eb:56:e9:3b:07: 26:02:5b:7b:3a:d2:ed:44:46:41:4e:f7:93:f9:70:5b:03:aa: af:40:87:8d:12:fe:cf:86:2e:a7:93:32:82:b6:81:66:fc:d2: 4c:7f:12:83:8c:8f:a6:38:41:ea:be:3f:13:22:e7:bc:22:0e: ed:37:1c:78:67:8b:5b:95:7f:a5:cc:d3:fb:9d:15:ec:03:59: 3e:65:4c:6d:2b:e6:a9:e5:5e:60:d0:2a:b4:68:a8:cf:ed:b2: 94:07:dd:23:9d:87:6a:12:22:fa:1f:7c:2b:19:45:1e:c2:64: 21:3d:d3:8a:2d:74:25:ca:e5:21:0a:c8:f7:8e:4a:83:71:5b: 1f:da:b7:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUedWXio8SnEcgbJig+VFBu/Mhq3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTExMDQxMjU3MTRaFw0yNTExMDcxMzQxMTRaMDMxMTAvBgNV BAMTKERCQjgzQzAxMkUxQUEzNEYwODAxNDg0MjQzQzgwNUZFRjYxRDVCMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbgSZLM/LUpfitnACOFfK/BX2l iMH5APnxgYCMicdTr5lzuLFUwYZ7em5yNyegzqiHVkHiL6xqB27fXFvNxru0/OFg 83FlLsJabsnOMNyNShS1YmB5Agw6IEdDQnj672ggx79tVuIlYthfdi1cyG854rnP JIBvnycPEo2I9mb0LUDtWHmZi6bJhR4C8PQR1GCb1QJ/UnrP2J5J3MD41N7hBZXu jdW6f1Mnjpbu7isZAhw76PLldbY20z+Tui4KAZrjJMxE+hcBXY4PPPJ4F+1Umtdl 15XnNg8JhgCNme5gArTf9wtbl6cqzctTeuAt4k37GdG5aa9Bwc+7Ny5ucMZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27g8AS4ao08IAUhCQ8gF/vYdWygwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsAQxODcF/D3QhgkN9gqrTdG7SSnOBAjVYX 7gyvBIWVL5UudVZCNaWhixDBpXB4zZOmZOIjFb8NwuZ7tGfINa8VuElPE20dhHWo Qj+O9rRlTMHN1wLowugxnZtlR2rbZPGpfdXzmzuYG2eFG46lxxPrkyDNkRfuh/jr Vuk7ByYCW3s60u1ERkFO95P5cFsDqq9Ah40S/s+GLqeTMoK2gWb80kx/EoOMj6Y4 Qeq+PxMi57wiDu03HHhni1uVf6XM0/udFewDWT5lTG0r5qnlXmDQKrRoqM/tspQH 3SOdh2oSIvoffCsZRR7CZCE904otdCXK5SEKyPeOSoNxWx/at64= -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:54 2025 by rpki-client