$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: GLFKuQ2i/EKz6VasB1DiW15RlfiMApXLlmbtzhstjSk= Subject key identifier: 7D:6D:71:48:07:1F:CE:6B:E6:27:E6:5C:A6:CD:2F:BD:CD:FB:4A:A3 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 6BB22D544D77D50E79B54C8C5FC5AF23FF685046 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: A8 Signing time: Wed 03 Sep 2025 17:02:17 +0000 Manifest this update: Wed 03 Sep 2025 16:57:17 +0000 Manifest next update: Sat 06 Sep 2025 22:14:17 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: PlS6ocojS4SexWoJUMB3lZq8azplPzoMpRQUP/kgqjA=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: p2JbTeALyG9aK8WKnnAwuAWEvzJMkTyQIFNlD05DkyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b2:2d:54:4d:77:d5:0e:79:b5:4c:8c:5f:c5:af:23:ff:68:50:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Sep 3 16:57:17 2025 GMT Not After : Sep 6 22:14:17 2025 GMT Subject: CN=7D6D7148071FCE6BE627E65CA6CD2FBDCDFB4AA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c2:88:f7:cf:eb:a4:7a:96:db:13:a0:53:05: ea:35:f2:c9:a0:80:9a:fc:1d:c0:c0:af:a4:d6:5b: fc:a4:de:ed:bf:1b:38:d1:04:ee:b6:06:39:c3:1c: 06:58:9c:6f:8a:af:d5:b1:a4:f0:e9:07:57:91:ec: 62:76:6f:e9:5a:b7:0a:4a:05:9f:31:f0:1a:78:4d: fe:ec:a9:98:d5:4c:b2:80:4d:6f:57:bb:71:4c:a8: 1f:4e:e0:1e:c9:9d:92:ff:27:e3:93:08:16:1c:a7: c6:6a:dd:7a:bf:65:cc:8f:0f:85:3b:ea:12:33:10: 25:4f:95:ae:e8:31:8b:3b:a9:04:2e:94:5c:3e:6e: e8:f7:8e:8c:0a:d6:9e:65:6f:46:3b:5f:5b:8d:eb: e4:b9:38:ce:2c:18:92:dd:b2:fb:48:52:f3:e6:da: a1:1e:d4:e2:2f:21:32:79:6d:14:09:c8:32:30:05: 88:0b:87:4d:5d:a7:4e:80:f5:fe:57:5f:3e:15:67: a1:1e:d1:8f:63:9e:01:e3:d1:4a:39:bd:42:db:5e: 92:b5:49:72:d7:eb:7e:fb:37:22:0a:8c:b4:2f:c0: ae:fb:f2:37:a3:27:20:f3:78:28:70:b2:6d:20:d7: 0b:3c:66:75:d3:31:9a:93:2f:2d:77:82:e3:a5:e9: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6D:71:48:07:1F:CE:6B:E6:27:E6:5C:A6:CD:2F:BD:CD:FB:4A:A3 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:05:37:6f:f6:d4:6d:d9:de:23:67:cb:e9:65:9b:9d:90:57: c5:2e:3f:52:81:6f:76:c7:03:fe:93:9e:92:c0:67:72:5a:4e: d2:1d:67:b5:f3:77:9f:a2:a7:b5:a9:2f:24:44:66:98:ab:17: cc:27:54:c0:3e:a4:0a:9e:23:cd:da:18:bf:f5:60:94:a1:82: 34:19:71:09:a4:43:2b:ab:e4:ed:cc:45:bf:c2:c7:c1:4c:e0: 35:35:61:95:0b:df:c9:37:f9:61:09:2d:c3:16:80:c9:56:44: eb:24:42:6b:60:ee:28:23:e3:be:6b:21:32:8c:28:a6:3a:15: 1e:ed:9d:ea:99:94:36:45:a2:dd:eb:7c:95:fa:50:2a:09:fa: 7b:83:c3:cd:0b:04:85:7a:fb:17:ab:94:30:e7:d4:36:6e:07: 64:f8:50:32:30:c3:71:56:85:24:41:74:40:69:9c:65:d4:24: 31:b8:d5:e0:33:c2:0b:48:11:e4:f1:1d:a0:03:30:53:57:2a: 3c:08:3f:78:cf:3c:c0:f7:5e:15:1b:3d:4e:c5:1a:5e:cd:f8: a0:9e:9a:c0:46:ad:14:09:24:26:11:6d:6f:97:42:8b:d8:7b: 9b:be:2c:55:1a:25:00:5d:a2:35:4f:e8:9f:5c:ea:02:bd:15: d8:65:24:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7ItVE131Q55tUyMX8WvI/9oUEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTA5MDMxNjU3MTdaFw0yNTA5MDYyMjE0MTdaMDMxMTAvBgNV BAMTKDdENkQ3MTQ4MDcxRkNFNkJFNjI3RTY1Q0E2Q0QyRkJEQ0RGQjRBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpwoj3z+ukepbbE6BTBeo18smg gJr8HcDAr6TWW/yk3u2/GzjRBO62BjnDHAZYnG+Kr9WxpPDpB1eR7GJ2b+latwpK BZ8x8Bp4Tf7sqZjVTLKATW9Xu3FMqB9O4B7JnZL/J+OTCBYcp8Zq3Xq/ZcyPD4U7 6hIzECVPla7oMYs7qQQulFw+buj3jowK1p5lb0Y7X1uN6+S5OM4sGJLdsvtIUvPm 2qEe1OIvITJ5bRQJyDIwBYgLh01dp06A9f5XXz4VZ6Ee0Y9jngHj0Uo5vULbXpK1 SXLX6377NyIKjLQvwK778jejJyDzeChwsm0g1ws8ZnXTMZqTLy13guOl6UY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfW1xSAcfzmvmJ+Zcps0vvc37SqMwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsFN2/21G3Z3iNny+llm52QV8UuP1KBb3bH A/6TnpLAZ3JaTtIdZ7Xzd5+ip7WpLyREZpirF8wnVMA+pAqeI83aGL/1YJShgjQZ cQmkQyur5O3MRb/Cx8FM4DU1YZUL38k3+WEJLcMWgMlWROskQmtg7igj475rITKM KKY6FR7tneqZlDZFot3rfJX6UCoJ+nuDw80LBIV6+xerlDDn1DZuB2T4UDIww3FW hSRBdEBpnGXUJDG41eAzwgtIEeTxHaADMFNXKjwIP3jPPMD3XhUbPU7FGl7N+KCe msBGrRQJJCYRbW+XQovYe5u+LFUaJQBdojVP6J9c6gK9FdhlJOs= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:37 2025 by rpki-client