$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: HbtAlZ63Ku3v8HgxcAsP77u5TmuBvI325AMEodJ6uU8= Subject key identifier: 56:E4:74:0A:30:4C:7C:01:F5:96:2B:68:70:D1:49:67:C1:26:7F:63 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 36915CC25FDB48369951700E9ADC637306ADE4AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: 84 Signing time: Fri 13 Jun 2025 10:32:11 +0000 Manifest this update: Fri 13 Jun 2025 10:27:11 +0000 Manifest next update: Mon 16 Jun 2025 18:24:11 +0000 Files and hashes: 1: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: 8/2hNS7guiTYFXlr56GlGjm1J2B86v7siNi30CfEDuM=) 2: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: XIv+DFuy+wuU0bKs5VPjV9l6jHTBdmM40+okiepgpgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 18:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:91:5c:c2:5f:db:48:36:99:51:70:0e:9a:dc:63:73:06:ad:e4:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Jun 13 10:27:11 2025 GMT Not After : Jun 16 18:24:11 2025 GMT Subject: CN=56E4740A304C7C01F5962B6870D14967C1267F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:f9:7a:5f:4f:52:ee:bb:c5:1f:ff:3d:ac:94: ac:17:e1:21:03:01:8a:4a:70:dd:b2:7d:f9:6b:cf: f4:ca:5a:a5:da:45:c5:c2:7f:4d:64:8d:fe:3b:f1: 39:78:eb:dc:f6:b4:fc:51:9c:ae:83:b9:84:82:ba: 74:b0:06:f9:78:3c:4e:7e:e5:84:24:0f:d9:bd:db: c2:0a:ed:02:7e:bb:cf:3d:01:c6:80:1a:b4:a5:78: c8:50:34:5e:f1:18:77:6f:10:01:9e:5c:2a:37:d6: 19:f9:ba:b2:79:0e:50:05:44:2b:4c:3b:af:1f:e6: 1b:fa:f3:e0:ae:54:bb:3d:11:f5:a8:24:4d:a7:18: ca:b9:06:ff:51:cf:2d:b3:17:ec:c6:00:08:75:5a: 2d:2e:bc:2c:dd:19:af:73:63:b5:ca:41:4a:33:5c: 3d:a7:ca:b5:38:46:b2:c8:91:f6:91:56:10:26:e3: 70:76:50:d4:8e:90:cf:2f:87:b0:e5:7e:76:40:16: 6b:ee:e9:26:05:46:86:fa:1c:9d:0e:87:86:f5:ad: 89:58:70:0b:c7:30:40:c8:4b:06:5e:37:de:39:6a: 0c:66:45:42:6b:c8:b6:99:5b:84:b1:bc:9c:6d:04: 28:34:79:6a:52:31:e6:6f:66:49:a8:b4:7e:63:bb: 6f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E4:74:0A:30:4C:7C:01:F5:96:2B:68:70:D1:49:67:C1:26:7F:63 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ea:26:18:f0:3f:81:00:65:f1:58:b7:51:42:1e:cc:26:32: cc:24:6d:c0:d2:6e:5f:00:7b:55:ff:8e:79:c9:49:53:07:84: a3:bb:b4:54:9a:fe:fd:c5:81:ab:39:09:bb:71:5a:60:9c:75: 6d:a2:f9:1f:8a:af:7c:52:4c:74:8a:2a:80:66:b6:d8:6f:24: b0:b4:2c:ac:9b:ea:7c:9c:c1:8f:6c:4c:96:14:e5:13:b5:46: ff:9c:ec:53:98:dc:31:c7:24:31:53:81:f3:e5:81:62:2f:48: ae:f5:36:75:3a:2f:d6:d2:12:28:ac:cb:e7:ef:3a:25:71:8e: ba:68:b7:37:b6:0e:fd:7c:1d:6a:0d:ce:e1:f7:54:1e:e1:92: 15:44:40:57:30:fd:62:63:5f:ee:f6:75:0b:eb:93:ea:c8:92: b2:50:65:cd:af:6d:ed:ed:49:cf:50:0d:bd:5c:71:86:08:94: e0:78:97:d4:0b:8a:10:52:ec:dc:a4:31:c6:ae:d7:6f:5e:50: f8:98:6c:e4:2e:17:e5:f8:d0:bf:1b:e2:5a:53:14:8f:fb:cf: d3:33:63:5b:38:d7:19:c6:ac:19:95:67:80:82:8d:4b:35:30: d8:6d:ee:0b:c8:6a:c0:45:a0:d3:95:c7:88:93:c2:3e:fa:75: eb:3d:30:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNpFcwl/bSDaZUXAOmtxjcwat5K8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTA2MTMxMDI3MTFaFw0yNTA2MTYxODI0MTFaMDMxMTAvBgNV BAMTKDU2RTQ3NDBBMzA0QzdDMDFGNTk2MkI2ODcwRDE0OTY3QzEyNjdGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1+XpfT1Luu8Uf/z2slKwX4SED AYpKcN2yfflrz/TKWqXaRcXCf01kjf478Tl469z2tPxRnK6DuYSCunSwBvl4PE5+ 5YQkD9m928IK7QJ+u889AcaAGrSleMhQNF7xGHdvEAGeXCo31hn5urJ5DlAFRCtM O68f5hv68+CuVLs9EfWoJE2nGMq5Bv9Rzy2zF+zGAAh1Wi0uvCzdGa9zY7XKQUoz XD2nyrU4RrLIkfaRVhAm43B2UNSOkM8vh7DlfnZAFmvu6SYFRob6HJ0Oh4b1rYlY cAvHMEDISwZeN945agxmRUJryLaZW4SxvJxtBCg0eWpSMeZvZkmotH5ju28pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVuR0CjBMfAH1litocNFJZ8Emf2MwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzqJhjwP4EAZfFYt1FCHswmMswkbcDSbl8A e1X/jnnJSVMHhKO7tFSa/v3Fgas5CbtxWmCcdW2i+R+Kr3xSTHSKKoBmtthvJLC0 LKyb6nycwY9sTJYU5RO1Rv+c7FOY3DHHJDFTgfPlgWIvSK71NnU6L9bSEiisy+fv OiVxjrpotze2Dv18HWoNzuH3VB7hkhVEQFcw/WJjX+72dQvrk+rIkrJQZc2vbe3t Sc9QDb1ccYYIlOB4l9QLihBS7NykMcau129eUPiYbOQuF+X40L8b4lpTFI/7z9Mz Y1s41xnGrBmVZ4CCjUs1MNht7gvIasBFoNOVx4iTwj76des9MJU= -----END CERTIFICATE-----Generated at Fri Jun 13 22:57:36 2025 by rpki-client