$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: SXTrv8nGBPxbZUWz6v/pcXM2wghigueMKcPHc0eSu34= Subject key identifier: EA:EA:B3:20:8D:2B:D3:59:28:36:77:5E:05:2A:68:95:C9:88:E1:42 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 5348AE1C6BD853C1B7C93DC22CA716CC8C2FDF00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: 67 Signing time: Tue 08 Apr 2025 21:42:11 +0000 Manifest this update: Tue 08 Apr 2025 21:37:11 +0000 Manifest next update: Sat 12 Apr 2025 00:51:11 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: Z0Ry+dDkAzOu6U+UHG1zXpyZv2KkA89KyiCnTGybKuw=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: 8/2hNS7guiTYFXlr56GlGjm1J2B86v7siNi30CfEDuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:48:ae:1c:6b:d8:53:c1:b7:c9:3d:c2:2c:a7:16:cc:8c:2f:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Apr 8 21:37:11 2025 GMT Not After : Apr 12 00:51:11 2025 GMT Subject: CN=EAEAB3208D2BD3592836775E052A6895C988E142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:97:54:2f:a8:b9:6c:83:f3:47:15:6f:c7: ad:fd:ec:83:bb:dc:77:cc:89:87:bd:05:20:0a:15: e3:2a:c6:d1:0c:bb:02:82:36:d5:3a:11:1f:32:24: ac:90:b9:f1:e5:b8:f4:e3:c6:7f:9a:a6:1a:32:43: fc:1e:fa:28:51:da:1f:60:2e:ef:8c:1c:61:2e:20: ae:23:26:25:e5:66:ad:77:0c:fb:20:a8:17:77:5f: f2:0e:f1:cd:bd:e2:01:a7:21:4c:76:64:79:39:f0: 60:57:e1:ef:c0:29:dd:38:dc:37:f6:79:32:d4:a2: 78:59:91:ca:36:cf:e7:c2:38:e1:43:15:7c:b1:ec: 41:28:47:d2:5e:3c:e3:e0:ca:1f:bb:62:88:76:de: 4c:4d:d1:5c:36:c8:ff:92:a2:58:1f:70:17:3d:c7: 30:3f:5d:11:9a:3a:57:3c:f8:2b:b9:53:67:7c:94: 72:61:f7:4c:fb:1c:ee:3c:97:43:0c:bc:f7:8b:6d: 02:57:d4:97:0f:ce:db:fe:15:7c:c0:d5:08:f1:bd: 0d:0c:09:38:ec:43:c5:d3:9a:7f:4f:5e:2c:a6:0b: dd:6c:b5:3c:a8:17:b4:5f:c2:0b:e9:22:01:ea:5a: 31:ea:6e:05:de:c0:05:71:42:80:9a:02:23:1d:f9: 2f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EA:B3:20:8D:2B:D3:59:28:36:77:5E:05:2A:68:95:C9:88:E1:42 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f0:52:45:d8:7e:ca:93:73:17:a1:97:10:e1:22:9a:dc:22: 3d:8a:ba:60:98:60:bc:28:a4:37:39:cf:45:ac:e9:ba:0b:51: ea:ee:ea:4c:2d:2d:b1:f7:64:06:21:59:a6:83:86:22:ee:32: 4a:a6:96:53:7a:d6:d7:2b:8a:53:c4:fb:8a:53:75:01:93:a0: e9:84:06:42:68:91:c6:82:0d:68:f3:b3:fc:1c:89:66:37:f7: 8a:10:ad:dc:e9:ff:78:76:78:fc:17:7c:dd:2b:bd:a2:44:42: 49:8a:fa:3c:c8:a3:49:d6:69:f9:77:53:3e:0a:27:b5:54:26: 62:02:6d:14:dc:3e:4c:a3:2b:db:70:aa:5c:18:d7:84:2f:4c: fd:07:ba:04:35:4b:e4:d8:73:8b:41:eb:d2:08:40:04:b1:56: 5a:6a:e2:d5:1a:6f:19:bc:0c:87:fa:e8:b4:09:bf:35:42:42: 50:92:a2:bf:4d:92:fd:c5:e2:33:91:12:6d:7a:05:59:8f:85: 80:9d:50:91:40:f6:da:a0:84:86:b5:ae:4d:c6:2a:54:4d:42: 82:48:e0:7c:9f:7f:8d:d7:07:26:21:80:0e:81:29:2a:cb:17: 6a:8e:91:ac:37:b1:fd:42:95:c2:41:ee:c4:13:55:57:bf:93: 09:b2:b4:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0iuHGvYU8G3yT3CLKcWzIwv3wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTA0MDgyMTM3MTFaFw0yNTA0MTIwMDUxMTFaMDMxMTAvBgNV BAMTKEVBRUFCMzIwOEQyQkQzNTkyODM2Nzc1RTA1MkE2ODk1Qzk4OEUxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/npdUL6i5bIPzRxVvx6397IO7 3HfMiYe9BSAKFeMqxtEMuwKCNtU6ER8yJKyQufHluPTjxn+aphoyQ/we+ihR2h9g Lu+MHGEuIK4jJiXlZq13DPsgqBd3X/IO8c294gGnIUx2ZHk58GBX4e/AKd043Df2 eTLUonhZkco2z+fCOOFDFXyx7EEoR9JePOPgyh+7Yoh23kxN0Vw2yP+SolgfcBc9 xzA/XRGaOlc8+Cu5U2d8lHJh90z7HO48l0MMvPeLbQJX1JcPztv+FXzA1QjxvQ0M CTjsQ8XTmn9PXiymC91stTyoF7RfwgvpIgHqWjHqbgXewAVxQoCaAiMd+S9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6uqzII0r01koNndeBSpolcmI4UIwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnwUkXYfsqTcxehlxDhIprcIj2KumCYYLwo pDc5z0Ws6boLUeru6kwtLbH3ZAYhWaaDhiLuMkqmllN61tcrilPE+4pTdQGToOmE BkJokcaCDWjzs/wciWY394oQrdzp/3h2ePwXfN0rvaJEQkmK+jzIo0nWafl3Uz4K J7VUJmICbRTcPkyjK9twqlwY14QvTP0HugQ1S+TYc4tB69IIQASxVlpq4tUabxm8 DIf66LQJvzVCQlCSor9Nkv3F4jOREm16BVmPhYCdUJFA9tqghIa1rk3GKlRNQoJI 4Hyff43XByYhgA6BKSrLF2qOkaw3sf1ClcJB7sQTVVe/kwmytEI= -----END CERTIFICATE-----Generated at Fri Apr 11 03:26:41 2025 by rpki-client