$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: gwJUWAqDH26BlGzGNhwXbhdSndlqulnJGIUMYLVO0OY= Subject key identifier: 8B:5A:B1:90:F2:AF:4B:28:21:B0:74:03:7A:FF:14:21:C1:C1:FC:C7 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 13BFF22D33169E2B6E8452164058CE476E144227 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: 83 Signing time: Wed 11 Jun 2025 06:12:13 +0000 Manifest this update: Wed 11 Jun 2025 06:07:13 +0000 Manifest next update: Sat 14 Jun 2025 10:25:13 +0000 Files and hashes: 1: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: 8/2hNS7guiTYFXlr56GlGjm1J2B86v7siNi30CfEDuM=) 2: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: C1rl9I/LKUKDxw1bFNAHsovcDbebBZ6zOYxNspI/rB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 10:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:bf:f2:2d:33:16:9e:2b:6e:84:52:16:40:58:ce:47:6e:14:42:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Jun 11 06:07:13 2025 GMT Not After : Jun 14 10:25:13 2025 GMT Subject: CN=8B5AB190F2AF4B2821B074037AFF1421C1C1FCC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:0c:f5:2a:65:cd:e6:bd:88:48:d1:52:36: c5:d6:92:66:12:52:ab:3e:bd:9e:d7:d6:7d:4b:02: 1b:3f:60:ab:56:15:81:a4:f6:7d:87:4e:d2:3d:1b: a5:2b:1e:a5:27:73:6d:a4:62:e1:9c:36:83:d9:20: 8a:0b:d5:e4:ac:13:82:53:8e:54:1b:57:31:4e:a9: 9c:b1:dc:ab:82:3d:aa:15:55:39:14:db:ca:61:a9: 4d:5c:f6:fb:1b:90:cd:aa:5e:ef:9b:20:7c:ee:c7: 0d:59:98:6a:66:da:2b:6c:fc:79:df:0c:08:53:2a: 83:9a:23:1f:12:37:91:15:86:a1:9b:c5:a7:69:9e: 58:d4:be:54:53:60:66:8f:31:26:ef:39:ba:99:50: 80:d9:80:ba:f6:c9:1d:98:c5:55:ad:20:53:07:18: d3:26:04:a5:a2:3a:da:da:c1:fc:de:b2:b9:09:17: a0:ab:4a:15:84:50:a6:20:a2:40:57:92:08:a5:67: dd:25:1f:78:b5:5b:18:cc:ba:41:40:88:6b:cc:63: 17:81:4f:1e:90:3f:91:5f:60:cb:a1:0e:d7:b0:0c: 55:34:84:58:83:0c:71:13:e0:79:e4:df:0c:76:34: 7a:c0:80:58:1e:ea:17:9f:c3:11:ad:8b:7f:b9:c8: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5A:B1:90:F2:AF:4B:28:21:B0:74:03:7A:FF:14:21:C1:C1:FC:C7 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:15:e9:30:b2:df:bd:49:07:6d:34:32:2d:fa:bd:7d:f0:72: 34:7b:59:f4:c0:ce:81:5b:26:8b:a6:85:18:6e:f5:c1:2f:93: ab:e3:f5:a7:49:18:73:4a:76:e6:59:a7:02:d5:37:7e:0e:73: b5:e4:47:8c:18:ec:46:15:0b:08:09:0b:a9:e7:7a:92:ef:85: a0:5a:98:5a:29:fd:78:98:04:1b:e0:58:f9:31:df:05:e6:56: f6:b9:da:3d:cf:e1:41:b2:d9:a7:6e:f4:7e:ae:85:14:08:01: 93:04:63:88:97:04:da:f6:7e:07:aa:dd:17:32:20:9d:89:70: d7:8f:92:90:83:a4:be:c5:52:27:43:88:ab:80:12:75:5b:35: 59:06:de:59:54:49:94:41:1e:c3:ba:ce:72:38:27:c0:a8:22: 11:cb:98:95:05:30:f1:68:fa:5e:fd:42:23:79:2b:56:ee:da: e5:f8:25:c2:aa:4f:1e:41:4f:bc:89:ec:c3:83:7f:b7:81:2a: ac:8b:63:49:d0:37:50:6c:f3:b2:5e:12:5b:03:47:ca:1c:05: 27:aa:3c:af:2e:85:fe:c6:35:eb:53:51:e3:7e:85:ac:32:39: eb:43:fd:46:85:03:a4:b8:68:b4:04:e6:61:51:d5:9f:50:85: 18:ec:c6:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7/yLTMWnituhFIWQFjOR24UQicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTA2MTEwNjA3MTNaFw0yNTA2MTQxMDI1MTNaMDMxMTAvBgNV BAMTKDhCNUFCMTkwRjJBRjRCMjgyMUIwNzQwMzdBRkYxNDIxQzFDMUZDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMzAz1KmXN5r2ISNFSNsXWkmYS Uqs+vZ7X1n1LAhs/YKtWFYGk9n2HTtI9G6UrHqUnc22kYuGcNoPZIIoL1eSsE4JT jlQbVzFOqZyx3KuCPaoVVTkU28phqU1c9vsbkM2qXu+bIHzuxw1ZmGpm2its/Hnf DAhTKoOaIx8SN5EVhqGbxadpnljUvlRTYGaPMSbvObqZUIDZgLr2yR2YxVWtIFMH GNMmBKWiOtrawfzesrkJF6CrShWEUKYgokBXkgilZ90lH3i1WxjMukFAiGvMYxeB Tx6QP5FfYMuhDtewDFU0hFiDDHET4Hnk3wx2NHrAgFge6hefwxGti3+5yJRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi1qxkPKvSyghsHQDev8UIcHB/McwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKAV6TCy371JB200Mi36vX3wcjR7WfTAzoFb JoumhRhu9cEvk6vj9adJGHNKduZZpwLVN34Oc7XkR4wY7EYVCwgJC6nnepLvhaBa mFop/XiYBBvgWPkx3wXmVva52j3P4UGy2adu9H6uhRQIAZMEY4iXBNr2fgeq3Rcy IJ2JcNePkpCDpL7FUidDiKuAEnVbNVkG3llUSZRBHsO6znI4J8CoIhHLmJUFMPFo +l79QiN5K1bu2uX4JcKqTx5BT7yJ7MODf7eBKqyLY0nQN1Bs87JeElsDR8ocBSeq PK8uhf7GNetTUeN+hawyOetD/UaFA6S4aLQE5mFR1Z9QhRjsxqQ= -----END CERTIFICATE-----Generated at Thu Jun 12 08:05:54 2025 by rpki-client