$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: ExSQ1jl30P6jf58muN30ufxuYgUEJl2oiTh18qripGs= Subject key identifier: FA:4C:E8:E6:E6:AC:5B:35:69:4C:C6:39:AF:62:E5:12:42:E8:02:36 Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 5C5724368204BD337D85151022DAD9C0C3106548 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 04A2 Signing time: Tue 01 Jul 2025 21:01:42 +0000 Manifest this update: Tue 01 Jul 2025 20:56:42 +0000 Manifest next update: Sat 05 Jul 2025 07:42:42 +0000 Files and hashes: 1: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: tgNQB4c9hcy/Gh34maXS0M90gZEPb/e8a4yV1dOTXgY=) 2: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: alDRN92tlwgNSOsmGcO4bYs5k2yVLt0hg1F97xm610Y=) 3: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: igZUGj9WZ1hy1WLn/uUmoBiqqH+6kXF5u53eZj34KGg=) 4: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: sGuZ949AervQFXJY8lGdE9UQu3pLwaxX5H+2ASfBYqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 07:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:57:24:36:82:04:bd:33:7d:85:15:10:22:da:d9:c0:c3:10:65:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Jul 1 20:56:42 2025 GMT Not After : Jul 5 07:42:42 2025 GMT Subject: CN=FA4CE8E6E6AC5B35694CC639AF62E51242E80236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a7:d8:3b:a7:69:31:fd:04:0b:f1:f7:48:89: bd:ba:cd:10:95:7b:a1:38:4b:92:9b:a7:ed:a2:44: 08:2e:d2:d5:ba:9e:89:e8:6a:9a:b7:c7:e3:be:0a: aa:3b:71:e4:45:70:8d:96:6d:90:34:23:19:9c:f2: ae:01:de:8a:e8:8c:cb:0a:ac:93:f7:74:4f:f8:9b: 43:ee:f7:70:3f:e8:75:b3:42:7d:eb:b6:c6:9b:f6: e3:89:3f:cc:b5:d8:bd:84:3f:0a:61:6d:1b:5a:d7: f7:d2:df:37:e2:89:71:61:60:f1:79:60:6f:5a:86: 9e:59:68:0f:8b:69:11:e8:1f:c2:2a:0c:f1:1d:17: d3:69:63:5b:3e:57:93:74:b7:b7:1e:d1:9d:86:c8: ac:3d:61:3f:27:97:cd:73:17:72:4e:a8:59:d6:21: 1e:5d:2c:0c:81:a3:2f:e5:37:39:8c:53:d8:96:e6: 4a:6a:dd:10:5b:e4:74:e4:cd:71:1a:41:22:e2:c5: d6:19:5a:7e:34:c9:61:38:f4:0e:0c:db:cb:64:5a: fa:2f:ba:f9:30:88:5f:de:84:69:24:c7:1d:36:ed: df:cd:e6:51:54:a5:04:f1:c4:ce:8e:0b:78:88:2c: fb:e1:49:3d:ef:aa:69:c1:dc:92:57:8a:c1:5d:fe: cf:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4C:E8:E6:E6:AC:5B:35:69:4C:C6:39:AF:62:E5:12:42:E8:02:36 X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:87:42:2b:be:1a:20:9d:ac:5c:81:20:0e:e9:fa:d3:25:25: 22:06:d5:99:9d:5d:f4:78:35:d0:22:b2:37:ea:af:84:4d:f3: 58:4e:b2:88:cc:30:aa:f9:27:df:3b:d9:c3:6d:ae:cd:1c:77: be:8d:be:84:eb:39:ab:11:56:69:6b:5b:51:b1:49:6e:2e:82: bb:5d:7f:90:91:92:d6:ed:76:07:42:28:00:61:25:25:aa:28: 3b:0b:37:36:ce:59:7d:00:64:03:71:77:3e:3d:74:bb:b0:14: 93:68:f4:71:9c:cf:12:68:5c:44:cf:56:5e:69:f7:b7:dc:4c: 38:03:22:2a:00:43:e6:2a:bc:35:86:89:9a:80:c6:2d:3f:43: c3:5b:21:b7:c7:8a:fe:ed:d1:a1:8f:37:10:65:e5:6e:77:0e: b5:95:8a:04:eb:14:50:0b:27:0f:df:43:b6:2f:95:3d:f9:d9: cf:ae:2a:f7:8a:cb:d5:99:a8:db:31:26:2b:ad:2a:f0:6c:ee: e4:68:51:0f:17:bf:7f:0c:72:04:3f:95:23:81:46:f0:f2:a0: 77:15:59:f6:83:77:88:6a:b0:42:d2:0c:d6:7a:ab:09:cb:dc: db:00:d5:47:fb:75:51:0a:dc:7d:51:89:c4:c4:7a:34:1c:54: 25:ce:f5:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFckNoIEvTN9hRUQItrZwMMQZUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNTA3MDEyMDU2NDJaFw0yNTA3MDUwNzQyNDJaMDMxMTAvBgNV BAMTKEZBNENFOEU2RTZBQzVCMzU2OTRDQzYzOUFGNjJFNTEyNDJFODAyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDip9g7p2kx/QQL8fdIib26zRCV e6E4S5Kbp+2iRAgu0tW6nonoapq3x+O+Cqo7ceRFcI2WbZA0Ixmc8q4B3orojMsK rJP3dE/4m0Pu93A/6HWzQn3rtsab9uOJP8y12L2EPwphbRta1/fS3zfiiXFhYPF5 YG9ahp5ZaA+LaRHoH8IqDPEdF9NpY1s+V5N0t7ce0Z2GyKw9YT8nl81zF3JOqFnW IR5dLAyBoy/lNzmMU9iW5kpq3RBb5HTkzXEaQSLixdYZWn40yWE49A4M28tkWvov uvkwiF/ehGkkxx027d/N5lFUpQTxxM6OC3iILPvhST3vqmnB3JJXisFd/s8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+kzo5uasWzVpTMY5r2LlEkLoAjYwHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeHQiu+GiCdrFyBIA7p+tMlJSIG1ZmdXfR4 NdAisjfqr4RN81hOsojMMKr5J9872cNtrs0cd76NvoTrOasRVmlrW1GxSW4ugrtd f5CRktbtdgdCKABhJSWqKDsLNzbOWX0AZANxdz49dLuwFJNo9HGczxJoXETPVl5p 97fcTDgDIioAQ+YqvDWGiZqAxi0/Q8NbIbfHiv7t0aGPNxBl5W53DrWVigTrFFAL Jw/fQ7YvlT352c+uKveKy9WZqNsxJiutKvBs7uRoUQ8Xv38McgQ/lSOBRvDyoHcV WfaDd4hqsELSDNZ6qwnL3NsA1Uf7dVEK3H1RicTEejQcVCXO9Zs= -----END CERTIFICATE-----Generated at Fri Jul 4 06:00:21 2025 by rpki-client