$ rpki-client -vvf repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft File: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft (raw, json) Hash identifier: oPY9RxHTIFpVrGlDRIDPWW8bev5nERfYyzSLrJg9HWA= Subject key identifier: 55:21:53:54:09:40:7D:4C:4C:A1:57:BB:B8:09:CF:BE:89:3F:43:AA Authority key identifier: 25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 Certificate issuer: /CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Certificate serial: 4D99F0560C515B5C66DD37115D65EABC7D644907 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft Manifest number: 04B9 Signing time: Sat 23 Aug 2025 09:01:45 +0000 Manifest this update: Sat 23 Aug 2025 08:56:45 +0000 Manifest next update: Tue 26 Aug 2025 12:10:45 +0000 Files and hashes: 1: 2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl (hash: g658QBYmiihZR638NNjblFo6973v7Tu/Dp8l7IN6NJs=) 2: 3130332e3134352e31352e302f32342d3234203d3e20313339343338.roa (hash: alDRN92tlwgNSOsmGcO4bYs5k2yVLt0hg1F97xm610Y=) 3: 3130332e3134352e31342e302f32332d3234203d3e20313339343338.roa (hash: sGuZ949AervQFXJY8lGdE9UQu3pLwaxX5H+2ASfBYqU=) 4: 3130332e3134352e31342e302f32342d3234203d3e20313339343338.roa (hash: igZUGj9WZ1hy1WLn/uUmoBiqqH+6kXF5u53eZj34KGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:99:f0:56:0c:51:5b:5c:66:dd:37:11:5d:65:ea:bc:7d:64:49:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552240EFFEE2F60F5684DD03EDE49372EBD2A17 Validity Not Before: Aug 23 08:56:45 2025 GMT Not After : Aug 26 12:10:45 2025 GMT Subject: CN=5521535409407D4C4CA157BBB809CFBE893F43AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:c3:a2:4e:5f:ba:9f:2b:a4:55:90:a9:3b: f5:77:9e:b0:cf:42:98:44:da:97:b0:2d:48:e2:a7: 21:7d:3e:c3:cb:c8:99:77:26:ba:04:12:43:49:9a: 1b:c0:cf:1b:83:f4:ce:25:0b:41:cd:56:a3:78:f1: f5:b5:ab:a8:64:b2:85:2f:15:76:c5:04:ac:e4:0c: 2d:95:76:1c:2d:31:a6:4a:c1:02:b5:ba:29:e5:48: 57:d4:8f:7c:73:4b:5f:6c:6d:c8:e6:01:3b:52:75: b7:a9:0d:39:90:45:39:23:30:91:8b:88:84:bc:4f: ac:c1:b5:88:bf:71:01:9b:e8:df:48:8b:d1:67:1d: bd:8b:d9:3a:4f:94:62:cd:7f:71:9e:94:f5:39:0b: e4:9d:1d:a6:d7:ef:d5:26:d0:7b:f4:26:b7:d5:c5: f7:ea:c1:2d:5f:e3:ac:dc:46:cf:30:6d:f8:9d:d3: 8f:87:cd:6b:be:04:63:5d:82:2e:54:c9:b7:05:d1: 62:5d:c8:23:12:b1:c5:66:19:3c:c9:d7:1d:ed:db: 47:30:5b:3a:b9:ab:d3:b8:9f:6b:70:94:34:6a:0b: 13:d7:d4:f1:a1:ae:33:92:ca:fe:35:3f:d5:53:22: 3c:19:49:27:23:05:71:08:b6:56:be:c4:c4:69:48: 18:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:21:53:54:09:40:7D:4C:4C:A1:57:BB:B8:09:CF:BE:89:3F:43:AA X509v3 Authority Key Identifier: keyid:25:52:24:0E:FF:EE:2F:60:F5:68:4D:D0:3E:DE:49:37:2E:BD:2A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2004233f-bb2c-47d7-901c-e3c82f8d423c/0/2552240EFFEE2F60F5684DD03EDE49372EBD2A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:51:8f:59:a6:31:a2:9b:8f:1a:d8:30:5a:18:95:45:a2:fe: a8:66:23:42:59:83:4d:a6:ac:55:a4:9d:55:ad:71:f4:84:10: 90:bc:8b:7d:61:e2:a0:13:46:82:53:a5:67:7f:99:d2:fe:d0: 8c:6f:59:ee:e2:15:fc:48:c9:3f:c2:9f:1d:28:e1:ac:e1:69: f7:6a:ce:b9:d2:78:7e:81:32:9e:9d:b7:95:eb:c5:ac:16:dd: 1d:7f:66:f6:8f:17:42:fa:1a:be:a8:6c:e1:a3:d0:64:0f:b7: 7e:b5:72:bf:cd:b4:80:6a:e7:06:c6:03:c0:74:ad:6a:81:48: 5e:35:7f:b6:96:e8:e9:aa:b9:f9:40:56:17:b7:21:d7:c3:7a: 08:69:60:01:17:d4:36:08:af:10:b3:10:1a:73:eb:0b:18:cd: 2b:59:dc:d2:7f:67:f0:2f:29:b1:23:43:d0:ae:e0:b1:75:a0: 3b:d1:f3:46:4a:15:b0:d6:13:9c:93:a5:73:e5:e7:90:ff:03: 0f:71:18:d7:c9:63:3d:4e:49:c8:5a:1a:e2:c7:ca:5d:de:e1: 4f:2e:35:d1:0f:d4:c2:d6:e4:96:ab:ca:f6:b2:0f:4e:f7:44: a5:6f:9f:49:6f:ff:e7:fb:9a:94:59:b4:54:45:d9:b0:92:20: f8:dd:03:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZnwVgxRW1xm3TcRXWXqvH1kSQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5Mzcy RUJEMkExNzAeFw0yNTA4MjMwODU2NDVaFw0yNTA4MjYxMjEwNDVaMDMxMTAvBgNV BAMTKDU1MjE1MzU0MDk0MDdENEM0Q0ExNTdCQkI4MDlDRkJFODkzRjQzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOMOiTl+6nyukVZCpO/V3nrDP QphE2pewLUjipyF9PsPLyJl3JroEEkNJmhvAzxuD9M4lC0HNVqN48fW1q6hksoUv FXbFBKzkDC2VdhwtMaZKwQK1uinlSFfUj3xzS19sbcjmATtSdbepDTmQRTkjMJGL iIS8T6zBtYi/cQGb6N9Ii9FnHb2L2TpPlGLNf3GelPU5C+SdHabX79Um0Hv0JrfV xffqwS1f46zcRs8wbfid04+HzWu+BGNdgi5UybcF0WJdyCMSscVmGTzJ1x3t20cw Wzq5q9O4n2twlDRqCxPX1PGhrjOSyv41P9VTIjwZSScjBXEItla+xMRpSBi/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVSFTVAlAfUxMoVe7uAnPvok/Q6owHwYDVR0j BBgwFoAUJVIkDv/uL2D1aE3QPt5JNy69KhcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDA0MjMzZi1iYjJjLTQ3ZDctOTAxYy1lM2M4MmY4ZDQyM2MvMC8yNTUyMjQwRUZG RUUyRjYwRjU2ODRERDAzRURFNDkzNzJFQkQyQTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5MzcyRUJE MkExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAwNDIzM2YtYmIyYy00N2Q3LTkw MWMtZTNjODJmOGQ0MjNjLzAvMjU1MjI0MEVGRkVFMkY2MEY1Njg0REQwM0VERTQ5 MzcyRUJEMkExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFRj1mmMaKbjxrYMFoYlUWi/qhmI0JZg02m rFWknVWtcfSEEJC8i31h4qATRoJTpWd/mdL+0IxvWe7iFfxIyT/Cnx0o4azhafdq zrnSeH6BMp6dt5XrxawW3R1/ZvaPF0L6Gr6obOGj0GQPt361cr/NtIBq5wbGA8B0 rWqBSF41f7aW6OmquflAVhe3IdfDeghpYAEX1DYIrxCzEBpz6wsYzStZ3NJ/Z/Av KbEjQ9Cu4LF1oDvR80ZKFbDWE5yTpXPl55D/Aw9xGNfJYz1OSchaGuLHyl3e4U8u NdEP1MLW5JaryvayD073RKVvn0lv/+f7mpRZtFRF2bCSIPjdA3M= -----END CERTIFICATE-----Generated at Sat Aug 23 12:20:03 2025 by rpki-client