$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: oMdJHm1c1S+S5qmu2kLqXHKhuiPDkwJujnlIKCrTj3E= Subject key identifier: 02:2E:C3:8E:6C:F7:66:58:19:A1:46:A5:CF:34:72:E3:5B:BA:37:94 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 330CE67E967C447B523728BFF4CC6C79FB144DC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: BC Signing time: Sun 19 Oct 2025 11:12:14 +0000 Manifest this update: Sun 19 Oct 2025 11:07:14 +0000 Manifest next update: Wed 22 Oct 2025 15:36:14 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: 5h0nJmj38fd9E81rhmFxpyXJqc9Kef66cUXBw/4ptyQ=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: p2JbTeALyG9aK8WKnnAwuAWEvzJMkTyQIFNlD05DkyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0c:e6:7e:96:7c:44:7b:52:37:28:bf:f4:cc:6c:79:fb:14:4d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Oct 19 11:07:14 2025 GMT Not After : Oct 22 15:36:14 2025 GMT Subject: CN=022EC38E6CF7665819A146A5CF3472E35BBA3794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1f:21:c4:59:c7:cd:2d:6d:80:ba:e8:45:2f: 18:da:79:7a:48:81:ca:2d:d6:9d:83:7e:94:80:5c: b1:59:42:56:0a:ba:af:b0:23:13:96:b7:eb:6d:60: f8:b5:12:a8:37:b0:ba:2d:e1:d2:9e:f4:25:26:8f: 64:2e:d2:1c:29:ad:d4:00:86:90:22:7b:9c:ad:14: 04:40:54:e3:ba:62:0b:69:2a:86:af:58:bb:f4:8d: 48:f1:97:ab:4d:de:d0:43:3b:6e:c5:6b:8f:30:0b: 96:dc:fe:95:d8:a7:58:05:f9:42:14:9c:6e:74:7c: 47:9c:a2:4a:94:47:19:1c:ab:70:9a:cd:03:bf:88: 3c:63:48:aa:12:85:d2:dd:35:47:25:d8:f2:88:26: f4:12:7f:f8:af:29:78:14:ee:c0:e6:3b:ab:48:3d: 2b:db:c0:99:e6:cd:fe:ae:9d:3a:f8:37:8e:ca:e2: ec:2b:4e:8b:3b:71:8a:1c:e1:db:bc:3f:69:8e:ef: a3:58:fa:02:20:8b:ea:67:99:06:e5:de:42:35:65: f5:a2:a3:4d:0d:df:2e:dd:45:c8:9b:e8:d9:54:e5: ac:5d:ea:c8:de:5c:8e:97:3a:ab:50:82:07:31:f5: 68:bb:89:d2:3d:c4:35:07:2f:c5:6a:bc:c8:27:23: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2E:C3:8E:6C:F7:66:58:19:A1:46:A5:CF:34:72:E3:5B:BA:37:94 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:46:a1:96:5c:45:9a:a5:1d:da:8c:50:b7:f9:d6:de:2a:4b: 36:2e:67:f8:42:d8:af:f4:d8:34:14:cb:7a:df:77:5a:a7:0b: 55:ee:88:fc:9e:e7:2a:58:5a:46:42:02:bf:b7:46:31:6a:77: a2:a8:88:51:83:dd:5a:13:9d:98:dd:01:fa:ce:1a:31:de:b7: 83:b5:76:bc:e3:ab:0b:d7:ff:5b:c6:71:94:3d:60:f7:ce:ed: 09:0e:3d:a2:b5:68:61:02:a3:83:f8:6c:8b:cd:06:19:bf:cc: d5:80:18:cb:86:06:e5:b9:e8:6c:90:39:1b:da:32:c0:ca:54: dd:dc:1d:b8:d8:43:68:a2:fe:48:cf:50:f0:35:b8:9b:ca:b3: a8:c8:06:5b:32:e7:86:ce:fa:5b:8d:c7:b0:c3:ef:4d:09:31: 7f:03:be:3f:d0:b4:ab:80:cf:ee:b0:28:71:f2:38:08:e7:a0: a5:96:23:70:ea:33:15:44:f6:c6:d0:73:a3:4a:6a:01:fa:39: a6:83:d4:0f:7f:35:7e:74:21:4d:b5:2c:68:cd:25:de:bc:37: 6f:28:a9:e6:3f:07:4b:2e:38:90:7d:6d:80:99:78:a9:bf:08: 29:c0:43:af:9e:ff:40:9d:2b:f6:97:f9:0f:e6:86:e8:a6:12: 40:6c:19:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMwzmfpZ8RHtSNyi/9MxsefsUTcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTEwMTkxMTA3MTRaFw0yNTEwMjIxNTM2MTRaMDMxMTAvBgNV BAMTKDAyMkVDMzhFNkNGNzY2NTgxOUExNDZBNUNGMzQ3MkUzNUJCQTM3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHHyHEWcfNLW2AuuhFLxjaeXpI gcot1p2DfpSAXLFZQlYKuq+wIxOWt+ttYPi1Eqg3sLot4dKe9CUmj2Qu0hwprdQA hpAie5ytFARAVOO6YgtpKoavWLv0jUjxl6tN3tBDO27Fa48wC5bc/pXYp1gF+UIU nG50fEecokqURxkcq3CazQO/iDxjSKoShdLdNUcl2PKIJvQSf/ivKXgU7sDmO6tI PSvbwJnmzf6unTr4N47K4uwrTos7cYoc4du8P2mO76NY+gIgi+pnmQbl3kI1ZfWi o00N3y7dRcib6NlU5axd6sjeXI6XOqtQggcx9Wi7idI9xDUHL8VqvMgnIxUpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAi7Djmz3ZlgZoUalzzRy41u6N5QwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABGoZZcRZqlHdqMULf51t4qSzYuZ/hC2K/0 2DQUy3rfd1qnC1XuiPye5ypYWkZCAr+3RjFqd6KoiFGD3VoTnZjdAfrOGjHet4O1 drzjqwvX/1vGcZQ9YPfO7QkOPaK1aGECo4P4bIvNBhm/zNWAGMuGBuW56GyQORva MsDKVN3cHbjYQ2ii/kjPUPA1uJvKs6jIBlsy54bO+luNx7DD700JMX8Dvj/QtKuA z+6wKHHyOAjnoKWWI3DqMxVE9sbQc6NKagH6OaaD1A9/NX50IU21LGjNJd68N28o qeY/B0suOJB9bYCZeKm/CCnAQ6+e/0CdK/aX+Q/mhuimEkBsGY0= -----END CERTIFICATE-----Generated at Mon Oct 20 16:27:29 2025 by rpki-client