$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: 2jFcJ6wdQ7BHd8QlFnpnWIJfVylLTbUXk1/SB4vQaNY= Subject key identifier: 3D:86:EB:59:0D:B0:4C:37:74:67:60:C9:64:45:1D:2B:0B:1B:79:A7 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 7B1C70336D4D18A7A429BEE377E28D7C3E6969C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: 75 Signing time: Sat 10 May 2025 18:12:15 +0000 Manifest this update: Sat 10 May 2025 18:07:15 +0000 Manifest next update: Tue 13 May 2025 18:41:15 +0000 Files and hashes: 1: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: 8/2hNS7guiTYFXlr56GlGjm1J2B86v7siNi30CfEDuM=) 2: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: GjRt3eWVX3ncCGdinkkFRvNBZYBV07RQISEd+wr3cg8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1c:70:33:6d:4d:18:a7:a4:29:be:e3:77:e2:8d:7c:3e:69:69:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: May 10 18:07:15 2025 GMT Not After : May 13 18:41:15 2025 GMT Subject: CN=3D86EB590DB04C37746760C964451D2B0B1B79A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c2:35:bd:c8:73:6d:68:2f:03:c3:ba:2a:b3: 1a:20:85:ac:70:09:e7:64:9b:71:39:1d:9d:23:73: b0:70:3c:05:03:04:ca:ad:5b:5f:bd:07:d9:e4:29: ca:5f:36:ab:7d:69:6f:fa:96:21:84:69:2f:ac:57: 6d:de:cc:68:05:72:9b:c3:b4:75:34:c1:6c:6b:b2: 77:34:96:4b:20:79:63:41:01:98:c3:98:c4:d6:db: b1:f4:6f:ee:87:f6:bb:61:5e:07:a5:51:82:ee:14: 78:89:55:54:b4:96:75:11:cd:72:24:a9:be:d3:87: 5f:ff:ed:74:db:35:48:87:65:3e:03:b6:ef:d1:72: 29:7b:31:48:b5:98:03:ca:d5:25:88:a6:1f:d3:fa: 20:82:f7:59:33:a9:a5:32:b7:be:85:9c:4f:c6:54: f3:23:4e:b3:e2:0c:d2:40:72:6f:03:79:02:ce:d7: e2:3a:96:9c:70:d1:dc:1c:95:78:97:c1:82:88:54: ec:2e:5e:1c:51:5b:0f:67:ba:00:fa:ea:11:08:44: bb:40:7b:45:88:87:c0:16:3a:d9:1d:a2:86:32:11: d3:34:d8:ee:d1:1e:6f:ed:1b:83:22:e0:f0:8b:38: a0:80:57:1b:47:ba:84:1b:43:20:37:50:26:3e:b1: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:86:EB:59:0D:B0:4C:37:74:67:60:C9:64:45:1D:2B:0B:1B:79:A7 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:57:3a:67:46:16:a5:2d:ef:bb:e7:83:2c:73:ad:57:63:5e: 21:6d:1c:72:4e:bc:a1:10:7f:ab:91:8e:6d:c4:ad:93:27:38: d5:05:e8:1b:83:86:c6:e4:69:0e:c8:33:cf:5e:d7:1e:20:e7: a7:f6:63:4d:68:05:c2:30:54:a9:8f:23:93:bc:00:91:64:a8: 10:0b:b6:5c:44:1b:02:56:2c:73:76:77:77:61:9f:42:fa:3a: e2:72:c1:83:45:cc:23:80:5b:9f:c8:03:e6:ff:ed:c3:88:1d: 7f:9a:8a:dc:8c:17:8f:da:d2:1b:9f:0b:3f:2e:44:da:ab:2d: 3a:ea:29:ee:82:22:ea:0c:80:37:88:45:e2:1e:a2:10:96:14: 87:7d:c1:f0:82:22:3d:f2:29:0a:cc:b3:98:b7:1b:db:80:34: 2c:4b:b6:ca:cf:16:9b:d4:eb:cc:0b:e0:3a:db:c2:a2:ad:40: 54:6a:95:9e:fa:66:bf:1f:4b:b4:07:15:37:32:13:6b:e0:0c: c2:ba:cb:be:f9:9b:e3:95:1f:90:5f:90:86:db:2a:88:01:cc: ca:8c:12:74:7c:e9:f4:f2:59:96:11:ec:78:32:40:75:a3:33: 80:72:77:ed:96:a3:88:c9:68:b4:da:c4:74:24:d9:57:4d:b4: 9c:a7:2c:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexxwM21NGKekKb7jd+KNfD5packwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTA1MTAxODA3MTVaFw0yNTA1MTMxODQxMTVaMDMxMTAvBgNV BAMTKDNEODZFQjU5MERCMDRDMzc3NDY3NjBDOTY0NDUxRDJCMEIxQjc5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjwjW9yHNtaC8Dw7oqsxoghaxw Cedkm3E5HZ0jc7BwPAUDBMqtW1+9B9nkKcpfNqt9aW/6liGEaS+sV23ezGgFcpvD tHU0wWxrsnc0lksgeWNBAZjDmMTW27H0b+6H9rthXgelUYLuFHiJVVS0lnURzXIk qb7Th1//7XTbNUiHZT4Dtu/Rcil7MUi1mAPK1SWIph/T+iCC91kzqaUyt76FnE/G VPMjTrPiDNJAcm8DeQLO1+I6lpxw0dwclXiXwYKIVOwuXhxRWw9nugD66hEIRLtA e0WIh8AWOtkdooYyEdM02O7RHm/tG4Mi4PCLOKCAVxtHuoQbQyA3UCY+sY7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPYbrWQ2wTDd0Z2DJZEUdKwsbeacwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpXOmdGFqUt77vngyxzrVdjXiFtHHJOvKEQ f6uRjm3ErZMnONUF6BuDhsbkaQ7IM89e1x4g56f2Y01oBcIwVKmPI5O8AJFkqBAL tlxEGwJWLHN2d3dhn0L6OuJywYNFzCOAW5/IA+b/7cOIHX+aityMF4/a0hufCz8u RNqrLTrqKe6CIuoMgDeIReIeohCWFId9wfCCIj3yKQrMs5i3G9uANCxLtsrPFpvU 68wL4DrbwqKtQFRqlZ76Zr8fS7QHFTcyE2vgDMK6y775m+OVH5BfkIbbKogBzMqM EnR86fTyWZYR7HgyQHWjM4Byd+2Wo4jJaLTaxHQk2VdNtJynLBo= -----END CERTIFICATE-----Generated at Mon May 12 16:32:12 2025 by rpki-client