$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: M81s/jh87Ivv6KgwkeXuwmvaSO/4YSLDPVv0wY4phLY= Subject key identifier: 7F:53:07:D1:2E:6F:A6:D7:06:CD:9C:1E:0C:3A:C2:41:AF:91:38:63 Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 7F64A27D7BFA7856DC10D7642F27D2D588B542F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: 8C Signing time: Wed 02 Jul 2025 03:02:10 +0000 Manifest this update: Wed 02 Jul 2025 02:57:10 +0000 Manifest next update: Sat 05 Jul 2025 13:15:10 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: +29j4dB5sYl/gspaaNEAg8TxNtYm4Yr/z9OIF7tBdjU=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: 8/2hNS7guiTYFXlr56GlGjm1J2B86v7siNi30CfEDuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 13:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:64:a2:7d:7b:fa:78:56:dc:10:d7:64:2f:27:d2:d5:88:b5:42:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Jul 2 02:57:10 2025 GMT Not After : Jul 5 13:15:10 2025 GMT Subject: CN=7F5307D12E6FA6D706CD9C1E0C3AC241AF913863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d4:53:2c:0c:dc:7f:13:4d:ca:05:22:de:c7: ec:85:97:57:9d:c2:fb:ab:6e:23:26:73:6b:9a:b6: cc:a1:ba:ea:47:6c:74:42:03:ad:2f:4c:f9:18:be: 2d:5d:0f:39:82:61:1a:29:ad:62:7e:d3:c1:5a:0a: 20:53:17:8d:4d:20:ac:42:4d:19:08:e8:ff:f4:64: 84:c5:4a:fe:f5:4b:9d:32:4d:4d:14:39:67:be:3d: cb:d7:40:c3:80:18:0f:65:9f:eb:93:27:e0:62:64: ef:bd:57:fb:cc:4a:e0:e0:21:12:73:57:f7:9a:de: 33:7a:4c:15:24:7a:fb:53:0a:6e:94:18:16:ad:52: 04:b1:ee:19:40:6a:07:51:81:43:98:06:6b:90:6b: c3:a2:8c:aa:70:8a:de:13:74:f7:21:40:3b:c6:16: f0:95:26:56:a4:a7:0a:95:db:0a:bb:f5:35:69:78: e2:47:24:59:7b:35:25:ea:22:fc:25:f8:ea:94:91: ff:e1:39:98:85:cc:d6:3c:96:1a:09:b8:5d:46:22: d4:80:17:71:e2:71:fd:0b:f7:0e:8c:e2:b5:fe:51: 1d:b7:86:dd:6b:3f:b3:80:f0:ad:9d:2f:f6:2e:59: a4:e4:8d:94:cb:67:a9:79:24:2b:1e:59:5b:02:4e: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:53:07:D1:2E:6F:A6:D7:06:CD:9C:1E:0C:3A:C2:41:AF:91:38:63 X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:20:cf:05:6f:0a:ba:d8:ea:a0:3e:9f:60:39:16:a7:47:f2: 62:5e:a7:25:34:80:02:20:9a:77:4c:b9:40:7c:b8:38:28:85: 08:46:5f:a0:c8:41:58:ae:92:07:f1:62:e9:73:b0:23:a9:24: 34:7b:c7:dc:37:5d:16:a2:6f:45:d7:e6:6b:e5:ee:e5:92:cf: d5:f3:c3:27:68:15:c1:dc:f6:1e:04:c5:16:4c:17:98:9f:4f: 50:60:fa:63:2d:89:22:a0:dc:da:65:bd:24:03:28:b1:e7:24: 68:84:56:60:c4:44:f1:49:0f:ec:27:0e:ee:e4:db:26:09:0e: c4:2b:d2:a0:b3:dd:fb:13:7e:90:b6:8e:2a:9e:75:82:28:ed: 15:fc:ae:4b:32:33:ab:7b:fa:18:4a:1e:30:2b:69:37:d3:84: 2a:f9:18:1f:07:d4:cf:44:5b:85:53:bb:ef:b0:a0:d0:ea:d7: 27:02:1c:8f:59:69:2b:82:04:1b:80:08:c5:10:6b:d9:66:6b: bb:f4:a5:a0:1b:80:f4:dd:36:aa:a2:bb:a1:a5:27:83:85:69: 85:b1:ac:67:83:ee:f6:92:9c:a4:3a:39:f3:6f:3c:cb:b1:ed: 7d:59:f3:c0:2f:26:fe:fd:ca:a2:9a:03:d8:91:ca:fb:f9:12: d8:41:cc:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2SifXv6eFbcENdkLyfS1Yi1QvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTA3MDIwMjU3MTBaFw0yNTA3MDUxMzE1MTBaMDMxMTAvBgNV BAMTKDdGNTMwN0QxMkU2RkE2RDcwNkNEOUMxRTBDM0FDMjQxQUY5MTM4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb1FMsDNx/E03KBSLex+yFl1ed wvurbiMmc2uatsyhuupHbHRCA60vTPkYvi1dDzmCYRoprWJ+08FaCiBTF41NIKxC TRkI6P/0ZITFSv71S50yTU0UOWe+PcvXQMOAGA9ln+uTJ+BiZO+9V/vMSuDgIRJz V/ea3jN6TBUkevtTCm6UGBatUgSx7hlAagdRgUOYBmuQa8OijKpwit4TdPchQDvG FvCVJlakpwqV2wq79TVpeOJHJFl7NSXqIvwl+OqUkf/hOZiFzNY8lhoJuF1GItSA F3Hicf0L9w6M4rX+UR23ht1rP7OA8K2dL/YuWaTkjZTLZ6l5JCseWVsCTk1tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf1MH0S5vptcGzZweDDrCQa+ROGMwHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIgzwVvCrrY6qA+n2A5FqdH8mJepyU0gAIg mndMuUB8uDgohQhGX6DIQViukgfxYulzsCOpJDR7x9w3XRaib0XX5mvl7uWSz9Xz wydoFcHc9h4ExRZMF5ifT1Bg+mMtiSKg3NplvSQDKLHnJGiEVmDERPFJD+wnDu7k 2yYJDsQr0qCz3fsTfpC2jiqedYIo7RX8rksyM6t7+hhKHjAraTfThCr5GB8H1M9E W4VTu++woNDq1ycCHI9ZaSuCBBuACMUQa9lma7v0paAbgPTdNqqiu6GlJ4OFaYWx rGeD7vaSnKQ6OfNvPMux7X1Z88AvJv79yqKaA9iRyvv5EthBzPA= -----END CERTIFICATE-----Generated at Wed Jul 2 16:28:24 2025 by rpki-client