$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: ynF+Smptx9Ldzv/2OnxKDCfuNgBCYkhFqVSWo/auEE4= Subject key identifier: 41:D2:A1:8B:BC:5F:FB:10:AB:6E:14:4E:DB:A1:58:BA:27:6E:5C:4D Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 19C6B158038CEE818877E23428E5A0DDE29A238F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: A3 Signing time: Fri 22 Aug 2025 22:02:15 +0000 Manifest this update: Fri 22 Aug 2025 21:57:15 +0000 Manifest next update: Tue 26 Aug 2025 06:53:15 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: R1tbmyZQl/RgWNZLiDuEFkDmN1J9Rri4qOAWNaPu73s=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: p2JbTeALyG9aK8WKnnAwuAWEvzJMkTyQIFNlD05DkyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c6:b1:58:03:8c:ee:81:88:77:e2:34:28:e5:a0:dd:e2:9a:23:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Aug 22 21:57:15 2025 GMT Not After : Aug 26 06:53:15 2025 GMT Subject: CN=41D2A18BBC5FFB10AB6E144EDBA158BA276E5C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:5a:c6:19:5f:78:d7:b7:9b:b2:1f:7f:d3: 4a:5b:78:a3:2e:84:97:e3:03:38:54:b8:6c:e2:05: 83:00:4a:68:e9:a5:fa:de:6d:54:09:7f:87:c3:c6: 2d:23:fe:7c:b1:8a:2e:fd:20:88:fb:89:c2:90:39: 24:2b:53:31:3e:86:3a:44:1f:68:95:02:2d:d1:11: 5a:13:5e:22:fc:54:e7:9d:e8:74:cf:60:dd:df:bb: 44:ea:ac:94:37:09:9d:13:f2:f7:6a:9f:37:19:2b: 78:39:20:e1:08:5e:60:38:dd:30:7b:23:ab:4e:d6: 67:5e:5e:eb:72:1e:96:7e:f5:f3:87:7d:56:9c:3d: 1c:a9:47:81:04:e1:81:57:5e:24:b8:22:54:00:5d: b4:66:36:ee:34:24:fd:0f:c8:ca:5c:68:fa:8d:d1: 29:c6:cc:15:b4:f7:fa:97:f8:08:7d:3b:4d:ff:7a: 50:1d:8a:29:2b:3a:83:ea:fa:58:0b:6d:9c:2f:ee: 48:5d:ab:82:5b:bc:8e:32:4e:fe:75:4b:46:ba:86: e7:c2:5c:d7:f3:04:73:4a:79:ae:6e:3b:80:05:7e: a0:72:0e:99:3e:bd:45:39:df:e2:b8:03:98:da:c1: ef:13:b1:f7:08:1f:43:99:88:37:67:d1:8d:0d:bb: 49:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D2:A1:8B:BC:5F:FB:10:AB:6E:14:4E:DB:A1:58:BA:27:6E:5C:4D X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:30:3c:0d:e8:a1:eb:55:9c:ac:19:c2:5d:7d:1a:a3:0d:7c: c6:76:6e:a1:ea:53:b8:ac:6e:30:3b:2f:fd:cb:fa:4d:cb:ed: db:ad:81:ab:e4:85:61:55:95:b7:1d:25:97:41:33:bd:83:12: 03:74:69:11:32:e6:83:26:d6:02:b0:f7:d0:88:58:e7:97:14: 60:4b:4e:db:4b:de:a4:42:f6:4e:23:ef:0d:8a:13:bd:6a:e8: 98:a6:1a:c2:d4:88:17:bd:9f:07:5c:05:8a:c2:fd:5e:b7:06: 94:ec:e3:fb:fd:a8:c7:74:7a:fb:bd:01:af:92:93:a1:04:5a: 7c:db:f3:17:15:4d:72:50:61:49:cb:88:70:41:fc:79:3f:0a: 54:b2:ec:f5:27:59:35:97:3b:44:01:29:eb:68:f9:1b:e6:42: dc:44:12:69:b3:01:24:63:ce:39:74:8f:d8:e6:44:9e:dd:94: 81:67:da:37:d9:16:3d:00:6c:28:03:02:bb:85:54:7c:3c:4a: d1:9a:42:6b:fd:0c:d5:b9:dc:d2:a2:bd:f9:8d:f2:14:4c:3e: 6e:ef:34:26:9f:60:b6:24:8f:be:63:31:7e:dc:e0:1d:37:bd: 59:80:f5:ec:01:a4:b4:c3:b5:e3:64:76:76:90:57:48:9f:aa: 54:33:cc:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGcaxWAOM7oGId+I0KOWg3eKaI48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNTA4MjIyMTU3MTVaFw0yNTA4MjYwNjUzMTVaMDMxMTAvBgNV BAMTKDQxRDJBMThCQkM1RkZCMTBBQjZFMTQ0RURCQTE1OEJBMjc2RTVDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCouVrGGV9417ebsh9/00pbeKMu hJfjAzhUuGziBYMASmjppfrebVQJf4fDxi0j/nyxii79IIj7icKQOSQrUzE+hjpE H2iVAi3REVoTXiL8VOed6HTPYN3fu0TqrJQ3CZ0T8vdqnzcZK3g5IOEIXmA43TB7 I6tO1mdeXutyHpZ+9fOHfVacPRypR4EE4YFXXiS4IlQAXbRmNu40JP0PyMpcaPqN 0SnGzBW09/qX+Ah9O03/elAdiikrOoPq+lgLbZwv7khdq4JbvI4yTv51S0a6hufC XNfzBHNKea5uO4AFfqByDpk+vUU53+K4A5jawe8TsfcIH0OZiDdn0Y0Nu0lPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQdKhi7xf+xCrbhRO26FYuiduXE0wHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8wPA3ooetVnKwZwl19GqMNfMZ2bqHqU7is bjA7L/3L+k3L7dutgavkhWFVlbcdJZdBM72DEgN0aREy5oMm1gKw99CIWOeXFGBL TttL3qRC9k4j7w2KE71q6JimGsLUiBe9nwdcBYrC/V63BpTs4/v9qMd0evu9Aa+S k6EEWnzb8xcVTXJQYUnLiHBB/Hk/ClSy7PUnWTWXO0QBKeto+RvmQtxEEmmzASRj zjl0j9jmRJ7dlIFn2jfZFj0AbCgDAruFVHw8StGaQmv9DNW53NKivfmN8hRMPm7v NCafYLYkj75jMX7c4B03vVmA9ewBpLTDteNkdnaQV0ifqlQzzG8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:51 2025 by rpki-client