$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: NgZ6Nl/eLNz791FLRtPe/xCnih7Iw2ZzYswI6lZkFyo= Subject key identifier: A2:CE:55:15:38:1A:41:B0:80:2D:56:26:30:72:2D:27:CF:3B:11:41 Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 1ED28A8206CDCEAC9BB144BF16AC2E8841B2DE66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 02F6 Signing time: Wed 06 Aug 2025 21:30:44 +0000 Manifest this update: Wed 06 Aug 2025 21:25:44 +0000 Manifest next update: Sun 10 Aug 2025 02:04:44 +0000 Files and hashes: 1: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 5QR0rWF2IYw3MMT+ABenqub20374tAd3/MqhQ2MqKAw=) 2: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: Akeyz6ri91fX28o8Z7z5bSQV1SRLxS0pqsPnT6UO2Xk=) 3: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: MWqeWjmTixAOn+Gc9tFKycHUfhr7BF4hgDw5O4FK2PY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d2:8a:82:06:cd:ce:ac:9b:b1:44:bf:16:ac:2e:88:41:b2:de:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Aug 6 21:25:44 2025 GMT Not After : Aug 10 02:04:44 2025 GMT Subject: CN=A2CE5515381A41B0802D562630722D27CF3B1141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d3:0b:24:f7:4d:a8:fc:83:72:89:e8:94:cf: 95:49:1b:10:1f:09:fd:3b:5c:12:bb:0d:6a:ea:2b: 12:d8:bb:7f:b4:39:95:d9:48:3e:4c:a9:20:40:df: 2b:23:4c:cd:71:44:81:41:6a:9b:41:fb:29:41:f6: 0e:9a:8c:c5:d1:5d:86:d7:92:1c:f4:af:6e:cd:1a: 83:d5:06:3f:d2:0f:13:c3:c4:65:74:d2:fd:1e:5f: b1:c1:45:58:55:6a:21:c6:20:b3:ec:52:cf:fa:7e: 49:46:dd:b0:3b:9b:3a:5e:8e:f4:ac:55:c7:9c:fe: 86:71:6e:58:b7:66:d5:c8:93:d3:3e:e6:bd:17:90: e4:bf:4d:53:e3:ed:a0:27:de:6c:b5:f6:5a:01:37: b3:5f:d7:c6:c8:d8:14:58:ed:2f:d9:9a:fb:db:31: 2f:1a:fa:e6:e8:79:49:da:dd:6e:ba:c1:23:fe:e5: dd:75:ac:97:9e:01:83:0f:da:d3:05:97:a6:0b:26: 6d:ac:bc:76:63:ab:ab:cf:51:58:c9:15:c6:f0:bf: 95:69:a3:a4:f0:55:da:a6:48:6a:37:5a:28:9e:29: 92:db:80:2b:2d:e2:62:35:ba:4a:05:5e:d4:81:be: bf:1f:6b:ef:f3:87:d8:83:7f:03:3d:01:9a:3a:53: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CE:55:15:38:1A:41:B0:80:2D:56:26:30:72:2D:27:CF:3B:11:41 X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:53:6a:e4:f6:b9:78:6b:0d:f4:08:1b:48:b2:bf:37:69:20: 06:9f:39:91:bc:ab:e0:2f:8a:a7:27:86:e3:b0:78:bf:1b:d0: 60:70:e2:ca:01:a0:9d:4c:53:53:c3:7a:ee:2f:b4:a6:6b:5d: af:be:40:25:0f:b2:84:6b:3b:dc:a7:2b:bc:c3:4a:41:31:56: 62:ac:13:e7:20:ad:bd:f0:c6:12:47:b0:c9:8d:27:1c:1e:90: ba:f4:92:7a:34:e9:1f:86:62:4b:b8:77:db:8b:16:18:6a:14: 3a:d6:48:6d:d7:e7:0d:26:3e:da:b5:ce:05:2f:7a:a0:95:ee: ed:56:24:68:2e:64:f5:71:f0:42:e4:ae:65:1a:c8:89:b3:2e: da:8a:49:12:c9:41:1a:c7:66:7a:d3:fe:5c:93:11:90:4c:6a: c8:e0:36:04:6b:f9:ac:94:f4:5b:40:4a:a9:c2:bf:fa:82:c7: 24:d7:79:12:0d:bd:a4:ee:e0:92:42:52:d4:cb:c0:b8:c0:27: b0:04:5d:42:ad:60:3f:01:64:5f:1d:8b:6e:7f:32:87:b9:41: 93:f0:84:19:e1:9f:34:fa:25:f5:fa:f6:89:33:9f:e2:a9:2b: 13:e3:88:a2:22:d4:49:ee:4e:bb:61:ff:4b:d4:89:14:10:0d: aa:4b:1f:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtKKggbNzqybsUS/FqwuiEGy3mYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNTA4MDYyMTI1NDRaFw0yNTA4MTAwMjA0NDRaMDMxMTAvBgNV BAMTKEEyQ0U1NTE1MzgxQTQxQjA4MDJENTYyNjMwNzIyRDI3Q0YzQjExNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0wsk902o/INyieiUz5VJGxAf Cf07XBK7DWrqKxLYu3+0OZXZSD5MqSBA3ysjTM1xRIFBaptB+ylB9g6ajMXRXYbX khz0r27NGoPVBj/SDxPDxGV00v0eX7HBRVhVaiHGILPsUs/6fklG3bA7mzpejvSs Vcec/oZxbli3ZtXIk9M+5r0XkOS/TVPj7aAn3my19loBN7Nf18bI2BRY7S/Zmvvb MS8a+uboeUna3W66wSP+5d11rJeeAYMP2tMFl6YLJm2svHZjq6vPUVjJFcbwv5Vp o6TwVdqmSGo3WiieKZLbgCst4mI1ukoFXtSBvr8fa+/zh9iDfwM9AZo6U+5LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUos5VFTgaQbCALVYmMHItJ887EUEwHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpTauT2uXhrDfQIG0iyvzdpIAafOZG8q+Av iqcnhuOweL8b0GBw4soBoJ1MU1PDeu4vtKZrXa++QCUPsoRrO9ynK7zDSkExVmKs E+cgrb3wxhJHsMmNJxwekLr0kno06R+GYku4d9uLFhhqFDrWSG3X5w0mPtq1zgUv eqCV7u1WJGguZPVx8ELkrmUayImzLtqKSRLJQRrHZnrT/lyTEZBMasjgNgRr+ayU 9FtASqnCv/qCxyTXeRINvaTu4JJCUtTLwLjAJ7AEXUKtYD8BZF8di25/Moe5QZPw hBnhnzT6JfX69okzn+KpKxPjiKIi1EnuTrth/0vUiRQQDapLH84= -----END CERTIFICATE-----Generated at Thu Aug 7 00:33:03 2025 by rpki-client