$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: IOoEC1+hxgpOSHIJAoW/CnTp/zv0CIXUYzTijLhQpzI= Subject key identifier: E1:70:8A:26:C2:3A:51:A7:68:D9:7D:76:D1:4A:F1:19:FD:D8:E8:7E Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 04AF87C4C5AF0AB2B4BEA1629DA4CEBE03D85899 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 0166 Signing time: Tue 05 Aug 2025 23:00:52 +0000 Manifest this update: Tue 05 Aug 2025 22:55:52 +0000 Manifest next update: Sat 09 Aug 2025 10:23:52 +0000 Files and hashes: 1: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: DAHFV0c/aFM082VX0oHdmhTVlcTRSOxGfmPDNewRFNU=) 2: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: mDz8g5DSwB1b7zSoX04GpDXH1O11FjqHjJWmTYnaMJE=) 3: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:af:87:c4:c5:af:0a:b2:b4:be:a1:62:9d:a4:ce:be:03:d8:58:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Aug 5 22:55:52 2025 GMT Not After : Aug 9 10:23:52 2025 GMT Subject: CN=E1708A26C23A51A768D97D76D14AF119FDD8E87E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:21:7c:bc:85:24:39:dc:8f:cd:08:44:a9:ba: e7:18:c6:12:a6:62:e0:8d:43:fe:4e:9a:fd:52:79: b4:5a:68:91:dc:88:19:2d:47:6f:c4:d4:15:bc:2f: f2:57:89:ac:15:37:31:30:21:5e:a5:86:35:19:00: 54:62:6e:ca:b2:99:5e:b3:2e:25:78:a4:8c:09:73: 18:ac:6c:e0:09:c2:01:45:0b:2f:66:49:6b:e4:17: 9f:b0:dc:86:87:61:9f:9b:3f:2f:df:cd:2b:80:ac: cc:21:52:93:41:bc:04:1c:29:91:d6:0d:cd:80:7f: e4:18:32:30:e5:29:f0:40:fe:66:12:a7:72:98:91: cd:5a:b8:40:fd:f6:2e:d2:37:23:b7:5f:08:34:f1: a6:af:a0:bf:53:e0:10:38:06:7f:1c:92:67:74:7b: a1:a9:31:6e:d1:e7:c0:06:d9:d3:42:d7:09:0e:f2: 05:d2:20:ff:d7:20:43:98:4f:b2:f9:0d:9a:e4:58: 69:42:59:e2:9a:6d:64:13:74:3f:09:b2:97:65:44: 1d:8c:0c:70:6a:a8:bb:03:a3:21:0c:e3:b3:31:65: 62:4d:ce:b0:7d:31:f8:ad:d1:6d:19:9c:75:5f:8a: f5:b7:5b:60:39:ab:e4:f6:cc:3b:72:a8:8d:95:98: 36:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:70:8A:26:C2:3A:51:A7:68:D9:7D:76:D1:4A:F1:19:FD:D8:E8:7E X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:60:8a:70:08:62:5b:61:9e:98:17:f9:00:be:1d:6f:44:c8: c5:4a:e5:5c:d9:fd:ae:5b:a3:03:ec:0c:77:13:06:d6:5a:e3: e6:91:07:9d:62:c5:03:76:6f:90:2c:e4:f4:58:c6:ec:60:1a: c7:3c:81:d5:b7:b2:11:5d:8f:23:60:3e:ba:4e:5d:53:30:7e: 95:fa:46:df:e6:38:24:6d:ff:ff:31:7d:f5:5b:30:2c:3a:06: bf:98:39:8e:57:e7:4f:f6:b6:fc:10:1a:18:1f:9e:7c:16:2d: 27:6c:43:18:1d:71:c1:b8:24:32:ec:12:b0:33:03:73:99:02: aa:fe:12:e5:3b:1e:72:ff:a3:00:ea:3b:e0:bc:81:dc:b1:62: 23:87:b9:c2:c2:90:ba:fe:ca:9c:13:24:07:90:0a:c0:29:e0: 19:fa:18:47:98:16:98:fd:8d:43:ec:1e:50:e9:a1:b4:d2:cb: f8:07:8a:20:38:19:cb:54:0f:ff:6b:66:b2:fd:5e:b2:62:cd: 35:83:85:97:30:8b:fe:fd:c4:9a:79:e3:38:7d:de:19:cf:ce: 3b:0d:43:56:dd:1d:c8:b0:f2:28:d5:40:11:68:12:de:48:f4: 53:91:00:b4:af:35:e2:71:7d:d9:45:c4:73:b5:9c:54:16:e3: e9:e2:39:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBK+HxMWvCrK0vqFinaTOvgPYWJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNTA4MDUyMjU1NTJaFw0yNTA4MDkxMDIzNTJaMDMxMTAvBgNV BAMTKEUxNzA4QTI2QzIzQTUxQTc2OEQ5N0Q3NkQxNEFGMTE5RkREOEU4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+IXy8hSQ53I/NCESpuucYxhKm YuCNQ/5Omv1SebRaaJHciBktR2/E1BW8L/JXiawVNzEwIV6lhjUZAFRibsqymV6z LiV4pIwJcxisbOAJwgFFCy9mSWvkF5+w3IaHYZ+bPy/fzSuArMwhUpNBvAQcKZHW Dc2Af+QYMjDlKfBA/mYSp3KYkc1auED99i7SNyO3Xwg08aavoL9T4BA4Bn8ckmd0 e6GpMW7R58AG2dNC1wkO8gXSIP/XIEOYT7L5DZrkWGlCWeKabWQTdD8JspdlRB2M DHBqqLsDoyEM47MxZWJNzrB9Mfit0W0ZnHVfivW3W2A5q+T2zDtyqI2VmDYHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4XCKJsI6Uado2X120UrxGf3Y6H4wHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFginAIYlthnpgX+QC+HW9EyMVK5VzZ/a5b owPsDHcTBtZa4+aRB51ixQN2b5As5PRYxuxgGsc8gdW3shFdjyNgPrpOXVMwfpX6 Rt/mOCRt//8xffVbMCw6Br+YOY5X50/2tvwQGhgfnnwWLSdsQxgdccG4JDLsErAz A3OZAqr+EuU7HnL/owDqO+C8gdyxYiOHucLCkLr+ypwTJAeQCsAp4Bn6GEeYFpj9 jUPsHlDpobTSy/gHiiA4GctUD/9rZrL9XrJizTWDhZcwi/79xJp54zh93hnPzjsN Q1bdHciw8ijVQBFoEt5I9FORALSvNeJxfdlFxHO1nFQW4+niOYA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:11:19 2025 by rpki-client