$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: YsUUR0c5pxBEAJDz/upv+GEwMUm4RKXbCi3+O54JuZw= Subject key identifier: FA:52:77:E3:2A:C2:C7:31:14:D9:6A:D7:97:2B:F2:43:2D:37:CC:00 Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 4764066F9C1102B7C7BE910834E305F2029FD884 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 03CD Signing time: Mon 03 Nov 2025 12:01:11 +0000 Manifest this update: Mon 03 Nov 2025 11:56:11 +0000 Manifest next update: Thu 06 Nov 2025 22:50:11 +0000 Files and hashes: 1: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) 2: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: z4YKIQxakg8vfcevw1H5XOhTce52QymgwCpm7Gd7pY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:64:06:6f:9c:11:02:b7:c7:be:91:08:34:e3:05:f2:02:9f:d8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Nov 3 11:56:11 2025 GMT Not After : Nov 6 22:50:11 2025 GMT Subject: CN=FA5277E32AC2C73114D96AD7972BF2432D37CC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a0:bb:0d:d6:f6:5d:35:8b:8b:8d:83:a4:59: dc:7b:30:47:97:06:5b:57:ed:7c:06:86:44:1e:d9: 50:7f:73:52:79:68:85:46:49:98:fb:6e:3c:00:45: 72:6a:32:7e:a4:c5:77:12:51:b3:fa:47:36:39:72: 0d:2e:21:b7:9a:14:5b:55:d6:2c:97:5d:8c:2e:46: a2:c7:93:68:1f:ef:d8:6d:4f:7e:ae:0c:5d:a6:68: 41:8c:95:7f:f4:3f:eb:b0:5c:3a:fc:a9:9e:5a:cc: 96:8e:e6:9e:09:9a:d8:71:8e:83:c3:44:35:fe:c4: a1:73:d5:35:67:99:78:fb:24:61:60:95:a9:86:69: ce:12:ec:7c:06:1b:cd:fa:b6:76:75:f1:ac:d7:11: ed:cc:e4:59:3c:f7:4d:cb:05:cb:de:b2:df:f3:bd: a4:f3:1d:2c:e8:a8:23:d7:47:67:6d:0a:f8:d6:5a: c8:7c:29:66:5c:5f:8e:72:ad:e5:c9:50:a6:09:89: 88:8b:11:94:ce:d4:2f:6b:77:68:c0:64:06:1b:c3: 75:a9:ac:13:50:f4:ad:96:c3:5e:76:49:af:c6:e1: 90:6b:10:16:17:30:fc:65:f1:60:2d:37:3d:72:9a: 9d:e4:1e:c9:3f:6d:dd:da:dc:85:17:93:28:3a:76: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:52:77:E3:2A:C2:C7:31:14:D9:6A:D7:97:2B:F2:43:2D:37:CC:00 X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4e:f1:9a:19:b0:48:01:b7:83:80:2b:ec:b8:e8:e5:1f:31: 0a:2b:f8:ce:64:8f:b7:55:b2:71:bc:80:0f:1a:cc:2b:b2:f0: 1f:89:84:0c:44:96:28:f1:00:ff:0d:a0:dd:c2:ff:bf:3c:6d: db:42:58:88:aa:11:fa:6e:a9:ed:0e:b1:59:44:8d:53:2f:b1: 61:a7:b0:23:7a:85:88:61:73:1d:93:f5:85:1f:32:2e:82:c3: c9:3d:19:68:ae:4d:82:ec:cc:ee:b0:c2:86:e6:c4:a5:04:64: db:7e:25:d3:48:f0:04:cb:9c:1b:43:ab:8f:a0:c2:50:0c:e0: e6:60:6e:9f:ba:a8:50:83:05:b2:6c:ad:6c:09:bf:bc:97:34: 5d:86:36:19:1a:5c:16:18:bb:33:b4:41:6a:72:4d:fc:3f:97: 60:b4:14:79:e2:d2:22:e0:0f:81:71:e5:83:e5:e0:84:40:9f: d3:83:22:ed:2d:e0:81:64:07:32:02:f8:10:ef:14:1c:b6:ef: ca:53:3d:04:90:5a:63:d5:b8:d6:b6:92:f9:76:20:c4:8e:0d: 45:65:72:07:08:57:52:03:d4:68:3c:c0:dd:9d:cc:f0:7c:a5: d0:0d:1a:08:d1:34:27:53:cb:49:29:62:26:ae:98:57:73:19: ca:fe:9a:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR2QGb5wRArfHvpEINOMF8gKf2IQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTExMDMxMTU2MTFaFw0yNTExMDYyMjUwMTFaMDMxMTAvBgNV BAMTKEZBNTI3N0UzMkFDMkM3MzExNEQ5NkFENzk3MkJGMjQzMkQzN0NDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnoLsN1vZdNYuLjYOkWdx7MEeX BltX7XwGhkQe2VB/c1J5aIVGSZj7bjwARXJqMn6kxXcSUbP6RzY5cg0uIbeaFFtV 1iyXXYwuRqLHk2gf79htT36uDF2maEGMlX/0P+uwXDr8qZ5azJaO5p4JmthxjoPD RDX+xKFz1TVnmXj7JGFglamGac4S7HwGG836tnZ18azXEe3M5Fk8903LBcvest/z vaTzHSzoqCPXR2dtCvjWWsh8KWZcX45yreXJUKYJiYiLEZTO1C9rd2jAZAYbw3Wp rBNQ9K2Ww152Sa/G4ZBrEBYXMPxl8WAtNz1ymp3kHsk/bd3a3IUXkyg6dshFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lJ34yrCxzEU2WrXlyvyQy03zAAwHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZO8ZoZsEgBt4OAK+y46OUfMQor+M5kj7dV snG8gA8azCuy8B+JhAxElijxAP8NoN3C/788bdtCWIiqEfpuqe0OsVlEjVMvsWGn sCN6hYhhcx2T9YUfMi6Cw8k9GWiuTYLszO6wwobmxKUEZNt+JdNI8ATLnBtDq4+g wlAM4OZgbp+6qFCDBbJsrWwJv7yXNF2GNhkaXBYYuzO0QWpyTfw/l2C0FHni0iLg D4Fx5YPl4IRAn9ODIu0t4IFkBzIC+BDvFBy278pTPQSQWmPVuNa2kvl2IMSODUVl cgcIV1ID1Gg8wN2dzPB8pdANGgjRNCdTy0kpYiaumFdzGcr+mko= -----END CERTIFICATE-----Generated at Wed Nov 5 11:32:44 2025 by rpki-client