$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: WsP/I4qBlciU/+liXr6afXHgCl+LpPp9MvL7LgihMBY= Subject key identifier: 5F:D7:92:A5:5E:11:F8:F6:A3:6A:EB:F7:BD:49:56:A9:3F:44:70:04 Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 75C72A696D6589306EC3950A6994AF8F9DA57A9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 03A5 Signing time: Tue 05 Aug 2025 16:31:11 +0000 Manifest this update: Tue 05 Aug 2025 16:26:11 +0000 Manifest next update: Fri 08 Aug 2025 21:51:11 +0000 Files and hashes: 1: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: uiODfm9GZFTDrAi2h6PFHusl4+6IN350kOkfD55MPWk=) 2: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 21:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c7:2a:69:6d:65:89:30:6e:c3:95:0a:69:94:af:8f:9d:a5:7a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Aug 5 16:26:11 2025 GMT Not After : Aug 8 21:51:11 2025 GMT Subject: CN=5FD792A55E11F8F6A36AEBF7BD4956A93F447004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:77:08:b9:87:a4:d6:bb:cd:2f:42:ec:11:e3: 00:cd:db:34:04:d3:30:c8:28:ee:7e:7e:65:a3:0c: 5b:74:48:d9:0d:3c:43:a6:59:9d:4c:47:2f:bb:f1: 81:b1:7f:0c:c0:26:0a:0a:84:78:7c:1d:87:2a:aa: 1f:66:c8:9e:3a:16:ae:95:66:85:8a:07:55:a1:9a: 7b:b8:1e:5e:57:ac:ed:5b:3d:b2:5d:b8:6e:6f:df: b6:84:7e:3b:8b:b0:07:d9:9a:62:81:fa:49:61:78: 66:a2:5a:eb:fc:a2:fd:72:d4:f0:01:89:d5:85:30: 79:9a:b2:20:12:0d:b8:10:77:21:31:d1:fe:b1:b7: c4:3b:64:dd:b1:f6:68:55:ca:22:f8:61:6b:6e:4c: ca:9c:ce:cb:2a:c6:eb:6a:89:f6:39:a6:a5:d5:3e: 2e:26:71:b8:6c:f6:5b:19:c9:a3:4e:f0:af:1a:68: 01:fa:7d:c9:b5:fe:ab:19:75:52:7d:f4:6d:a5:dd: c4:c1:be:bf:8c:7c:a8:ca:49:4c:4b:2f:3f:a9:50: 7e:a5:de:12:87:d6:e3:29:d9:cd:15:8a:9e:26:a9: 30:18:b5:1f:ca:86:c8:1f:05:59:36:1e:2c:9b:ba: b2:2f:78:53:80:7f:fa:ff:9b:79:1d:40:78:51:e9: 5f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D7:92:A5:5E:11:F8:F6:A3:6A:EB:F7:BD:49:56:A9:3F:44:70:04 X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:02:75:ea:8a:c8:95:d2:c3:ce:40:7f:63:24:d8:b5:6d:54: 6b:e4:b2:6b:09:02:94:c2:9e:99:27:6c:41:c1:0c:87:e7:12: 22:ac:2c:cc:e8:72:f4:29:4e:bc:5e:db:dc:47:34:95:ed:61: 48:35:b6:56:55:78:15:ad:5b:7b:28:8e:36:6f:da:5e:dd:d4: bc:3c:02:41:da:f7:03:f4:ae:53:b2:8c:43:e9:36:96:a1:06: a1:26:b4:c1:7a:17:0a:3c:e3:18:af:95:6a:95:e4:6d:36:49: 75:45:67:62:5b:a6:f9:58:5d:bb:6e:d6:ac:de:11:37:e9:80: e5:7d:48:c2:9a:7f:21:6c:91:07:01:04:21:08:ac:b9:69:5a: c0:60:8f:13:73:ad:9e:82:9c:b7:04:6a:69:3e:89:3a:87:33: e7:a5:64:b2:73:af:06:36:c4:95:21:03:f6:27:a7:03:af:47: 06:33:cc:20:af:cc:31:e5:fe:c0:c7:a9:8c:01:94:f7:6a:6b: b5:a8:b8:56:dc:33:aa:0e:9e:39:84:01:8f:89:f9:95:ca:1e: b5:52:0c:64:1f:6d:c2:01:b1:0b:ba:93:87:7e:71:20:39:30: b9:b8:0e:3c:05:f3:f4:67:c7:44:00:a3:87:c1:66:c9:26:fa: da:13:51:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdccqaW1liTBuw5UKaZSvj52lepowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTA4MDUxNjI2MTFaFw0yNTA4MDgyMTUxMTFaMDMxMTAvBgNV BAMTKDVGRDc5MkE1NUUxMUY4RjZBMzZBRUJGN0JENDk1NkE5M0Y0NDcwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdwi5h6TWu80vQuwR4wDN2zQE 0zDIKO5+fmWjDFt0SNkNPEOmWZ1MRy+78YGxfwzAJgoKhHh8HYcqqh9myJ46Fq6V ZoWKB1Whmnu4Hl5XrO1bPbJduG5v37aEfjuLsAfZmmKB+klheGaiWuv8ov1y1PAB idWFMHmasiASDbgQdyEx0f6xt8Q7ZN2x9mhVyiL4YWtuTMqczssqxutqifY5pqXV Pi4mcbhs9lsZyaNO8K8aaAH6fcm1/qsZdVJ99G2l3cTBvr+MfKjKSUxLLz+pUH6l 3hKH1uMp2c0Vip4mqTAYtR/KhsgfBVk2HiyburIveFOAf/r/m3kdQHhR6V9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX9eSpV4R+Pajauv3vUlWqT9EcAQwHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoCdeqKyJXSw85Af2Mk2LVtVGvksmsJApTC npknbEHBDIfnEiKsLMzocvQpTrxe29xHNJXtYUg1tlZVeBWtW3sojjZv2l7d1Lw8 AkHa9wP0rlOyjEPpNpahBqEmtMF6Fwo84xivlWqV5G02SXVFZ2JbpvlYXbtu1qze ETfpgOV9SMKafyFskQcBBCEIrLlpWsBgjxNzrZ6CnLcEamk+iTqHM+elZLJzrwY2 xJUhA/YnpwOvRwYzzCCvzDHl/sDHqYwBlPdqa7WouFbcM6oOnjmEAY+J+ZXKHrVS DGQfbcIBsQu6k4d+cSA5MLm4DjwF8/Rnx0QAo4fBZskm+toTUdY= -----END CERTIFICATE-----Generated at Thu Aug 7 04:03:50 2025 by rpki-client