$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: hiAinXU4HTMD7yPURO+ig1PLdHwUzlQtlAWv9NVMZp8= Subject key identifier: FF:84:36:D0:25:62:F6:DF:0F:C1:AB:25:DE:5A:C1:4D:C6:77:B4:B6 Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 04338FAE9D7AA31A54674286E26C761743AA2DFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 038E Signing time: Sat 14 Jun 2025 20:01:13 +0000 Manifest this update: Sat 14 Jun 2025 19:56:13 +0000 Manifest next update: Tue 17 Jun 2025 20:01:13 +0000 Files and hashes: 1: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) 2: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: JDLnXs+djI/CIrbDrx9MPP9YR2WdPrkCSGY4u1E9rDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:33:8f:ae:9d:7a:a3:1a:54:67:42:86:e2:6c:76:17:43:aa:2d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Jun 14 19:56:13 2025 GMT Not After : Jun 17 20:01:13 2025 GMT Subject: CN=FF8436D02562F6DF0FC1AB25DE5AC14DC677B4B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5f:f8:80:f6:69:d0:07:8c:00:58:dd:34:1a: 1d:9c:55:8e:97:2d:2f:0a:99:e8:b6:d6:1a:ef:f2: 9e:68:9a:f8:a5:57:54:9f:59:2a:34:47:4f:42:a1: e2:b6:49:1f:c9:b6:1d:fd:9a:ec:ab:73:eb:78:18: 4e:bf:41:fc:0e:b0:56:ad:76:b1:84:0f:d4:c3:1c: d6:9e:9c:2f:d4:74:54:40:23:0e:36:14:0d:71:5c: e2:f9:14:d4:ca:c8:9d:f0:56:d7:31:59:9a:1d:a8: 76:62:7f:bb:c8:6c:44:11:a2:9c:66:a5:f9:ea:58: 6b:1c:0a:2d:87:76:6e:87:53:6b:80:bd:8c:a9:25: 0e:77:53:b0:94:40:19:56:94:31:ed:b7:64:98:86: 3d:9e:72:58:24:ee:c0:82:65:86:b3:1c:94:35:b1: 6d:e9:dc:75:75:b1:22:a9:66:85:f3:4d:e5:f6:67: 26:3a:f4:9d:3d:0a:0a:5d:5b:f2:3b:b3:2d:f1:5b: c8:35:d1:a8:28:20:6b:41:34:cf:4b:65:09:e6:df: 1f:69:57:cc:cb:b5:64:67:9b:a3:9f:19:aa:c7:ee: be:30:55:4f:98:bc:de:ee:89:6b:a2:e6:e8:38:f0: ef:40:25:a8:49:f2:6b:c9:bd:19:b1:fe:ed:2b:88: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:84:36:D0:25:62:F6:DF:0F:C1:AB:25:DE:5A:C1:4D:C6:77:B4:B6 X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:86:fb:31:3f:7c:dc:90:4c:0a:74:4d:cc:12:64:b4:e5:be: f5:80:53:e7:22:ee:e4:38:9c:8f:ee:96:74:6c:11:c6:55:0c: b5:d8:c2:e4:0b:4f:c8:e0:0e:69:97:57:22:35:a9:74:6a:e6: 76:1b:40:a2:a2:ba:49:e2:dc:90:b0:0a:b5:13:40:e2:a5:9d: 66:0f:ad:75:f6:a4:32:34:0b:12:2f:25:84:c5:bd:02:59:2c: f2:00:fe:37:69:72:ab:94:38:a2:cf:91:72:7c:2d:d1:60:76: b4:be:5d:ae:cc:d2:ae:64:2c:88:42:73:1a:a3:2e:ed:14:8c: 23:93:46:23:98:a9:62:2b:df:a9:16:e6:38:ef:47:9e:ed:f0: 8e:84:14:bd:ee:b5:72:fb:5b:98:5b:a3:88:79:a0:51:e0:d5: f2:33:e2:ac:14:3a:6f:1f:67:c9:41:9f:b9:63:5b:75:07:aa: c4:b1:9f:63:87:e1:8a:d7:d1:1b:48:3c:9c:68:98:d7:03:82: 58:bc:87:32:82:27:ac:35:89:9c:6f:57:15:00:07:fc:e0:c3: d6:a1:71:98:f3:ae:04:db:78:c7:30:e5:b2:85:8e:14:c5:0c: 30:2e:fb:97:29:76:ad:61:21:61:22:a1:85:bf:a7:3b:41:21: bd:29:fc:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBDOPrp16oxpUZ0KG4mx2F0OqLfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTA2MTQxOTU2MTNaFw0yNTA2MTcyMDAxMTNaMDMxMTAvBgNV BAMTKEZGODQzNkQwMjU2MkY2REYwRkMxQUIyNURFNUFDMTREQzY3N0I0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsX/iA9mnQB4wAWN00Gh2cVY6X LS8Kmei21hrv8p5omvilV1SfWSo0R09CoeK2SR/Jth39muyrc+t4GE6/QfwOsFat drGED9TDHNaenC/UdFRAIw42FA1xXOL5FNTKyJ3wVtcxWZodqHZif7vIbEQRopxm pfnqWGscCi2Hdm6HU2uAvYypJQ53U7CUQBlWlDHtt2SYhj2eclgk7sCCZYazHJQ1 sW3p3HV1sSKpZoXzTeX2ZyY69J09CgpdW/I7sy3xW8g10agoIGtBNM9LZQnm3x9p V8zLtWRnm6OfGarH7r4wVU+YvN7uiWui5ug48O9AJahJ8mvJvRmx/u0riBlhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/4Q20CVi9t8Pwasl3lrBTcZ3tLYwHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFGG+zE/fNyQTAp0TcwSZLTlvvWAU+ci7uQ4 nI/ulnRsEcZVDLXYwuQLT8jgDmmXVyI1qXRq5nYbQKKiukni3JCwCrUTQOKlnWYP rXX2pDI0CxIvJYTFvQJZLPIA/jdpcquUOKLPkXJ8LdFgdrS+Xa7M0q5kLIhCcxqj Lu0UjCOTRiOYqWIr36kW5jjvR57t8I6EFL3utXL7W5hbo4h5oFHg1fIz4qwUOm8f Z8lBn7ljW3UHqsSxn2OH4YrX0RtIPJxomNcDgli8hzKCJ6w1iZxvVxUAB/zgw9ah cZjzrgTbeMcw5bKFjhTFDDAu+5cpdq1hIWEioYW/pztBIb0p/A8= -----END CERTIFICATE-----Generated at Sun Jun 15 16:56:07 2025 by rpki-client