$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: c96cYEPMe9GiMU4DrkJuvjWty5sYBCF5VQCvTgbdFko= Subject key identifier: 3C:31:48:B5:23:5F:96:5C:AC:7A:D1:CC:20:3E:45:1B:08:C2:9C:E8 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 2AE933D0115B5393F9A81F7DF3C283E923D3AC79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 04CD Signing time: Wed 06 Aug 2025 05:00:52 +0000 Manifest this update: Wed 06 Aug 2025 04:55:52 +0000 Manifest next update: Sat 09 Aug 2025 15:37:52 +0000 Files and hashes: 1: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: bGN1vyn9h6Yc+MemoAPYX3r1I/c2y6YPOsVFWuo0Dr0=) 2: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: mNUv3ed/zdvvjYP13ePTpSB/BVhCX8qdPZITsLgCPJs=) 3: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: SXXLWSftmV1ALVHZrOGiOsQ6UfYjWN8tTipC9o8sUVM=) 4: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ikejIzym3riHv/Wk7MAPoXCGoRFxR1pASpxS+fJWi4g=) 5: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: YV5y0yJ3U9p9cvlNvG3FnXx2SHMj2wa+fG9Y04B6wcg=) 6: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: dTbIHUhiEUknjm2UJq3m/hFm+UD2w30xmsm34dF+xX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e9:33:d0:11:5b:53:93:f9:a8:1f:7d:f3:c2:83:e9:23:d3:ac:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Aug 6 04:55:52 2025 GMT Not After : Aug 9 15:37:52 2025 GMT Subject: CN=3C3148B5235F965CAC7AD1CC203E451B08C29CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:13:15:26:e3:a4:a6:08:bf:bb:30:d9:87: 34:99:34:ee:33:bb:71:ec:4f:07:b3:48:a1:6f:35: a6:c1:c6:ec:db:cb:88:90:98:f7:d5:03:8c:7f:b6: 6d:47:09:37:ba:70:a4:b7:b2:97:82:6c:7a:ac:59: 3d:08:80:9e:9d:4d:b4:b2:b5:cd:f5:dd:7d:13:ec: 0f:d0:27:e3:47:1b:8a:e1:15:d9:e6:e9:44:5a:fc: 8c:7a:cf:19:a5:e3:63:e8:b7:c9:3f:90:e8:63:13: 2c:b2:ab:52:33:b1:7d:29:20:66:bb:51:b3:7e:5c: 37:ea:ff:6c:64:ca:41:f7:d3:f4:12:34:e2:eb:5f: 85:a2:eb:74:91:24:86:32:10:34:7d:2b:b9:9e:8b: 59:50:f3:9b:99:e7:84:0b:4c:38:b2:03:b6:21:2a: 09:b5:88:37:50:2d:d8:e2:44:1e:73:79:cc:da:3b: bc:c4:c2:aa:e0:4c:4f:fe:9d:fb:d0:5f:84:72:04: 34:1c:54:bf:8b:05:55:3a:7d:d5:0e:45:01:4d:06: 3a:94:69:8f:2d:d5:5e:d6:c4:e3:38:31:2a:7c:84: 82:9c:bb:f9:51:f9:70:82:0b:c8:bf:b7:5f:b6:eb: 6b:35:b9:d7:02:65:03:8e:85:cd:17:53:b7:2f:31: fe:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:31:48:B5:23:5F:96:5C:AC:7A:D1:CC:20:3E:45:1B:08:C2:9C:E8 X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e7:d6:77:a4:bb:73:7e:b0:11:e9:f6:59:79:03:87:8b:3c: e1:79:ee:7f:92:08:18:ee:d2:0a:46:5b:1a:71:fe:e4:b2:fd: 5c:44:28:f4:70:d4:f4:60:ef:79:6b:84:af:c1:4b:ec:46:ca: 6a:ae:de:74:bc:d8:60:63:85:64:f4:7a:b0:49:67:d5:d1:9d: c3:f6:d7:91:07:ad:cc:2b:d0:02:7f:bf:f7:ac:f0:ca:4c:e5: b5:3e:99:4c:76:43:f8:f1:b6:04:c2:52:6f:85:11:1c:9b:0f: ac:0e:08:57:5e:40:76:63:45:bb:0d:4f:f8:a1:b0:f6:9f:71: 5a:94:be:62:18:59:8b:19:f7:f6:cc:a2:0c:a1:c3:6c:39:1c: b3:93:68:49:00:08:aa:1c:d0:34:64:50:3a:fb:e3:4d:69:d0: f5:ff:88:8e:8a:1a:33:1b:a7:65:1b:0b:8f:8f:b3:ef:3f:c9: 2d:d8:07:1a:98:17:b9:58:d4:b0:53:fa:00:48:65:7f:52:2a: 5f:76:73:5d:bd:fd:d4:59:87:c8:6c:99:f9:bf:55:a8:2f:ff: 97:ed:79:9c:3a:10:85:93:a0:fb:5d:b1:47:1b:c0:48:20:c8: b1:43:52:89:65:5c:54:59:ff:7b:62:62:1f:a4:ad:4e:70:db: 67:76:76:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKukz0BFbU5P5qB9988KD6SPTrHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTA4MDYwNDU1NTJaFw0yNTA4MDkxNTM3NTJaMDMxMTAvBgNV BAMTKDNDMzE0OEI1MjM1Rjk2NUNBQzdBRDFDQzIwM0U0NTFCMDhDMjlDRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCevBMVJuOkpgi/uzDZhzSZNO4z u3HsTwezSKFvNabBxuzby4iQmPfVA4x/tm1HCTe6cKS3speCbHqsWT0IgJ6dTbSy tc313X0T7A/QJ+NHG4rhFdnm6URa/Ix6zxml42Pot8k/kOhjEyyyq1IzsX0pIGa7 UbN+XDfq/2xkykH30/QSNOLrX4Wi63SRJIYyEDR9K7mei1lQ85uZ54QLTDiyA7Yh Kgm1iDdQLdjiRB5zeczaO7zEwqrgTE/+nfvQX4RyBDQcVL+LBVU6fdUORQFNBjqU aY8t1V7WxOM4MSp8hIKcu/lR+XCCC8i/t1+262s1udcCZQOOhc0XU7cvMf4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPDFItSNfllysetHMID5FGwjCnOgwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnn1neku3N+sBHp9ll5A4eLPOF57n+SCBju 0gpGWxpx/uSy/VxEKPRw1PRg73lrhK/BS+xGymqu3nS82GBjhWT0erBJZ9XRncP2 15EHrcwr0AJ/v/es8MpM5bU+mUx2Q/jxtgTCUm+FERybD6wOCFdeQHZjRbsNT/ih sPafcVqUvmIYWYsZ9/bMogyhw2w5HLOTaEkACKoc0DRkUDr7401p0PX/iI6KGjMb p2UbC4+Ps+8/yS3YBxqYF7lY1LBT+gBIZX9SKl92c129/dRZh8hsmfm/Vagv/5ft eZw6EIWToPtdsUcbwEggyLFDUollXFRZ/3tiYh+krU5w22d2duo= -----END CERTIFICATE-----Generated at Thu Aug 7 03:16:44 2025 by rpki-client