$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: QzS4psrKU9gDB04d2XE8KHAUAzkQBZWT/l18iO1QqqY= Subject key identifier: 12:AD:E8:39:27:61:65:10:47:A8:FA:17:E7:39:22:FC:13:23:D0:D3 Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 77223B3972393F7D76EF032058B1C1512989F9D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 0245 Signing time: Sun 02 Nov 2025 22:50:46 +0000 Manifest this update: Sun 02 Nov 2025 22:45:46 +0000 Manifest next update: Thu 06 Nov 2025 05:41:46 +0000 Files and hashes: 1: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: CxYOg+zurZeyBS1ueM//r62XcdmsRzr1hU2ztKigyhU=) 2: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: 0fU+cgX2w2Seah8SyqIL5rp6DTz7LSKW3s4WYXiC+fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:22:3b:39:72:39:3f:7d:76:ef:03:20:58:b1:c1:51:29:89:f9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: Nov 2 22:45:46 2025 GMT Not After : Nov 6 05:41:46 2025 GMT Subject: CN=12ADE8392761651047A8FA17E73922FC1323D0D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7d:03:cf:b8:52:49:22:7a:09:35:2b:d6:e5: fc:7a:bf:e8:f4:89:45:62:a5:b1:0f:6f:7a:51:06: 92:db:80:ab:3a:78:8d:e5:7c:30:d8:fb:d9:7c:fd: 72:62:0a:86:49:62:b8:38:d7:ac:5d:cf:af:9a:e9: ec:41:84:ee:58:59:1d:63:2b:ab:52:fc:bf:70:70: 6c:2b:a7:63:5d:a4:22:72:72:6a:9a:b6:eb:3f:7d: 10:ec:5e:f0:cc:63:d8:37:48:ae:ef:3d:22:80:89: 8e:4d:1d:52:92:d6:4b:81:f0:e6:57:23:54:95:46: 25:e0:79:4c:bf:8a:3a:c6:e9:b2:3a:57:c8:1f:57: f7:f9:88:19:c2:3a:d9:e1:00:2b:ef:17:14:d5:39: 49:da:06:c6:3c:8c:2f:2b:eb:1f:7e:4f:2a:ab:7c: 3f:e4:1a:2b:a6:6c:f4:06:a6:08:68:21:b8:19:77: 06:75:b2:ed:22:4f:00:53:06:75:99:23:c7:82:8c: 92:89:97:d8:19:e0:d2:91:a8:fb:6e:48:c2:21:cc: 2b:c5:90:b6:ca:ea:a6:95:39:95:f6:42:be:31:86: b6:fa:20:63:4b:26:91:17:d5:0a:f3:80:3c:f3:18: 81:86:9f:e0:2e:38:06:5c:35:ac:9e:bb:74:a8:37: ce:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AD:E8:39:27:61:65:10:47:A8:FA:17:E7:39:22:FC:13:23:D0:D3 X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:2c:41:a2:db:ea:41:61:9a:96:3c:f4:61:51:b6:de:79:0e: 17:0e:d1:c6:7a:b7:6e:65:c0:a6:98:ae:ce:37:71:43:14:87: 7f:e1:f2:d3:a5:79:56:fd:f2:02:ae:e1:dd:13:bb:62:9c:f6: 97:f0:3b:51:27:f8:0e:b2:a6:a0:1d:52:f8:68:63:50:23:25: c9:fe:00:6c:c6:26:3e:42:7f:38:c7:51:a1:df:ad:e0:2d:ca: f1:4a:89:e6:35:3e:a9:9f:20:cd:96:22:81:ca:29:ee:c2:ba: 74:36:f0:25:d8:b6:1d:00:5c:c1:42:ea:12:5e:c4:d1:5e:95: 7d:0a:f2:6c:70:6c:e0:21:66:e4:c6:da:80:01:a6:51:32:52: 13:22:f4:82:d6:18:db:be:04:8b:e6:b1:fa:22:6c:74:34:4a: ae:39:8e:ef:2c:38:56:78:d8:c8:80:de:11:74:48:a5:76:d2: 04:c7:f6:df:c0:59:c0:5d:22:97:7d:ef:1f:67:a4:b5:35:90: 1d:bc:9f:9c:23:f9:38:18:92:54:46:2d:c6:5e:68:a0:68:a8: 76:cc:78:c4:98:70:a1:05:d3:86:6a:41:6b:79:53:cd:4e:27: 00:14:6a:30:aa:91:fc:a8:27:8a:6b:ee:e7:49:3b:97:e2:dc: 16:78:ea:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdyI7OXI5P3127wMgWLHBUSmJ+dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNTExMDIyMjQ1NDZaFw0yNTExMDYwNTQxNDZaMDMxMTAvBgNV BAMTKDEyQURFODM5Mjc2MTY1MTA0N0E4RkExN0U3MzkyMkZDMTMyM0QwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDefQPPuFJJInoJNSvW5fx6v+j0 iUVipbEPb3pRBpLbgKs6eI3lfDDY+9l8/XJiCoZJYrg416xdz6+a6exBhO5YWR1j K6tS/L9wcGwrp2NdpCJycmqatus/fRDsXvDMY9g3SK7vPSKAiY5NHVKS1kuB8OZX I1SVRiXgeUy/ijrG6bI6V8gfV/f5iBnCOtnhACvvFxTVOUnaBsY8jC8r6x9+Tyqr fD/kGiumbPQGpghoIbgZdwZ1su0iTwBTBnWZI8eCjJKJl9gZ4NKRqPtuSMIhzCvF kLbK6qaVOZX2Qr4xhrb6IGNLJpEX1QrzgDzzGIGGn+AuOAZcNayeu3SoN877AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEq3oOSdhZRBHqPoX5zki/BMj0NMwHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUsQaLb6kFhmpY89GFRtt55DhcO0cZ6t25l wKaYrs43cUMUh3/h8tOleVb98gKu4d0Tu2Kc9pfwO1En+A6ypqAdUvhoY1AjJcn+ AGzGJj5CfzjHUaHfreAtyvFKieY1PqmfIM2WIoHKKe7CunQ28CXYth0AXMFC6hJe xNFelX0K8mxwbOAhZuTG2oABplEyUhMi9ILWGNu+BIvmsfoibHQ0Sq45ju8sOFZ4 2MiA3hF0SKV20gTH9t/AWcBdIpd97x9npLU1kB28n5wj+TgYklRGLcZeaKBoqHbM eMSYcKEF04ZqQWt5U81OJwAUajCqkfyoJ4pr7udJO5fi3BZ46uk= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:26 2025 by rpki-client