$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: 32qeZ0XIr7864amJqzXyGirgZvxkcDzWHLXXg6tRfbc= Subject key identifier: 9A:C7:E4:33:73:45:A3:B4:14:CE:2E:CD:84:4A:29:D4:21:0F:73:02 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 7D152574FDBA706A4D7FAB29F15CB0EB0EC166A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 04FC Signing time: Sat 09 Aug 2025 02:31:13 +0000 Manifest this update: Sat 09 Aug 2025 02:26:13 +0000 Manifest next update: Tue 12 Aug 2025 09:16:13 +0000 Files and hashes: 1: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: xpg71b3kpnQSGJPj2sU9VopRbKel8YsV3A2Q00O2D1E=) 2: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=) 3: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: qxSgkKvdvyaxI+FaWBITLW21vuSYNLrmORAra+2qBHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 09:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:15:25:74:fd:ba:70:6a:4d:7f:ab:29:f1:5c:b0:eb:0e:c1:66:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Aug 9 02:26:13 2025 GMT Not After : Aug 12 09:16:13 2025 GMT Subject: CN=9AC7E4337345A3B414CE2ECD844A29D4210F7302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:94:bc:8a:96:4b:4b:dd:40:b8:66:2b:a1:fd: 82:9d:bb:04:33:84:7e:0c:e9:85:10:d8:33:e9:e2: d2:7f:59:08:8a:b5:a1:27:7a:f8:ec:0d:75:69:01: ae:a6:98:96:2d:7d:8a:e2:3d:7f:3b:77:a6:6a:a8: 11:1b:25:ad:ae:2c:17:d4:19:bc:5a:42:91:17:2e: f8:e5:6c:ff:13:cf:16:22:88:fb:e3:59:7a:33:d4: dd:df:59:e0:ba:9b:98:75:0b:0f:72:70:b2:29:aa: 51:e2:c6:4c:9a:13:9c:08:ef:c4:00:65:7a:7a:36: da:a6:2d:fe:36:d2:a5:c5:1a:a2:36:d7:93:1b:50: 23:b8:92:e6:b7:a2:ab:9c:ad:ad:37:5b:20:6a:2e: ae:26:98:d7:41:90:2e:eb:f6:ce:06:c3:d8:cd:07: 94:f0:c4:ad:57:5f:09:b4:52:4a:b7:ce:33:45:64: 6d:68:8f:c5:a2:92:92:49:ac:5d:79:24:eb:bc:18: 64:e0:f7:ff:c2:6a:e7:d2:21:96:36:d6:64:93:0e: e1:06:b7:61:57:06:8b:5d:1a:9b:93:af:de:c3:06: 5b:37:0c:82:2a:aa:58:55:b0:0b:e9:24:fa:ca:fc: 13:23:47:a0:e7:4a:55:fe:2f:83:d6:86:03:ca:c3: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C7:E4:33:73:45:A3:B4:14:CE:2E:CD:84:4A:29:D4:21:0F:73:02 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ba:74:54:da:8c:c5:27:d7:ec:19:80:6a:3b:bf:d9:14:8c: c3:55:74:2b:a2:e3:63:0f:a8:9c:87:87:cb:e8:e1:ea:f3:c9: 13:00:85:de:3d:01:00:69:d5:c4:be:3d:8b:77:17:7c:34:cb: d4:96:36:f4:08:7f:fa:5a:be:f2:ba:0c:ba:34:e9:e7:71:7b: e7:72:be:d1:0a:dc:09:16:0c:ba:e7:1a:11:8a:60:7e:13:39: ea:08:ca:ce:f8:66:97:c9:9d:11:4a:8f:f6:4d:6e:0e:d5:8f: 5e:74:c0:38:ac:3d:70:b8:a7:88:28:37:50:b2:2a:3f:f5:da: da:9e:b6:56:80:e1:15:33:fc:7f:4f:da:ce:c2:9e:cb:4b:1e: 66:b1:85:d1:02:80:c9:a3:55:cf:f8:3d:ca:0c:7d:32:33:1e: a4:98:2a:74:0a:cc:ff:b1:34:74:e3:fd:1c:35:32:87:3a:19: 60:11:b3:11:4c:01:c0:95:4c:48:5d:c1:e9:21:51:44:cc:d4: 81:e8:3b:8e:86:1b:71:d9:6a:81:e3:ba:be:e8:71:62:26:51: ac:f2:49:ba:50:61:fa:8f:5b:93:e8:7e:54:18:af:53:f7:94: 6a:9d:32:22:c1:cf:6e:f7:5a:10:de:4d:88:63:74:a4:b7:bd: dc:d8:54:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRUldP26cGpNf6sp8Vyw6w7BZqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTA4MDkwMjI2MTNaFw0yNTA4MTIwOTE2MTNaMDMxMTAvBgNV BAMTKDlBQzdFNDMzNzM0NUEzQjQxNENFMkVDRDg0NEEyOUQ0MjEwRjczMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDolLyKlktL3UC4Ziuh/YKduwQz hH4M6YUQ2DPp4tJ/WQiKtaEnevjsDXVpAa6mmJYtfYriPX87d6ZqqBEbJa2uLBfU GbxaQpEXLvjlbP8TzxYiiPvjWXoz1N3fWeC6m5h1Cw9ycLIpqlHixkyaE5wI78QA ZXp6NtqmLf420qXFGqI215MbUCO4kua3oqucra03WyBqLq4mmNdBkC7r9s4Gw9jN B5TwxK1XXwm0Ukq3zjNFZG1oj8WikpJJrF15JOu8GGTg9//CaufSIZY21mSTDuEG t2FXBotdGpuTr97DBls3DIIqqlhVsAvpJPrK/BMjR6DnSlX+L4PWhgPKw1FvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmsfkM3NFo7QUzi7NhEop1CEPcwIwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe6dFTajMUn1+wZgGo7v9kUjMNVdCui42MP qJyHh8vo4erzyRMAhd49AQBp1cS+PYt3F3w0y9SWNvQIf/pavvK6DLo06edxe+dy vtEK3AkWDLrnGhGKYH4TOeoIys74ZpfJnRFKj/ZNbg7Vj150wDisPXC4p4goN1Cy Kj/12tqetlaA4RUz/H9P2s7CnstLHmaxhdECgMmjVc/4PcoMfTIzHqSYKnQKzP+x NHTj/Rw1Moc6GWARsxFMAcCVTEhdwekhUUTM1IHoO46GG3HZaoHjur7ocWImUazy SbpQYfqPW5PoflQYr1P3lGqdMiLBz273WhDeTYhjdKS3vdzYVPM= -----END CERTIFICATE-----Generated at Sun Aug 10 13:46:28 2025 by rpki-client