$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: XfksNNqbymMp1QgOUpB8y9ZkoVVU9/NRc6Nvc7FUowA= Subject key identifier: 4C:FD:8C:5E:07:F6:74:52:01:2B:94:89:B8:77:A4:8D:97:C1:DB:E9 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 09D2620915506D87697423DBD54D8616212EBE78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 04E5 Signing time: Wed 18 Jun 2025 14:51:08 +0000 Manifest this update: Wed 18 Jun 2025 14:46:08 +0000 Manifest next update: Sat 21 Jun 2025 18:27:08 +0000 Files and hashes: 1: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: xpg71b3kpnQSGJPj2sU9VopRbKel8YsV3A2Q00O2D1E=) 2: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=) 3: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: 7lMGQde7bqyGBMvJYKhGFjXBDVhJ7x7zeYpVETfYYI4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:d2:62:09:15:50:6d:87:69:74:23:db:d5:4d:86:16:21:2e:be:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Jun 18 14:46:08 2025 GMT Not After : Jun 21 18:27:08 2025 GMT Subject: CN=4CFD8C5E07F67452012B9489B877A48D97C1DBE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:46:c0:b0:35:7b:f2:6c:ba:af:5f:49:65:8e: 91:ff:26:5c:03:36:ba:04:61:07:09:38:f5:6c:ab: 4b:f6:d3:83:66:7c:33:e3:04:e0:8a:32:6e:9a:23: 91:f9:4f:a4:28:3d:35:a3:2d:90:29:0c:d1:97:4b: 38:76:45:59:25:9c:13:e2:ca:be:5a:06:6e:e2:cd: 97:2e:b3:ee:06:d9:07:8d:12:cf:c2:67:cf:5e:35: 36:c6:84:bd:35:8d:8f:c9:b1:f6:6f:76:c0:06:83: ff:e2:77:77:d8:2f:98:9f:09:a2:b2:6c:6f:5d:04: 2e:69:1e:55:d8:26:9f:69:92:fa:14:a3:51:ec:3c: 2b:1b:da:bf:5b:6c:3d:90:ae:9f:c0:e4:58:ae:2b: f7:b9:6e:1a:8c:19:87:6f:52:44:11:0e:37:8f:8f: 50:bd:55:2d:8b:2d:6d:64:4b:6c:38:79:11:3a:05: de:9f:18:96:09:fd:ab:d8:12:e0:4e:3d:8c:69:3c: dd:8f:2f:8d:f8:ff:89:29:15:eb:bd:cc:d2:6e:83: e6:b1:47:45:1b:98:00:5f:67:5c:58:fb:27:ff:1f: 97:ef:63:20:0e:70:57:79:d0:98:1a:ec:38:b0:22: dd:e4:80:66:ac:0a:a9:d7:2a:9e:20:c5:4c:6a:90: ef:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FD:8C:5E:07:F6:74:52:01:2B:94:89:B8:77:A4:8D:97:C1:DB:E9 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:08:e9:69:c8:14:dd:1e:1f:4a:6e:69:d3:37:05:56:15:6b: 94:6e:aa:44:49:e9:8c:ce:b3:a6:3b:4b:bb:7d:db:1d:9a:44: 12:ff:63:25:0b:eb:d1:46:52:bb:b3:24:b4:2a:2b:36:37:2e: 2d:21:ab:10:a9:da:2d:24:3f:1b:92:f1:f3:0f:a6:bb:16:37: 29:37:9e:09:98:5c:88:37:10:26:2c:de:bc:46:94:86:89:e4: f5:05:42:22:92:53:b5:ed:f8:24:3d:1b:8d:3b:90:c6:93:b6: 35:21:82:ba:dd:4c:f6:fc:43:70:17:aa:5c:ea:9f:bd:b7:8a: 9a:4c:cb:20:2a:62:50:68:99:6b:eb:64:94:ba:28:19:e8:7d: 41:8a:58:39:ff:cd:30:31:6a:ad:8d:66:3a:30:7f:b4:a7:c9: c9:8c:c9:02:95:3d:c7:01:b7:d8:0a:d5:a8:7d:54:e0:3d:9e: 5c:e5:97:52:aa:fd:f8:1b:dc:16:ae:29:c7:36:3d:ac:4a:2e: 7c:39:56:34:ab:bd:3a:4d:4e:21:50:1c:cc:6d:30:19:1c:65: 55:e3:9b:66:44:95:4d:ad:95:d2:e9:db:66:62:9a:a9:3d:14: dd:f4:b2:dd:10:63:af:48:1b:0f:9e:67:fa:ed:e7:df:76:56: f6:ae:40:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCdJiCRVQbYdpdCPb1U2GFiEuvngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTA2MTgxNDQ2MDhaFw0yNTA2MjExODI3MDhaMDMxMTAvBgNV BAMTKDRDRkQ4QzVFMDdGNjc0NTIwMTJCOTQ4OUI4NzdBNDhEOTdDMURCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RsCwNXvybLqvX0lljpH/JlwD NroEYQcJOPVsq0v204NmfDPjBOCKMm6aI5H5T6QoPTWjLZApDNGXSzh2RVklnBPi yr5aBm7izZcus+4G2QeNEs/CZ89eNTbGhL01jY/JsfZvdsAGg//id3fYL5ifCaKy bG9dBC5pHlXYJp9pkvoUo1HsPCsb2r9bbD2Qrp/A5FiuK/e5bhqMGYdvUkQRDjeP j1C9VS2LLW1kS2w4eRE6Bd6fGJYJ/avYEuBOPYxpPN2PL434/4kpFeu9zNJug+ax R0UbmABfZ1xY+yf/H5fvYyAOcFd50Jga7DiwIt3kgGasCqnXKp4gxUxqkO/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTP2MXgf2dFIBK5SJuHekjZfB2+kwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8I6WnIFN0eH0puadM3BVYVa5RuqkRJ6YzO s6Y7S7t92x2aRBL/YyUL69FGUruzJLQqKzY3Li0hqxCp2i0kPxuS8fMPprsWNyk3 ngmYXIg3ECYs3rxGlIaJ5PUFQiKSU7Xt+CQ9G407kMaTtjUhgrrdTPb8Q3AXqlzq n723ippMyyAqYlBomWvrZJS6KBnofUGKWDn/zTAxaq2NZjowf7SnycmMyQKVPccB t9gK1ah9VOA9nlzll1Kq/fgb3BauKcc2PaxKLnw5VjSrvTpNTiFQHMxtMBkcZVXj m2ZElU2tldLp22Zimqk9FN30st0QY69IGw+eZ/rt5992VvauQEY= -----END CERTIFICATE-----Generated at Thu Jun 19 14:26:48 2025 by rpki-client