$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: YVT6w2a/ndi4YksFWTprzHzvSRTyuwSbFmr+EUT8n6U= Subject key identifier: F8:31:5A:EF:DF:FF:D6:1D:33:2F:F1:1B:CC:A0:0F:0E:4F:80:E6:E7 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 30EB4277F4945B72A9BEA9EA497C1DA7AA008141 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 0529 Signing time: Mon 03 Nov 2025 17:02:50 +0000 Manifest this update: Mon 03 Nov 2025 16:57:50 +0000 Manifest next update: Thu 06 Nov 2025 18:26:50 +0000 Files and hashes: 1: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: xRCPABpSCz/2QAWYqnw/IoDYKEC7lCLLHA0eYuS74hA=) 2: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: KWhFP88aQIWgcnUslnjvyh5Swkim9DgQUrbO0uBN5Uc=) 3: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:eb:42:77:f4:94:5b:72:a9:be:a9:ea:49:7c:1d:a7:aa:00:81:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Nov 3 16:57:50 2025 GMT Not After : Nov 6 18:26:50 2025 GMT Subject: CN=F8315AEFDFFFD61D332FF11BCCA00F0E4F80E6E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ab:80:a9:af:b7:9a:cd:43:3d:f5:bf:84:94: e2:c4:27:46:1c:0d:4e:7e:90:d5:d3:65:09:76:63: 82:7c:5c:9e:7e:0a:31:18:09:27:a5:43:cd:0e:36: 2e:df:6a:e5:6a:76:39:05:a1:0f:2d:e8:d6:fc:53: e0:d9:36:3d:8d:7b:75:37:d9:72:5c:95:a1:01:90: a7:3a:dd:af:1a:60:f2:4a:ca:1d:30:35:fb:e2:ab: 05:44:96:9f:06:c8:58:1b:7f:5f:d7:7d:93:be:e6: a2:c6:dc:5c:c2:d7:e8:b7:c9:61:a1:9d:c1:94:2b: f5:9c:0e:ff:1b:cb:cc:83:21:d4:d0:72:dd:5a:19: 15:ef:76:ca:52:fd:13:b9:e1:d4:db:ab:a3:f6:fe: 70:f0:47:09:b9:c5:08:ed:ec:08:2d:8a:95:e0:aa: 57:ef:ca:eb:8a:aa:3c:bc:4a:e4:c7:8f:08:c5:32: cc:e5:36:7d:2a:4f:f7:9a:01:55:d8:83:21:0c:d7: 52:f2:58:8b:b9:de:fd:ba:80:98:2e:6e:0d:19:5f: 2e:2e:8f:7b:72:a5:78:31:c8:8c:14:c9:5d:59:71: 24:0c:ca:51:1b:f6:09:d7:78:e0:17:4e:c3:d7:90: c3:f4:d1:ff:6e:21:af:e9:cf:16:dc:42:e9:b6:3c: dd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:31:5A:EF:DF:FF:D6:1D:33:2F:F1:1B:CC:A0:0F:0E:4F:80:E6:E7 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c6:8c:07:c9:e5:5d:88:bc:b5:8c:6d:17:ba:57:e6:ac:43: 76:f9:c1:0b:f7:52:0f:4d:5f:7d:7b:5c:4e:ce:63:67:12:77: d4:ab:f9:d7:8f:60:76:e6:1d:3d:3b:90:ec:44:1f:ef:7a:7e: 2b:c8:ca:19:f7:c5:e9:79:bc:9e:8d:bc:42:b4:04:7f:59:a9: 01:20:c8:b4:f0:4b:d8:97:64:fc:db:cf:69:57:42:d1:23:43: d8:ec:5b:f3:43:2c:ea:c8:1a:21:ba:57:21:3e:30:6f:50:84: 04:c0:5e:81:06:c6:15:df:23:35:f7:66:03:78:22:f7:80:c9: d0:6a:35:69:bd:ac:73:f8:34:9d:f6:85:0a:af:7b:97:b2:67: 41:4f:c8:fe:d5:15:b1:ad:ed:27:8e:db:05:dd:ba:a6:ae:7f: a1:67:4c:61:a0:6c:08:e5:8c:5e:10:9b:a8:b0:b5:fc:c3:86: af:c9:c6:46:1d:cb:33:2d:0e:fb:12:cf:81:68:de:85:ca:b6: 6a:a4:a1:e3:44:bf:b5:24:66:03:b3:6a:4a:36:04:a4:c1:8b: 29:48:b5:2f:19:7c:f7:6d:c9:29:aa:83:e3:0a:06:4b:e0:91: 79:70:8b:77:8a:c9:52:53:55:4d:5f:1d:e1:40:f4:ec:7f:e2: 43:07:33:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMOtCd/SUW3KpvqnqSXwdp6oAgUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTExMDMxNjU3NTBaFw0yNTExMDYxODI2NTBaMDMxMTAvBgNV BAMTKEY4MzE1QUVGREZGRkQ2MUQzMzJGRjExQkNDQTAwRjBFNEY4MEU2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6q4Cpr7eazUM99b+ElOLEJ0Yc DU5+kNXTZQl2Y4J8XJ5+CjEYCSelQ80ONi7fauVqdjkFoQ8t6Nb8U+DZNj2Ne3U3 2XJclaEBkKc63a8aYPJKyh0wNfviqwVElp8GyFgbf1/XfZO+5qLG3FzC1+i3yWGh ncGUK/WcDv8by8yDIdTQct1aGRXvdspS/RO54dTbq6P2/nDwRwm5xQjt7AgtipXg qlfvyuuKqjy8SuTHjwjFMszlNn0qT/eaAVXYgyEM11LyWIu53v26gJgubg0ZXy4u j3typXgxyIwUyV1ZcSQMylEb9gnXeOAXTsPXkMP00f9uIa/pzxbcQum2PN2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+DFa79//1h0zL/EbzKAPDk+A5ucwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPGjAfJ5V2IvLWMbRe6V+asQ3b5wQv3Ug9N X317XE7OY2cSd9Sr+dePYHbmHT07kOxEH+96fivIyhn3xel5vJ6NvEK0BH9ZqQEg yLTwS9iXZPzbz2lXQtEjQ9jsW/NDLOrIGiG6VyE+MG9QhATAXoEGxhXfIzX3ZgN4 IveAydBqNWm9rHP4NJ32hQqve5eyZ0FPyP7VFbGt7SeO2wXduqauf6FnTGGgbAjl jF4Qm6iwtfzDhq/JxkYdyzMtDvsSz4Fo3oXKtmqkoeNEv7UkZgOzako2BKTBiylI tS8ZfPdtySmqg+MKBkvgkXlwi3eKyVJTVU1fHeFA9Ox/4kMHM90= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:38 2025 by rpki-client