$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: NDzHlWr+fvTqq5xDayTUo9DLVdv2+QGO0MQXkouuYyU= Subject key identifier: 83:09:2C:93:4A:B6:B2:B2:11:88:A9:9F:30:FB:15:53:9B:51:EC:8E Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 7C4724E095E0FE38D48F2FA37F97611AD961EC49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 04CD Signing time: Sat 10 May 2025 04:51:07 +0000 Manifest this update: Sat 10 May 2025 04:46:07 +0000 Manifest next update: Tue 13 May 2025 09:53:07 +0000 Files and hashes: 1: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: RZy6TYvU/OnVoAwKApvUrLMBSgr2tYCN+5iMb33gzqM=) 2: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: CFj+K+liKZAqcSf36DIkxqcEF84Z38vPTkYjTuanCG4=) 3: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: RHnWZm4yW/v7exL0Tb6lY9hJuauS0JwkMRNcPM+MaX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 09:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:47:24:e0:95:e0:fe:38:d4:8f:2f:a3:7f:97:61:1a:d9:61:ec:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: May 10 04:46:07 2025 GMT Not After : May 13 09:53:07 2025 GMT Subject: CN=83092C934AB6B2B21188A99F30FB15539B51EC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:59:48:51:20:44:b6:3a:16:f1:c0:85:a1: 46:1d:4f:f0:b3:c0:af:f0:4e:d3:f9:1f:36:41:7c: 15:63:2d:2e:17:b5:df:1f:af:a0:d2:d2:33:b1:e2: 7e:5e:87:47:90:a6:03:43:60:91:bb:7c:80:d6:33: 19:a8:48:a5:32:9c:c4:43:87:8c:69:46:d4:ee:7c: 97:22:8d:e4:10:14:ae:01:32:a7:c2:f2:02:ab:6f: 29:02:5e:f4:8f:12:82:5d:f4:0e:38:7c:81:ef:9e: bf:f5:a7:80:b8:40:1e:9c:aa:2a:a6:0e:d4:c6:af: f3:f6:77:00:19:e5:12:7d:5d:6e:f6:5d:09:b5:31: 76:ea:64:e9:7a:77:54:1d:b6:60:ba:81:f8:18:ca: c4:a5:67:02:5c:57:bb:08:11:f8:f2:bd:13:69:86: 94:fa:5e:ab:da:6c:5a:a1:8a:8b:c2:c1:40:7e:da: 37:30:65:2f:95:ee:7b:d0:aa:11:8d:51:19:2f:1e: 42:18:c4:5f:cc:ed:34:6f:b8:49:f7:d2:65:5f:69: 8e:85:52:79:60:bd:6e:ca:06:d8:0a:82:47:73:1f: 25:93:82:fc:d8:3b:7d:ff:67:93:55:a5:c4:e5:4d: 71:37:95:99:a8:79:16:64:64:3d:13:b0:a3:ed:3b: 75:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:09:2C:93:4A:B6:B2:B2:11:88:A9:9F:30:FB:15:53:9B:51:EC:8E X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:4e:6c:02:9d:42:97:fb:3b:4b:5c:b7:97:7c:02:32:22:d3: 3e:64:e7:65:8e:6f:39:e2:ac:fa:61:64:4e:db:3f:25:3b:63: fc:88:ba:89:ef:48:32:31:27:0a:dc:f5:dd:6c:e6:44:13:d0: eb:71:1b:4d:bd:8e:48:44:45:3c:0e:e1:5a:66:f1:b8:d7:59: b3:a5:68:f1:28:c2:57:94:e0:7a:30:a4:fe:40:46:05:c3:27: e1:d6:2e:b8:07:ea:e8:eb:6f:0e:9b:85:5f:ec:72:eb:c4:44: 3e:0b:67:94:82:a3:71:9d:15:f0:bb:3d:b7:a7:74:03:9d:00: fc:0a:08:af:98:1b:b3:0e:83:44:bf:3f:94:bb:75:d7:69:17: 93:08:53:43:48:84:ea:1a:0e:81:6c:76:05:80:c3:e2:42:72: 0c:da:5f:2f:86:58:d9:aa:c8:55:3b:f3:c9:64:45:de:88:c1: 0d:11:46:b2:ca:e5:0d:3b:5e:c4:03:2b:cf:d7:b7:bb:33:c4: eb:f3:41:ce:73:d9:8f:df:5a:ac:7a:d7:c0:25:fa:7b:50:4d: d5:f0:39:bc:81:c2:5e:e7:c1:bf:07:c6:14:dc:7b:e9:16:c5: 03:b9:5b:66:5c:fe:b2:c4:cc:84:93:0f:c1:ec:7e:9c:26:d8: d9:4f:de:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfEck4JXg/jjUjy+jf5dhGtlh7EkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNTA1MTAwNDQ2MDdaFw0yNTA1MTMwOTUzMDdaMDMxMTAvBgNV BAMTKDgzMDkyQzkzNEFCNkIyQjIxMTg4QTk5RjMwRkIxNTUzOUI1MUVDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NFlIUSBEtjoW8cCFoUYdT/Cz wK/wTtP5HzZBfBVjLS4Xtd8fr6DS0jOx4n5eh0eQpgNDYJG7fIDWMxmoSKUynMRD h4xpRtTufJcijeQQFK4BMqfC8gKrbykCXvSPEoJd9A44fIHvnr/1p4C4QB6cqiqm DtTGr/P2dwAZ5RJ9XW72XQm1MXbqZOl6d1QdtmC6gfgYysSlZwJcV7sIEfjyvRNp hpT6XqvabFqhiovCwUB+2jcwZS+V7nvQqhGNURkvHkIYxF/M7TRvuEn30mVfaY6F UnlgvW7KBtgKgkdzHyWTgvzYO33/Z5NVpcTlTXE3lZmoeRZkZD0TsKPtO3W5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgwksk0q2srIRiKmfMPsVU5tR7I4wHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRObAKdQpf7O0tct5d8AjIi0z5k52WObzni rPphZE7bPyU7Y/yIuonvSDIxJwrc9d1s5kQT0OtxG029jkhERTwO4Vpm8bjXWbOl aPEowleU4HowpP5ARgXDJ+HWLrgH6ujrbw6bhV/scuvERD4LZ5SCo3GdFfC7Pben dAOdAPwKCK+YG7MOg0S/P5S7dddpF5MIU0NIhOoaDoFsdgWAw+JCcgzaXy+GWNmq yFU788lkRd6IwQ0RRrLK5Q07XsQDK8/Xt7szxOvzQc5z2Y/fWqx618Al+ntQTdXw ObyBwl7nwb8HxhTce+kWxQO5W2Zc/rLEzISTD8Hsfpwm2NlP3hI= -----END CERTIFICATE-----Generated at Sun May 11 09:32:00 2025 by rpki-client