$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: p5iVgjUBDaHLqbMNF288YQGuwhZr72WQXRgVGSqIY2Q= Subject key identifier: B4:B3:21:64:DF:4F:3D:9B:1A:36:C6:F5:9B:7C:FD:03:12:68:C8:2C Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 42A42C960A643F57DF4453D602C028455AA8B5DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 04FC Signing time: Fri 22 Aug 2025 01:11:08 +0000 Manifest this update: Fri 22 Aug 2025 01:06:08 +0000 Manifest next update: Mon 25 Aug 2025 04:32:08 +0000 Files and hashes: 1: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: RZy6TYvU/OnVoAwKApvUrLMBSgr2tYCN+5iMb33gzqM=) 2: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: uifJo19bPIK/GNXRg9G4mqdNDaV0gp/vid9fl+rEhFA=) 3: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a4:2c:96:0a:64:3f:57:df:44:53:d6:02:c0:28:45:5a:a8:b5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Aug 22 01:06:08 2025 GMT Not After : Aug 25 04:32:08 2025 GMT Subject: CN=B4B32164DF4F3D9B1A36C6F59B7CFD031268C82C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5d:60:4b:81:2b:b4:26:59:da:6b:c1:ee:74: a2:32:38:bf:f6:53:0b:b7:f2:2f:35:00:69:b3:de: 5d:fc:1d:5d:f4:14:f3:1a:e0:56:a7:d5:76:82:7c: bb:6e:a4:a1:37:4e:9c:50:a6:66:5a:0a:54:c6:8a: a1:2b:2c:a6:e0:77:b1:4e:4c:a5:2f:61:aa:ca:d7: 9c:41:dc:f9:9e:40:f4:ac:63:97:1c:6d:4f:03:65: 63:15:e5:e4:37:07:fb:bc:d8:6a:4e:a2:fd:b1:3f: 37:b5:33:8e:68:47:6f:08:ab:43:a4:44:fa:6d:c0: 89:2f:4d:d6:b3:06:11:ae:2f:bb:6a:6a:fc:b9:f4: e9:c5:02:9e:69:5d:26:01:ea:3b:da:2d:43:69:af: fc:a1:b7:9a:61:cb:70:27:dd:17:0a:e6:64:9a:3b: f8:18:3e:25:23:c1:5f:89:63:fc:d2:e3:d1:11:4c: 7f:11:80:7b:6c:64:da:52:2d:7a:86:0d:56:e3:4f: ec:6a:34:4f:bd:3c:d8:ab:74:98:e9:b3:a8:ab:24: 59:e7:eb:9d:5f:fd:50:33:57:ba:22:1d:ae:ed:8c: fc:4f:68:33:69:ba:85:71:bb:1c:20:43:a6:2f:22: 25:23:ed:e1:9e:5f:d3:b7:59:92:1d:61:a1:0b:24: a5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B3:21:64:DF:4F:3D:9B:1A:36:C6:F5:9B:7C:FD:03:12:68:C8:2C X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:86:1a:0f:0a:7b:ae:e4:cb:5b:91:97:b5:2e:b2:b2:6d:65: 81:56:0e:3d:e2:ef:b8:dc:3d:dc:23:8d:00:f9:33:cc:8f:d5: 96:73:8d:91:51:e4:18:ca:b3:f9:59:72:6d:69:c8:d2:88:a5: 4a:79:b3:3f:d1:97:79:c8:6c:e5:7b:86:30:36:ce:4b:1b:6a: e5:58:00:0d:d5:eb:53:b3:ff:fa:60:8f:d7:d5:a0:f6:77:f6: 81:62:80:80:c8:28:26:7d:33:09:f6:1e:cd:f4:b4:16:b2:dd: 53:ed:a4:e6:72:62:79:22:f4:30:50:8f:ac:27:a6:26:24:59: 2a:63:fd:5b:77:57:18:ef:d6:09:73:d1:be:0e:28:fa:77:ee: ac:9d:71:3d:61:b1:32:f5:98:50:42:1b:5d:74:97:6f:ce:dd: 95:e4:cc:fd:2e:37:9f:c0:d5:ac:24:63:dc:97:da:4a:52:a1: a2:12:44:4d:1b:f1:4a:a8:c6:3e:07:54:7a:10:b5:39:6f:60: d5:d4:74:78:4c:81:34:c9:1e:40:50:e9:63:7c:b1:3f:3c:15: c6:1d:81:30:51:33:a3:7a:27:c0:3e:05:dd:da:0f:fc:45:d8: 82:5a:fe:c6:89:f7:3f:14:63:9f:0c:5b:0f:f4:93:63:e2:e5: db:b1:de:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqQslgpkP1ffRFPWAsAoRVqotdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNTA4MjIwMTA2MDhaFw0yNTA4MjUwNDMyMDhaMDMxMTAvBgNV BAMTKEI0QjMyMTY0REY0RjNEOUIxQTM2QzZGNTlCN0NGRDAzMTI2OEM4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXXWBLgSu0Jlnaa8HudKIyOL/2 Uwu38i81AGmz3l38HV30FPMa4Fan1XaCfLtupKE3TpxQpmZaClTGiqErLKbgd7FO TKUvYarK15xB3PmeQPSsY5ccbU8DZWMV5eQ3B/u82GpOov2xPze1M45oR28Iq0Ok RPptwIkvTdazBhGuL7tqavy59OnFAp5pXSYB6jvaLUNpr/yht5phy3An3RcK5mSa O/gYPiUjwV+JY/zS49ERTH8RgHtsZNpSLXqGDVbjT+xqNE+9PNirdJjps6irJFnn 651f/VAzV7oiHa7tjPxPaDNpuoVxuxwgQ6YvIiUj7eGeX9O3WZIdYaELJKURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtLMhZN9PPZsaNsb1m3z9AxJoyCwwHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeGGg8Ke67ky1uRl7UusrJtZYFWDj3i77jc PdwjjQD5M8yP1ZZzjZFR5BjKs/lZcm1pyNKIpUp5sz/Rl3nIbOV7hjA2zksbauVY AA3V61Oz//pgj9fVoPZ39oFigIDIKCZ9Mwn2Hs30tBay3VPtpOZyYnki9DBQj6wn piYkWSpj/Vt3Vxjv1glz0b4OKPp37qydcT1hsTL1mFBCG110l2/O3ZXkzP0uN5/A 1awkY9yX2kpSoaISRE0b8Uqoxj4HVHoQtTlvYNXUdHhMgTTJHkBQ6WN8sT88FcYd gTBRM6N6J8A+Bd3aD/xF2IJa/saJ9z8UY58MWw/0k2Pi5dux3oQ= -----END CERTIFICATE-----Generated at Sat Aug 23 10:26:48 2025 by rpki-client