$ rpki-client -vvf repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft File: 25D788BD2A450C01354B9AB70826895FDFF56208.mft (raw, json) Hash identifier: uuTXRXf15m1Z5/0oJNn3x/P7tsnchlew0BCcUTDAsgE= Subject key identifier: 59:9B:2B:54:57:D4:EB:AF:2F:1B:7D:B4:0D:2C:B1:81:9A:0B:4C:F7 Authority key identifier: 25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 Certificate issuer: /CN=25D788BD2A450C01354B9AB70826895FDFF56208 Certificate serial: 552443FDD13AA9CEEBBB1A78A2E161DC5C283E5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft Manifest number: 0368 Signing time: Sat 18 Oct 2025 20:31:06 +0000 Manifest this update: Sat 18 Oct 2025 20:26:06 +0000 Manifest next update: Wed 22 Oct 2025 07:06:06 +0000 Files and hashes: 1: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (hash: BfvR/So226bitOLhPr9CHxhxgb1Q7qOXOhbe2UXDXlU=) 2: 3132332e3235332e3234382e302f32332d3234203d3e20313432333739.roa (hash: T9vPzFVrVbtfkOIbIR0gBtReDHG4KgAtDeHT2T3EGwQ=) 3: 3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (hash: AU2BjjxLKOB7x1afsJypIVoDqfBt5Pa++/i1Uy3JBXs=) 4: 25D788BD2A450C01354B9AB70826895FDFF56208.crl (hash: MKV70BG/zCXd1qYJSm03aRTZ1ArTyNxPRAfKshr7lGk=) 5: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (hash: g29pf8GRD5KEsQ3xMiXcjqqLaCsv5cRFguqUqUNSeQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 07:06:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:24:43:fd:d1:3a:a9:ce:eb:bb:1a:78:a2:e1:61:dc:5c:28:3e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25D788BD2A450C01354B9AB70826895FDFF56208 Validity Not Before: Oct 18 20:26:06 2025 GMT Not After : Oct 22 07:06:06 2025 GMT Subject: CN=599B2B5457D4EBAF2F1B7DB40D2CB1819A0B4CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:77:62:c2:79:dc:35:58:a8:3b:98:f5:e6:5e: df:af:4c:36:fd:80:8c:95:f0:88:73:23:40:85:c2: 69:d6:e7:e5:b8:44:9b:69:6b:81:cd:58:a6:82:51: 5c:3b:77:b1:04:05:7e:eb:47:63:ee:49:b1:95:5a: 27:0e:b7:e2:0e:9a:51:2f:9f:69:88:1b:c7:ad:f1: 4e:d3:b2:3e:6c:70:63:65:69:3a:66:4b:13:64:7a: ed:a0:3b:d4:21:ac:7b:e5:db:85:b7:0e:f4:a8:5a: 11:6d:59:81:de:2c:f9:65:7c:0c:ae:b4:48:17:f5: d0:97:f5:61:8a:58:b2:51:9f:2d:05:c5:2e:82:43: bb:da:15:33:be:19:14:e2:9c:7c:db:8e:c6:e5:46: b9:e9:b5:3a:55:df:ef:4b:87:4b:1f:ff:a9:fe:a7: ab:e1:fa:4b:e0:9c:23:73:95:f4:aa:15:1f:ba:b9: 04:14:64:9e:38:c5:15:eb:3d:e8:cf:05:64:e6:51: 29:97:f8:3e:b3:ab:0a:e8:20:ec:8e:ad:79:38:b8: d3:ee:64:38:34:bd:0a:74:5f:de:74:82:e9:06:10: 05:f5:52:7e:18:09:bb:ac:42:64:0b:39:c0:dc:5d: 87:50:b2:8b:b4:53:2c:c7:fa:c7:ff:be:3a:32:79: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9B:2B:54:57:D4:EB:AF:2F:1B:7D:B4:0D:2C:B1:81:9A:0B:4C:F7 X509v3 Authority Key Identifier: keyid:25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:46:c6:0c:1d:c1:fc:21:54:52:e8:5d:96:82:9a:5e:ea:44: dd:3e:3e:65:a4:e9:0c:31:23:d6:6b:72:9f:c9:7c:ce:1f:2d: 25:91:0a:05:12:aa:9f:c7:be:91:5a:d8:31:bd:80:cf:22:76: 19:b4:06:c0:13:5c:7a:cf:fe:af:b7:d4:49:9b:b0:e3:67:7b: 4b:35:d8:c4:b3:ca:0e:24:28:88:c5:4a:8b:7e:37:91:ea:94: 5a:d3:5a:e0:8a:f0:c8:4f:49:0a:83:47:ca:86:e2:a4:24:d1: 57:c6:fb:f7:a2:5d:a0:cb:ed:52:56:59:1f:db:8c:95:32:31: d5:b4:2d:ac:ae:b1:e0:51:e2:c9:c0:2b:1a:b9:8f:cf:fd:33: 9b:c7:40:f9:b9:50:bc:a1:cf:63:cc:9b:94:d2:b5:60:25:1b: 88:33:e7:8f:c2:d6:94:83:42:da:be:44:7f:db:5d:69:35:de: 76:6c:94:fd:7c:9f:6c:32:0a:7e:72:92:36:48:13:ef:94:dc: c4:6d:82:25:6c:e6:4c:a6:51:0f:65:17:42:a2:e0:fd:0d:0a: 3e:64:18:94:02:08:71:48:72:4f:22:a0:85:04:d8:14:8a:d4: ba:7a:ed:c7:2b:84:da:13:87:1a:4a:b3:c5:f4:f4:9d:c2:b4: b8:76:d1:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVSRD/dE6qc7ruxp4ouFh3FwoPl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZE RkY1NjIwODAeFw0yNTEwMTgyMDI2MDZaFw0yNTEwMjIwNzA2MDZaMDMxMTAvBgNV BAMTKDU5OUIyQjU0NTdENEVCQUYyRjFCN0RCNDBEMkNCMTgxOUEwQjRDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChd2LCedw1WKg7mPXmXt+vTDb9 gIyV8IhzI0CFwmnW5+W4RJtpa4HNWKaCUVw7d7EEBX7rR2PuSbGVWicOt+IOmlEv n2mIG8et8U7Tsj5scGNlaTpmSxNkeu2gO9QhrHvl24W3DvSoWhFtWYHeLPllfAyu tEgX9dCX9WGKWLJRny0FxS6CQ7vaFTO+GRTinHzbjsblRrnptTpV3+9Lh0sf/6n+ p6vh+kvgnCNzlfSqFR+6uQQUZJ44xRXrPejPBWTmUSmX+D6zqwroIOyOrXk4uNPu ZDg0vQp0X950gukGEAX1Un4YCbusQmQLOcDcXYdQsou0UyzH+sf/vjoyeWsTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZsrVFfU668vG320DSyxgZoLTPcwHwYDVR0j BBgwFoAUJdeIvSpFDAE1S5q3CCaJX9/1YggwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmE3NjY1YS1iNTBiLTRhNDUtYThmOS0wZDY5YmQ3ZDc0M2QvMC8yNUQ3ODhCRDJB NDUwQzAxMzU0QjlBQjcwODI2ODk1RkRGRjU2MjA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZERkY1 NjIwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDZhNzY2NWEtYjUwYi00YTQ1LWE4 ZjktMGQ2OWJkN2Q3NDNkLzAvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5 NUZERkY1NjIwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExGxgwdwfwhVFLoXZaCml7qRN0+PmWk6Qwx I9Zrcp/JfM4fLSWRCgUSqp/HvpFa2DG9gM8idhm0BsATXHrP/q+31EmbsONne0s1 2MSzyg4kKIjFSot+N5HqlFrTWuCK8MhPSQqDR8qG4qQk0VfG+/eiXaDL7VJWWR/b jJUyMdW0LayuseBR4snAKxq5j8/9M5vHQPm5ULyhz2PMm5TStWAlG4gz54/C1pSD Qtq+RH/bXWk13nZslP18n2wyCn5ykjZIE++U3MRtgiVs5kymUQ9lF0Ki4P0NCj5k GJQCCHFIck8ioIUE2BSK1Lp67ccrhNoThxpKs8X09J3CtLh20RA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:19:42 2025 by rpki-client