$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: yKu4FHIfTcIb99TEYfiYksnp4OvokmtCwg45/orTTmc= Subject key identifier: 35:71:90:84:83:90:94:A1:07:98:57:AB:B5:73:E6:9E:5F:61:74:6D Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 56057A4FA06E03F8B3458442DC3DB24760948575 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 02FD Signing time: Sat 23 Aug 2025 00:10:44 +0000 Manifest this update: Sat 23 Aug 2025 00:05:44 +0000 Manifest next update: Tue 26 Aug 2025 10:31:44 +0000 Files and hashes: 1: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=) 2: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: mgx96I13wyPj1AIPktZ2CPUvxZgDZE9GceALPdzul2c=) 3: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:05:7a:4f:a0:6e:03:f8:b3:45:84:42:dc:3d:b2:47:60:94:85:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Aug 23 00:05:44 2025 GMT Not After : Aug 26 10:31:44 2025 GMT Subject: CN=35719084839094A1079857ABB573E69E5F61746D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:1a:89:e6:41:d6:2c:7e:fb:f9:11:fa:ed: a2:5b:f3:b2:11:ab:44:d2:b7:a3:d1:b4:24:2b:ad: 18:2d:f3:62:6a:6b:46:b6:f3:cb:d8:38:80:08:b5: 93:b9:00:43:f3:af:58:7a:ec:74:da:cd:4f:a4:e4: 63:1e:1f:c7:c3:0b:1c:d9:9a:64:27:87:ac:e5:64: 83:c0:8f:13:7e:f4:8e:de:10:3b:f6:f1:91:23:f6: 11:87:96:c1:cd:66:fa:18:49:76:4f:90:84:0f:e7: 96:b5:42:7b:4b:15:82:d0:64:de:3e:3c:66:35:5a: fe:37:63:ad:e0:30:41:90:09:9d:ac:19:f2:a2:0f: 75:8c:56:ad:8a:0e:bc:8e:0b:c6:50:52:ff:49:3f: 3c:09:49:69:6e:03:ab:53:6e:9a:63:b2:ec:98:f9: a6:ee:67:90:69:b7:f4:66:dc:ee:a7:88:5a:cd:ed: f0:0f:03:c0:33:de:b0:b4:0d:1d:21:04:49:40:d8: c9:e0:98:74:34:3b:1c:ff:b7:7a:97:24:0c:18:b2: a2:de:b0:fc:b6:70:ce:2a:04:41:d1:f3:7f:3b:1f: f1:a3:e1:d9:db:5a:c3:19:1d:d6:80:b9:d6:98:4e: 65:ef:34:8b:ef:14:b0:94:e4:98:8a:88:be:63:4d: 7a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:71:90:84:83:90:94:A1:07:98:57:AB:B5:73:E6:9E:5F:61:74:6D X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a9:37:30:61:6c:2e:d7:0b:ee:d7:43:00:13:a5:bc:c3:0d: 4a:f5:fd:e7:4f:95:59:a5:4f:47:43:f9:15:de:90:36:3b:9e: 2a:f9:0b:d7:59:12:0c:23:51:54:2b:e3:1c:d9:70:12:cc:08: 63:cf:f7:ee:6c:51:b6:73:80:f7:62:0f:1f:53:fd:14:27:42: 15:bd:34:eb:4c:c4:30:d6:ec:f9:34:bd:01:e9:de:b8:a6:1b: 71:37:be:01:3a:db:4c:cc:04:76:e3:2d:f8:c8:e4:e0:eb:46: 50:5a:d2:01:75:55:27:89:40:6a:52:3e:a6:ed:6a:9b:78:e4: f4:61:83:bb:b0:f5:69:dd:48:c8:5f:e2:f3:e4:b6:16:e2:fd: 48:b2:12:af:f5:57:6a:17:b4:58:1c:f2:48:a8:00:ea:fa:43: 5a:a1:1b:80:70:16:ab:b4:56:34:5f:61:37:68:e1:45:cb:40: 0f:f9:32:7f:b2:58:64:a2:dc:0e:c5:16:49:14:b6:f4:39:f8: 17:53:eb:d3:7c:40:d0:07:4e:41:a0:7e:d6:9b:a0:18:06:ae: 9f:94:94:e9:68:67:13:51:f9:1e:00:40:38:de:2e:59:cd:e0: 1c:ea:2e:a6:55:00:df:61:7e:80:1b:d9:c9:48:88:8b:65:0d: bb:5e:57:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgV6T6BuA/izRYRC3D2yR2CUhXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNTA4MjMwMDA1NDRaFw0yNTA4MjYxMDMxNDRaMDMxMTAvBgNV BAMTKDM1NzE5MDg0ODM5MDk0QTEwNzk4NTdBQkI1NzNFNjlFNUY2MTc0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+JhqJ5kHWLH77+RH67aJb87IR q0TSt6PRtCQrrRgt82Jqa0a288vYOIAItZO5AEPzr1h67HTazU+k5GMeH8fDCxzZ mmQnh6zlZIPAjxN+9I7eEDv28ZEj9hGHlsHNZvoYSXZPkIQP55a1QntLFYLQZN4+ PGY1Wv43Y63gMEGQCZ2sGfKiD3WMVq2KDryOC8ZQUv9JPzwJSWluA6tTbppjsuyY +abuZ5Bpt/Rm3O6niFrN7fAPA8Az3rC0DR0hBElA2MngmHQ0Oxz/t3qXJAwYsqLe sPy2cM4qBEHR8387H/Gj4dnbWsMZHdaAudaYTmXvNIvvFLCU5JiKiL5jTXojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNXGQhIOQlKEHmFertXPmnl9hdG0wHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6pNzBhbC7XC+7XQwATpbzDDUr1/edPlVml T0dD+RXekDY7nir5C9dZEgwjUVQr4xzZcBLMCGPP9+5sUbZzgPdiDx9T/RQnQhW9 NOtMxDDW7Pk0vQHp3rimG3E3vgE620zMBHbjLfjI5ODrRlBa0gF1VSeJQGpSPqbt apt45PRhg7uw9WndSMhf4vPkthbi/UiyEq/1V2oXtFgc8kioAOr6Q1qhG4BwFqu0 VjRfYTdo4UXLQA/5Mn+yWGSi3A7FFkkUtvQ5+BdT69N8QNAHTkGgftaboBgGrp+U lOloZxNR+R4AQDjeLlnN4BzqLqZVAN9hfoAb2clIiItlDbteV3E= -----END CERTIFICATE-----Generated at Sat Aug 23 20:20:07 2025 by rpki-client