$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: xZgDzHXjpavwuAi0SqEQo/3VVFGMpjqHwksdZwcdkEg= Subject key identifier: D3:26:43:B2:09:D8:3D:C0:C8:B1:3C:89:45:27:01:CE:A6:81:80:5E Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 6366FABFFFE32CF9F60F0A56B7BE867AF5210FCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 0155 Signing time: Sat 28 Jun 2025 20:50:53 +0000 Manifest this update: Sat 28 Jun 2025 20:45:53 +0000 Manifest next update: Wed 02 Jul 2025 00:09:53 +0000 Files and hashes: 1: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: 59SILLiWxnkG6dXMz5rlqhNKS7dPQ+XwpjurWoS788M=) 2: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) 3: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: DAHFV0c/aFM082VX0oHdmhTVlcTRSOxGfmPDNewRFNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:66:fa:bf:ff:e3:2c:f9:f6:0f:0a:56:b7:be:86:7a:f5:21:0f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Jun 28 20:45:53 2025 GMT Not After : Jul 2 00:09:53 2025 GMT Subject: CN=D32643B209D83DC0C8B13C89452701CEA681805E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:df:5f:09:49:97:8c:2e:37:6a:dc:d1:b0:45: db:39:e1:2f:39:00:cb:e7:37:a8:ce:7f:96:92:cc: de:4f:0d:dd:37:2c:0e:a2:04:3b:dc:b7:f9:33:d6: 6f:30:4d:98:ea:02:64:c1:03:95:37:02:59:23:67: 4d:16:c7:98:6e:5f:14:61:b3:6e:f6:13:2f:48:cc: c7:1a:e6:06:cd:f1:cd:ab:46:0d:77:6d:77:3a:da: 19:75:db:21:e3:44:82:d1:55:14:76:b1:56:fb:8b: 15:f5:e0:0e:9a:e0:32:a2:c9:9c:f1:fa:09:50:94: 2f:9a:f8:fc:ce:ef:b6:28:11:09:00:e9:c3:d8:ef: 48:1d:bf:f4:b1:ee:56:ac:2c:b6:77:db:a8:23:c0: 2f:1b:4a:c5:bb:28:fd:53:8d:e0:54:d3:d5:af:7a: df:df:76:93:18:9f:1a:c6:8d:ee:1f:9c:7f:c7:98: 8b:a9:02:04:00:ba:cb:46:4e:b8:5f:53:70:9a:e6: 39:6b:2c:a7:c9:2d:cd:96:ca:0e:c3:05:f3:96:5a: 30:d0:6a:a3:43:99:9c:af:f6:5a:0f:53:29:85:41: f2:ae:3a:29:9a:48:3b:60:30:04:b9:dc:32:46:be: bb:73:5d:96:1f:8c:a7:bc:ae:aa:c5:ae:67:70:32: cd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:26:43:B2:09:D8:3D:C0:C8:B1:3C:89:45:27:01:CE:A6:81:80:5E X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:37:b1:6a:85:18:5e:ab:bd:72:b7:bc:30:5e:a4:3f:c3:34: 56:4c:25:ac:9b:93:69:9c:34:d3:ef:f9:de:f0:77:9a:b3:f4: 42:9d:1c:be:70:cc:1e:8f:08:7a:b3:7f:17:81:e4:5e:a4:50: 29:50:14:84:56:2b:66:79:e6:b5:e7:12:19:f3:e0:16:04:ae: 13:cd:ed:ff:03:03:95:06:f7:6b:1d:3c:0e:52:95:9c:ad:96: e6:c8:ea:af:10:92:27:b0:cf:77:5f:0f:29:07:d9:ee:c8:b3: 95:c8:d0:c3:24:e6:d2:1a:eb:8f:2f:5d:33:33:60:56:05:9b: 72:ca:b5:1d:b9:fb:ca:2d:64:9f:02:98:41:ac:10:80:70:8f: 5b:31:8d:49:fd:49:65:ea:13:c8:80:9d:88:d9:9f:16:cf:60: 09:bb:0a:f6:4a:cf:5b:0c:47:b2:38:f6:fc:36:73:41:60:1a: 39:2f:82:89:cf:d5:4d:79:34:ff:e6:3c:4e:ec:e1:50:64:7f: d6:c2:c4:14:33:46:1e:5a:91:dc:7f:ce:90:d9:30:09:8b:51: ff:4a:33:aa:c2:cf:71:fa:de:54:f9:aa:a2:a3:e4:bf:ad:32: 5b:c6:c8:19:6e:0d:4b:c3:eb:89:42:72:08:42:46:94:ab:63: cb:c6:86:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2b6v//jLPn2DwpWt76GevUhD88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNTA2MjgyMDQ1NTNaFw0yNTA3MDIwMDA5NTNaMDMxMTAvBgNV BAMTKEQzMjY0M0IyMDlEODNEQzBDOEIxM0M4OTQ1MjcwMUNFQTY4MTgwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl318JSZeMLjdq3NGwRds54S85 AMvnN6jOf5aSzN5PDd03LA6iBDvct/kz1m8wTZjqAmTBA5U3AlkjZ00Wx5huXxRh s272Ey9IzMca5gbN8c2rRg13bXc62hl12yHjRILRVRR2sVb7ixX14A6a4DKiyZzx +glQlC+a+PzO77YoEQkA6cPY70gdv/Sx7lasLLZ326gjwC8bSsW7KP1TjeBU09Wv et/fdpMYnxrGje4fnH/HmIupAgQAustGTrhfU3Ca5jlrLKfJLc2Wyg7DBfOWWjDQ aqNDmZyv9loPUymFQfKuOimaSDtgMAS53DJGvrtzXZYfjKe8rqrFrmdwMs1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0yZDsgnYPcDIsTyJRScBzqaBgF4wHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQ3sWqFGF6rvXK3vDBepD/DNFZMJaybk2mc NNPv+d7wd5qz9EKdHL5wzB6PCHqzfxeB5F6kUClQFIRWK2Z55rXnEhnz4BYErhPN 7f8DA5UG92sdPA5SlZytlubI6q8Qkiewz3dfDykH2e7Is5XI0MMk5tIa648vXTMz YFYFm3LKtR25+8otZJ8CmEGsEIBwj1sxjUn9SWXqE8iAnYjZnxbPYAm7CvZKz1sM R7I49vw2c0FgGjkvgonP1U15NP/mPE7s4VBkf9bCxBQzRh5akdx/zpDZMAmLUf9K M6rCz3H63lT5qqKj5L+tMlvGyBluDUvD64lCcghCRpSrY8vGhpc= -----END CERTIFICATE-----Generated at Mon Jun 30 06:53:57 2025 by rpki-client