$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: bvHMIbjYtEm5EauufN8Hcm37YVoOZ1E4EJv9zA6JVME= Subject key identifier: 9E:D4:82:B2:EB:D9:A6:F8:7D:B6:60:C7:EF:EA:04:1B:FD:BE:04:41 Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 4B24364C15152ACF1278D7A04BD0774F6D7F6EEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 016D Signing time: Thu 21 Aug 2025 16:30:51 +0000 Manifest this update: Thu 21 Aug 2025 16:25:51 +0000 Manifest next update: Sun 24 Aug 2025 18:48:51 +0000 Files and hashes: 1: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: DAHFV0c/aFM082VX0oHdmhTVlcTRSOxGfmPDNewRFNU=) 2: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) 3: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: DSFxnGKFbUAEt0psKaOYCARm+D8GSWSajkV4Pife4mU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:24:36:4c:15:15:2a:cf:12:78:d7:a0:4b:d0:77:4f:6d:7f:6e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Aug 21 16:25:51 2025 GMT Not After : Aug 24 18:48:51 2025 GMT Subject: CN=9ED482B2EBD9A6F87DB660C7EFEA041BFDBE0441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:13:45:bf:2e:64:56:db:ca:36:9e:ee:53:45: eb:ff:6a:72:1b:70:c3:64:13:1b:18:ba:fa:9b:1e: 09:1b:a0:d2:ae:65:34:f0:57:f2:f0:d0:df:b7:6f: ad:3e:bf:1c:ed:4e:b0:c0:67:64:6c:f9:5b:29:5e: 6d:b3:0b:61:af:76:41:b2:c3:5a:c3:24:e9:71:bd: c8:4e:9b:3a:1e:58:4b:c3:06:a0:8a:11:12:62:db: d6:a3:c6:af:68:ec:66:0b:57:1d:9f:ad:f4:6b:c4: 09:b9:ec:ba:4a:11:37:8d:74:c0:d9:c6:56:34:cb: c5:d3:c2:c2:1a:f7:fc:42:35:3a:c0:a8:d4:56:dc: 4f:32:6a:d0:5e:19:9b:49:9e:c8:6c:74:2a:8d:42: 03:41:f7:a5:98:83:8b:2c:11:0e:a8:da:48:b2:53: cd:23:24:46:33:81:e7:1a:1a:49:b9:bf:bb:07:83: bb:38:1e:b9:33:f4:c6:a5:cf:c3:e3:90:ca:29:35: 81:ef:cd:52:26:30:c0:91:59:0c:b9:e1:63:a5:3d: cb:a7:b9:6d:6c:0b:b2:38:b3:76:a7:f0:8b:fd:a3: d5:dd:dc:c7:a1:90:6c:58:8b:30:a0:62:75:a5:b3: 2d:c7:67:d8:5e:34:f2:c7:12:f7:13:89:12:49:6d: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D4:82:B2:EB:D9:A6:F8:7D:B6:60:C7:EF:EA:04:1B:FD:BE:04:41 X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:21:3a:fb:01:d7:40:4c:6d:95:db:95:35:43:b6:23:70:10: 29:61:09:cf:2c:a9:7c:be:4c:8d:cd:e8:ca:4d:73:4a:64:a6: 90:b7:62:0e:79:71:ec:a7:a5:33:8a:4e:9a:cb:51:f5:70:15: d2:58:be:b0:7b:8d:8c:23:66:ca:df:9d:21:42:1c:f6:f1:8a: 6b:83:6a:50:e2:03:e2:01:4e:ae:5e:f5:a9:19:92:ad:ee:fe: 94:02:5e:98:25:e1:3a:ae:06:82:34:12:af:b9:3b:c0:b6:fc: 04:f4:d6:e3:87:86:83:b3:34:6a:7f:07:36:c0:37:07:12:75: f1:fd:e5:7d:4e:5c:ff:43:a1:e8:43:fb:d3:0c:c5:17:57:79: f4:15:d3:e0:02:5e:d2:c9:48:36:59:58:fe:22:a5:42:d1:6b: 50:c7:34:24:38:47:9b:10:ad:f0:d3:d5:47:5d:53:3a:6c:7a: f0:87:66:4d:72:ff:58:4e:26:e9:20:02:2f:0f:0f:a5:ab:76: 05:3f:03:26:01:26:23:66:db:ba:e5:ae:41:d5:74:c6:7a:93: ae:54:dc:80:da:4e:f8:cc:e7:18:88:ff:ba:ff:bf:5c:fe:49: 82:54:82:02:87:ff:81:c7:66:b3:1e:90:05:49:63:e0:f0:24: 10:7f:10:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyQ2TBUVKs8SeNegS9B3T21/buswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNTA4MjExNjI1NTFaFw0yNTA4MjQxODQ4NTFaMDMxMTAvBgNV BAMTKDlFRDQ4MkIyRUJEOUE2Rjg3REI2NjBDN0VGRUEwNDFCRkRCRTA0NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeE0W/LmRW28o2nu5TRev/anIb cMNkExsYuvqbHgkboNKuZTTwV/Lw0N+3b60+vxztTrDAZ2Rs+VspXm2zC2GvdkGy w1rDJOlxvchOmzoeWEvDBqCKERJi29ajxq9o7GYLVx2frfRrxAm57LpKETeNdMDZ xlY0y8XTwsIa9/xCNTrAqNRW3E8yatBeGZtJnshsdCqNQgNB96WYg4ssEQ6o2kiy U80jJEYzgecaGkm5v7sHg7s4Hrkz9Malz8PjkMopNYHvzVImMMCRWQy54WOlPcun uW1sC7I4s3an8Iv9o9Xd3MehkGxYizCgYnWlsy3HZ9heNPLHEvcTiRJJbRn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUntSCsuvZpvh9tmDH7+oEG/2+BEEwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIhOvsB10BMbZXblTVDtiNwEClhCc8sqXy+ TI3N6MpNc0pkppC3Yg55ceynpTOKTprLUfVwFdJYvrB7jYwjZsrfnSFCHPbximuD alDiA+IBTq5e9akZkq3u/pQCXpgl4TquBoI0Eq+5O8C2/AT01uOHhoOzNGp/BzbA NwcSdfH95X1OXP9DoehD+9MMxRdXefQV0+ACXtLJSDZZWP4ipULRa1DHNCQ4R5sQ rfDT1UddUzpsevCHZk1y/1hOJukgAi8PD6WrdgU/AyYBJiNm27rlrkHVdMZ6k65U 3IDaTvjM5xiI/7r/v1z+SYJUggKH/4HHZrMekAVJY+DwJBB/EDw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:27 2025 by rpki-client