$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft File: 26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json) Hash identifier: j0W6wdtXh4/pWZyz/5BOLh9sN4k9li6YsirHdXX4Y4U= Subject key identifier: B4:C1:20:22:BE:0A:06:CC:50:FC:F5:60:40:78:EF:AD:26:1C:66:8E Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Certificate serial: 0BC5900B2F04D3B884B48CDD14C096B0C6ADF819 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft Manifest number: 04FD Signing time: Thu 21 Aug 2025 05:20:01 +0000 Manifest this update: Thu 21 Aug 2025 05:15:01 +0000 Manifest next update: Sun 24 Aug 2025 12:39:01 +0000 Files and hashes: 1: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=) 2: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=) 3: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=) 4: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=) 5: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=) 6: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=) 7: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=) 8: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=) 9: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: 8i5ChTXWgvV27YlCuv8SHLAHwY/er1sEbgomLMSEBis=) 10: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c5:90:0b:2f:04:d3:b8:84:b4:8c:dd:14:c0:96:b0:c6:ad:f8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Validity Not Before: Aug 21 05:15:01 2025 GMT Not After : Aug 24 12:39:01 2025 GMT Subject: CN=B4C12022BE0A06CC50FCF5604078EFAD261C668E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1d:6a:a3:dc:24:61:59:93:5b:13:69:41:81: 09:a8:02:26:58:5d:2b:1c:46:fe:ee:fa:58:6c:63: 68:a9:18:d6:93:f5:dc:44:90:c5:9a:5a:19:93:1c: b6:c0:ec:f4:03:01:af:45:69:ed:5f:af:6a:79:a0: d0:87:2f:3f:0e:bd:68:56:47:b1:92:e9:01:87:dc: 4c:a3:a1:ce:50:0b:d1:92:65:30:46:12:64:57:60: d9:d4:f2:8d:45:5e:96:cb:3c:77:69:8f:7a:0c:73: 26:ab:ce:5d:14:05:af:4e:34:30:fb:85:f9:8c:67: 02:f9:0c:2f:47:e6:9e:d7:41:64:f9:22:d7:08:6b: 0c:e9:1a:da:cc:c3:5b:ad:03:b5:74:77:5d:7c:32: e0:50:f4:d6:2a:f7:41:ae:cb:2c:e8:1d:26:31:03: 6a:08:87:19:13:b6:8d:22:cc:3a:f5:dc:da:42:74: 46:80:3e:ad:c5:f5:43:b5:25:a6:38:3e:ee:62:a4: 41:20:13:68:0b:4b:84:74:6f:cb:44:19:02:d1:6b: d9:a5:f5:d4:59:9a:29:db:98:90:14:7c:a8:8b:90: 4a:57:f5:ad:ef:44:90:90:65:44:96:45:46:4e:fb: 4d:e7:43:56:de:e7:08:73:cf:21:ab:91:b2:56:49: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C1:20:22:BE:0A:06:CC:50:FC:F5:60:40:78:EF:AD:26:1C:66:8E X509v3 Authority Key Identifier: keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:b2:cf:46:ad:16:a7:db:75:f6:3d:e3:27:9d:15:ab:82:2d: fa:51:c0:82:ea:3e:c0:87:ed:54:9f:0c:9a:09:c9:5d:3f:53: 23:ac:24:24:e4:8e:85:54:07:a4:9d:f0:a0:7b:75:10:44:4d: 89:75:6f:d5:53:35:c9:25:23:8a:0f:73:09:e3:e4:99:3d:3a: f8:ff:b2:26:3f:0a:69:42:3a:d3:0f:22:d1:da:22:6c:6f:f2: 2d:1a:db:d2:7d:82:b9:9a:e5:b6:db:1f:c5:15:8d:b6:62:a6: 0c:35:15:d2:51:98:fa:85:46:01:ce:87:f3:b1:2b:88:87:17: ad:61:80:13:80:e8:77:aa:e4:0c:d6:e0:61:cd:14:85:8e:fd: f8:48:6a:a1:63:d6:12:9e:12:7f:c9:d2:7a:bb:58:47:6c:86: 71:9f:05:24:63:1f:72:f1:af:81:24:53:df:fc:a7:75:50:85: 43:2c:1f:07:b2:a3:e3:a9:76:61:ad:74:06:c2:1f:05:1d:fa: c6:34:d8:79:4e:40:2a:f6:55:31:37:6c:c7:3a:d6:71:1c:ed: ad:07:69:1f:91:bb:58:a7:6c:c9:30:f0:49:44:64:21:93:6e: 3c:f2:6f:d9:1d:ee:b6:27:13:6e:de:44:39:88:4c:2b:4a:76: a6:6a:f1:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8WQCy8E07iEtIzdFMCWsMat+BkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNF QjlDOUNFNTAeFw0yNTA4MjEwNTE1MDFaFw0yNTA4MjQxMjM5MDFaMDMxMTAvBgNV BAMTKEI0QzEyMDIyQkUwQTA2Q0M1MEZDRjU2MDQwNzhFRkFEMjYxQzY2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLHWqj3CRhWZNbE2lBgQmoAiZY XSscRv7u+lhsY2ipGNaT9dxEkMWaWhmTHLbA7PQDAa9Fae1fr2p5oNCHLz8OvWhW R7GS6QGH3Eyjoc5QC9GSZTBGEmRXYNnU8o1FXpbLPHdpj3oMcyarzl0UBa9ONDD7 hfmMZwL5DC9H5p7XQWT5ItcIawzpGtrMw1utA7V0d118MuBQ9NYq90GuyyzoHSYx A2oIhxkTto0izDr13NpCdEaAPq3F9UO1JaY4Pu5ipEEgE2gLS4R0b8tEGQLRa9ml 9dRZminbmJAUfKiLkEpX9a3vRJCQZUSWRUZO+03nQ1be5whzzyGrkbJWScNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtMEgIr4KBsxQ/PVgQHjvrSYcZo4wHwYDVR0j BBgwFoAUJkJbcClPmANdOHiOWXpKbOucnOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YzMDkzNi1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC8yNjQyNUI3MDI5 NEY5ODAzNUQzODc4OEU1OTdBNEE2Q0VCOUM5Q0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNFQjlD OUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMzA5MzYtYzc1MC00MzNiLTlj MmEtOGZmNWYzOGU2M2Q0LzAvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRB NkNFQjlDOUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOyz0atFqfbdfY94yedFauCLfpRwILqPsCH 7VSfDJoJyV0/UyOsJCTkjoVUB6Sd8KB7dRBETYl1b9VTNcklI4oPcwnj5Jk9Ovj/ siY/CmlCOtMPItHaImxv8i0a29J9grma5bbbH8UVjbZipgw1FdJRmPqFRgHOh/Ox K4iHF61hgBOA6Heq5AzW4GHNFIWO/fhIaqFj1hKeEn/J0nq7WEdshnGfBSRjH3Lx r4EkU9/8p3VQhUMsHweyo+OpdmGtdAbCHwUd+sY02HlOQCr2VTE3bMc61nEc7a0H aR+Ru1inbMkw8ElEZCGTbjzyb9kd7rYnE27eRDmITCtKdqZq8fo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:27:18 2025 by rpki-client