$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: 8EqTrGLL1xA39G1+Btva9EbAIjParoP3q4CO5U+AEeM= Subject key identifier: 79:A6:5C:85:FE:35:80:6B:66:3E:C4:F3:33:12:D6:45:50:54:8F:3C Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 7C3CE3E628CCA7858C6CCC1088C305420D0FDA4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 02CA Signing time: Fri 22 Aug 2025 21:12:29 +0000 Manifest this update: Fri 22 Aug 2025 21:07:29 +0000 Manifest next update: Mon 25 Aug 2025 23:28:29 +0000 Files and hashes: 1: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=) 2: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=) 3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: MLOLPi0DtTxhqTwPMOvqG5jkaEqkWJ0wy7rlcjETL50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3c:e3:e6:28:cc:a7:85:8c:6c:cc:10:88:c3:05:42:0d:0f:da:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Aug 22 21:07:29 2025 GMT Not After : Aug 25 23:28:29 2025 GMT Subject: CN=79A65C85FE35806B663EC4F33312D64550548F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:97:72:e1:93:b7:fa:90:e9:ee:34:25:95:e4: 4d:6f:47:01:c1:73:c0:d4:18:ba:33:e3:d8:cb:0a: 4b:01:52:57:20:37:79:59:77:01:7b:db:84:88:74: 0f:65:7c:1c:59:b6:d0:3f:a9:60:2c:64:1a:86:3f: 52:3a:f2:50:6a:cc:1f:29:21:bb:aa:cb:c9:e7:5b: dd:b4:00:bf:47:0e:8d:3f:7a:d0:20:31:e4:77:bd: de:17:aa:3b:7b:6e:91:1e:54:bb:4f:10:bc:4c:c4: fe:48:f3:57:8f:f1:3b:a3:4d:34:92:63:3d:79:ca: 35:49:38:2a:91:32:d1:e5:b1:64:25:b5:4a:36:14: da:73:85:ae:22:5f:62:a5:3a:cc:5c:a7:1d:a0:77: fc:75:02:af:7d:6f:89:7c:64:c6:e0:a0:1a:a2:5b: a7:e2:54:18:75:4b:c3:cc:8f:9a:d4:8a:ff:08:5e: 7c:58:f1:91:7e:38:d6:35:9e:6b:a8:d0:f8:28:e0: d2:7c:2a:e6:b7:64:1d:a2:6c:d4:08:98:ba:06:44: 7f:bc:a3:8b:c1:fb:65:fd:68:51:dc:72:43:12:ae: 40:f1:0c:6f:8b:6a:62:db:84:b5:b7:bd:c3:87:81: ac:97:96:5b:86:63:dc:94:4e:27:73:5c:08:0b:03: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A6:5C:85:FE:35:80:6B:66:3E:C4:F3:33:12:D6:45:50:54:8F:3C X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:a9:82:96:05:2d:e7:00:e8:44:99:07:46:f2:5c:a3:d1:36: 36:a2:6f:b9:b4:93:32:06:c9:7c:da:77:60:e9:7f:da:9b:a3: 27:51:22:3c:a3:ed:ae:ad:99:fb:df:25:db:cc:93:5f:00:1c: 34:d8:3e:62:ad:13:29:5c:93:09:48:85:15:4e:63:37:a5:6b: 7e:c1:e1:ce:c8:86:0f:d9:02:31:05:d1:ee:1c:2d:68:38:79: f6:55:af:73:1b:54:12:ad:1a:07:8a:d4:c2:df:e7:e4:48:09: 11:12:d4:5d:e1:be:76:de:51:13:92:65:ee:bb:ff:e8:40:e8: 13:a8:20:bf:c7:3a:ec:9e:94:69:ad:cb:31:1f:3d:05:68:ca: 75:3d:8b:ad:91:94:81:30:b4:78:c3:d8:b3:0c:4d:ad:1d:ff: 65:18:eb:eb:4d:84:3c:09:a8:c9:22:d3:12:2b:22:57:c7:6d: ea:79:e8:cf:14:10:0d:9d:50:da:85:af:3a:ac:bf:9a:b2:1c: 03:ac:77:c2:24:2d:8d:b7:d0:36:15:95:cd:80:76:5a:fd:41: f7:c2:d1:51:ab:a9:eb:a4:63:74:dd:2d:16:fb:79:e8:01:ed: 64:28:92:6a:3c:28:0f:10:a6:fc:c4:a0:ac:d3:51:bb:00:6d: 5e:76:3c:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDzj5ijMp4WMbMwQiMMFQg0P2k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTA4MjIyMTA3MjlaFw0yNTA4MjUyMzI4MjlaMDMxMTAvBgNV BAMTKDc5QTY1Qzg1RkUzNTgwNkI2NjNFQzRGMzMzMTJENjQ1NTA1NDhGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIl3Lhk7f6kOnuNCWV5E1vRwHB c8DUGLoz49jLCksBUlcgN3lZdwF724SIdA9lfBxZttA/qWAsZBqGP1I68lBqzB8p Ibuqy8nnW920AL9HDo0/etAgMeR3vd4Xqjt7bpEeVLtPELxMxP5I81eP8TujTTSS Yz15yjVJOCqRMtHlsWQltUo2FNpzha4iX2KlOsxcpx2gd/x1Aq99b4l8ZMbgoBqi W6fiVBh1S8PMj5rUiv8IXnxY8ZF+ONY1nmuo0Pgo4NJ8Kua3ZB2ibNQImLoGRH+8 o4vB+2X9aFHcckMSrkDxDG+LamLbhLW3vcOHgayXlluGY9yUTidzXAgLAzZhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeaZchf41gGtmPsTzMxLWRVBUjzwwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImpgpYFLecA6ESZB0byXKPRNjaib7m0kzIG yXzad2Dpf9qboydRIjyj7a6tmfvfJdvMk18AHDTYPmKtEylckwlIhRVOYzela37B 4c7Ihg/ZAjEF0e4cLWg4efZVr3MbVBKtGgeK1MLf5+RICRES1F3hvnbeUROSZe67 /+hA6BOoIL/HOuyelGmtyzEfPQVoynU9i62RlIEwtHjD2LMMTa0d/2UY6+tNhDwJ qMki0xIrIlfHbep56M8UEA2dUNqFrzqsv5qyHAOsd8IkLY230DYVlc2Adlr9QffC 0VGrqeukY3TdLRb7eegB7WQokmo8KA8QpvzEoKzTUbsAbV52PMM= -----END CERTIFICATE-----Generated at Sat Aug 23 15:27:06 2025 by rpki-client