$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: CQ9IGENcbci8ev1GEb/rVArxVrE7MYkq9cWLusCyRF4= Subject key identifier: DD:99:0A:C1:05:42:2C:10:C1:2F:69:D5:4D:04:36:3D:F4:D6:60:47 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 51BABEED9298D21937E33C0D0AB849E78258C3D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 02B1 Signing time: Sun 29 Jun 2025 16:52:19 +0000 Manifest this update: Sun 29 Jun 2025 16:47:19 +0000 Manifest next update: Thu 03 Jul 2025 03:03:19 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: mIROvhV/B52jTv+b7xbtzNIsRy0qMHCKGHbEvF+jS6o=) 2: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: 8X7MnhcrGXRrLaiC6p6nb/f9+Sxh0EM3kk42oSlJDeM=) 3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: ddq/z7RkWfhIz3p6e33MpwcmLGGjzz9b1Dym9XTQgL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 03:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ba:be:ed:92:98:d2:19:37:e3:3c:0d:0a:b8:49:e7:82:58:c3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Jun 29 16:47:19 2025 GMT Not After : Jul 3 03:03:19 2025 GMT Subject: CN=DD990AC105422C10C12F69D54D04363DF4D66047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:0e:57:ec:c2:91:a9:38:bf:c0:86:64:41: 97:60:c0:7a:63:e9:bd:1e:ab:93:af:25:0c:51:e0: 2a:2c:1a:05:f0:6b:77:bc:0b:50:e0:c2:da:08:4b: d2:21:4b:22:15:73:ec:88:06:0f:3a:59:a3:2e:e6: 4d:8a:84:40:42:f8:8f:4c:04:58:4c:8c:dc:a3:ed: 2c:78:a4:22:91:6b:24:f7:97:38:be:a5:c3:c7:50: 99:a1:4d:43:d2:5d:be:c4:48:79:64:5d:9e:25:12: 12:82:71:20:40:8e:bd:a5:d9:04:ed:1b:3d:29:4d: 55:e1:c5:ed:09:24:c2:eb:6d:8e:51:a9:6a:0d:1f: 43:7d:e2:47:1a:14:de:21:96:52:b4:25:a3:2e:78: 30:15:fc:c0:49:86:11:b0:a4:86:83:6b:34:dd:55: e8:0d:af:03:d6:f7:52:65:2a:bd:a8:bd:af:5d:97: b6:6b:b7:71:1f:9a:e2:6a:51:1d:c5:f9:16:9b:fd: 82:4e:7f:5d:b7:6d:9c:88:3d:54:ce:07:9d:f3:0b: 1e:f4:dd:f0:5f:56:1a:e8:09:86:0d:9c:78:76:80: b7:30:07:7c:25:c5:6a:65:c7:68:d2:42:cf:40:55: 56:0b:10:23:fc:05:9e:7e:4c:8d:7e:32:2d:3f:8c: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:99:0A:C1:05:42:2C:10:C1:2F:69:D5:4D:04:36:3D:F4:D6:60:47 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5f:c2:af:20:39:83:d8:b0:c2:60:1e:21:ea:11:dd:99:98: 97:c1:0b:84:67:30:2c:77:ba:1c:f4:2c:7d:d7:bd:43:b0:b5: 39:51:fb:3d:73:fc:62:3f:21:9f:79:b7:19:e6:2f:ce:6c:7b: 2e:1c:de:3b:e5:29:9d:05:82:91:2f:6c:2f:f7:a3:31:6d:c8: 17:29:f2:1d:5d:57:a9:53:e1:17:63:7e:82:43:b2:6a:f8:21: be:9a:cf:f9:ec:d8:10:58:73:c9:d5:52:34:e7:87:38:95:bf: 3c:56:a3:f1:ee:25:0c:7d:d8:b9:3f:e9:9d:26:6f:45:1f:02: 65:37:8b:d9:63:da:12:4b:a6:d0:3c:7c:fe:b8:03:ad:35:8b: d6:55:e6:a7:77:4c:d2:d2:f9:d5:fd:c4:61:61:0e:68:8b:e6: 24:e9:4b:e2:dd:8f:4b:e5:df:57:3d:5e:66:89:1b:56:b1:b3: 9f:78:50:85:a9:7d:fa:82:26:10:18:6b:09:10:62:43:b0:87: 7a:f6:3d:65:16:a5:bc:b7:87:36:28:89:6c:ba:6f:93:9a:d5: 43:ec:9a:e6:bd:f7:94:fb:be:07:5e:5c:f4:36:e8:19:f8:10: 2c:4f:f3:0e:2a:dc:eb:13:c0:61:cb:58:8a:ac:59:93:c5:c3: cf:e8:71:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbq+7ZKY0hk34zwNCrhJ54JYw9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTA2MjkxNjQ3MTlaFw0yNTA3MDMwMzAzMTlaMDMxMTAvBgNV BAMTKEREOTkwQUMxMDU0MjJDMTBDMTJGNjlENTREMDQzNjNERjRENjYwNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rA5X7MKRqTi/wIZkQZdgwHpj 6b0eq5OvJQxR4CosGgXwa3e8C1DgwtoIS9IhSyIVc+yIBg86WaMu5k2KhEBC+I9M BFhMjNyj7Sx4pCKRayT3lzi+pcPHUJmhTUPSXb7ESHlkXZ4lEhKCcSBAjr2l2QTt Gz0pTVXhxe0JJMLrbY5RqWoNH0N94kcaFN4hllK0JaMueDAV/MBJhhGwpIaDazTd VegNrwPW91JlKr2ova9dl7Zrt3EfmuJqUR3F+Rab/YJOf123bZyIPVTOB53zCx70 3fBfVhroCYYNnHh2gLcwB3wlxWplx2jSQs9AVVYLECP8BZ5+TI1+Mi0/jNfbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ZkKwQVCLBDBL2nVTQQ2PfTWYEcwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtfwq8gOYPYsMJgHiHqEd2ZmJfBC4RnMCx3 uhz0LH3XvUOwtTlR+z1z/GI/IZ95txnmL85sey4c3jvlKZ0FgpEvbC/3ozFtyBcp 8h1dV6lT4RdjfoJDsmr4Ib6az/ns2BBYc8nVUjTnhziVvzxWo/HuJQx92Lk/6Z0m b0UfAmU3i9lj2hJLptA8fP64A601i9ZV5qd3TNLS+dX9xGFhDmiL5iTpS+Ldj0vl 31c9XmaJG1axs594UIWpffqCJhAYawkQYkOwh3r2PWUWpby3hzYoiWy6b5Oa1UPs mua995T7vgdeXPQ26Bn4ECxP8w4q3OsTwGHLWIqsWZPFw8/ocQs= -----END CERTIFICATE-----Generated at Tue Jul 1 19:16:05 2025 by rpki-client