$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: jAtdbVv4K2H0tnJQxlTaqO9jHA+xtMmltgSTPJR6yeY= Subject key identifier: BD:DB:0A:AD:0E:2A:73:F4:DA:DF:65:0A:2A:93:92:65:7B:BF:1D:03 Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 0E787C064361B2BB8EDDCD6FD16197B873B97939 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 0395 Signing time: Mon 30 Jun 2025 04:41:08 +0000 Manifest this update: Mon 30 Jun 2025 04:36:08 +0000 Manifest next update: Thu 03 Jul 2025 14:37:08 +0000 Files and hashes: 1: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: OD4mx1AkU59KoiPpSRKbH1f+o0hwesk8XBr31VBIE1w=) 2: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 14:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:78:7c:06:43:61:b2:bb:8e:dd:cd:6f:d1:61:97:b8:73:b9:79:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Jun 30 04:36:08 2025 GMT Not After : Jul 3 14:37:08 2025 GMT Subject: CN=BDDB0AAD0E2A73F4DADF650A2A9392657BBF1D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c6:f8:45:f8:b5:e8:a8:d9:b6:78:14:ba:4b: a5:1f:8e:7c:20:9a:b6:53:13:5f:0b:0d:1b:87:ca: 7c:e5:b9:88:12:a6:95:31:57:f4:e1:9f:1a:18:5b: 9a:9d:d1:eb:46:46:88:94:ff:dd:a4:ef:9e:f6:42: de:8f:3a:c3:88:6d:b2:83:b9:ec:24:fc:63:62:d7: d0:0d:6f:ce:10:e2:06:56:a4:c1:c0:bc:70:05:e6: 1c:eb:10:e3:0c:14:2f:bf:23:22:44:8b:de:e8:09: 1c:02:d2:91:10:7f:fe:1f:c2:f9:04:57:9c:aa:61: 17:18:62:b4:cc:0c:b2:42:56:fe:b0:d2:93:92:bf: 78:7c:be:75:c1:76:9f:8f:d2:2d:95:39:f6:46:6a: eb:bb:c2:a8:69:f9:ae:6d:bf:31:aa:84:9f:43:b9: e3:7d:43:7c:a2:a8:4d:8e:a6:60:61:09:73:5d:f5: 8c:ab:85:d2:18:12:98:86:17:01:10:91:2d:30:a3: a5:44:fe:19:b4:b2:bb:06:98:bf:ff:a7:20:a4:67: 2f:bb:dd:2f:fe:82:b0:94:9d:a9:ac:0c:5b:9c:0f: 2c:71:45:e8:7c:d6:22:c6:a1:99:83:cf:24:c5:77: 90:2a:92:a2:68:7d:30:a5:42:47:d4:ac:3b:2c:74: 66:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DB:0A:AD:0E:2A:73:F4:DA:DF:65:0A:2A:93:92:65:7B:BF:1D:03 X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2c:5b:39:cb:80:4a:95:c3:81:87:4e:9c:e2:9f:96:2d:d8: 31:05:36:6e:ee:3b:c8:e2:fd:5e:8f:9c:7f:3c:d0:17:d2:4f: 50:29:8c:e8:16:04:ba:08:97:7a:ad:56:42:69:25:a1:ce:ab: 70:b5:b0:b9:d5:c3:09:87:2c:b0:7c:9a:9d:a5:43:12:eb:8e: 4c:11:e2:ac:26:20:91:8b:26:40:5a:46:fe:1c:fd:76:c0:40: 30:e2:63:0d:51:5f:a8:11:6a:c5:85:68:91:67:61:ae:14:77: f5:3f:87:f4:1e:89:0f:53:17:17:ee:3d:50:b5:ee:69:b3:10: b0:ff:b8:37:63:9b:92:cc:13:5f:9e:73:2d:74:21:82:f1:57: d3:66:8c:e9:9f:41:c1:bf:37:ef:d1:4c:c0:dc:98:ce:7b:48: 5f:52:db:29:be:ba:fb:ca:ae:e0:ee:1d:4c:13:5b:d3:b3:93: b4:70:6d:53:70:24:60:6b:69:60:35:9c:35:1a:3c:49:30:4a: 9e:2b:c5:23:53:6b:3f:6a:4d:6c:44:83:a7:b3:ec:b1:bc:5d: 0c:79:2f:d0:03:cd:3d:83:27:16:bb:51:14:69:44:71:04:dc: e2:28:d1:85:2a:a5:f9:72:62:46:cc:04:0a:fb:fd:fe:bf:ae: 03:04:73:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDnh8BkNhsruO3c1v0WGXuHO5eTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTA2MzAwNDM2MDhaFw0yNTA3MDMxNDM3MDhaMDMxMTAvBgNV BAMTKEJEREIwQUFEMEUyQTczRjREQURGNjUwQTJBOTM5MjY1N0JCRjFEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuxvhF+LXoqNm2eBS6S6Ufjnwg mrZTE18LDRuHynzluYgSppUxV/ThnxoYW5qd0etGRoiU/92k7572Qt6POsOIbbKD uewk/GNi19ANb84Q4gZWpMHAvHAF5hzrEOMMFC+/IyJEi97oCRwC0pEQf/4fwvkE V5yqYRcYYrTMDLJCVv6w0pOSv3h8vnXBdp+P0i2VOfZGauu7wqhp+a5tvzGqhJ9D ueN9Q3yiqE2OpmBhCXNd9YyrhdIYEpiGFwEQkS0wo6VE/hm0srsGmL//pyCkZy+7 3S/+grCUnamsDFucDyxxReh81iLGoZmDzyTFd5AqkqJofTClQkfUrDssdGapAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvdsKrQ4qc/Ta32UKKpOSZXu/HQMwHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgsWznLgEqVw4GHTpzin5Yt2DEFNm7uO8ji /V6PnH880BfST1ApjOgWBLoIl3qtVkJpJaHOq3C1sLnVwwmHLLB8mp2lQxLrjkwR 4qwmIJGLJkBaRv4c/XbAQDDiYw1RX6gRasWFaJFnYa4Ud/U/h/QeiQ9TFxfuPVC1 7mmzELD/uDdjm5LME1+ecy10IYLxV9NmjOmfQcG/N+/RTMDcmM57SF9S2ym+uvvK ruDuHUwTW9Ozk7RwbVNwJGBraWA1nDUaPEkwSp4rxSNTaz9qTWxEg6ez7LG8XQx5 L9ADzT2DJxa7URRpRHEE3OIo0YUqpflyYkbMBAr7/f6/rgMEc6E= -----END CERTIFICATE-----Generated at Tue Jul 1 01:44:17 2025 by rpki-client