$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: NTElRAeP4RvVTzUq0sTJwfNwcuh8S8o11jEXlwbOfEQ= Subject key identifier: C7:96:75:C7:E2:7E:9C:B9:32:00:2D:41:33:C0:71:DA:01:9D:07:EB Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 011E116FB153D511C2A3FA926AD033E412DB779C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 03AD Signing time: Sat 23 Aug 2025 09:41:10 +0000 Manifest this update: Sat 23 Aug 2025 09:36:10 +0000 Manifest next update: Tue 26 Aug 2025 19:57:10 +0000 Files and hashes: 1: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) 2: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: HSPvzShDg44evPrHK4yITJj8TNEIKUVwoevjWQtSk+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1e:11:6f:b1:53:d5:11:c2:a3:fa:92:6a:d0:33:e4:12:db:77:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Aug 23 09:36:10 2025 GMT Not After : Aug 26 19:57:10 2025 GMT Subject: CN=C79675C7E27E9CB932002D4133C071DA019D07EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:61:8a:63:72:af:64:35:40:e4:0d:95:fb:2d: dc:35:e4:af:dd:66:38:99:20:40:7f:d8:59:cf:7e: 1b:b0:51:8c:e8:41:25:09:7a:c0:9d:33:52:49:09: 43:33:ed:7c:c0:4c:4a:69:88:55:9b:b9:0c:3a:76: 5b:74:67:de:39:33:c1:c5:5c:e7:c8:b0:b7:7c:f6: de:51:5f:17:60:d7:46:29:77:98:7a:7c:93:06:8a: c1:fb:7e:ff:7f:28:16:88:b8:41:6e:23:7b:f3:af: 5e:f3:38:1c:ce:a2:ad:f8:8b:87:92:ca:78:cc:78: f4:4f:17:af:d1:fb:eb:89:a7:21:5c:ae:d1:f3:22: 5d:5c:81:03:21:5f:19:e8:f3:56:44:dc:9c:b0:00: 93:9c:91:fb:c2:37:0e:ba:5a:c9:51:ff:fb:23:b4: 3a:05:03:84:6f:78:67:37:74:cd:2c:c4:f6:e2:12: 1c:30:8f:70:a0:fb:e6:e8:53:9f:b7:03:bc:31:7f: b8:9a:a8:d0:64:88:55:e1:12:18:34:e5:cb:71:a6: ca:6c:22:b3:6b:a0:70:28:1d:b7:36:8d:3d:34:61: 0e:30:db:cf:a1:7a:44:ec:27:1b:ba:30:d1:53:96: c9:7d:9d:df:52:1f:07:de:cb:75:a8:18:55:c6:ce: 40:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:96:75:C7:E2:7E:9C:B9:32:00:2D:41:33:C0:71:DA:01:9D:07:EB X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:48:9d:92:6b:56:31:ed:59:4e:e1:c2:f1:e5:bb:a0:e0:cd: 83:d1:b6:45:fc:d7:ba:c0:35:16:8a:35:b1:35:e2:dd:4b:6b: 5e:e1:52:f7:ce:30:99:56:78:38:40:c3:2f:dc:9e:88:17:19: ca:93:56:38:eb:f6:0e:1a:7c:10:f2:0c:3f:2b:aa:66:6f:c8: 11:ba:d3:e6:5c:49:36:8c:d8:ff:44:d2:7e:93:42:6b:3e:e1: 98:3b:1c:86:9f:82:e4:7d:9e:63:13:da:67:12:5a:eb:b0:1d: 7d:f9:7a:57:ad:6b:91:ad:b2:fd:96:8f:51:4b:90:0f:8a:02: 04:55:5d:4b:54:97:9c:d8:46:8f:19:df:5b:34:35:49:71:38: 20:66:5e:98:5c:18:eb:4c:bb:47:92:00:e5:36:27:8b:89:ea: 94:c6:1c:ab:fa:6e:1f:df:f8:d8:a5:c8:58:b7:26:34:ef:2c: f6:c3:1d:ea:96:a2:eb:18:f8:ef:93:3b:75:ed:81:eb:af:aa: 91:2e:44:ad:6f:b0:bb:3e:77:ab:82:28:c3:ee:2a:0f:a9:d2: f6:fc:77:db:07:90:66:7c:a9:e3:a8:fe:cd:ed:aa:10:3b:a9: 31:71:6d:74:8d:04:38:6b:ad:3e:25:e4:f5:5d:7d:a5:a3:d6: 0a:68:1a:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAR4Rb7FT1RHCo/qSatAz5BLbd5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTA4MjMwOTM2MTBaFw0yNTA4MjYxOTU3MTBaMDMxMTAvBgNV BAMTKEM3OTY3NUM3RTI3RTlDQjkzMjAwMkQ0MTMzQzA3MURBMDE5RDA3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXYYpjcq9kNUDkDZX7Ldw15K/d ZjiZIEB/2FnPfhuwUYzoQSUJesCdM1JJCUMz7XzATEppiFWbuQw6dlt0Z945M8HF XOfIsLd89t5RXxdg10Ypd5h6fJMGisH7fv9/KBaIuEFuI3vzr17zOBzOoq34i4eS ynjMePRPF6/R++uJpyFcrtHzIl1cgQMhXxno81ZE3JywAJOckfvCNw66WslR//sj tDoFA4RveGc3dM0sxPbiEhwwj3Cg++boU5+3A7wxf7iaqNBkiFXhEhg05ctxpsps IrNroHAoHbc2jT00YQ4w28+hekTsJxu6MNFTlsl9nd9SHwfey3WoGFXGzkDBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx5Z1x+J+nLkyAC1BM8Bx2gGdB+swHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlInZJrVjHtWU7hwvHlu6DgzYPRtkX817rA NRaKNbE14t1La17hUvfOMJlWeDhAwy/cnogXGcqTVjjr9g4afBDyDD8rqmZvyBG6 0+ZcSTaM2P9E0n6TQms+4Zg7HIafguR9nmMT2mcSWuuwHX35eleta5Gtsv2Wj1FL kA+KAgRVXUtUl5zYRo8Z31s0NUlxOCBmXphcGOtMu0eSAOU2J4uJ6pTGHKv6bh/f +NilyFi3JjTvLPbDHeqWousY+O+TO3XtgeuvqpEuRK1vsLs+d6uCKMPuKg+p0vb8 d9sHkGZ8qeOo/s3tqhA7qTFxbXSNBDhrrT4l5PVdfaWj1gpoGmk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:05 2025 by rpki-client