$ rpki-client -vvf repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft File: 251859FA726E84EB8EF1585C6B1F3D925581A938.mft (raw, json) Hash identifier: atpDr2g9a4/gyV+q2U9wfxVyyfZFuJBk3UHYa01nFDk= Subject key identifier: 39:B8:58:11:B6:F4:5D:C7:34:8B:55:B4:40:03:EE:7A:B2:AF:64:36 Authority key identifier: 25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38 Certificate issuer: /CN=251859FA726E84EB8EF1585C6B1F3D925581A938 Certificate serial: 37079A72A10DD06EAF4CF39ED7C2C0E5FAC26C35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft Manifest number: 04B1 Signing time: Sun 19 Oct 2025 19:21:12 +0000 Manifest this update: Sun 19 Oct 2025 19:16:12 +0000 Manifest next update: Thu 23 Oct 2025 02:54:12 +0000 Files and hashes: 1: 251859FA726E84EB8EF1585C6B1F3D925581A938.crl (hash: gL4WKuGpmtVYh0JWklkfvjb1d4vu9R6GcWWPQimzEkg=) 2: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (hash: pCMyJ/CDctVRd1Fs9qRQyHuJ7biOZTx5YqB4FZP9gKI=) 3: 323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (hash: LMyurDa6RK+ceb5dAm5LdlT8EFTkNVmlTBXqLEHBy+Y=) 4: 3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (hash: 6pDvqDjIlcQkZPcI9oy/Uawt6R25Hk17d81YNhRXRmY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:07:9a:72:a1:0d:d0:6e:af:4c:f3:9e:d7:c2:c0:e5:fa:c2:6c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251859FA726E84EB8EF1585C6B1F3D925581A938 Validity Not Before: Oct 19 19:16:12 2025 GMT Not After : Oct 23 02:54:12 2025 GMT Subject: CN=39B85811B6F45DC7348B55B44003EE7AB2AF6436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:64:08:2a:c9:85:92:3d:0f:80:d6:7c:f3: 6b:1d:08:33:aa:52:55:7e:bc:e1:9d:88:7c:0f:cc: 23:96:b7:f1:c0:28:f2:49:b7:ed:9c:8a:d5:e8:8a: d1:45:16:98:3d:13:b1:fc:84:3f:73:61:c7:b6:57: 5c:d1:15:ae:18:ed:58:0b:f2:fe:6a:1c:d3:e6:87: 97:2e:c6:cc:99:b7:16:3a:f5:96:cd:99:d4:af:e9: d3:90:a1:37:69:f4:13:fd:a1:e6:78:9d:14:44:b5: 20:2c:f8:95:1e:67:1a:95:4f:ba:04:8a:58:9e:3e: 86:1e:34:9c:f1:79:35:03:4e:7a:79:30:1c:6a:ec: 5e:9b:5d:fd:6a:3e:01:8c:d6:5c:a8:35:ec:04:5b: c8:c6:92:84:07:fc:99:4c:c6:bb:e7:5d:3c:da:19: c8:3c:19:41:30:dd:74:3e:78:09:27:97:f4:48:bc: cf:40:c2:5e:ba:69:73:71:d7:b1:46:72:4c:99:ed: 0d:6e:c5:83:f6:9f:a8:0a:e5:4a:fe:67:1c:5a:3d: 66:54:34:b2:9d:30:2f:32:90:44:94:60:cc:b9:20: d2:87:3e:45:56:ae:19:19:3d:98:b1:be:8f:cd:ed: 10:2a:ca:9b:0a:f4:16:d1:f9:12:ce:aa:56:09:78: b9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B8:58:11:B6:F4:5D:C7:34:8B:55:B4:40:03:EE:7A:B2:AF:64:36 X509v3 Authority Key Identifier: keyid:25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:69:e5:e0:a0:3f:2c:bc:44:7e:42:a0:c4:57:a5:ec:54:70: 23:de:41:ac:b2:bc:e2:4e:25:9f:ee:dd:fe:fb:b1:65:d6:aa: 6d:d0:d7:9c:59:d3:48:fc:a5:1e:29:48:83:d8:e3:ae:4a:32: 98:90:85:d7:70:56:d0:ef:29:b7:6f:79:db:0e:07:20:cd:c0: db:88:cc:3b:2c:93:fb:c3:c7:a4:1e:74:a1:b1:bf:10:c5:11: 0a:a9:ef:e7:b9:fe:e9:47:5d:c1:90:8e:0c:67:cc:5d:55:4d: e2:ad:f8:b4:b8:19:b9:4b:76:0a:61:41:a2:07:99:b3:19:a3: c5:fe:d0:ab:b9:13:56:97:1f:1a:08:9e:c0:98:46:ba:5b:05: df:d9:43:eb:61:ed:75:33:20:0f:4c:b8:a7:b6:07:b7:bb:4d: 7b:71:a3:bb:b6:83:fb:5a:11:41:df:8a:7e:06:8d:44:82:ba: 8a:02:28:ff:05:cf:37:eb:ec:6e:0f:82:36:9b:42:f0:df:64: 31:1c:e6:f7:69:77:e9:1e:4d:96:a1:25:01:eb:53:6c:51:f4: 5e:ee:3e:4d:b6:e4:c9:af:69:c3:04:60:09:5d:56:8d:c7:db: 4e:72:0c:42:89:bb:4d:04:82:1d:2f:d7:d4:d6:07:48:10:78: 09:0e:d7:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNweacqEN0G6vTPOe18LA5frCbDUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNEOTI1 NTgxQTkzODAeFw0yNTEwMTkxOTE2MTJaFw0yNTEwMjMwMjU0MTJaMDMxMTAvBgNV BAMTKDM5Qjg1ODExQjZGNDVEQzczNDhCNTVCNDQwMDNFRTdBQjJBRjY0MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBGQIKsmFkj0PgNZ882sdCDOq UlV+vOGdiHwPzCOWt/HAKPJJt+2citXoitFFFpg9E7H8hD9zYce2V1zRFa4Y7VgL 8v5qHNPmh5cuxsyZtxY69ZbNmdSv6dOQoTdp9BP9oeZ4nRREtSAs+JUeZxqVT7oE iliePoYeNJzxeTUDTnp5MBxq7F6bXf1qPgGM1lyoNewEW8jGkoQH/JlMxrvnXTza Gcg8GUEw3XQ+eAknl/RIvM9Awl66aXNx17FGckyZ7Q1uxYP2n6gK5Ur+ZxxaPWZU NLKdMC8ykESUYMy5INKHPkVWrhkZPZixvo/N7RAqypsK9BbR+RLOqlYJeLmpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUObhYEbb0Xcc0i1W0QAPuerKvZDYwHwYDVR0j BBgwFoAUJRhZ+nJuhOuO8Vhcax89klWBqTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTM2NzRhNi0xMTRmLTRiYjUtODViYi1jYmI2N2RiMmE5NTUvMC8yNTE4NTlGQTcy NkU4NEVCOEVGMTU4NUM2QjFGM0Q5MjU1ODFBOTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNEOTI1NTgx QTkzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzNjc0YTYtMTE0Zi00YmI1LTg1 YmItY2JiNjdkYjJhOTU1LzAvMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNE OTI1NTgxQTkzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdp5eCgPyy8RH5CoMRXpexUcCPeQayyvOJO JZ/u3f77sWXWqm3Q15xZ00j8pR4pSIPY465KMpiQhddwVtDvKbdvedsOByDNwNuI zDssk/vDx6QedKGxvxDFEQqp7+e5/ulHXcGQjgxnzF1VTeKt+LS4GblLdgphQaIH mbMZo8X+0Ku5E1aXHxoInsCYRrpbBd/ZQ+th7XUzIA9MuKe2B7e7TXtxo7u2g/ta EUHfin4GjUSCuooCKP8Fzzfr7G4PgjabQvDfZDEc5vdpd+keTZahJQHrU2xR9F7u Pk225MmvacMEYAldVo3H205yDEKJu00Egh0v19TWB0gQeAkO1x4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:31:31 2025 by rpki-client