$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: LEGlCzl1/0UUx47R/bR0kGSZIO1734XfReidrdhteEo= Subject key identifier: F3:B7:C1:EA:52:9B:44:5D:53:C1:4C:25:19:E0:7D:09:3A:D4:ED:C8 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 2C0BDBF38C3F3418F34C36AEA68A3097BD0C40F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 04EE Signing time: Sun 19 Oct 2025 21:00:53 +0000 Manifest this update: Sun 19 Oct 2025 20:55:53 +0000 Manifest next update: Thu 23 Oct 2025 05:17:53 +0000 Files and hashes: 1: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: P+arFoqcntVXjqtpKtEXnviPZdZCA8dEwsK0oNIVYpw=) 2: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: bGN1vyn9h6Yc+MemoAPYX3r1I/c2y6YPOsVFWuo0Dr0=) 3: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: dTbIHUhiEUknjm2UJq3m/hFm+UD2w30xmsm34dF+xX0=) 4: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: YV5y0yJ3U9p9cvlNvG3FnXx2SHMj2wa+fG9Y04B6wcg=) 5: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: SXXLWSftmV1ALVHZrOGiOsQ6UfYjWN8tTipC9o8sUVM=) 6: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ikejIzym3riHv/Wk7MAPoXCGoRFxR1pASpxS+fJWi4g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0b:db:f3:8c:3f:34:18:f3:4c:36:ae:a6:8a:30:97:bd:0c:40:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Oct 19 20:55:53 2025 GMT Not After : Oct 23 05:17:53 2025 GMT Subject: CN=F3B7C1EA529B445D53C14C2519E07D093AD4EDC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:79:44:87:c9:1a:61:1e:d6:aa:a2:85:28: 36:48:0b:93:ee:11:50:5f:8c:33:36:bf:a2:fd:b5: be:17:2d:bb:fe:a3:8e:3d:ef:e3:e7:05:95:87:77: 55:54:ed:fd:29:09:b8:31:16:48:1f:d5:71:79:ce: cf:5f:52:e3:b2:7f:b5:39:1a:ee:7b:71:48:53:70: 3a:d8:57:ed:e8:4c:9d:2d:a9:04:56:2b:95:f1:eb: 32:56:49:ca:f0:c4:7f:76:77:f9:91:db:c3:a7:ab: e8:80:43:eb:64:8f:f7:80:4c:cc:1a:19:52:be:48: 55:7d:e8:08:31:1b:a0:d6:c5:90:c0:02:67:ba:ff: 95:67:c0:4f:7b:8d:1a:79:82:2f:d1:c2:a4:01:16: bd:59:ae:0c:d9:e2:e1:6f:20:2a:bc:4f:17:fd:06: 7e:a6:e5:3b:9f:af:7c:0e:80:4c:7f:6e:92:57:1e: a6:b0:8e:3b:5b:da:c8:76:ce:06:e8:35:9d:e7:e0: d5:0a:4a:9f:97:47:97:d5:7d:5b:f1:aa:64:00:8c: bc:41:34:81:b1:5a:f0:fd:63:17:a4:ca:07:77:fa: 68:95:6f:5e:c6:69:61:34:fc:f0:93:05:a2:54:5b: 66:c9:51:91:32:7e:77:16:0f:d9:65:80:32:2c:06: a1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B7:C1:EA:52:9B:44:5D:53:C1:4C:25:19:E0:7D:09:3A:D4:ED:C8 X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3b:4c:80:21:2f:fa:cf:bf:9c:9a:b0:f5:27:e9:04:2d:71: 25:13:40:d6:3a:a5:b1:4a:c2:01:ed:9c:18:70:44:4c:05:51: 69:8c:c5:17:b7:5b:86:4b:72:be:ea:48:fc:93:f2:d9:7a:db: 9a:98:f4:17:87:99:0f:75:d6:6b:b4:ce:35:98:4c:a2:e5:55: ca:01:be:1c:02:92:15:b6:6a:fd:f5:96:69:68:a5:de:6b:6d: c9:f7:d9:bf:5e:ad:53:ce:67:52:50:fd:dc:c4:f4:4b:57:00: 19:dc:12:36:69:68:16:b4:7b:79:bd:cc:f0:c2:00:0b:5d:55: f5:3e:e7:b9:c8:97:cc:88:a1:ce:8e:49:dd:8c:6b:dc:14:36: bf:7b:98:af:c3:14:c3:13:cd:ce:7a:81:5e:4a:22:4c:c4:6a: 3c:c3:b3:05:69:a9:2e:d1:05:e0:4d:e7:85:d2:5a:f1:84:56: 1e:ef:86:8e:8e:c5:13:30:3d:e7:88:80:6a:ec:fb:0b:2e:30: 1a:f7:32:66:1f:c4:dd:02:b3:00:80:c7:41:4c:eb:76:51:c3: 19:89:de:cf:f6:bb:4a:53:a6:37:b8:b1:33:26:4b:25:3f:6e: 09:0b:b5:cc:94:51:01:88:de:27:c6:b2:2f:6f:47:5e:dc:bb: 41:31:d7:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAvb84w/NBjzTDaupoowl70MQPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTEwMTkyMDU1NTNaFw0yNTEwMjMwNTE3NTNaMDMxMTAvBgNV BAMTKEYzQjdDMUVBNTI5QjQ0NUQ1M0MxNEMyNTE5RTA3RDA5M0FENEVEQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsInlEh8kaYR7WqqKFKDZIC5Pu EVBfjDM2v6L9tb4XLbv+o4497+PnBZWHd1VU7f0pCbgxFkgf1XF5zs9fUuOyf7U5 Gu57cUhTcDrYV+3oTJ0tqQRWK5Xx6zJWScrwxH92d/mR28Onq+iAQ+tkj/eATMwa GVK+SFV96AgxG6DWxZDAAme6/5VnwE97jRp5gi/RwqQBFr1ZrgzZ4uFvICq8Txf9 Bn6m5Tufr3wOgEx/bpJXHqawjjtb2sh2zgboNZ3n4NUKSp+XR5fVfVvxqmQAjLxB NIGxWvD9Yxekygd3+miVb17GaWE0/PCTBaJUW2bJUZEyfncWD9llgDIsBqGvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU87fB6lKbRF1TwUwlGeB9CTrU7cgwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABo7TIAhL/rPv5yasPUn6QQtcSUTQNY6pbFK wgHtnBhwREwFUWmMxRe3W4ZLcr7qSPyT8tl625qY9BeHmQ911mu0zjWYTKLlVcoB vhwCkhW2av31lmlopd5rbcn32b9erVPOZ1JQ/dzE9EtXABncEjZpaBa0e3m9zPDC AAtdVfU+57nIl8yIoc6OSd2Ma9wUNr97mK/DFMMTzc56gV5KIkzEajzDswVpqS7R BeBN54XSWvGEVh7vho6OxRMwPeeIgGrs+wsuMBr3MmYfxN0CswCAx0FM63ZRwxmJ 3s/2u0pTpje4sTMmSyU/bgkLtcyUUQGI3ifGsi9vR17cu0Ex148= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:47 2025 by rpki-client