$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: opNXycTx8WAnCu/yfOZkJNDF7BeHznjxKme4kz0B8fo= Subject key identifier: AD:EF:07:F7:12:41:8A:0B:4E:93:09:EE:9A:2D:1F:A1:68:E0:9A:FB Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 58FA1C5F6CD0D8135CCA7BAECCD394BDB41E5C10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 04BA Signing time: Sun 29 Jun 2025 01:40:50 +0000 Manifest this update: Sun 29 Jun 2025 01:35:50 +0000 Manifest next update: Wed 02 Jul 2025 13:09:50 +0000 Files and hashes: 1: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: ls44OG0TlScZudQjWi2hOoJfckGlkJcK1X+4UZNTijw=) 2: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: TNpUK4dJFrU18RMU9Zgd4YTXy5oNCmoEosozxJBeWMA=) 3: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: ZULjTp4+NYAssAp0CZz3FEnycGBYt+NoPkGuUHEyL7E=) 4: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ZQI865FxGh10FmxCAL3EfpXRTSxcXYfsdjKIE28NGOQ=) 5: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: 61Q56u9ZlVNh5t8w8FI2MGy3ngN9Bwwze3LEwONWBJw=) 6: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: y5FW1sgnfU+HeLMU5Bqbn06zuZEAtwFBXzjZotq5ERw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fa:1c:5f:6c:d0:d8:13:5c:ca:7b:ae:cc:d3:94:bd:b4:1e:5c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Jun 29 01:35:50 2025 GMT Not After : Jul 2 13:09:50 2025 GMT Subject: CN=ADEF07F712418A0B4E9309EE9A2D1FA168E09AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:e4:da:0b:3a:05:c1:bb:4d:44:0b:90:af: 2f:c1:7c:34:1d:4d:c3:06:be:8e:86:70:88:72:10: 5d:ef:8c:b4:a2:3e:0e:c8:d0:56:5b:66:8a:23:ba: eb:02:dc:ac:99:eb:86:a4:db:5c:a5:d4:92:be:af: 77:5d:20:6a:89:f0:91:ae:aa:f3:f6:6d:78:98:9b: 1f:12:2d:f4:a9:03:05:4d:fa:ba:1a:3b:16:30:0a: ac:3c:f9:dd:07:b7:56:ce:a9:d2:b4:bc:d4:c2:35: 64:88:28:78:99:2c:16:71:a2:f3:f0:10:00:08:02: a5:59:34:0d:04:e6:66:35:33:a5:c0:1c:bc:77:dc: 51:88:93:0e:36:3e:9d:e6:08:64:d7:1d:ac:09:a2: 1f:56:09:ac:36:3e:8c:88:c5:b3:9d:2b:11:b3:5f: ed:bb:18:0b:d0:21:a0:ed:52:15:20:77:69:36:fa: 11:89:c4:4c:e6:38:5d:5c:99:c3:6e:b7:59:08:b3: 7b:43:f5:74:0b:10:f0:d9:ea:54:a5:5b:f7:51:3a: 98:77:80:e3:3f:6f:4f:22:b5:8a:0f:f7:1f:78:43: b8:9a:83:c7:39:d8:e1:e0:47:11:8b:4b:1b:ad:0b: 58:fa:04:c2:c6:6b:cc:9a:19:44:47:e6:a1:04:39: fe:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EF:07:F7:12:41:8A:0B:4E:93:09:EE:9A:2D:1F:A1:68:E0:9A:FB X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:33:35:66:09:82:75:12:72:eb:8e:7f:d6:c7:4e:03:87:d2: 2c:ce:81:29:59:15:d8:8e:53:a7:bc:59:fe:88:0c:cd:bb:7e: ac:4e:bb:93:e8:6f:30:ec:49:97:d3:1f:74:69:5b:34:85:c2: ad:4b:2c:e9:aa:50:19:6e:4d:b8:18:24:72:16:52:39:f9:6f: e0:98:b2:89:52:11:1f:d4:91:59:40:a3:aa:6b:20:e9:53:84: c8:a5:40:01:cb:98:19:8a:39:30:ca:ec:e3:04:8d:cd:52:79: 85:76:f5:0e:73:a8:52:a4:56:ef:38:d2:38:d2:7d:a0:0f:36: 75:93:6c:15:81:6f:9d:c3:07:6f:fc:69:74:e4:97:81:79:7f: 9e:b4:62:b2:00:6e:88:b2:41:6b:cd:2e:61:a7:0f:ed:30:10: 59:00:38:8d:96:40:25:0f:42:23:72:e3:59:cb:21:b6:58:cb: 23:88:ed:b3:b9:5f:64:ec:fa:61:cd:6d:6c:5a:b6:49:cb:db: 04:19:8b:30:64:b1:87:97:10:a4:4b:0c:6c:e9:fc:61:1b:55: a5:96:b1:f3:96:6e:3c:dc:83:29:48:28:74:f9:6c:e4:9a:05: e1:08:c4:90:4d:ac:e1:e2:a3:76:37:1e:b1:9c:f7:ff:24:8c: 4c:24:11:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPocX2zQ2BNcynuuzNOUvbQeXBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTA2MjkwMTM1NTBaFw0yNTA3MDIxMzA5NTBaMDMxMTAvBgNV BAMTKEFERUYwN0Y3MTI0MThBMEI0RTkzMDlFRTlBMkQxRkExNjhFMDlBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC96+TaCzoFwbtNRAuQry/BfDQd TcMGvo6GcIhyEF3vjLSiPg7I0FZbZoojuusC3KyZ64ak21yl1JK+r3ddIGqJ8JGu qvP2bXiYmx8SLfSpAwVN+roaOxYwCqw8+d0Ht1bOqdK0vNTCNWSIKHiZLBZxovPw EAAIAqVZNA0E5mY1M6XAHLx33FGIkw42Pp3mCGTXHawJoh9WCaw2PoyIxbOdKxGz X+27GAvQIaDtUhUgd2k2+hGJxEzmOF1cmcNut1kIs3tD9XQLEPDZ6lSlW/dROph3 gOM/b08itYoP9x94Q7iag8c52OHgRxGLSxutC1j6BMLGa8yaGURH5qEEOf5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUre8H9xJBigtOkwnumi0foWjgmvswHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUzNWYJgnUScuuOf9bHTgOH0izOgSlZFdiO U6e8Wf6IDM27fqxOu5PobzDsSZfTH3RpWzSFwq1LLOmqUBluTbgYJHIWUjn5b+CY solSER/UkVlAo6prIOlThMilQAHLmBmKOTDK7OMEjc1SeYV29Q5zqFKkVu840jjS faAPNnWTbBWBb53DB2/8aXTkl4F5f560YrIAboiyQWvNLmGnD+0wEFkAOI2WQCUP QiNy41nLIbZYyyOI7bO5X2Ts+mHNbWxatknL2wQZizBksYeXEKRLDGzp/GEbVaWW sfOWbjzcgylIKHT5bOSaBeEIxJBNrOHio3Y3HrGc9/8kjEwkEWg= -----END CERTIFICATE-----Generated at Mon Jun 30 00:31:55 2025 by rpki-client