$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: Lepns/2gDyn+7dV7PNPYeHwxXuEX+5HztsuIAu/PzdE= Subject key identifier: F3:9C:88:0B:E9:CE:79:1E:4D:4D:72:8D:41:D6:2C:87:A4:E6:19:B6 Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 6756D56CA82C1BB968661B6985FDDC8FFB2A5CE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 0224 Signing time: Thu 21 Aug 2025 03:20:45 +0000 Manifest this update: Thu 21 Aug 2025 03:15:45 +0000 Manifest next update: Sun 24 Aug 2025 11:44:45 +0000 Files and hashes: 1: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: YDasnHbWL++49K7gPrHKTwgJQSC3bKQa5ZVDNOo73qY=) 2: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: 0fU+cgX2w2Seah8SyqIL5rp6DTz7LSKW3s4WYXiC+fA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 11:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:56:d5:6c:a8:2c:1b:b9:68:66:1b:69:85:fd:dc:8f:fb:2a:5c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: Aug 21 03:15:45 2025 GMT Not After : Aug 24 11:44:45 2025 GMT Subject: CN=F39C880BE9CE791E4D4D728D41D62C87A4E619B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:b1:87:9e:a8:35:50:10:65:85:15:1b:00: b6:4a:47:55:39:d9:0d:66:c7:b9:db:d1:59:61:0f: ec:25:63:3d:36:b1:ba:0e:b8:c8:8f:1f:e2:24:c9: 63:90:48:44:36:f9:5c:40:02:f3:92:c6:a2:4c:27: 3c:af:a7:a5:e8:a4:58:d0:c5:4a:da:a5:03:ad:c1: dc:94:40:82:a3:8b:85:52:40:fa:4d:6d:58:69:76: 64:c6:56:dc:50:5d:32:2d:9c:aa:53:53:85:ef:f0: 0c:82:7e:d2:9f:ec:28:80:60:ca:15:58:40:f7:42: 6d:57:92:b8:d9:b9:4b:40:31:5a:16:70:1c:e5:c8: c7:db:7d:bf:29:cb:b9:51:fb:83:46:37:51:61:f4: cf:67:6f:1a:2f:70:59:ac:4d:94:91:35:28:27:84: 48:db:eb:59:a7:0c:21:f0:09:9a:19:4f:a2:35:70: 5f:a1:ec:e7:2f:36:82:34:ee:7d:59:76:14:ad:41: 63:72:94:6a:47:bd:01:0e:a2:5d:8e:16:d2:0e:b0: c0:12:a0:6a:05:c8:74:03:b1:95:9c:61:b9:8c:9b: 0c:36:f3:d6:f5:41:fd:4e:7c:f0:7d:2b:78:8b:35: fe:6b:3f:e7:b8:e4:72:f5:69:32:fc:43:6b:65:2c: f4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:88:0B:E9:CE:79:1E:4D:4D:72:8D:41:D6:2C:87:A4:E6:19:B6 X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f4:4a:9c:cc:42:88:00:ee:b9:45:d2:66:13:2b:c6:0b:a0: 81:97:dd:b0:69:c3:df:29:f5:b6:1f:05:4b:92:f4:2f:81:08: 8c:5f:b8:25:87:07:36:fb:9b:42:de:14:2a:79:ac:31:04:51: 52:6a:91:7e:5f:7b:7c:99:e6:b1:b1:f8:64:15:58:6a:3e:94: 7a:e7:1f:b7:37:67:13:27:8c:67:a0:3a:11:1b:51:6b:d4:29: e1:61:d8:08:ae:c5:93:39:84:23:65:c8:c9:c0:21:d1:ca:b4: 8d:03:88:99:09:2e:91:56:e6:2a:90:ef:3a:90:4b:84:18:68: 13:91:d5:d4:2d:86:d8:d6:d1:60:9f:00:55:c8:cd:13:36:ef: f6:5f:1d:16:19:8d:a3:90:51:e6:bb:cf:8c:9c:91:32:07:27: a1:9d:8e:c7:75:17:8b:6b:67:3a:97:99:0b:f9:0b:c6:62:10: 3f:a9:45:24:fd:c4:f9:f8:c1:69:0d:09:c8:56:94:ac:91:7b: 81:85:ff:b4:75:9b:a7:5d:d2:45:d6:c9:d6:b1:4e:6a:2c:27: 6a:84:72:99:dc:a6:9a:52:82:5c:db:22:30:8b:94:d0:69:58: df:b9:6f:d0:c7:ad:c2:c3:72:5b:2b:cf:44:b0:25:53:f2:34: 02:c5:49:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ1bVbKgsG7loZhtphf3cj/sqXOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNTA4MjEwMzE1NDVaFw0yNTA4MjQxMTQ0NDVaMDMxMTAvBgNV BAMTKEYzOUM4ODBCRTlDRTc5MUU0RDRENzI4RDQxRDYyQzg3QTRFNjE5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4j7GHnqg1UBBlhRUbALZKR1U5 2Q1mx7nb0VlhD+wlYz02sboOuMiPH+IkyWOQSEQ2+VxAAvOSxqJMJzyvp6XopFjQ xUrapQOtwdyUQIKji4VSQPpNbVhpdmTGVtxQXTItnKpTU4Xv8AyCftKf7CiAYMoV WED3Qm1XkrjZuUtAMVoWcBzlyMfbfb8py7lR+4NGN1Fh9M9nbxovcFmsTZSRNSgn hEjb61mnDCHwCZoZT6I1cF+h7OcvNoI07n1ZdhStQWNylGpHvQEOol2OFtIOsMAS oGoFyHQDsZWcYbmMmww289b1Qf1OfPB9K3iLNf5rP+e45HL1aTL8Q2tlLPR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU85yIC+nOeR5NTXKNQdYsh6TmGbYwHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACH0SpzMQogA7rlF0mYTK8YLoIGX3bBpw98p 9bYfBUuS9C+BCIxfuCWHBzb7m0LeFCp5rDEEUVJqkX5fe3yZ5rGx+GQVWGo+lHrn H7c3ZxMnjGegOhEbUWvUKeFh2AiuxZM5hCNlyMnAIdHKtI0DiJkJLpFW5iqQ7zqQ S4QYaBOR1dQthtjW0WCfAFXIzRM27/ZfHRYZjaOQUea7z4yckTIHJ6Gdjsd1F4tr ZzqXmQv5C8ZiED+pRST9xPn4wWkNCchWlKyRe4GF/7R1m6dd0kXWydaxTmosJ2qE cpncpppSglzbIjCLlNBpWN+5b9DHrcLDclsrz0SwJVPyNALFSUI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:09 2025 by rpki-client