$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: HRxVWPYiczf9dbetNgAnhg2jAygsTeXQKaMcP0gnTnc= Subject key identifier: ED:A7:01:56:B3:67:57:33:2D:81:FA:BE:B4:8E:1A:A1:BB:BB:44:C2 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 51360186C86A47077302D6EEFE23744EB3C65BC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 04EB Signing time: Tue 01 Jul 2025 22:51:08 +0000 Manifest this update: Tue 01 Jul 2025 22:46:08 +0000 Manifest next update: Sat 05 Jul 2025 06:31:08 +0000 Files and hashes: 1: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: IYC/OX3S28EDKOEdIRdWd72X4b1E4ugpkJny6DdykeM=) 2: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=) 3: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: xpg71b3kpnQSGJPj2sU9VopRbKel8YsV3A2Q00O2D1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 06:31:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:36:01:86:c8:6a:47:07:73:02:d6:ee:fe:23:74:4e:b3:c6:5b:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Jul 1 22:46:08 2025 GMT Not After : Jul 5 06:31:08 2025 GMT Subject: CN=EDA70156B36757332D81FABEB48E1AA1BBBB44C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:9c:82:d9:90:92:7b:01:92:37:e9:a2:3c: 64:ef:63:64:21:a7:33:26:5b:3b:59:2b:73:63:62: 67:aa:45:d3:cb:c3:3f:c9:76:33:83:b6:26:e6:08: 50:40:d8:35:cb:bb:3b:b3:33:a0:41:a0:cc:fd:da: 0c:e9:a1:c7:36:5f:c9:fe:f5:2b:58:9f:3d:5a:b1: f2:0c:54:3a:4d:c2:26:87:bf:3c:fb:8c:96:45:0c: 67:cb:93:0f:78:aa:c1:d3:ef:36:28:69:28:89:5e: f1:e9:2d:35:2b:73:22:82:0c:e1:8e:42:c4:c1:46: 91:01:3e:9c:ee:d9:57:dd:29:05:1a:2a:8f:3a:cb: 08:2e:e0:e5:3a:51:c1:c2:93:a4:69:e9:a5:aa:01: b9:d8:9e:14:1b:79:43:65:87:e4:d7:19:b6:a0:1c: 77:f6:47:77:72:94:cc:46:8d:ea:8a:2a:50:bd:7e: 2c:53:01:30:ec:85:66:4d:af:d8:fa:1b:dd:f7:6a: 42:29:06:12:7c:35:db:93:af:2d:13:47:a2:6e:97: 9c:86:06:6a:e6:f7:a7:03:23:54:cc:db:92:27:f9: 3f:0d:f0:ad:7d:17:c2:83:ab:29:5d:e1:ab:35:ac: 9b:da:ef:4f:15:6d:82:45:fc:74:8f:7b:8a:ad:6c: eb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A7:01:56:B3:67:57:33:2D:81:FA:BE:B4:8E:1A:A1:BB:BB:44:C2 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:f7:0b:5c:e8:a7:87:b8:ef:70:d4:53:14:7c:c7:ee:69:34: 13:bd:b6:c1:7b:63:3c:c3:6d:7c:2f:7a:84:66:5a:b8:ed:bc: 39:af:86:2d:01:5b:c2:e1:69:72:20:19:ab:ae:64:7c:28:e5: 51:16:61:76:6c:91:91:54:54:95:8b:4a:c2:6b:2a:07:1c:9c: 48:ff:1c:e4:bb:83:43:97:9d:84:0c:fe:7e:d3:81:22:71:03: df:4e:3e:08:89:c5:0e:64:a9:7f:ee:41:6e:64:a1:3b:93:7b: 80:7c:1e:46:91:e4:03:0b:e2:5b:cc:50:1a:da:4b:df:f5:bb: 55:a7:c1:ef:29:2c:60:3a:ee:3e:c9:b4:ef:db:a4:31:5a:9c: 76:34:b8:1d:40:32:40:a2:98:77:f0:20:c4:8f:f5:e0:58:bc: 02:9f:bb:8a:6a:5a:56:76:3a:6e:db:4f:6f:7b:c0:3c:6b:cb: 28:3e:71:6c:01:f9:a3:e7:0c:3a:14:35:a9:ac:0e:59:e8:2e: 13:78:f0:c3:f8:61:e9:10:32:e7:d3:96:dc:47:ec:7b:9c:d5: 0f:38:69:c8:c9:21:29:13:8f:ea:72:03:17:5a:9a:27:d1:70: 04:97:4e:47:32:08:d7:ad:60:18:c3:9f:ed:26:6c:11:bf:88: 95:7c:3c:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUTYBhshqRwdzAtbu/iN0TrPGW8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTA3MDEyMjQ2MDhaFw0yNTA3MDUwNjMxMDhaMDMxMTAvBgNV BAMTKEVEQTcwMTU2QjM2NzU3MzMyRDgxRkFCRUI0OEUxQUExQkJCQjQ0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqu5yC2ZCSewGSN+miPGTvY2Qh pzMmWztZK3NjYmeqRdPLwz/JdjODtibmCFBA2DXLuzuzM6BBoMz92gzpocc2X8n+ 9StYnz1asfIMVDpNwiaHvzz7jJZFDGfLkw94qsHT7zYoaSiJXvHpLTUrcyKCDOGO QsTBRpEBPpzu2VfdKQUaKo86ywgu4OU6UcHCk6Rp6aWqAbnYnhQbeUNlh+TXGbag HHf2R3dylMxGjeqKKlC9fixTATDshWZNr9j6G933akIpBhJ8NduTry0TR6Jul5yG Bmrm96cDI1TM25In+T8N8K19F8KDqyld4as1rJva708VbYJF/HSPe4qtbOtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7acBVrNnVzMtgfq+tI4aobu7RMIwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM33C1zop4e473DUUxR8x+5pNBO9tsF7YzzD bXwveoRmWrjtvDmvhi0BW8LhaXIgGauuZHwo5VEWYXZskZFUVJWLSsJrKgccnEj/ HOS7g0OXnYQM/n7TgSJxA99OPgiJxQ5kqX/uQW5koTuTe4B8HkaR5AML4lvMUBra S9/1u1Wnwe8pLGA67j7JtO/bpDFanHY0uB1AMkCimHfwIMSP9eBYvAKfu4pqWlZ2 Om7bT297wDxryyg+cWwB+aPnDDoUNamsDlnoLhN48MP4YekQMufTltxH7Huc1Q84 acjJISkTj+pyAxdamifRcASXTkcyCNetYBjDn+0mbBG/iJV8PFk= -----END CERTIFICATE-----Generated at Wed Jul 2 19:34:52 2025 by rpki-client