$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: UMMKwmclU3bT/HsNouPRdEE1bxlHAEg+YTolTB363ns= Subject key identifier: B6:CB:7C:F2:97:2E:33:E4:0A:BF:CD:64:13:81:95:21:70:B6:F6:83 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 57C4DA38E8983022A53E58A64807793C58D65F73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 0502 Signing time: Fri 22 Aug 2025 08:31:10 +0000 Manifest this update: Fri 22 Aug 2025 08:26:10 +0000 Manifest next update: Mon 25 Aug 2025 17:08:10 +0000 Files and hashes: 1: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=) 2: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: vaSjlr5/D2Y9EHIhn/m0mcjpMgFO/zwSILq8AJMa1DI=) 3: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: xpg71b3kpnQSGJPj2sU9VopRbKel8YsV3A2Q00O2D1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:08:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c4:da:38:e8:98:30:22:a5:3e:58:a6:48:07:79:3c:58:d6:5f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Aug 22 08:26:10 2025 GMT Not After : Aug 25 17:08:10 2025 GMT Subject: CN=B6CB7CF2972E33E40ABFCD641381952170B6F683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:10:c3:94:37:6d:c4:1e:65:96:42:99:82:f0: d4:90:08:ff:b5:20:f6:9e:4d:91:e9:8a:0c:d3:69: ff:10:e0:41:5e:c4:f7:d6:47:69:54:e2:66:85:db: e5:9b:ff:df:98:3b:46:84:41:12:c4:cf:b8:41:dc: 00:e0:4f:3a:d6:e1:3c:7a:38:ec:15:ff:99:3a:be: 07:1c:f5:2e:a6:c2:86:26:9a:eb:a6:b8:08:d9:48: 75:cf:b9:dd:af:40:29:d9:b4:1f:f2:0e:50:80:e5: 03:2d:42:98:c5:34:7d:55:b6:0c:e1:df:49:c0:cb: 04:d1:35:b9:24:8d:5c:b0:ef:d4:d0:29:46:96:43: e3:f6:01:4e:f7:5b:23:98:b9:f9:8c:70:e6:cb:59: 8c:77:c6:f2:61:84:9b:77:5d:f5:a6:3e:c6:e9:15: e2:7b:2e:ad:af:1d:f9:9a:a7:22:89:c9:95:87:7d: fe:9c:95:f3:54:22:5b:11:74:50:c3:1d:f7:87:82: 85:77:0e:0e:b3:27:6e:bb:fe:ed:b0:28:b5:53:05: 3b:61:02:bf:2a:bf:ee:eb:ef:64:da:1e:13:f0:87: 61:da:99:47:97:32:4c:05:8d:74:f7:a4:e9:13:0d: 95:f8:02:ed:30:60:10:84:e2:31:1c:b2:15:4d:1a: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CB:7C:F2:97:2E:33:E4:0A:BF:CD:64:13:81:95:21:70:B6:F6:83 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2a:1b:10:36:ed:42:3b:a5:c5:2b:29:78:b2:1f:e9:9a:56: 03:14:5c:20:f5:0d:22:04:6d:59:59:ab:ac:b1:3c:67:d9:17: 28:f4:99:8c:ce:3d:18:6f:1c:33:0b:56:39:17:65:94:eb:15: 29:20:a6:c9:bd:99:3c:b0:e2:ab:f9:1f:58:7f:d5:b5:8f:bb: e3:c8:91:c9:80:03:00:7e:0a:3b:cd:7b:3c:b0:97:02:b4:16: f8:ba:89:ac:2a:3a:ef:91:a9:59:1e:02:0b:61:3f:28:98:fa: f7:13:ce:ba:21:f9:00:74:cc:0f:0a:01:d9:de:9f:c4:6e:54: c3:f6:6a:c7:4f:8a:49:ac:b3:99:12:4c:71:b8:c1:82:3f:69: 76:f2:48:39:f9:2e:fc:31:b4:79:5b:86:6c:d4:72:40:91:bb: ab:7c:a2:57:23:70:c8:2c:e2:49:e4:77:34:38:48:b0:43:89: 28:a0:95:0b:dc:08:05:f2:74:55:1f:70:69:8f:dc:eb:62:0d: 18:e1:42:21:ce:59:49:78:38:2c:b6:c6:06:1b:dc:dc:5c:10: 9f:8e:97:4c:b3:8d:ee:71:5d:2a:66:88:e7:36:7f:09:c2:07: 47:6b:8f:23:b6:5e:1d:fb:2c:91:72:a8:30:ad:b4:9a:8a:8b: 80:87:23:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8TaOOiYMCKlPlimSAd5PFjWX3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTA4MjIwODI2MTBaFw0yNTA4MjUxNzA4MTBaMDMxMTAvBgNV BAMTKEI2Q0I3Q0YyOTcyRTMzRTQwQUJGQ0Q2NDEzODE5NTIxNzBCNkY2ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2EMOUN23EHmWWQpmC8NSQCP+1 IPaeTZHpigzTaf8Q4EFexPfWR2lU4maF2+Wb/9+YO0aEQRLEz7hB3ADgTzrW4Tx6 OOwV/5k6vgcc9S6mwoYmmuumuAjZSHXPud2vQCnZtB/yDlCA5QMtQpjFNH1Vtgzh 30nAywTRNbkkjVyw79TQKUaWQ+P2AU73WyOYufmMcObLWYx3xvJhhJt3XfWmPsbp FeJ7Lq2vHfmapyKJyZWHff6clfNUIlsRdFDDHfeHgoV3Dg6zJ267/u2wKLVTBTth Ar8qv+7r72TaHhPwh2HamUeXMkwFjXT3pOkTDZX4Au0wYBCE4jEcshVNGrx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtst88pcuM+QKv81kE4GVIXC29oMwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsqGxA27UI7pcUrKXiyH+maVgMUXCD1DSIE bVlZq6yxPGfZFyj0mYzOPRhvHDMLVjkXZZTrFSkgpsm9mTyw4qv5H1h/1bWPu+PI kcmAAwB+CjvNezywlwK0Fvi6iawqOu+RqVkeAgthPyiY+vcTzroh+QB0zA8KAdne n8RuVMP2asdPikmss5kSTHG4wYI/aXbySDn5LvwxtHlbhmzUckCRu6t8olcjcMgs 4knkdzQ4SLBDiSiglQvcCAXydFUfcGmP3OtiDRjhQiHOWUl4OCy2xgYb3NxcEJ+O l0yzje5xXSpmiOc2fwnCB0drjyO2Xh37LJFyqDCttJqKi4CHI0M= -----END CERTIFICATE-----Generated at Sat Aug 23 12:38:49 2025 by rpki-client