$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: uJp+SS5wOg/HHmYjRKokqpxqoitfyKMiw4IWAzn4pEA= Subject key identifier: 2F:14:2C:A9:AE:87:15:08:84:99:B0:2C:4D:32:14:C5:4A:DF:A6:18 Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 3201BB23D5FECF627410090C4056DE8042842F52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 04ED Signing time: Sat 19 Jul 2025 17:31:08 +0000 Manifest this update: Sat 19 Jul 2025 17:26:08 +0000 Manifest next update: Tue 22 Jul 2025 17:46:08 +0000 Files and hashes: 1: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: wjkk3W5xXaiF/YHp087L093X5qO7rTPCjl++6wbJoQc=) 2: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) 3: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: RZy6TYvU/OnVoAwKApvUrLMBSgr2tYCN+5iMb33gzqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 17:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:01:bb:23:d5:fe:cf:62:74:10:09:0c:40:56:de:80:42:84:2f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Jul 19 17:26:08 2025 GMT Not After : Jul 22 17:46:08 2025 GMT Subject: CN=2F142CA9AE8715088499B02C4D3214C54ADFA618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:44:e2:75:40:b7:8b:74:9d:e6:11:a4:5d: e3:c7:ee:5e:7b:f0:86:73:6a:df:50:1a:01:c9:b9: 9f:1c:b4:28:d1:76:7b:96:dc:ae:7f:ca:8e:4e:0f: 93:e1:dd:fb:07:7c:04:c2:7c:11:29:2c:5c:8d:d5: 3d:96:62:0e:98:fb:1b:56:9f:14:d3:c3:32:dc:b3: b9:de:a5:14:11:23:b6:31:f7:a1:78:e2:e7:3c:3a: 24:e2:6b:76:5a:2e:f7:ca:11:71:d6:1c:56:23:a6: 3f:68:81:7d:38:65:a5:84:bb:55:2f:94:22:b0:39: 41:ac:bd:74:d3:46:b1:4d:51:8d:a2:bc:92:e3:e1: db:fd:b8:c3:ff:4c:b9:10:85:ed:d4:13:13:3d:99: 8e:0b:ad:9c:6f:d8:01:01:54:96:c4:fe:66:57:97: c7:ee:30:b9:4c:1d:fe:34:9c:c6:68:01:23:bc:67: 3a:64:55:bd:cd:e8:f8:16:c6:f7:58:8a:a0:2f:67: 99:5d:87:61:79:6c:1c:64:05:c8:81:78:a7:a0:62: 49:d8:c0:ed:b5:68:79:21:25:f6:53:29:fe:a5:10: b8:1f:5a:54:d7:ef:b2:8c:2e:54:72:d9:8c:95:21: 5b:8c:67:ac:6c:d9:ef:1d:57:28:3a:88:9c:e5:46: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:14:2C:A9:AE:87:15:08:84:99:B0:2C:4D:32:14:C5:4A:DF:A6:18 X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:c3:8e:e1:d3:a2:bd:b7:cb:1e:c1:5f:f1:43:94:32:29:11: 9d:3a:72:ba:16:2b:5a:4a:88:a0:74:3a:17:9a:03:9a:66:9d: 92:58:96:92:5b:5d:20:c5:ed:c2:52:d4:de:93:00:0a:1e:ab: 30:3a:14:11:49:68:44:c2:e9:f5:0e:f5:53:23:5c:57:0b:35: 71:d8:55:9f:05:ff:43:a7:95:50:6d:43:17:a1:a8:59:66:3e: 0e:05:d7:37:da:4a:40:59:4d:08:15:5b:51:2d:42:5f:a5:9f: 8b:69:b5:c0:1e:52:bd:65:96:82:c6:2f:45:7f:30:2a:83:28: bf:49:40:f4:75:5d:cd:d0:6c:c8:f0:c2:6d:91:74:cc:25:d3: 29:1d:36:6a:f2:a9:e5:49:06:2d:2c:5d:44:fd:02:2f:9f:55: ba:bb:c3:1e:ad:b0:48:34:8c:55:98:07:8b:b3:ba:25:67:2f: 77:ea:d1:2e:b3:f5:7a:85:c8:c7:34:4f:7f:dd:b6:a0:63:9c: 64:82:85:59:48:b4:90:45:a7:50:e7:cc:8a:dc:81:82:08:97: 61:a1:6f:e0:e3:19:aa:cb:80:17:0e:b5:5a:69:24:0c:b3:85: 6e:ab:ab:62:c0:fe:26:61:9c:3a:59:6f:8a:ee:71:dd:58:59: 35:b8:d8:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgG7I9X+z2J0EAkMQFbegEKEL1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNTA3MTkxNzI2MDhaFw0yNTA3MjIxNzQ2MDhaMDMxMTAvBgNV BAMTKDJGMTQyQ0E5QUU4NzE1MDg4NDk5QjAyQzREMzIxNEM1NEFERkE2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLjETidUC3i3Sd5hGkXePH7l57 8IZzat9QGgHJuZ8ctCjRdnuW3K5/yo5OD5Ph3fsHfATCfBEpLFyN1T2WYg6Y+xtW nxTTwzLcs7nepRQRI7Yx96F44uc8OiTia3ZaLvfKEXHWHFYjpj9ogX04ZaWEu1Uv lCKwOUGsvXTTRrFNUY2ivJLj4dv9uMP/TLkQhe3UExM9mY4LrZxv2AEBVJbE/mZX l8fuMLlMHf40nMZoASO8ZzpkVb3N6PgWxvdYiqAvZ5ldh2F5bBxkBciBeKegYknY wO21aHkhJfZTKf6lELgfWlTX77KMLlRy2YyVIVuMZ6xs2e8dVyg6iJzlRlR9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULxQsqa6HFQiEmbAsTTIUxUrfphgwHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzDjuHTor23yx7BX/FDlDIpEZ06croWK1pK iKB0OheaA5pmnZJYlpJbXSDF7cJS1N6TAAoeqzA6FBFJaETC6fUO9VMjXFcLNXHY VZ8F/0OnlVBtQxehqFlmPg4F1zfaSkBZTQgVW1EtQl+ln4tptcAeUr1lloLGL0V/ MCqDKL9JQPR1Xc3QbMjwwm2RdMwl0ykdNmryqeVJBi0sXUT9Ai+fVbq7wx6tsEg0 jFWYB4uzuiVnL3fq0S6z9XqFyMc0T3/dtqBjnGSChVlItJBFp1DnzIrcgYIIl2Gh b+DjGarLgBcOtVppJAyzhW6rq2LA/iZhnDpZb4rucd1YWTW42Bo= -----END CERTIFICATE-----Generated at Sun Jul 20 22:30:45 2025 by rpki-client