$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: YipiDOd27yE+NsXJPsVoJAedkSpo6d1g6YAij5lQHBA= Subject key identifier: 9D:D3:33:DF:BD:90:B6:6C:23:41:C2:35:EC:DC:07:4D:30:EC:91:DA Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 7E508BD2B57CC8B7277AEE05BE56959D05F2B310 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 02EE Signing time: Sat 19 Jul 2025 20:50:43 +0000 Manifest this update: Sat 19 Jul 2025 20:45:43 +0000 Manifest next update: Wed 23 Jul 2025 04:35:43 +0000 Files and hashes: 1: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 5QR0rWF2IYw3MMT+ABenqub20374tAd3/MqhQ2MqKAw=) 2: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: XLeqNOgysbmnQkHAVT2CikE/OA88NZjwlz1EP5ZAPd8=) 3: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: MWqeWjmTixAOn+Gc9tFKycHUfhr7BF4hgDw5O4FK2PY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:50:8b:d2:b5:7c:c8:b7:27:7a:ee:05:be:56:95:9d:05:f2:b3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Jul 19 20:45:43 2025 GMT Not After : Jul 23 04:35:43 2025 GMT Subject: CN=9DD333DFBD90B66C2341C235ECDC074D30EC91DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:6e:2b:db:e5:c4:26:5c:c8:2a:24:dd:05: 7b:b4:8b:44:a7:c9:7f:14:92:bc:cd:63:4e:eb:5d: f1:36:59:d4:a8:6b:e8:71:d4:26:5a:77:2c:d3:6e: 39:5c:bf:a6:65:e6:71:60:ae:d4:51:b7:2e:d0:67: 79:0f:9c:61:da:cf:b5:74:91:44:63:35:07:ae:58: d1:c0:28:14:54:45:1c:0a:ef:d0:c8:81:7b:70:e3: 8c:4f:a4:23:df:42:33:0f:d7:62:2c:af:65:a9:e1: 10:89:a4:9c:04:51:07:3d:56:7a:ba:f9:0f:7b:7d: 26:51:04:f3:e4:ed:5d:31:a8:e1:1b:ad:28:92:1c: e7:28:18:80:f9:76:e1:e2:d0:30:be:83:f6:ef:f0: e0:ec:3b:f2:b7:0f:59:f1:9c:be:1e:b5:33:82:69: 1a:e8:31:04:ff:1d:fc:e5:7b:84:46:7b:15:8c:99: eb:2b:01:ed:6b:05:61:c0:a2:00:fd:02:45:da:23: 41:d2:ad:dc:27:a9:03:3d:39:be:1c:9a:62:35:af: 15:bf:1f:28:a0:c7:39:34:97:64:ac:e5:68:16:41: 05:9d:fd:be:4c:61:89:78:36:d7:26:6d:89:5a:04: 4c:8f:15:c6:ad:4c:77:ab:82:67:fc:a8:ee:dc:01: 10:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D3:33:DF:BD:90:B6:6C:23:41:C2:35:EC:DC:07:4D:30:EC:91:DA X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f8:ad:08:18:1b:b4:58:04:88:92:80:27:1d:fb:b3:50:29: 49:0c:14:55:26:34:6e:59:d6:30:f1:db:26:7e:ab:55:6b:e9: a3:28:36:ba:b8:f4:06:5c:41:04:a4:2a:76:5a:f4:c1:8c:12: 06:cc:44:36:b2:d2:93:6c:ee:f6:b0:0d:6b:1d:0d:6e:cb:03: a9:0c:07:62:01:7a:85:44:85:41:ab:1e:26:cc:73:17:8a:d9: 75:65:35:56:58:2b:ff:dd:5a:42:41:d2:e0:2e:27:d5:a5:a4: 79:0e:43:b4:19:3e:f3:be:c7:b4:53:a1:3b:b9:dc:94:88:6d: fc:8f:2b:bd:3c:57:34:a1:87:b5:b5:aa:f3:70:18:be:cc:86: fc:db:a5:0b:45:c7:4f:2d:94:88:61:3b:f9:1b:1b:54:f5:d3: 01:22:eb:5e:ea:4d:da:9f:29:da:44:f0:49:1d:9f:6f:c1:5f: 49:28:e3:67:24:35:8c:39:28:63:c2:c1:0c:6e:22:8c:15:70: 15:e5:89:6e:f4:5b:80:89:6d:52:29:f4:6b:1f:39:7b:7c:5b: c5:c7:2b:b1:0b:b9:5b:d2:29:6e:9e:a4:16:cd:1c:76:3f:ef: 12:5c:d0:0e:db:6b:16:71:6c:14:a9:69:de:d9:39:c4:4d:0c: c4:9f:21:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflCL0rV8yLcneu4FvlaVnQXysxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNTA3MTkyMDQ1NDNaFw0yNTA3MjMwNDM1NDNaMDMxMTAvBgNV BAMTKDlERDMzM0RGQkQ5MEI2NkMyMzQxQzIzNUVDREMwNzREMzBFQzkxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYeG4r2+XEJlzIKiTdBXu0i0Sn yX8UkrzNY07rXfE2WdSoa+hx1CZadyzTbjlcv6Zl5nFgrtRRty7QZ3kPnGHaz7V0 kURjNQeuWNHAKBRURRwK79DIgXtw44xPpCPfQjMP12Isr2Wp4RCJpJwEUQc9Vnq6 +Q97fSZRBPPk7V0xqOEbrSiSHOcoGID5duHi0DC+g/bv8ODsO/K3D1nxnL4etTOC aRroMQT/Hfzle4RGexWMmesrAe1rBWHAogD9AkXaI0HSrdwnqQM9Ob4cmmI1rxW/ Hyigxzk0l2Ss5WgWQQWd/b5MYYl4NtcmbYlaBEyPFcatTHergmf8qO7cARDTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUndMz372QtmwjQcI17NwHTTDskdowHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALL4rQgYG7RYBIiSgCcd+7NQKUkMFFUmNG5Z 1jDx2yZ+q1Vr6aMoNrq49AZcQQSkKnZa9MGMEgbMRDay0pNs7vawDWsdDW7LA6kM B2IBeoVEhUGrHibMcxeK2XVlNVZYK//dWkJB0uAuJ9WlpHkOQ7QZPvO+x7RToTu5 3JSIbfyPK708VzShh7W1qvNwGL7MhvzbpQtFx08tlIhhO/kbG1T10wEi617qTdqf KdpE8Ekdn2/BX0ko42ckNYw5KGPCwQxuIowVcBXliW70W4CJbVIp9GsfOXt8W8XH K7ELuVvSKW6epBbNHHY/7xJc0A7baxZxbBSpad7ZOcRNDMSfITI= -----END CERTIFICATE-----Generated at Sun Jul 20 21:27:21 2025 by rpki-client