$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft File: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft (raw, json) Hash identifier: k1qJ27U47MbcZ3v5Bd1o7jEdFnKzKS6LPpVRsqH2eSU= Subject key identifier: 6F:E0:94:35:F4:26:0A:B1:B7:B3:0B:D4:C0:5F:3F:C9:74:45:E1:C6 Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Certificate serial: 0CE737247960C3CC13B2FB90B8397614EE7E316A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft Manifest number: 0522 Signing time: Wed 05 Nov 2025 10:10:45 +0000 Manifest this update: Wed 05 Nov 2025 10:05:45 +0000 Manifest next update: Sat 08 Nov 2025 19:04:45 +0000 Files and hashes: 1: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: lR3gX6Bwr4ANHz1p/BofTqPyE1vSZC884k0IFEXkQqw=) 2: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: hlUw25q5eNWFZZoKL6XJ7rDIzMv9Ha/qCoX1PFqE3P4=) 3: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: PKIt6KT96DVg2otgI4L6Lbo6X1IxxuQSsidS83qyqJk=) 4: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: qTnm5CGA/RYtoBdoUqEMNKhCi+L95N248VCqrGjA3NM=) 5: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl (hash: u37DRWhsdKgqxQC0u58MIiU+wOYEHN61cFl2HO7kCt8=) 6: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: C0CDuWEVU0SX0hds00E1HGuGHRio6g8DwzULftVgj6I=) 7: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: Ks6djmjYrG5U+knwJmAadX8Vs5do9/GjSatcKmwDXgM=) 8: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: VtiYvCa1bjH6ANhQ1ZiFk2JkSbje5+lBzE3EKLizBTk=) 9: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: ZeQ/G35c/J7hJXCvQZ6ieAUy4NBWFOv66XK2TZxgUwU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 19:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e7:37:24:79:60:c3:cc:13:b2:fb:90:b8:39:76:14:ee:7e:31:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Validity Not Before: Nov 5 10:05:45 2025 GMT Not After : Nov 8 19:04:45 2025 GMT Subject: CN=6FE09435F4260AB1B7B30BD4C05F3FC97445E1C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ae:e2:b9:f4:3b:1d:c8:4c:35:ba:51:ee:b2: 8c:b9:17:22:41:07:38:2f:57:4c:61:c0:e6:60:83: 7c:d7:30:d0:c6:3d:bd:ea:d6:e1:33:4b:24:02:39: 9a:e5:1e:0a:3c:6e:b5:3c:44:ce:bb:0e:f0:12:c0: b5:6a:b1:47:7d:9b:0b:be:b9:95:26:d2:19:af:a4: 54:21:81:5a:62:5e:79:72:40:b8:bc:e6:87:0e:7a: c2:2a:05:6e:e1:a5:ae:66:f4:b9:cf:16:24:9a:26: 2a:fc:75:ec:ca:8b:ae:c3:d7:3e:76:3e:81:e7:10: ea:ff:7e:94:4b:5d:c6:b0:87:65:5e:dc:f3:3d:b4: 03:55:6c:db:16:b9:09:9a:df:46:02:9c:31:2d:d7: 94:0e:79:86:8b:8b:c2:c1:79:16:22:b8:8e:14:50: 24:16:ba:98:55:1a:40:be:05:c7:38:fc:18:51:ff: 46:85:05:2b:e0:52:e9:2c:db:7b:24:60:c6:a6:aa: 48:76:78:e2:8f:03:ce:85:35:71:11:95:f9:38:df: 47:58:a1:ca:8b:1a:87:9b:0c:c1:b0:d4:1c:d3:a0: 48:19:09:60:8c:93:ad:46:b6:51:65:20:24:87:70: 99:45:9e:5e:3d:ab:d3:fe:6e:cb:8b:06:9e:d6:5e: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E0:94:35:F4:26:0A:B1:B7:B3:0B:D4:C0:5F:3F:C9:74:45:E1:C6 X509v3 Authority Key Identifier: keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c0:8b:46:a9:82:9a:e2:fc:4e:33:42:ed:36:c7:b3:f1:1c: 56:19:e1:0d:60:63:9b:a6:ff:33:19:15:94:f1:0e:40:31:64: 62:3c:cb:2b:d6:fc:aa:67:7c:d7:fd:cc:f3:be:82:25:83:fa: 98:b5:4d:d0:45:85:a4:ee:07:13:c9:f1:ab:53:27:18:c4:09: 18:4d:39:dc:24:3d:d4:d6:dc:87:c4:7c:34:20:d1:ad:07:c5: a5:a6:b4:58:a1:17:f5:25:ff:fe:ee:4e:5c:a3:5f:39:38:b2: bd:ec:ca:4b:42:6a:93:60:32:6b:7d:49:f3:c6:28:5f:2a:47: 36:cf:d1:e3:ba:4c:60:1e:a2:01:8f:a2:28:d5:3f:b8:35:fd: 6a:04:81:ac:05:ab:60:50:b1:9b:00:d7:70:c0:bc:81:c2:96: 2d:12:d0:fc:06:0f:64:35:b0:e7:0d:5c:7f:8e:34:8f:79:0a: 5e:4a:bb:b9:1c:e5:55:b7:b1:e4:3a:23:d3:e4:5d:1b:e9:ea: 0b:5d:38:7b:25:33:5e:c4:ee:d2:bc:78:7f:1b:41:1d:fc:24: 84:ed:18:dc:e8:a1:9e:6f:7a:96:e3:1b:1f:72:a6:65:a5:9f: b7:3f:6d:bf:d3:c5:f1:89:b3:23:53:d2:42:e9:be:15:1a:43: 77:8a:5f:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOc3JHlgw8wTsvuQuDl2FO5+MWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2 MTQyRTVGRDAeFw0yNTExMDUxMDA1NDVaFw0yNTExMDgxOTA0NDVaMDMxMTAvBgNV BAMTKDZGRTA5NDM1RjQyNjBBQjFCN0IzMEJENEMwNUYzRkM5NzQ0NUUxQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWruK59DsdyEw1ulHusoy5FyJB BzgvV0xhwOZgg3zXMNDGPb3q1uEzSyQCOZrlHgo8brU8RM67DvASwLVqsUd9mwu+ uZUm0hmvpFQhgVpiXnlyQLi85ocOesIqBW7hpa5m9LnPFiSaJir8dezKi67D1z52 PoHnEOr/fpRLXcawh2Ve3PM9tANVbNsWuQma30YCnDEt15QOeYaLi8LBeRYiuI4U UCQWuphVGkC+Bcc4/BhR/0aFBSvgUuks23skYMamqkh2eOKPA86FNXERlfk430dY ocqLGoebDMGw1BzToEgZCWCMk61GtlFlICSHcJlFnl49q9P+bsuLBp7WXp33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb+CUNfQmCrG3swvUwF8/yXRF4cYwHwYDVR0j BBgwFoAU0loEoOTlL/Qi2dj7hX0j3GFC5f0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMC9EMjVBMDRBMEU0 RTUyRkY0MjJEOUQ4RkI4NTdEMjNEQzYxNDJFNUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2MTQy RTVGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIz REM2MTQyRTVGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnAi0apgpri/E4zQu02x7PxHFYZ4Q1gY5um /zMZFZTxDkAxZGI8yyvW/KpnfNf9zPO+giWD+pi1TdBFhaTuBxPJ8atTJxjECRhN OdwkPdTW3IfEfDQg0a0HxaWmtFihF/Ul//7uTlyjXzk4sr3syktCapNgMmt9SfPG KF8qRzbP0eO6TGAeogGPoijVP7g1/WoEgawFq2BQsZsA13DAvIHCli0S0PwGD2Q1 sOcNXH+ONI95Cl5Ku7kc5VW3seQ6I9PkXRvp6gtdOHslM17E7tK8eH8bQR38JITt GNzooZ5vepbjGx9ypmWln7c/bb/TxfGJsyNT0kLpvhUaQ3eKX0g= -----END CERTIFICATE-----Generated at Wed Nov 5 17:44:58 2025 by rpki-client