$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft File: 26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json) Hash identifier: umH/qD9cEgNFQgY5/Bn/hfPbEKb45EDOz7DAx6tv0j8= Subject key identifier: 6D:A6:83:53:87:3A:B7:FE:99:C9:E4:D6:43:6A:BE:F9:38:F8:93:C5 Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Certificate serial: 18C39ADE2CDAA8DC472E368D7D6FABB4A3F0939A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft Manifest number: 04F1 Signing time: Fri 25 Jul 2025 02:30:01 +0000 Manifest this update: Fri 25 Jul 2025 02:25:01 +0000 Manifest next update: Mon 28 Jul 2025 07:21:01 +0000 Files and hashes: 1: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=) 2: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=) 3: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=) 4: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=) 5: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=) 6: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=) 7: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=) 8: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=) 9: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=) 10: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: v9x6FFKc5YBM7YjjjhWnh+cgr4TE8pVruU/rs5/MlL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c3:9a:de:2c:da:a8:dc:47:2e:36:8d:7d:6f:ab:b4:a3:f0:93:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Validity Not Before: Jul 25 02:25:01 2025 GMT Not After : Jul 28 07:21:01 2025 GMT Subject: CN=6DA68353873AB7FE99C9E4D6436ABEF938F893C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:c4:91:a0:3a:37:e9:43:50:02:89:42:6c: 76:d8:00:39:48:85:ce:2d:aa:93:29:72:87:7b:5f: 57:b6:74:09:81:1a:47:59:12:82:ba:cb:a1:3b:e0: 0a:5d:8f:26:95:8b:6f:93:a3:e0:9b:1b:c1:0e:24: bb:82:82:81:e9:89:24:5b:5a:2d:76:c8:59:ae:fd: 6f:a0:0f:46:dd:88:7c:fc:1c:a7:5c:ba:b7:c5:7e: 38:44:ed:94:38:97:4a:7f:34:c9:39:47:87:2a:10: 71:75:14:3b:1d:65:38:8d:ed:b8:d0:70:a1:8f:b2: 1c:95:35:a6:41:9a:a0:24:93:36:52:aa:dc:1f:81: 4d:34:f3:a9:6b:e9:74:b5:1b:cd:36:d3:5b:4b:6e: 24:af:6d:a2:90:ed:70:63:85:ff:96:1d:09:d1:76: bc:bf:c5:55:1d:b1:4a:88:65:cb:bc:87:1f:4d:77: 09:15:7a:7f:30:50:b4:34:5c:e4:cc:d6:7a:90:23: 51:50:48:91:27:7a:54:21:2e:cf:6a:3b:9c:82:fc: 76:4a:fd:05:ab:2a:5d:73:b9:49:55:91:51:37:fb: de:d9:cd:96:fb:8f:b7:d6:10:63:3f:2c:6a:a6:df: 2a:fd:8f:fd:3b:ac:c7:54:0c:e4:58:67:6a:4f:36: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A6:83:53:87:3A:B7:FE:99:C9:E4:D6:43:6A:BE:F9:38:F8:93:C5 X509v3 Authority Key Identifier: keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a4:9f:c0:eb:ae:07:b4:ee:f5:0f:04:32:b0:fb:99:05:51: 1d:c3:b9:6e:f9:de:bb:5d:39:ae:a2:19:31:5e:d8:9c:2e:2a: fb:2d:a5:01:34:62:fe:0d:5a:5f:da:64:02:e0:9b:15:a9:27: 12:ff:b8:cd:8b:74:dd:b5:94:fa:6a:6e:6f:e8:f5:97:fe:67: 90:d2:c2:ed:f1:f1:13:5f:9d:70:80:29:4e:c9:3c:10:21:19: 8b:9a:6e:b9:33:45:26:84:11:d6:34:89:38:7a:aa:25:74:e0: 75:5a:52:9a:2b:51:b9:f4:34:21:94:4d:b0:4f:83:18:71:80: 55:5c:30:df:3d:81:d4:5f:cf:6e:fc:2a:dd:df:3e:8c:d5:64: f7:44:e6:d7:69:61:6b:dd:6e:5f:18:92:6f:f0:d8:32:04:c7: fa:3c:c7:ae:51:72:d6:36:fd:6e:ef:14:20:b3:48:e7:12:30: 02:fd:2a:f4:0f:9f:3a:6e:6a:e5:b7:f8:5b:c2:04:10:51:f2: fd:68:1d:23:93:e6:ed:71:bb:8b:fc:93:84:b5:ed:67:b5:3b: a0:61:5f:b8:6c:87:42:7f:50:54:2f:44:12:6d:b7:8d:c1:7b: c0:29:24:ae:d7:af:ea:b8:e6:42:24:06:b9:6f:ff:79:72:e1: bb:e1:4c:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMOa3izaqNxHLjaNfW+rtKPwk5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNF QjlDOUNFNTAeFw0yNTA3MjUwMjI1MDFaFw0yNTA3MjgwNzIxMDFaMDMxMTAvBgNV BAMTKDZEQTY4MzUzODczQUI3RkU5OUM5RTRENjQzNkFCRUY5MzhGODkzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqY8SRoDo36UNQAolCbHbYADlI hc4tqpMpcod7X1e2dAmBGkdZEoK6y6E74ApdjyaVi2+To+CbG8EOJLuCgoHpiSRb Wi12yFmu/W+gD0bdiHz8HKdcurfFfjhE7ZQ4l0p/NMk5R4cqEHF1FDsdZTiN7bjQ cKGPshyVNaZBmqAkkzZSqtwfgU0086lr6XS1G80201tLbiSvbaKQ7XBjhf+WHQnR dry/xVUdsUqIZcu8hx9NdwkVen8wULQ0XOTM1nqQI1FQSJEnelQhLs9qO5yC/HZK /QWrKl1zuUlVkVE3+97ZzZb7j7fWEGM/LGqm3yr9j/07rMdUDORYZ2pPNo2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbaaDU4c6t/6ZyeTWQ2q++Tj4k8UwHwYDVR0j BBgwFoAUJkJbcClPmANdOHiOWXpKbOucnOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YzMDkzNi1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC8yNjQyNUI3MDI5 NEY5ODAzNUQzODc4OEU1OTdBNEE2Q0VCOUM5Q0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNFQjlD OUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMzA5MzYtYzc1MC00MzNiLTlj MmEtOGZmNWYzOGU2M2Q0LzAvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRB NkNFQjlDOUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCkn8Drrge07vUPBDKw+5kFUR3DuW753rtd Oa6iGTFe2JwuKvstpQE0Yv4NWl/aZALgmxWpJxL/uM2LdN21lPpqbm/o9Zf+Z5DS wu3x8RNfnXCAKU7JPBAhGYuabrkzRSaEEdY0iTh6qiV04HVaUporUbn0NCGUTbBP gxhxgFVcMN89gdRfz278Kt3fPozVZPdE5tdpYWvdbl8Ykm/w2DIEx/o8x65RctY2 /W7vFCCzSOcSMAL9KvQPnzpuauW3+FvCBBBR8v1oHSOT5u1xu4v8k4S17We1O6Bh X7hsh0J/UFQvRBJtt43Be8ApJK7Xr+q45kIkBrlv/3ly4bvhTAk= -----END CERTIFICATE-----Generated at Fri Jul 25 06:23:18 2025 by rpki-client