$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: eMa9+yqgj+6t7Oh9Cx4V9Cys00cQm5IM3HS7nIBu/Ls= Subject key identifier: 7F:FA:D8:EB:EE:F6:C4:53:11:7A:FC:79:F8:FB:C6:F8:A6:51:4E:BD Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 65D6CC5F7B22EA2080ACBBC00BEEE2DF16BBF8B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 02BA Signing time: Sun 20 Jul 2025 16:12:21 +0000 Manifest this update: Sun 20 Jul 2025 16:07:21 +0000 Manifest next update: Thu 24 Jul 2025 01:00:21 +0000 Files and hashes: 1: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: 8X7MnhcrGXRrLaiC6p6nb/f9+Sxh0EM3kk42oSlJDeM=) 2: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: mIROvhV/B52jTv+b7xbtzNIsRy0qMHCKGHbEvF+jS6o=) 3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: BkbNCbaEn933VFCyodMj6DbwmZMwSxLeqj3pslJTWVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d6:cc:5f:7b:22:ea:20:80:ac:bb:c0:0b:ee:e2:df:16:bb:f8:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Jul 20 16:07:21 2025 GMT Not After : Jul 24 01:00:21 2025 GMT Subject: CN=7FFAD8EBEEF6C453117AFC79F8FBC6F8A6514EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:43:da:74:13:df:3b:c9:1b:5a:7d:08:5f: b9:8c:a8:85:88:0c:39:0a:15:98:6e:d7:a8:f5:82: 49:8a:82:6e:d6:48:73:a2:2f:e5:2a:0b:1a:de:47: 01:7c:9d:cd:93:0e:99:d5:74:fb:8c:3b:5a:b5:c8: 90:47:1d:7b:fe:2e:2c:51:41:63:b8:72:21:a1:fe: 33:54:17:40:1c:7f:55:b7:e2:e3:45:61:9d:a0:74: f3:f8:a7:20:88:ad:10:f2:b9:03:ed:4e:d0:56:49: 2d:43:9e:ee:bb:6d:9f:9a:33:e2:b9:6a:a6:6d:2d: ae:40:ef:4c:83:4a:11:8d:31:0d:24:dd:84:20:90: 95:a5:b1:3c:9c:12:c3:de:80:cd:e3:89:9d:b2:50: 13:ba:64:85:8a:4e:bf:30:dc:05:39:bd:e0:2a:c4: 10:2f:33:2d:0d:d9:4c:b0:70:1a:94:0f:e7:e0:ad: 64:9a:e4:b2:56:83:8c:79:23:47:be:3e:92:dc:73: 47:2b:15:a0:40:57:2e:39:3a:85:89:7f:e6:d4:4b: a5:5a:a6:5a:12:cd:48:86:7f:08:6c:86:ab:a2:ef: ee:9e:c4:11:63:e4:29:d9:bc:27:3b:ed:6e:f4:1a: 43:22:34:ec:62:03:80:bc:e6:2f:9a:84:5a:60:c2: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FA:D8:EB:EE:F6:C4:53:11:7A:FC:79:F8:FB:C6:F8:A6:51:4E:BD X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c6:d6:2a:85:cc:be:08:d7:3d:bc:19:db:55:c1:dd:a8:08: 41:56:28:43:5f:0d:03:9a:ce:f8:73:84:f5:2f:1e:05:59:6d: cd:1b:8c:a3:f5:19:27:81:1e:38:34:ac:68:81:f2:60:9f:96: fe:20:5a:6a:20:d6:33:e0:e5:2a:75:03:37:bf:31:5d:c8:cc: 53:1b:d3:93:b8:56:a1:66:43:66:54:e3:03:a3:c0:bc:50:33: 90:de:e9:6c:03:25:4d:05:e3:41:c7:9d:88:83:08:c1:d5:c3: c9:08:92:34:32:ca:40:17:21:3f:59:2e:a2:41:d8:d5:dc:82: d6:65:1c:a3:24:b7:97:8b:da:3e:7e:d5:cf:95:e5:0b:12:8a: fc:22:b2:ce:05:e0:34:16:b1:af:36:87:8f:10:46:68:b9:a4: d3:9a:33:4c:45:9c:08:21:fa:23:f6:ba:8f:0b:c5:56:fe:78: b5:4f:27:85:da:78:60:8a:d0:d6:48:b0:fa:7c:fc:13:c5:13: 92:78:73:2c:b7:55:cc:15:9a:cc:be:6f:68:cb:4d:fe:22:7e: 3f:43:ff:8f:4e:cb:26:4c:6f:8d:a1:6a:83:c8:cd:8d:0b:5f: e3:88:aa:79:95:2c:47:d4:17:88:ad:8c:6a:5b:49:38:0f:03: 9c:61:0c:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdbMX3si6iCArLvAC+7i3xa7+LgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTA3MjAxNjA3MjFaFw0yNTA3MjQwMTAwMjFaMDMxMTAvBgNV BAMTKDdGRkFEOEVCRUVGNkM0NTMxMTdBRkM3OUY4RkJDNkY4QTY1MTRFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKh0PadBPfO8kbWn0IX7mMqIWI DDkKFZhu16j1gkmKgm7WSHOiL+UqCxreRwF8nc2TDpnVdPuMO1q1yJBHHXv+LixR QWO4ciGh/jNUF0Acf1W34uNFYZ2gdPP4pyCIrRDyuQPtTtBWSS1Dnu67bZ+aM+K5 aqZtLa5A70yDShGNMQ0k3YQgkJWlsTycEsPegM3jiZ2yUBO6ZIWKTr8w3AU5veAq xBAvMy0N2UywcBqUD+fgrWSa5LJWg4x5I0e+PpLcc0crFaBAVy45OoWJf+bUS6Va ploSzUiGfwhshqui7+6exBFj5CnZvCc77W70GkMiNOxiA4C85i+ahFpgwnYnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf/rY6+72xFMRevx5+PvG+KZRTr0wHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDG1iqFzL4I1z28GdtVwd2oCEFWKENfDQOa zvhzhPUvHgVZbc0bjKP1GSeBHjg0rGiB8mCflv4gWmog1jPg5Sp1Aze/MV3IzFMb 05O4VqFmQ2ZU4wOjwLxQM5De6WwDJU0F40HHnYiDCMHVw8kIkjQyykAXIT9ZLqJB 2NXcgtZlHKMkt5eL2j5+1c+V5QsSivwiss4F4DQWsa82h48QRmi5pNOaM0xFnAgh +iP2uo8LxVb+eLVPJ4XaeGCK0NZIsPp8/BPFE5J4cyy3VcwVmsy+b2jLTf4ifj9D /49OyyZMb42haoPIzY0LX+OIqnmVLEfUF4itjGpbSTgPA5xhDOE= -----END CERTIFICATE-----Generated at Mon Jul 21 08:32:22 2025 by rpki-client