$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: x/q2dYZA9gB5+3+wf3i7lCEQHVeYfjUL5ySQEwtEp14= Subject key identifier: 90:0E:FF:02:AA:63:B0:A4:91:FE:DD:64:D0:E9:3B:22:98:9F:88:7D Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 44278C98D8C1E3C7A4E04F6227D53E3FB856EC53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 039E Signing time: Mon 21 Jul 2025 00:31:12 +0000 Manifest this update: Mon 21 Jul 2025 00:26:12 +0000 Manifest next update: Thu 24 Jul 2025 10:20:12 +0000 Files and hashes: 1: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: xgTXiXrEnJxbOP6TS+S0N10gTiQnRVLI7EuUY6Lfx+A=) 2: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: ldJgg+ZEQ/CTigrskdBB9EMuAQkrfWy1yn/43sb7xSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:27:8c:98:d8:c1:e3:c7:a4:e0:4f:62:27:d5:3e:3f:b8:56:ec:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Jul 21 00:26:12 2025 GMT Not After : Jul 24 10:20:12 2025 GMT Subject: CN=900EFF02AA63B0A491FEDD64D0E93B22989F887D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7e:b2:f2:5c:28:aa:6c:f0:86:59:ac:b0:4a: fe:bf:7c:31:c9:66:91:6b:45:ba:9e:db:fc:45:00: 3a:b6:4a:b9:6c:40:24:ec:b6:ea:94:49:4f:8f:7f: 0e:6e:c9:a9:5f:c6:8f:c0:0e:76:df:f7:1c:32:1b: 39:e0:bd:ea:64:48:4e:ac:94:63:9e:9a:42:46:e8: 2d:fa:3a:94:b7:e3:13:4b:a4:bf:77:2f:5d:8c:f9: 79:d1:21:c8:46:15:e1:18:b9:61:d1:39:6f:51:2e: eb:02:de:06:78:63:ac:2a:5d:a8:54:4e:05:47:8b: 2d:6f:11:1b:3f:75:b4:03:d6:37:1d:26:80:1e:cf: 76:e2:a0:3a:29:a1:fb:76:7d:54:9e:51:58:bf:73: 12:ba:67:da:42:44:3d:bb:fa:3f:90:12:18:bf:bd: 9b:e4:ef:15:dd:37:85:af:88:97:d9:4f:b5:a6:29: 6a:ba:25:44:3c:b3:7c:c9:ee:4a:96:f1:fa:07:4c: 06:8b:94:1b:b2:b1:47:b7:a6:4a:44:a0:4f:ae:f0: 95:40:88:6e:18:2d:08:68:63:ee:1f:4a:be:56:70: 69:b8:38:7e:4e:3d:78:28:e1:88:a5:44:85:e8:bb: c7:51:84:9c:51:a1:0f:5e:5c:8e:63:31:b5:85:2b: 5e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0E:FF:02:AA:63:B0:A4:91:FE:DD:64:D0:E9:3B:22:98:9F:88:7D X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:81:d3:7a:18:fa:7d:ee:fc:04:f8:92:8b:75:fd:b1:80:3c: b8:c0:0b:ac:d3:96:d0:fa:a8:b8:e5:f4:b1:4b:cb:2d:1a:3f: ec:95:b0:b5:27:10:7b:50:c3:c4:40:11:01:9e:fa:18:de:da: 03:07:a3:00:0e:5d:d3:54:81:4f:fc:8e:76:5a:04:c2:4c:e1: 84:ef:0f:1c:78:52:09:7b:08:96:57:53:5e:4d:4f:fc:76:fb: 10:2e:fd:ce:23:ae:26:b1:15:ab:44:1b:d6:19:78:27:3c:91: 44:dd:68:37:93:72:a5:9d:b8:dc:db:5a:5a:29:ad:f9:17:f6: 64:0c:37:6c:1e:01:56:90:1c:81:6a:12:eb:15:b7:ec:59:2b: 25:57:94:8b:bc:d8:f5:c7:f0:6f:8c:35:97:c5:d9:e4:c9:38: 66:8f:92:a3:47:3c:00:e4:bb:31:2d:89:55:58:24:57:fa:5e: f8:e1:6e:32:49:22:c7:16:ff:31:17:ba:20:6e:25:54:e9:db: ac:98:16:e5:a2:ad:8b:43:40:50:2c:a4:d2:e4:50:61:1c:10: df:a6:6c:90:0b:d2:ee:e8:f9:a5:48:1a:67:17:cd:4d:04:76: 45:38:66:d9:63:0d:06:de:39:0d:8f:76:a5:0a:36:a8:62:f0: 96:10:8e:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCeMmNjB48ek4E9iJ9U+P7hW7FMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNTA3MjEwMDI2MTJaFw0yNTA3MjQxMDIwMTJaMDMxMTAvBgNV BAMTKDkwMEVGRjAyQUE2M0IwQTQ5MUZFREQ2NEQwRTkzQjIyOTg5Rjg4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtfrLyXCiqbPCGWaywSv6/fDHJ ZpFrRbqe2/xFADq2SrlsQCTstuqUSU+Pfw5uyalfxo/ADnbf9xwyGzngvepkSE6s lGOemkJG6C36OpS34xNLpL93L12M+XnRIchGFeEYuWHROW9RLusC3gZ4Y6wqXahU TgVHiy1vERs/dbQD1jcdJoAez3bioDopoft2fVSeUVi/cxK6Z9pCRD27+j+QEhi/ vZvk7xXdN4WviJfZT7WmKWq6JUQ8s3zJ7kqW8foHTAaLlBuysUe3pkpEoE+u8JVA iG4YLQhoY+4fSr5WcGm4OH5OPXgo4YilRIXou8dRhJxRoQ9eXI5jMbWFK17jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkA7/AqpjsKSR/t1k0Ok7IpifiH0wHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImB03oY+n3u/AT4kot1/bGAPLjAC6zTltD6 qLjl9LFLyy0aP+yVsLUnEHtQw8RAEQGe+hje2gMHowAOXdNUgU/8jnZaBMJM4YTv Dxx4Ugl7CJZXU15NT/x2+xAu/c4jriaxFatEG9YZeCc8kUTdaDeTcqWduNzbWlop rfkX9mQMN2weAVaQHIFqEusVt+xZKyVXlIu82PXH8G+MNZfF2eTJOGaPkqNHPADk uzEtiVVYJFf6XvjhbjJJIscW/zEXuiBuJVTp26yYFuWirYtDQFAspNLkUGEcEN+m bJAL0u7o+aVIGmcXzU0EdkU4ZtljDQbeOQ2PdqUKNqhi8JYQjiI= -----END CERTIFICATE-----Generated at Mon Jul 21 08:58:22 2025 by rpki-client