$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: vtGzfhvsC8TXc0jODj4jytHYmW3irzLyYnawiuVkEsc= Subject key identifier: 44:BD:0F:9F:6D:28:BF:61:24:8D:D1:67:1E:3B:7E:AE:A8:87:2B:69 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 3D7B2A8E87BB16FF0D91CFE1CABDCB0CF9B21C5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 04C6 Signing time: Mon 21 Jul 2025 04:50:51 +0000 Manifest this update: Mon 21 Jul 2025 04:45:51 +0000 Manifest next update: Thu 24 Jul 2025 15:40:51 +0000 Files and hashes: 1: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: bGN1vyn9h6Yc+MemoAPYX3r1I/c2y6YPOsVFWuo0Dr0=) 2: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: SXXLWSftmV1ALVHZrOGiOsQ6UfYjWN8tTipC9o8sUVM=) 3: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ikejIzym3riHv/Wk7MAPoXCGoRFxR1pASpxS+fJWi4g=) 4: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: gaJ5zr+uI7d5Y7g8Ok6fkOqB5WIJhFnTW9FcStjCtZU=) 5: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: dTbIHUhiEUknjm2UJq3m/hFm+UD2w30xmsm34dF+xX0=) 6: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: YV5y0yJ3U9p9cvlNvG3FnXx2SHMj2wa+fG9Y04B6wcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7b:2a:8e:87:bb:16:ff:0d:91:cf:e1:ca:bd:cb:0c:f9:b2:1c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Jul 21 04:45:51 2025 GMT Not After : Jul 24 15:40:51 2025 GMT Subject: CN=44BD0F9F6D28BF61248DD1671E3B7EAEA8872B69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7b:bc:11:20:8a:08:b5:92:d0:53:88:c0:81: dc:a1:66:fc:7c:0e:d4:85:2e:06:8f:e5:10:a6:1c: cf:37:7e:c2:32:68:3b:cf:9c:ea:23:c9:0c:d9:e0: d0:81:bf:4b:e1:f8:7d:a1:26:f2:ee:8e:74:a6:eb: 41:0b:9d:0b:ad:90:db:56:b7:0a:be:24:88:5e:bf: bb:63:4f:2c:5f:7b:49:5d:ff:5b:16:37:a5:81:1f: f1:6b:77:79:eb:93:07:52:c3:4f:60:a7:1a:d8:7a: de:d3:62:fa:98:dc:6d:64:5a:56:62:46:6c:e7:1d: 36:ec:91:1d:d3:4a:b9:ab:28:ea:4d:db:65:f9:87: 2b:9e:a0:96:63:7a:92:ef:3e:e0:a3:9a:04:75:95: 54:3b:2d:e9:6c:bd:aa:26:3d:b6:9c:24:36:84:3c: 00:06:f5:fe:9b:85:59:87:50:f9:a6:31:1b:3d:f0: b3:94:ac:a3:53:55:ec:e2:da:da:a4:90:1c:08:bb: d7:09:f4:3d:23:42:cc:7a:bf:48:f0:2d:58:e5:c9: 67:22:67:31:59:03:76:ae:2c:0c:05:c5:81:76:e8: 91:3b:81:ce:a7:c3:9e:45:a8:29:83:16:ab:12:24: ca:39:ac:52:55:95:46:b1:be:1a:cd:48:6e:49:90: 2e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BD:0F:9F:6D:28:BF:61:24:8D:D1:67:1E:3B:7E:AE:A8:87:2B:69 X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:cb:1c:f4:14:a1:bc:36:e1:d0:5a:57:af:3d:22:af:74:e5: 23:d3:31:f5:d8:8a:0a:0c:8f:e0:36:fd:d5:4b:36:2f:85:cf: 12:f5:85:1f:14:39:43:96:c2:5d:90:f7:1d:05:8b:51:4c:d9: 20:6d:6b:a8:59:cf:74:0a:81:a3:9e:1c:33:93:02:54:fd:ba: d5:fc:99:b6:e6:dd:72:63:07:b8:f6:95:cd:15:7e:cb:81:3c: 3e:a5:09:16:5a:68:af:52:de:89:e3:0c:25:ad:07:a7:85:44: 7f:13:50:dc:08:b6:f6:45:ed:4c:a9:cb:50:f3:67:98:3f:cc: f1:67:a5:19:c9:84:4d:65:0f:41:2c:b6:9f:43:73:a3:75:9d: 49:f2:c7:1d:6e:9f:73:d8:64:cf:f2:4a:8e:e0:77:8a:36:c9: a9:e0:76:80:03:27:7f:ea:96:0b:7c:cc:30:c3:21:5c:c6:32: e7:0e:a9:fe:97:15:85:dd:f0:b4:ee:5c:24:ca:e8:6b:7d:80: 05:f5:2d:f9:b6:26:48:5d:69:ba:97:d0:5b:a0:96:e7:ae:0f: 7c:78:fc:a5:b7:1c:bb:48:24:2b:58:dc:2b:94:59:43:5e:01: cb:d2:04:84:e2:71:60:d6:dc:de:14:51:fe:37:f9:cc:37:af: 98:95:90:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPXsqjoe7Fv8Nkc/hyr3LDPmyHFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTA3MjEwNDQ1NTFaFw0yNTA3MjQxNTQwNTFaMDMxMTAvBgNV BAMTKDQ0QkQwRjlGNkQyOEJGNjEyNDhERDE2NzFFM0I3RUFFQTg4NzJCNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLe7wRIIoItZLQU4jAgdyhZvx8 DtSFLgaP5RCmHM83fsIyaDvPnOojyQzZ4NCBv0vh+H2hJvLujnSm60ELnQutkNtW twq+JIhev7tjTyxfe0ld/1sWN6WBH/Frd3nrkwdSw09gpxrYet7TYvqY3G1kWlZi RmznHTbskR3TSrmrKOpN22X5hyueoJZjepLvPuCjmgR1lVQ7LelsvaomPbacJDaE PAAG9f6bhVmHUPmmMRs98LOUrKNTVezi2tqkkBwIu9cJ9D0jQsx6v0jwLVjlyWci ZzFZA3auLAwFxYF26JE7gc6nw55FqCmDFqsSJMo5rFJVlUaxvhrNSG5JkC7zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURL0Pn20ov2EkjdFnHjt+rqiHK2kwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbLHPQUobw24dBaV689Iq905SPTMfXYigoM j+A2/dVLNi+FzxL1hR8UOUOWwl2Q9x0Fi1FM2SBta6hZz3QKgaOeHDOTAlT9utX8 mbbm3XJjB7j2lc0VfsuBPD6lCRZaaK9S3onjDCWtB6eFRH8TUNwItvZF7Uypy1Dz Z5g/zPFnpRnJhE1lD0Estp9Dc6N1nUnyxx1un3PYZM/ySo7gd4o2yangdoADJ3/q lgt8zDDDIVzGMucOqf6XFYXd8LTuXCTK6Gt9gAX1Lfm2JkhdabqX0FuglueuD3x4 /KW3HLtIJCtY3CuUWUNeAcvSBITicWDW3N4UUf43+cw3r5iVkEU= -----END CERTIFICATE-----Generated at Mon Jul 21 23:16:26 2025 by rpki-client