$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: TAyhzMFMQR7/4IMYCWIxWDKhRr6WbGltjpMq0LVq/PM= Subject key identifier: E1:55:8D:95:A7:63:6A:AF:94:DA:A9:0F:C3:68:FD:95:39:57:64:EF Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 0D1178B928C275A82E8CF31243DDCE47A9CF578A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 04F4 Signing time: Mon 21 Jul 2025 20:11:14 +0000 Manifest this update: Mon 21 Jul 2025 20:06:14 +0000 Manifest next update: Fri 25 Jul 2025 07:33:14 +0000 Files and hashes: 1: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=) 2: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: fnS2iW8agZu8VxefpgxcJbZhEVESeMr61YT7NnxdQNc=) 3: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: xpg71b3kpnQSGJPj2sU9VopRbKel8YsV3A2Q00O2D1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 07:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:11:78:b9:28:c2:75:a8:2e:8c:f3:12:43:dd:ce:47:a9:cf:57:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Jul 21 20:06:14 2025 GMT Not After : Jul 25 07:33:14 2025 GMT Subject: CN=E1558D95A7636AAF94DAA90FC368FD95395764EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:eb:b2:bf:22:ea:29:06:15:18:8d:3e:62: 73:4b:46:a0:c0:40:a2:24:82:90:4a:99:8e:41:c2: 89:27:4e:1c:1b:e4:7b:48:5d:b2:02:2d:29:ec:32: 93:d8:32:a8:6d:fa:9f:55:03:2f:19:9f:ee:b7:ec: fa:66:a5:44:e4:64:73:70:9b:25:06:0f:2c:f9:55: ac:3a:b1:48:60:3e:4b:8c:6d:89:63:72:99:aa:b5: fb:99:87:2c:63:b3:32:31:80:b7:91:c8:c5:5d:70: d0:8a:93:f6:7e:1b:c3:e8:99:f5:1d:95:d6:55:ca: 77:cd:0d:06:cf:d1:25:2e:7a:6c:7d:5d:2d:cf:db: d3:24:f3:1d:23:50:60:3f:4f:21:f2:08:75:55:f9: 1d:7a:60:99:4b:18:41:56:b1:b6:28:fc:f2:36:23: 30:17:a7:e5:7b:17:4b:e6:a3:a9:de:b5:d8:77:4d: 92:a8:2d:e3:71:79:8a:5b:69:17:82:85:8a:c3:b9: 35:0f:f9:bb:73:b3:32:52:30:33:33:38:31:b7:17: d9:de:c4:5f:2d:2f:90:a9:1d:9f:6c:ba:ee:9c:a7: d4:e5:ff:6f:ab:6f:a1:e8:c9:e0:34:af:45:77:c9: f2:8e:d1:0f:c5:8e:a5:79:5b:18:59:fb:12:67:01: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:8D:95:A7:63:6A:AF:94:DA:A9:0F:C3:68:FD:95:39:57:64:EF X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0c:54:da:78:3c:2a:7f:01:85:4f:8e:d0:a8:0e:f6:96:3a: 44:7c:ee:44:ba:f6:8f:02:db:f6:80:1d:ab:11:47:fb:b4:7a: 19:93:ae:74:26:76:7b:b6:ae:6d:8f:ec:de:f4:1f:7f:91:b9: d1:9f:4b:9c:88:0b:e2:d3:cc:db:f7:98:07:19:3b:ce:31:88: da:4e:bd:c3:92:55:7b:6b:b5:9b:4e:9b:ab:53:01:bb:16:4b: 01:e0:10:e0:cb:72:6d:f3:64:05:7e:f8:56:cd:ae:9f:d6:e2: 6b:db:f1:23:3d:13:be:2e:8a:fa:ee:7c:e4:03:6c:be:56:56: 77:5a:2b:30:23:fc:0c:bd:cc:97:67:5c:47:15:1a:e3:04:fb: 19:fd:10:02:bb:47:1f:de:2c:fd:2e:6f:23:75:92:60:0d:d5: 37:bd:eb:4e:f7:35:6b:94:a8:f4:c4:71:0e:2a:2c:c0:d7:07: ad:36:02:92:8b:74:3b:d9:45:4c:15:22:f5:d6:7f:ca:0d:73: f8:91:96:c1:dd:e5:1c:48:29:f0:48:d8:c4:a2:5f:70:72:89: 0d:4c:dc:be:9c:45:f5:30:04:92:3d:26:cf:70:74:3d:e7:d0: 3c:1b:3a:4e:a1:b1:f9:7b:3d:2f:41:f2:d7:9a:72:5f:ce:a1: d1:b9:c9:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDRF4uSjCdagujPMSQ93OR6nPV4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTA3MjEyMDA2MTRaFw0yNTA3MjUwNzMzMTRaMDMxMTAvBgNV BAMTKEUxNTU4RDk1QTc2MzZBQUY5NERBQTkwRkMzNjhGRDk1Mzk1NzY0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQAuuyvyLqKQYVGI0+YnNLRqDA QKIkgpBKmY5BwoknThwb5HtIXbICLSnsMpPYMqht+p9VAy8Zn+637PpmpUTkZHNw myUGDyz5Vaw6sUhgPkuMbYljcpmqtfuZhyxjszIxgLeRyMVdcNCKk/Z+G8PomfUd ldZVynfNDQbP0SUuemx9XS3P29Mk8x0jUGA/TyHyCHVV+R16YJlLGEFWsbYo/PI2 IzAXp+V7F0vmo6netdh3TZKoLeNxeYpbaReChYrDuTUP+btzszJSMDMzODG3F9ne xF8tL5CpHZ9suu6cp9Tl/2+rb6HoyeA0r0V3yfKO0Q/FjqV5WxhZ+xJnAVh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4VWNladjaq+U2qkPw2j9lTlXZO8wHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsMVNp4PCp/AYVPjtCoDvaWOkR87kS69o8C 2/aAHasRR/u0ehmTrnQmdnu2rm2P7N70H3+RudGfS5yIC+LTzNv3mAcZO84xiNpO vcOSVXtrtZtOm6tTAbsWSwHgEODLcm3zZAV++FbNrp/W4mvb8SM9E74uivrufOQD bL5WVndaKzAj/Ay9zJdnXEcVGuME+xn9EAK7Rx/eLP0ubyN1kmAN1Te96073NWuU qPTEcQ4qLMDXB602ApKLdDvZRUwVIvXWf8oNc/iRlsHd5RxIKfBI2MSiX3ByiQ1M 3L6cRfUwBJI9Js9wdD3n0DwbOk6hsfl7PS9B8teacl/OodG5yVo= -----END CERTIFICATE-----Generated at Wed Jul 23 02:12:54 2025 by rpki-client