$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: 6DdeHiUFomOvYqy7GtHWhoc4CvzKR2R7Sn8DyErrElk= Subject key identifier: CB:6E:AF:C3:89:F4:17:77:F4:9A:6C:23:1E:A0:7C:B5:F4:18:43:36 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 0463DC8361F15D9FB561CF8B02E46A4EC22A6C0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 04F5 Signing time: Thu 24 Jul 2025 07:41:09 +0000 Manifest this update: Thu 24 Jul 2025 07:36:09 +0000 Manifest next update: Sun 27 Jul 2025 09:00:09 +0000 Files and hashes: 1: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: xp7zh/qogSH8rCdWcuMKx0JZToEc8G2jBx1ZEnG9a9g=) 2: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: xpg71b3kpnQSGJPj2sU9VopRbKel8YsV3A2Q00O2D1E=) 3: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: HO//bSLp2WjVgHvHv/e7XU2PZtp1CcwPKxab4EGoQDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 09:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:63:dc:83:61:f1:5d:9f:b5:61:cf:8b:02:e4:6a:4e:c2:2a:6c:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Jul 24 07:36:09 2025 GMT Not After : Jul 27 09:00:09 2025 GMT Subject: CN=CB6EAFC389F41777F49A6C231EA07CB5F4184336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:89:db:1a:af:d3:05:0f:6c:8f:31:a3:c0: 48:21:4a:97:e8:21:5a:2a:f2:29:a7:61:6d:4d:5b: e2:3c:cc:89:c2:5a:50:82:90:05:cf:e6:ea:33:b6: e5:e8:39:30:33:84:21:10:17:0d:89:ed:d5:29:a2: 19:c1:6a:3e:f6:a6:1e:bf:a7:44:1c:8d:f4:73:0f: d4:58:02:23:2e:d1:dd:7a:45:8a:9c:ef:7c:dd:7e: 32:3b:df:25:dc:c5:fd:d9:c6:be:a5:36:51:23:2e: 86:9e:69:ae:10:04:07:43:56:df:d6:52:82:13:53: 1b:3e:9a:36:d7:3b:97:66:b0:fc:ef:73:7e:a3:9f: 68:06:72:2a:da:b1:15:d7:3f:eb:3c:27:68:80:bb: 0a:34:87:4c:39:38:20:48:7a:e9:fe:b7:d9:b3:af: b0:04:3c:27:08:b8:43:5a:46:31:0c:19:5f:1c:ce: 5c:03:bf:95:97:92:88:7f:0f:30:69:2b:d4:79:46: c2:71:fc:07:1e:f8:dd:6b:de:70:ad:5a:30:24:c3: eb:b5:a8:b4:8f:0a:4d:6f:9b:4f:7b:5a:f1:38:f6: 39:65:d3:d1:41:88:5b:3b:4e:2c:b8:57:a5:04:6b: ec:66:84:52:b9:ce:fe:90:40:ab:41:aa:52:90:d2: 1c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6E:AF:C3:89:F4:17:77:F4:9A:6C:23:1E:A0:7C:B5:F4:18:43:36 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:15:e1:f6:2b:e6:14:aa:74:5e:8d:3a:07:7d:74:53:8a:d5: e7:75:42:3a:8d:3c:e0:b3:46:76:de:cf:47:06:be:ab:13:40: 40:d2:0b:df:5c:d8:85:f8:66:63:02:06:23:41:2e:fe:55:0f: fc:19:44:47:d7:ab:df:7a:c9:a0:c1:9c:04:f6:79:3b:3a:df: 44:de:a4:4b:be:d4:93:7e:4e:2c:c9:98:f9:7c:99:10:b7:cc: c7:6c:ed:60:ce:35:37:f9:f9:89:f9:29:c9:4d:b7:a3:16:5a: e6:ee:8d:af:80:15:8b:ec:85:29:1c:17:99:20:19:74:cd:de: b9:47:2f:29:68:e0:26:2a:77:b9:3e:e9:60:21:a5:d6:4f:d3: e9:28:28:33:1b:c3:63:0e:45:4e:96:a2:49:5b:a7:04:d1:88: 96:f4:e7:a6:25:cd:7d:1f:da:a3:16:cb:8c:35:b8:cc:c4:40: 6f:a4:6b:de:6f:b9:12:fd:5c:c5:3c:18:63:d3:d5:fb:ad:10: 72:95:c4:23:b3:89:29:08:4c:47:0a:09:0e:33:ed:d7:94:21: eb:64:3f:fd:15:da:d5:61:72:b7:6c:55:2c:9c:84:56:1e:c9: b4:52:9a:90:20:f0:14:bc:c3:2b:1f:bf:a9:df:8f:e1:42:c9: e1:ab:33:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBGPcg2HxXZ+1Yc+LAuRqTsIqbA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNTA3MjQwNzM2MDlaFw0yNTA3MjcwOTAwMDlaMDMxMTAvBgNV BAMTKENCNkVBRkMzODlGNDE3NzdGNDlBNkMyMzFFQTA3Q0I1RjQxODQzMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvonbGq/TBQ9sjzGjwEghSpfo IVoq8imnYW1NW+I8zInCWlCCkAXP5uoztuXoOTAzhCEQFw2J7dUpohnBaj72ph6/ p0QcjfRzD9RYAiMu0d16RYqc73zdfjI73yXcxf3Zxr6lNlEjLoaeaa4QBAdDVt/W UoITUxs+mjbXO5dmsPzvc36jn2gGcirasRXXP+s8J2iAuwo0h0w5OCBIeun+t9mz r7AEPCcIuENaRjEMGV8czlwDv5WXkoh/DzBpK9R5RsJx/Ace+N1r3nCtWjAkw+u1 qLSPCk1vm097WvE49jll09FBiFs7Tiy4V6UEa+xmhFK5zv6QQKtBqlKQ0hxvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy26vw4n0F3f0mmwjHqB8tfQYQzYwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0V4fYr5hSqdF6NOgd9dFOK1ed1QjqNPOCz Rnbez0cGvqsTQEDSC99c2IX4ZmMCBiNBLv5VD/wZREfXq996yaDBnAT2eTs630Te pEu+1JN+TizJmPl8mRC3zMds7WDONTf5+Yn5KclNt6MWWubuja+AFYvshSkcF5kg GXTN3rlHLylo4CYqd7k+6WAhpdZP0+koKDMbw2MORU6WoklbpwTRiJb056YlzX0f 2qMWy4w1uMzEQG+ka95vuRL9XMU8GGPT1futEHKVxCOziSkITEcKCQ4z7deUIetk P/0V2tVhcrdsVSychFYeybRSmpAg8BS8wysfv6nfj+FCyeGrM4o= -----END CERTIFICATE-----Generated at Fri Jul 25 06:51:07 2025 by rpki-client