$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft File: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json) Hash identifier: 1+BjUSQdzCNV20v2SmeijHFJVJbmLMnkY9nLp19cr0U= Subject key identifier: 65:98:93:58:FC:E1:D2:B9:8F:48:F7:FB:87:DD:42:2A:FE:9E:A2:4E Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 Certificate issuer: /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Certificate serial: 25E36ED856786293056BC6F4C099EBB8BC87B4FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft Manifest number: 010E Signing time: Sun 01 Jun 2025 23:01:40 +0000 Manifest this update: Sun 01 Jun 2025 22:56:40 +0000 Manifest next update: Thu 05 Jun 2025 06:30:40 +0000 Files and hashes: 1: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: goBdU2IBnHy9wcOLLQQ/OCQZydl32zY5z0yZl8PUzN4=) 2: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: F+FsTLDzxaIgQncd7+5c9qjB8jMByc7sEP71OCSnpjU=) 3: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: 18Hkz/XR+bc2+4hLanlNPrrmjy5COqEUY7Uy7tOHT7Q=) 4: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: ORKr4ha8P6tv9X5zA4ht6mjFvslVRbnM+gzBN7aD/Sw=) 5: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: smWnJtZ/R67U2ULFGK7Jk8VcGNSJ3hQ7lt79pWbaLFY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e3:6e:d8:56:78:62:93:05:6b:c6:f4:c0:99:eb:b8:bc:87:b4:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Validity Not Before: Jun 1 22:56:40 2025 GMT Not After : Jun 5 06:30:40 2025 GMT Subject: CN=65989358FCE1D2B98F48F7FB87DD422AFE9EA24E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:12:01:36:23:1c:5a:9d:48:96:95:35:cf:21: de:e0:9c:45:20:2b:ab:f4:61:57:d8:ef:90:30:60: 0e:1f:7f:1d:e1:d6:5c:38:0d:6d:9f:e1:a8:94:5f: c4:90:5a:df:82:dc:fc:9d:4f:87:b3:68:a0:9f:9f: 78:e8:8e:ce:ed:98:4b:ad:bd:3c:c3:b6:f9:7e:24: c5:24:82:af:4e:78:c3:87:7d:7c:b9:60:da:0a:0d: 85:70:1a:81:c9:64:d6:51:02:46:38:db:fb:72:44: 5d:31:29:99:94:82:11:10:c3:1d:95:e0:7f:d2:9c: 0d:41:45:5e:6d:91:bd:a4:19:75:1e:4f:9b:86:4b: 75:e2:35:dd:15:df:d4:f2:fe:54:c1:23:e1:d2:18: de:f1:ca:e8:63:3b:6e:49:9c:d7:5b:ab:71:32:ae: d9:8d:fd:ed:97:3b:7e:d4:4c:d6:20:74:31:22:f9: 95:dd:57:86:3f:b9:26:f4:71:ef:40:8b:c3:e6:bc: ab:31:0b:cc:3b:04:28:42:34:a4:3f:d9:73:cb:2e: 73:9a:44:a8:95:e0:ad:c7:9e:05:bd:f7:50:53:52: 5d:d9:7b:03:b5:0a:a8:49:6a:01:96:7c:59:0e:dd: 50:b5:82:30:f8:d6:c6:9d:14:d8:8a:d9:2c:99:5f: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:98:93:58:FC:E1:D2:B9:8F:48:F7:FB:87:DD:42:2A:FE:9E:A2:4E X509v3 Authority Key Identifier: keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:ce:a5:c4:40:27:b3:1a:6d:76:4f:71:2e:69:dc:7c:49:2f: 26:7e:c5:83:d7:31:d0:d4:ea:6d:02:1c:9c:89:4c:87:5d:fd: a2:12:90:55:f1:73:93:0a:eb:6b:fc:d0:92:9f:36:d3:11:27: 13:b5:d9:d0:e9:0a:df:55:b3:c8:c4:37:d3:e7:cb:59:85:91: d4:f2:95:40:ce:df:61:ce:05:f4:3b:e6:87:d5:2d:c1:2c:71: 0c:1e:cf:4a:58:cd:62:cf:5f:8a:ee:2c:83:43:be:78:40:bb: 69:00:e9:1d:a2:0b:61:02:1c:15:e0:80:91:d8:de:ec:e8:cb: 0c:d0:06:d6:72:67:35:ab:75:e9:ed:5b:5f:55:13:e1:00:7c: da:76:2c:e1:68:4f:1d:e0:6e:31:aa:c7:d2:70:3b:d7:35:ac: 60:1e:31:3d:72:ae:b0:15:c9:40:2d:70:e6:80:58:62:30:98: 35:47:cf:54:1a:89:60:34:2a:03:6c:de:f0:71:8f:0b:8d:91: df:a5:8a:33:d8:a1:54:bb:3e:e8:2e:ad:57:d2:c8:a9:66:87: 24:a5:4f:56:fd:2d:59:93:a2:86:70:31:60:b7:4d:af:d0:36: 67:58:4a:98:a8:c3:51:ef:c1:ca:ba:52:7b:79:f2:83:ff:51: 9d:ac:b5:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJeNu2FZ4YpMFa8b0wJnruLyHtP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2 MEU3MzQ5OTAeFw0yNTA2MDEyMjU2NDBaFw0yNTA2MDUwNjMwNDBaMDMxMTAvBgNV BAMTKDY1OTg5MzU4RkNFMUQyQjk4RjQ4RjdGQjg3REQ0MjJBRkU5RUEyNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEgE2IxxanUiWlTXPId7gnEUg K6v0YVfY75AwYA4ffx3h1lw4DW2f4aiUX8SQWt+C3PydT4ezaKCfn3jojs7tmEut vTzDtvl+JMUkgq9OeMOHfXy5YNoKDYVwGoHJZNZRAkY42/tyRF0xKZmUghEQwx2V 4H/SnA1BRV5tkb2kGXUeT5uGS3XiNd0V39Ty/lTBI+HSGN7xyuhjO25JnNdbq3Ey rtmN/e2XO37UTNYgdDEi+ZXdV4Y/uSb0ce9Ai8PmvKsxC8w7BChCNKQ/2XPLLnOa RKiV4K3HngW991BTUl3ZewO1CqhJagGWfFkO3VC1gjD41sadFNiK2SyZX0n3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZZiTWPzh0rmPSPf7h91CKv6eok4wHwYDVR0j BBgwFoAUeCWpww1a6kFEdA6bEqPAvGDnNJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDAwYjBjMi03ZWZkLTQyNzgtOThlNC1kNGY3YzI3M2VlYzIvMC83ODI1QTlDMzBE NUFFQTQxNDQ3NDBFOUIxMkEzQzBCQzYwRTczNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2MEU3 MzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0Mw QkM2MEU3MzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDOpcRAJ7MabXZPcS5p3HxJLyZ+xYPXMdDU 6m0CHJyJTIdd/aISkFXxc5MK62v80JKfNtMRJxO12dDpCt9Vs8jEN9Pny1mFkdTy lUDO32HOBfQ75ofVLcEscQwez0pYzWLPX4ruLINDvnhAu2kA6R2iC2ECHBXggJHY 3uzoywzQBtZyZzWrdentW19VE+EAfNp2LOFoTx3gbjGqx9JwO9c1rGAeMT1yrrAV yUAtcOaAWGIwmDVHz1QaiWA0KgNs3vBxjwuNkd+lijPYoVS7PugurVfSyKlmhySl T1b9LVmTooZwMWC3Ta/QNmdYSpiow1Hvwcq6Unt58oP/UZ2stdM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:38 2025 by rpki-client