$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: QMxux6uvMKbkVnzwjAAgKxBtD2VoVbxMNRC7uSO5PTg= Subject key identifier: 4D:12:84:D0:63:7A:43:F4:F8:DC:9E:A4:30:2E:9D:E8:E7:99:36:23 Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 3E37EEC21759796F00CAB0838DE493713CE76BC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 0502 Signing time: Thu 04 Sep 2025 09:51:10 +0000 Manifest this update: Thu 04 Sep 2025 09:46:10 +0000 Manifest next update: Sun 07 Sep 2025 13:21:10 +0000 Files and hashes: 1: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: T8BjD8YbUI/JdAdlaYuGykx720Ur9ZCHE3G4p9b1YbQ=) 2: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) 3: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: RZy6TYvU/OnVoAwKApvUrLMBSgr2tYCN+5iMb33gzqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:37:ee:c2:17:59:79:6f:00:ca:b0:83:8d:e4:93:71:3c:e7:6b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Sep 4 09:46:10 2025 GMT Not After : Sep 7 13:21:10 2025 GMT Subject: CN=4D1284D0637A43F4F8DC9EA4302E9DE8E7993623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:fa:68:b2:77:b2:b3:11:58:64:d7:ea:b2: a5:4d:25:52:75:23:6c:93:c8:90:f5:30:9f:3e:6b: 04:fd:44:d4:7c:e0:33:64:34:06:b9:c1:fb:60:ab: b4:64:13:e3:3f:80:40:dd:19:0f:dc:6e:21:cf:a8: 07:02:95:cd:6c:e1:12:a1:1f:cc:7b:1e:02:b5:7c: e9:65:de:ad:a5:f1:df:a4:b4:3b:ae:71:2d:e3:db: 44:f3:1f:2f:96:79:43:ff:40:dd:ee:e1:b1:5a:47: 81:3e:4a:03:2d:1e:9d:82:5b:a6:56:83:89:02:a1: 9f:b7:05:a0:9f:38:bb:af:31:20:ee:93:f9:c6:2f: a0:36:7b:1a:df:cd:96:87:86:97:c2:f0:45:88:71: 3d:27:47:e5:87:35:66:3b:65:c0:77:a2:f9:3c:4e: c1:3c:37:07:bb:a0:b9:8d:97:c9:53:95:65:30:a8: 60:8e:0f:f5:12:12:6b:7a:55:ee:9b:70:c7:55:69: 5f:81:26:46:2f:b5:c9:f9:bd:83:29:74:db:8b:79: e1:9f:9c:f5:21:4b:52:fe:f3:9f:78:c4:1c:d5:a1: 55:b5:82:a6:d0:7b:4b:ab:4a:50:11:cd:cf:6e:88: 9e:58:b0:a7:ae:f0:8f:e6:cc:95:6a:d1:8d:32:c0: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:12:84:D0:63:7A:43:F4:F8:DC:9E:A4:30:2E:9D:E8:E7:99:36:23 X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:49:56:91:82:bc:f2:5e:06:a3:87:2a:3d:f9:50:43:37:e3: ef:9c:54:a4:40:16:39:e1:67:e2:cf:fb:d3:2e:39:bb:b8:1a: dc:04:d7:c5:5c:ac:c1:00:69:59:96:31:55:e9:b5:51:3a:42: 9b:93:c8:39:96:c3:ad:8f:9e:13:7d:d6:69:8e:9e:34:e4:c1: 31:e9:fa:0e:ab:00:68:11:ed:ea:94:d0:cc:25:51:da:71:d6: b4:b3:0d:e5:a0:5a:40:eb:ce:76:59:fa:ae:e1:0d:f2:43:ca: 48:b8:ce:d5:5f:d5:be:85:0b:85:fa:f1:67:e5:b7:2a:90:35: cb:fe:7a:f9:8b:f4:79:e6:09:2a:c7:75:d3:4d:95:90:f2:d4: ad:df:46:76:a3:52:70:d7:bf:e7:fa:c0:71:47:39:3c:bd:02: a1:84:09:d9:36:df:93:d6:47:9f:8c:b2:9e:4f:bb:30:dd:db: b2:8b:81:5a:eb:f6:ef:bf:48:42:f4:48:1c:72:5d:71:62:08: da:bd:e6:10:b5:f3:ac:4d:51:15:0b:e8:42:0c:f8:8f:ba:49: 63:7e:78:0e:50:ca:6e:2f:79:8e:cf:08:ea:89:12:ad:5b:80: 4a:e3:c6:5e:c7:8d:8b:af:75:a2:ed:ef:34:b0:70:06:e4:fd: d5:ab:1b:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPjfuwhdZeW8AyrCDjeSTcTzna8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNTA5MDQwOTQ2MTBaFw0yNTA5MDcxMzIxMTBaMDMxMTAvBgNV BAMTKDREMTI4NEQwNjM3QTQzRjRGOERDOUVBNDMwMkU5REU4RTc5OTM2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfv/posneysxFYZNfqsqVNJVJ1 I2yTyJD1MJ8+awT9RNR84DNkNAa5wftgq7RkE+M/gEDdGQ/cbiHPqAcClc1s4RKh H8x7HgK1fOll3q2l8d+ktDuucS3j20TzHy+WeUP/QN3u4bFaR4E+SgMtHp2CW6ZW g4kCoZ+3BaCfOLuvMSDuk/nGL6A2exrfzZaHhpfC8EWIcT0nR+WHNWY7ZcB3ovk8 TsE8Nwe7oLmNl8lTlWUwqGCOD/USEmt6Ve6bcMdVaV+BJkYvtcn5vYMpdNuLeeGf nPUhS1L+8594xBzVoVW1gqbQe0urSlARzc9uiJ5YsKeu8I/mzJVq0Y0ywEjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTRKE0GN6Q/T43J6kMC6d6OeZNiMwHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFJVpGCvPJeBqOHKj35UEM34++cVKRAFjnh Z+LP+9MuObu4GtwE18VcrMEAaVmWMVXptVE6QpuTyDmWw62PnhN91mmOnjTkwTHp +g6rAGgR7eqU0MwlUdpx1rSzDeWgWkDrznZZ+q7hDfJDyki4ztVf1b6FC4X68Wfl tyqQNcv+evmL9HnmCSrHddNNlZDy1K3fRnajUnDXv+f6wHFHOTy9AqGECdk235PW R5+Msp5PuzDd27KLgVrr9u+/SEL0SBxyXXFiCNq95hC186xNURUL6EIM+I+6SWN+ eA5Qym4veY7PCOqJEq1bgErjxl7HjYuvdaLt7zSwcAbk/dWrGwI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:22 2025 by rpki-client