$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: rN4MJSEMhreIliKEU2fvelnyUZLCvjei/vTBSbyKim8= Subject key identifier: 38:F3:58:38:16:49:3E:84:94:CD:6D:C5:97:93:23:14:BD:6B:96:70 Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 11DC9E2C0D07297783E1E6542822CC579C64A318 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 02DA Signing time: Thu 05 Jun 2025 12:50:43 +0000 Manifest this update: Thu 05 Jun 2025 12:45:43 +0000 Manifest next update: Sun 08 Jun 2025 17:16:43 +0000 Files and hashes: 1: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: MWqeWjmTixAOn+Gc9tFKycHUfhr7BF4hgDw5O4FK2PY=) 2: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: wjwFH+WFZA843c4I0g16RCfzWcsc3g5yVNGfKgtG75A=) 3: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 5QR0rWF2IYw3MMT+ABenqub20374tAd3/MqhQ2MqKAw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 17:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:dc:9e:2c:0d:07:29:77:83:e1:e6:54:28:22:cc:57:9c:64:a3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Jun 5 12:45:43 2025 GMT Not After : Jun 8 17:16:43 2025 GMT Subject: CN=38F3583816493E8494CD6DC597932314BD6B9670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:57:d5:ae:e9:ec:9c:e6:9d:cb:12:40:69: 90:aa:ca:b3:55:39:ac:34:2b:bc:db:a3:ce:3e:b8: 59:ee:68:50:58:ed:32:a8:f7:fd:43:f2:55:61:24: 09:a5:99:67:4d:07:02:5c:7d:94:47:25:e1:a0:67: 5d:4d:76:ef:51:b4:b7:22:7f:ff:87:e5:8f:4b:38: 10:ca:e9:6e:0a:bb:97:34:4c:b5:1b:22:87:cb:30: 24:b2:05:e7:eb:4b:85:0a:e1:28:1e:12:23:b5:51: dc:fd:ec:97:60:c6:fd:31:27:d2:1c:d3:c0:58:b3: 5d:6c:77:ef:4e:b7:60:cc:07:ff:25:2f:79:d3:75: fe:77:26:5b:1a:aa:86:19:08:64:1a:55:77:59:f0: c6:e4:f1:51:ea:b3:76:89:b4:7d:4a:99:4b:6e:f8: f8:a2:a0:85:95:89:bb:ef:cd:73:39:ed:25:0c:e7: 48:c0:aa:5d:12:c2:7a:f0:0e:1b:a1:90:a1:31:a1: 13:3b:fc:33:67:c7:aa:cc:b3:7e:c4:33:b2:99:80: 53:d0:ad:14:d5:a9:ab:cb:1e:b7:01:fa:98:08:45: cc:fc:4c:31:77:58:96:da:cc:0c:ac:13:d5:6e:b3: bc:4a:17:46:64:41:c1:0a:17:84:0d:b9:85:b9:47: fd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:F3:58:38:16:49:3E:84:94:CD:6D:C5:97:93:23:14:BD:6B:96:70 X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:7f:7f:69:31:b1:6e:b4:95:a7:c0:f4:33:19:57:e4:e5:d5: 55:87:ef:b7:8b:62:83:97:06:a6:63:bf:df:5b:3f:77:54:e2: d9:83:86:51:c9:b2:22:20:1d:f8:ea:54:1d:ca:f0:8a:e4:8e: af:67:f9:19:33:03:c7:4f:3c:f5:8f:f4:7e:bf:05:b6:7f:02: 94:00:64:ab:19:cb:b9:b4:b3:bc:1e:5c:57:6f:e3:82:51:3b: 65:9f:7d:d6:7a:50:71:66:c1:4c:68:50:30:98:46:3d:ad:30: f5:02:70:01:17:93:6c:a8:06:2e:7b:12:41:14:39:7d:f0:ad: 10:c0:ea:8f:f0:37:e3:ec:0c:c8:ea:e4:bc:67:02:5f:de:3d: 4c:49:ad:e8:d4:71:f6:4b:2b:2c:de:77:3c:a0:b9:71:3b:7c: 65:47:ad:75:c2:58:6f:d0:88:27:35:bd:07:f2:3b:61:f8:98: a3:55:bc:77:5a:83:56:79:69:43:60:96:82:37:90:cb:2c:b3: 57:17:65:b7:60:37:9a:8b:93:5d:7d:65:a5:4e:12:00:3a:cc: 3c:df:11:2f:12:84:cf:fb:62:f1:36:13:23:c8:16:f3:96:83: ec:f3:41:c8:0d:a6:21:da:2c:f6:c9:1f:b7:5f:e5:ff:86:65: d6:82:af:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdyeLA0HKXeD4eZUKCLMV5xkoxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNTA2MDUxMjQ1NDNaFw0yNTA2MDgxNzE2NDNaMDMxMTAvBgNV BAMTKDM4RjM1ODM4MTY0OTNFODQ5NENENkRDNTk3OTMyMzE0QkQ2Qjk2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOVfVrunsnOadyxJAaZCqyrNV Oaw0K7zbo84+uFnuaFBY7TKo9/1D8lVhJAmlmWdNBwJcfZRHJeGgZ11Ndu9RtLci f/+H5Y9LOBDK6W4Ku5c0TLUbIofLMCSyBefrS4UK4SgeEiO1Udz97Jdgxv0xJ9Ic 08BYs11sd+9Ot2DMB/8lL3nTdf53JlsaqoYZCGQaVXdZ8Mbk8VHqs3aJtH1KmUtu +PiioIWVibvvzXM57SUM50jAql0SwnrwDhuhkKExoRM7/DNnx6rMs37EM7KZgFPQ rRTVqavLHrcB+pgIRcz8TDF3WJbazAysE9Vus7xKF0ZkQcEKF4QNuYW5R/11AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOPNYOBZJPoSUzW3Fl5MjFL1rlnAwHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1/f2kxsW60lafA9DMZV+Tl1VWH77eLYoOX BqZjv99bP3dU4tmDhlHJsiIgHfjqVB3K8Irkjq9n+RkzA8dPPPWP9H6/BbZ/ApQA ZKsZy7m0s7weXFdv44JRO2WffdZ6UHFmwUxoUDCYRj2tMPUCcAEXk2yoBi57EkEU OX3wrRDA6o/wN+PsDMjq5LxnAl/ePUxJrejUcfZLKyzedzyguXE7fGVHrXXCWG/Q iCc1vQfyO2H4mKNVvHdag1Z5aUNgloI3kMsss1cXZbdgN5qLk119ZaVOEgA6zDzf ES8ShM/7YvE2EyPIFvOWg+zzQcgNpiHaLPbJH7df5f+GZdaCr50= -----END CERTIFICATE-----Generated at Thu Jun 5 18:28:37 2025 by rpki-client