$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: 1Wi6nbcEdnZfrnoX/0wjVurAwPKb3xufcuCT3yoEGTo= Subject key identifier: 0D:58:EF:EA:70:18:FE:5C:D9:4E:FB:90:09:C6:59:D8:CE:17:AC:4E Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 32894DACD6956341CBC267CED15604B36C72B430 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 02BF Signing time: Fri 04 Apr 2025 11:40:42 +0000 Manifest this update: Fri 04 Apr 2025 11:35:42 +0000 Manifest next update: Mon 07 Apr 2025 19:12:42 +0000 Files and hashes: 1: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: Ipxc1lArcNrJf3qSVQ7PC5k2dPMYDgym2yDhj/egJMY=) 2: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: 5QR0rWF2IYw3MMT+ABenqub20374tAd3/MqhQ2MqKAw=) 3: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: MWqeWjmTixAOn+Gc9tFKycHUfhr7BF4hgDw5O4FK2PY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:89:4d:ac:d6:95:63:41:cb:c2:67:ce:d1:56:04:b3:6c:72:b4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Apr 4 11:35:42 2025 GMT Not After : Apr 7 19:12:42 2025 GMT Subject: CN=0D58EFEA7018FE5CD94EFB9009C659D8CE17AC4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:ec:09:39:84:51:48:91:93:8a:7c:f2:e9: fa:fa:a4:51:11:71:eb:a9:db:be:77:64:f3:fe:bd: 9d:52:20:00:a8:f6:d7:a3:5c:36:06:b4:7e:21:ef: 09:58:55:0d:db:ce:92:ef:c1:30:a9:df:59:89:79: dc:aa:45:35:91:c6:27:42:47:0a:52:f7:e9:ea:2b: 63:7f:50:db:13:e9:fe:ad:2c:28:d1:05:0b:15:43: 6f:1e:b8:bc:4c:d1:f5:e0:16:1a:55:dd:23:5b:ca: f6:19:bd:ec:63:5a:84:53:42:82:cf:0c:dd:e7:03: bc:2d:34:68:ae:27:4a:f7:b2:86:91:c8:c6:a6:ce: 8d:9f:51:76:56:21:ba:92:f0:09:b1:7f:67:83:af: a6:6b:70:7c:d9:4b:89:6a:bb:f1:09:93:d7:97:65: 53:ec:b2:e5:82:7c:a9:da:3e:81:dc:68:20:98:72: 26:f8:b4:70:8d:47:ce:9b:17:2a:25:77:ef:c4:06: 2d:9a:1e:d9:74:f1:38:71:8a:d7:3d:65:ed:cd:17: 86:12:fd:3c:1d:86:7c:1d:40:7b:95:7a:6e:fb:01: dd:39:6d:b1:5d:22:f7:64:c7:f6:f8:64:be:7a:ef: b7:ea:02:2c:3b:de:7b:cf:21:1e:50:2e:e4:c7:29: b4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:58:EF:EA:70:18:FE:5C:D9:4E:FB:90:09:C6:59:D8:CE:17:AC:4E X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:93:fe:15:0f:02:44:e5:2f:dd:52:73:08:76:44:42:14:cb: f5:62:a7:4d:4b:e7:f4:1a:65:73:9b:f7:10:c9:20:b2:1e:f7: d9:8d:9d:1e:f7:0a:da:63:a0:a4:8b:de:7e:11:92:bb:88:2d: d3:28:48:b0:35:30:8e:81:c4:84:f6:e4:c7:0d:22:9e:e1:b6: 03:68:c2:e9:08:72:b7:f5:43:c6:8a:8a:3d:6f:0f:23:8c:de: 05:fa:7f:c9:87:c5:96:fe:e4:78:17:13:75:c1:54:39:67:36: ed:b1:68:02:7e:eb:62:1e:2b:a6:9b:b5:d4:b0:c3:76:ad:43: 07:fb:73:82:ec:3e:fe:22:4a:ba:0c:3a:70:5d:2f:8d:11:bc: 1c:9d:b8:65:2f:91:d3:03:b6:3c:ab:88:d4:cc:0f:f5:9a:1d: 44:f0:d0:29:12:24:09:01:5b:6e:8b:4b:ea:5b:0b:83:1d:e5: be:56:34:8b:94:60:6c:0c:bc:77:0e:45:b5:0a:d8:60:7c:7d: b2:d5:54:19:e2:a2:bc:f5:46:92:5c:c8:c3:3b:b8:b4:f8:f9: a7:45:44:6f:3e:db:2b:07:a0:b7:ac:50:c8:bb:69:2b:7f:d6: 93:3b:fc:75:85:53:00:18:f2:10:2d:9d:52:0b:d7:4b:84:d5: 8a:1e:82:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMolNrNaVY0HLwmfO0VYEs2xytDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNTA0MDQxMTM1NDJaFw0yNTA0MDcxOTEyNDJaMDMxMTAvBgNV BAMTKDBENThFRkVBNzAxOEZFNUNEOTRFRkI5MDA5QzY1OUQ4Q0UxN0FDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1E+wJOYRRSJGTinzy6fr6pFER ceup2753ZPP+vZ1SIACo9tejXDYGtH4h7wlYVQ3bzpLvwTCp31mJedyqRTWRxidC RwpS9+nqK2N/UNsT6f6tLCjRBQsVQ28euLxM0fXgFhpV3SNbyvYZvexjWoRTQoLP DN3nA7wtNGiuJ0r3soaRyMamzo2fUXZWIbqS8Amxf2eDr6ZrcHzZS4lqu/EJk9eX ZVPssuWCfKnaPoHcaCCYcib4tHCNR86bFyold+/EBi2aHtl08Thxitc9Ze3NF4YS /TwdhnwdQHuVem77Ad05bbFdIvdkx/b4ZL5677fqAiw73nvPIR5QLuTHKbSZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVjv6nAY/lzZTvuQCcZZ2M4XrE4wHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGST/hUPAkTlL91Scwh2REIUy/Vip01L5/Qa ZXOb9xDJILIe99mNnR73CtpjoKSL3n4RkruILdMoSLA1MI6BxIT25McNIp7htgNo wukIcrf1Q8aKij1vDyOM3gX6f8mHxZb+5HgXE3XBVDlnNu2xaAJ+62IeK6abtdSw w3atQwf7c4LsPv4iSroMOnBdL40RvByduGUvkdMDtjyriNTMD/WaHUTw0CkSJAkB W26LS+pbC4Md5b5WNIuUYGwMvHcORbUK2GB8fbLVVBniorz1RpJcyMM7uLT4+adF RG8+2ysHoLesUMi7aSt/1pM7/HWFUwAY8hAtnVIL10uE1Yoegs4= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:52 2025 by rpki-client