$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft File: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft (raw, json) Hash identifier: vwccWd+3eLBkCVbi6uxJJQiuLLb5Y89JW9Y4XxiQaeU= Subject key identifier: 92:46:73:88:51:72:AC:FC:15:33:67:CA:B4:81:58:00:AC:9F:79:37 Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Certificate serial: 1C8E9C1E9E62FBA908958CBD957CB21C8D14F19D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft Manifest number: 0506 Signing time: Sat 06 Sep 2025 00:40:44 +0000 Manifest this update: Sat 06 Sep 2025 00:35:44 +0000 Manifest next update: Tue 09 Sep 2025 04:30:44 +0000 Files and hashes: 1: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: qTnm5CGA/RYtoBdoUqEMNKhCi+L95N248VCqrGjA3NM=) 2: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: sOLICWbkOQCKZGJuOxKOtJraYeaZ/2+UOwySpa2U+Ms=) 3: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: Ks6djmjYrG5U+knwJmAadX8Vs5do9/GjSatcKmwDXgM=) 4: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: VtiYvCa1bjH6ANhQ1ZiFk2JkSbje5+lBzE3EKLizBTk=) 5: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: PKIt6KT96DVg2otgI4L6Lbo6X1IxxuQSsidS83qyqJk=) 6: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: OT+Mk5WwssGJkg82hSQpE4gvwieaMEJQhhjdSn/cLTY=) 7: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: hlUw25q5eNWFZZoKL6XJ7rDIzMv9Ha/qCoX1PFqE3P4=) 8: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: OI9Dbbh3AxBZ/lUfEAmwLldVzXyZ0yA+CnQ3viXQgc8=) 9: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl (hash: gJ934dsQGiIVUDMUz9FO/BvhcPURO9IkpU6ZwSD+g5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 04:30:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:8e:9c:1e:9e:62:fb:a9:08:95:8c:bd:95:7c:b2:1c:8d:14:f1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Validity Not Before: Sep 6 00:35:44 2025 GMT Not After : Sep 9 04:30:44 2025 GMT Subject: CN=924673885172ACFC153367CAB4815800AC9F7937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:20:43:88:8a:58:ab:5a:f6:00:42:97:65: fd:ae:f2:c1:26:ff:18:38:53:82:e1:08:64:ae:56: a4:45:85:50:a4:11:1c:9b:f8:48:04:e9:f3:8d:44: 0e:2e:a6:5c:6f:ef:1e:a3:93:61:15:49:c5:59:16: 8f:1c:b9:9b:a3:b5:61:ce:ef:f4:61:03:1c:c3:2f: 4a:d7:2d:37:74:e1:70:23:62:8c:80:f8:c0:d5:0e: e9:71:09:2b:53:70:79:18:18:98:e0:8d:8c:37:b0: 86:d0:d1:c2:b0:26:db:6d:5d:3a:16:3c:95:9f:07: a5:04:0e:1d:77:fe:84:07:f9:08:9e:ef:9e:57:d2: be:eb:1d:f9:49:68:c8:a9:02:fa:58:ca:99:6f:cb: 3e:a6:cb:a2:fc:62:44:1a:c3:6f:bd:f2:48:6a:06: 42:d0:a7:27:c3:b4:2e:f3:55:d9:91:c3:6d:ec:f7: 05:47:52:90:3c:96:fe:56:18:38:fc:07:a8:23:1b: b4:c5:72:d4:63:f1:0d:68:e9:22:1b:58:e7:9e:b4: 6d:f0:ed:a5:db:9f:df:37:40:85:19:e0:27:9d:d0: e0:72:c9:45:c6:61:65:76:eb:27:a9:18:5a:e5:2d: 61:3b:cc:6a:77:b5:34:f6:3d:27:16:03:03:f8:67: 62:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:46:73:88:51:72:AC:FC:15:33:67:CA:B4:81:58:00:AC:9F:79:37 X509v3 Authority Key Identifier: keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e4:d5:2f:79:45:2c:a7:4c:a5:0e:41:de:23:ee:1c:7e:c2: 50:b1:7b:a5:79:5e:7b:6f:3f:74:2d:3a:df:15:eb:ee:f7:67: 81:9a:23:a1:6a:45:b9:bf:3a:48:93:f9:09:84:6f:fd:b4:a0: 8c:20:79:d4:57:8d:07:dc:8a:d6:b8:72:32:2c:a9:0c:52:8f: bb:96:2b:48:cf:65:c8:62:c1:c2:76:fb:51:76:5e:0a:4d:49: 81:65:43:7f:6b:f6:f2:a4:70:39:4f:f0:a9:f2:df:ab:ff:c5: 91:cd:ff:56:59:b1:20:4e:c5:e2:8d:b7:4b:fc:99:84:77:ce: 5f:b4:3b:66:e2:f5:1a:22:bf:e0:8b:88:eb:50:b5:fb:1c:47: 4b:f6:9c:f2:d5:bb:5a:c5:59:cf:63:ae:48:b7:74:5a:20:5d: 96:03:65:4c:eb:2a:ee:66:85:a0:0d:98:99:88:04:1b:4e:4c: 6d:58:7d:ac:b0:71:3d:54:71:5c:0c:c3:e3:ec:c1:4c:59:fa: 6c:8f:ef:a1:7d:b4:63:3a:31:bd:5b:5f:eb:e6:82:1d:fc:ea: ef:ef:84:18:40:95:90:61:de:30:32:6c:58:5c:2d:51:62:8a: 37:07:83:56:de:46:8a:d0:5c:d8:cf:49:9e:e8:aa:db:d0:aa: 67:61:44:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHI6cHp5i+6kIlYy9lXyyHI0U8Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2 MTQyRTVGRDAeFw0yNTA5MDYwMDM1NDRaFw0yNTA5MDkwNDMwNDRaMDMxMTAvBgNV BAMTKDkyNDY3Mzg4NTE3MkFDRkMxNTMzNjdDQUI0ODE1ODAwQUM5Rjc5MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ySBDiIpYq1r2AEKXZf2u8sEm /xg4U4LhCGSuVqRFhVCkERyb+EgE6fONRA4uplxv7x6jk2EVScVZFo8cuZujtWHO 7/RhAxzDL0rXLTd04XAjYoyA+MDVDulxCStTcHkYGJjgjYw3sIbQ0cKwJtttXToW PJWfB6UEDh13/oQH+Qie755X0r7rHflJaMipAvpYyplvyz6my6L8YkQaw2+98khq BkLQpyfDtC7zVdmRw23s9wVHUpA8lv5WGDj8B6gjG7TFctRj8Q1o6SIbWOeetG3w 7aXbn983QIUZ4Ced0OByyUXGYWV26yepGFrlLWE7zGp3tTT2PScWAwP4Z2ITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkkZziFFyrPwVM2fKtIFYAKyfeTcwHwYDVR0j BBgwFoAU0loEoOTlL/Qi2dj7hX0j3GFC5f0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMC9EMjVBMDRBMEU0 RTUyRkY0MjJEOUQ4RkI4NTdEMjNEQzYxNDJFNUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2MTQy RTVGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIz REM2MTQyRTVGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/k1S95RSynTKUOQd4j7hx+wlCxe6V5Xntv P3QtOt8V6+73Z4GaI6FqRbm/OkiT+QmEb/20oIwgedRXjQfcita4cjIsqQxSj7uW K0jPZchiwcJ2+1F2XgpNSYFlQ39r9vKkcDlP8Kny36v/xZHN/1ZZsSBOxeKNt0v8 mYR3zl+0O2bi9Roiv+CLiOtQtfscR0v2nPLVu1rFWc9jrki3dFogXZYDZUzrKu5m haANmJmIBBtOTG1YfaywcT1UcVwMw+PswUxZ+myP76F9tGM6Mb1bX+vmgh386u/v hBhAlZBh3jAybFhcLVFiijcHg1beRorQXNjPSZ7oqtvQqmdhRII= -----END CERTIFICATE-----Generated at Sun Sep 7 03:38:14 2025 by rpki-client