$ rpki-client -vvf repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft File: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft (raw, json) Hash identifier: E6W5+1a/bp0swOSLzVXNieMSIaZfC3aS9S5jbK6mTXk= Subject key identifier: 26:D9:31:E7:00:62:8E:CC:6F:12:23:D7:9D:03:93:02:E1:4E:E4:5A Authority key identifier: D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD Certificate issuer: /CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Certificate serial: 3479D8D9EFDFA380B42EE3B4B900B8A64782C27E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft Manifest number: 04DD Signing time: Wed 04 Jun 2025 11:10:44 +0000 Manifest this update: Wed 04 Jun 2025 11:05:44 +0000 Manifest next update: Sat 07 Jun 2025 19:37:44 +0000 Files and hashes: 1: 3132342e34302e3234382e302f32312d3234203d3e203435333035.roa (hash: VtiYvCa1bjH6ANhQ1ZiFk2JkSbje5+lBzE3EKLizBTk=) 2: 3132342e34302e3235332e302f32342d3234203d3e20313432333237.roa (hash: OI9Dbbh3AxBZ/lUfEAmwLldVzXyZ0yA+CnQ3viXQgc8=) 3: 3132342e34302e3234382e302f32342d3234203d3e20313432333237.roa (hash: OT+Mk5WwssGJkg82hSQpE4gvwieaMEJQhhjdSn/cLTY=) 4: D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl (hash: Y7iACA26uRHQf328BQBXFa45mEUvw87XF/O19NtnzCk=) 5: 34332e3235322e3130342e302f32322d3234203d3e203435333035.roa (hash: PKIt6KT96DVg2otgI4L6Lbo6X1IxxuQSsidS83qyqJk=) 6: 323030313a6466303a61333a3a2f34382d3438203d3e203435333035.roa (hash: hlUw25q5eNWFZZoKL6XJ7rDIzMv9Ha/qCoX1PFqE3P4=) 7: 3230322e35362e3136342e302f32322d3234203d3e203435333035.roa (hash: Ks6djmjYrG5U+knwJmAadX8Vs5do9/GjSatcKmwDXgM=) 8: 3130332e32382e3131322e302f32322d3234203d3e203435333035.roa (hash: qTnm5CGA/RYtoBdoUqEMNKhCi+L95N248VCqrGjA3NM=) 9: 34332e3235322e3130342e302f32342d3234203d3e20313432333237.roa (hash: sOLICWbkOQCKZGJuOxKOtJraYeaZ/2+UOwySpa2U+Ms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:79:d8:d9:ef:df:a3:80:b4:2e:e3:b4:b9:00:b8:a6:47:82:c2:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD Validity Not Before: Jun 4 11:05:44 2025 GMT Not After : Jun 7 19:37:44 2025 GMT Subject: CN=26D931E700628ECC6F1223D79D039302E14EE45A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5a:4f:bb:e0:7a:80:0a:76:2d:40:82:e2:26: 97:a2:cc:8d:57:8a:db:2b:ac:b2:98:43:14:5c:c7: 7b:cb:65:87:11:df:45:6c:53:d0:0d:ff:2b:4e:46: 10:7b:1e:ac:27:b5:8f:dd:59:2e:d0:cd:78:79:d2: a4:76:ae:51:b8:f1:67:f3:81:bf:55:86:9c:86:0d: 4a:f0:42:02:12:a3:b6:94:c0:d3:75:56:43:ed:e6: 56:10:60:82:c2:b0:91:bf:6d:8c:11:de:5e:66:51: dc:10:cb:e9:84:07:4c:6c:9d:8e:47:cf:8a:0b:a5: 48:52:c0:cd:de:2b:63:62:cb:7e:bb:9a:02:20:32: fb:a7:a2:52:f6:d9:2b:01:eb:c5:46:08:8d:7d:53: 61:c4:dc:4e:76:b0:10:1c:77:2d:ee:ad:26:42:78: 49:80:73:b0:33:60:d9:39:74:ed:a1:a9:8a:00:5c: de:36:ae:68:bb:29:0e:dd:50:b3:98:ad:f3:fc:d1: 0f:62:3b:95:10:e5:1b:b5:bf:2e:36:3a:f5:6b:c8: 85:45:c4:80:c5:15:0c:48:3d:fd:ba:ce:23:78:c6: 07:61:17:14:63:50:d9:92:32:3c:c3:a4:20:b1:94: c2:4d:f9:0a:3e:cc:ee:09:1e:ec:a7:c3:16:5a:c6: af:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D9:31:E7:00:62:8E:CC:6F:12:23:D7:9D:03:93:02:E1:4E:E4:5A X509v3 Authority Key Identifier: keyid:D2:5A:04:A0:E4:E5:2F:F4:22:D9:D8:FB:85:7D:23:DC:61:42:E5:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d95c19c-3262-48c7-af02-37a835d0a779/0/D25A04A0E4E52FF422D9D8FB857D23DC6142E5FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:23:7d:21:47:16:4a:15:c9:ba:dc:47:0a:12:b6:fd:fd:3a: 51:da:f4:64:6b:6a:c5:6b:32:d3:a8:ac:71:26:e0:8f:60:49: 37:a7:ec:4f:2d:d8:80:95:8e:ae:e8:8e:76:89:00:65:10:8b: dc:51:d6:92:08:de:26:fa:9a:4f:90:0d:77:aa:21:b4:88:43: 7d:84:a6:f1:88:7d:73:39:2e:3b:22:e0:0f:94:f0:18:52:4e: eb:ea:3f:0b:14:52:86:3f:d5:a6:12:82:46:84:f8:4c:6b:49: 48:c9:70:29:53:40:58:31:c2:47:a7:fe:03:b8:c9:55:db:e8: d5:96:1e:d3:72:51:bd:0c:8a:29:6e:dd:24:81:d4:77:9e:46: c3:0b:ed:25:08:0c:0a:19:bb:2e:2c:56:71:28:6f:af:d5:39: 9e:19:c6:54:d8:c3:dd:cd:68:0a:c3:3b:0c:ea:d3:22:83:98: 46:c2:13:de:07:5a:f7:c5:84:15:7e:be:b4:c4:73:cc:5a:e5: 30:53:79:98:16:2f:55:47:8d:a1:68:0c:3a:ab:c1:c5:7f:44: 1e:6e:8e:90:40:7e:48:58:03:7a:52:f0:ff:b9:9b:32:43:6c: 7f:15:eb:32:7c:e4:94:a7:17:fa:79:25:25:df:8d:09:64:80: 45:a3:a4:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHnY2e/fo4C0LuO0uQC4pkeCwn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2 MTQyRTVGRDAeFw0yNTA2MDQxMTA1NDRaFw0yNTA2MDcxOTM3NDRaMDMxMTAvBgNV BAMTKDI2RDkzMUU3MDA2MjhFQ0M2RjEyMjNENzlEMDM5MzAyRTE0RUU0NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Wk+74HqACnYtQILiJpeizI1X itsrrLKYQxRcx3vLZYcR30VsU9AN/ytORhB7HqwntY/dWS7QzXh50qR2rlG48Wfz gb9VhpyGDUrwQgISo7aUwNN1VkPt5lYQYILCsJG/bYwR3l5mUdwQy+mEB0xsnY5H z4oLpUhSwM3eK2Niy367mgIgMvunolL22SsB68VGCI19U2HE3E52sBAcdy3urSZC eEmAc7AzYNk5dO2hqYoAXN42rmi7KQ7dULOYrfP80Q9iO5UQ5Ru1vy42OvVryIVF xIDFFQxIPf26ziN4xgdhFxRjUNmSMjzDpCCxlMJN+Qo+zO4JHuynwxZaxq9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJtkx5wBijsxvEiPXnQOTAuFO5FowHwYDVR0j BBgwFoAU0loEoOTlL/Qi2dj7hX0j3GFC5f0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDk1YzE5Yy0zMjYyLTQ4YzctYWYwMi0zN2E4MzVkMGE3NzkvMC9EMjVBMDRBMEU0 RTUyRkY0MjJEOUQ4RkI4NTdEMjNEQzYxNDJFNUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIzREM2MTQy RTVGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ5NWMxOWMtMzI2Mi00OGM3LWFm MDItMzdhODM1ZDBhNzc5LzAvRDI1QTA0QTBFNEU1MkZGNDIyRDlEOEZCODU3RDIz REM2MTQyRTVGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwjfSFHFkoVybrcRwoStv39OlHa9GRrasVr MtOorHEm4I9gSTen7E8t2ICVjq7ojnaJAGUQi9xR1pII3ib6mk+QDXeqIbSIQ32E pvGIfXM5Ljsi4A+U8BhSTuvqPwsUUoY/1aYSgkaE+ExrSUjJcClTQFgxwken/gO4 yVXb6NWWHtNyUb0Miilu3SSB1HeeRsML7SUIDAoZuy4sVnEob6/VOZ4ZxlTYw93N aArDOwzq0yKDmEbCE94HWvfFhBV+vrTEc8xa5TBTeZgWL1VHjaFoDDqrwcV/RB5u jpBAfkhYA3pS8P+5mzJDbH8V6zJ85JSnF/p5JSXfjQlkgEWjpJg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:38 2025 by rpki-client