$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: 5WbRGzObfV/7tlRxhOcm8P/Q+fdwEA0EwqZwbIKuS/o= Subject key identifier: 90:D3:AA:D8:B7:70:47:AD:5F:AC:DD:14:86:47:A3:76:BC:71:CB:B2 Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 57F4747E810BEEBC8A39B188DCA16234D6368461 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 0162 Signing time: Sun 27 Jul 2025 19:40:51 +0000 Manifest this update: Sun 27 Jul 2025 19:35:51 +0000 Manifest next update: Thu 31 Jul 2025 03:54:51 +0000 Files and hashes: 1: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: un8w2Otjz0gBUzHXSeVM5ATQccSm2JnwqmcE8mBSRbU=) 2: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: DAHFV0c/aFM082VX0oHdmhTVlcTRSOxGfmPDNewRFNU=) 3: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 03:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f4:74:7e:81:0b:ee:bc:8a:39:b1:88:dc:a1:62:34:d6:36:84:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Jul 27 19:35:51 2025 GMT Not After : Jul 31 03:54:51 2025 GMT Subject: CN=90D3AAD8B77047AD5FACDD148647A376BC71CBB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:fe:ae:84:ee:05:b3:55:62:0b:63:02:e9: e6:12:8c:7d:77:6e:fe:7c:62:9e:90:79:bc:e1:0a: ee:a1:74:33:02:b8:65:08:3d:c0:1a:82:fc:62:a7: 60:fd:91:21:25:58:21:07:ed:ca:a2:9b:d3:5d:e5: 65:26:21:f1:95:e9:0f:af:2d:8b:19:c8:d5:57:77: 3b:8b:cb:1b:30:2c:7c:a7:25:d2:df:68:5e:e0:df: 55:53:29:12:b8:df:6c:a1:83:d5:08:26:8c:b9:6b: 3e:dc:80:7a:ed:e9:31:db:99:c4:fd:be:c7:80:a5: 8f:06:b8:32:a2:7f:21:58:a8:2e:d8:97:27:e5:5a: 55:8b:47:0b:4a:7e:a4:7e:c3:23:1d:20:96:61:9e: bb:55:75:f9:9e:70:e9:e1:a5:1f:c5:d7:bf:db:c7: 46:b7:f2:54:94:fc:a4:5b:87:f8:d7:32:32:96:9b: 09:9a:29:0b:5d:d0:22:0b:38:35:16:43:bd:b8:b2: 8c:1c:6d:22:26:75:82:34:37:1a:1f:77:11:04:c6: d3:ad:5b:61:ed:c3:f2:df:2e:c2:9e:6b:4a:5a:18: 66:e6:3d:e7:70:32:23:e6:34:3d:e7:eb:79:26:ab: 2c:e1:ee:1b:6d:67:31:f6:65:2d:b3:3f:b0:b0:10: 20:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D3:AA:D8:B7:70:47:AD:5F:AC:DD:14:86:47:A3:76:BC:71:CB:B2 X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:74:b2:f4:94:9d:98:9a:26:77:5e:2a:c6:10:9e:ca:46:42: 1b:3c:66:34:0d:85:fa:c7:66:9a:23:38:be:41:19:69:f6:04: 5d:16:41:48:85:5c:bb:a9:fe:bc:dd:68:d4:43:60:42:b3:4a: 8e:4f:57:1b:fa:c6:43:60:63:7e:80:60:95:ac:eb:3f:57:a4: 84:2c:ba:e0:03:15:e8:4f:64:69:0f:ca:bc:18:fa:d0:a2:30: 57:61:96:ea:2c:19:75:b2:29:2e:9e:1a:92:c7:ee:f1:1a:8e: ff:c4:4b:c6:c9:28:a2:1b:fc:c5:5e:66:47:3d:11:01:e4:c6: 96:18:c2:60:26:47:82:d8:e4:27:1e:a6:e9:3b:bf:4a:e6:56: a1:18:e8:64:07:18:0b:91:fd:8f:20:2a:42:71:3c:ba:a1:93: 47:76:ea:bb:65:36:44:ef:98:96:06:9e:64:6a:75:10:d7:34: 40:b2:bd:1c:02:c1:a1:25:e0:d8:b2:6c:1e:b9:03:da:aa:5c: 75:dc:bb:bc:0d:23:63:91:e8:d8:27:d1:17:90:65:cd:b0:b8: 49:06:e6:85:43:99:46:f8:49:bb:d7:6d:69:ae:c6:fb:b9:c7: 31:d8:73:f0:78:51:bc:06:f9:09:a8:2e:79:5c:33:ca:8d:18: fb:51:b5:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/R0foEL7ryKObGI3KFiNNY2hGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNTA3MjcxOTM1NTFaFw0yNTA3MzEwMzU0NTFaMDMxMTAvBgNV BAMTKDkwRDNBQUQ4Qjc3MDQ3QUQ1RkFDREQxNDg2NDdBMzc2QkM3MUNCQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3v6uhO4Fs1ViC2MC6eYSjH13 bv58Yp6QebzhCu6hdDMCuGUIPcAagvxip2D9kSElWCEH7cqim9Nd5WUmIfGV6Q+v LYsZyNVXdzuLyxswLHynJdLfaF7g31VTKRK432yhg9UIJoy5az7cgHrt6THbmcT9 vseApY8GuDKifyFYqC7YlyflWlWLRwtKfqR+wyMdIJZhnrtVdfmecOnhpR/F17/b x0a38lSU/KRbh/jXMjKWmwmaKQtd0CILODUWQ724sowcbSImdYI0NxofdxEExtOt W2Htw/LfLsKea0paGGbmPedwMiPmND3n63kmqyzh7httZzH2ZS2zP7CwECBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNOq2LdwR61frN0Uhkejdrxxy7IwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB0svSUnZiaJndeKsYQnspGQhs8ZjQNhfrH ZpojOL5BGWn2BF0WQUiFXLup/rzdaNRDYEKzSo5PVxv6xkNgY36AYJWs6z9XpIQs uuADFehPZGkPyrwY+tCiMFdhluosGXWyKS6eGpLH7vEajv/ES8bJKKIb/MVeZkc9 EQHkxpYYwmAmR4LY5Ccepuk7v0rmVqEY6GQHGAuR/Y8gKkJxPLqhk0d26rtlNkTv mJYGnmRqdRDXNECyvRwCwaEl4NiybB65A9qqXHXcu7wNI2OR6Ngn0ReQZc2wuEkG 5oVDmUb4SbvXbWmuxvu5xzHYc/B4UbwG+QmoLnlcM8qNGPtRtWM= -----END CERTIFICATE-----Generated at Tue Jul 29 07:36:51 2025 by rpki-client