$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: BTXhyoM1lj889Kr8cmqQvAnXOqumZUJgTwx/7tOWMQg= Subject key identifier: 6D:AF:85:5A:95:37:9C:4A:0B:74:C1:98:AF:1C:3B:F4:CE:1D:7D:78 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 4BB220BEE1DD4ABF28FFFE4F9CDDD4503E8B7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 02A5 Signing time: Tue 03 Jun 2025 04:03:53 +0000 Manifest this update: Tue 03 Jun 2025 03:58:53 +0000 Manifest next update: Fri 06 Jun 2025 06:13:53 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: mIROvhV/B52jTv+b7xbtzNIsRy0qMHCKGHbEvF+jS6o=) 2: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: 8X7MnhcrGXRrLaiC6p6nb/f9+Sxh0EM3kk42oSlJDeM=) 3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: 44lq+bVMdK58Jb4+S7Y7PVR+qnC8KrayRSD0NZFLq1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 06:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b2:20:be:e1:dd:4a:bf:28:ff:fe:4f:9c:dd:d4:50:3e:8b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Jun 3 03:58:53 2025 GMT Not After : Jun 6 06:13:53 2025 GMT Subject: CN=6DAF855A95379C4A0B74C198AF1C3BF4CE1D7D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ff:43:bf:e7:da:ae:2d:e3:d3:2f:4a:a9:82: db:b8:2d:b8:50:fa:c4:4a:6f:50:ee:5a:5e:c7:59: fe:03:02:07:64:4f:da:94:33:62:a5:32:b2:ef:83: 4d:f9:44:21:29:0a:49:24:c5:9f:24:b2:d6:c4:98: b5:f1:79:28:59:f1:69:44:6e:60:6a:ec:77:8f:07: a6:48:bd:a8:61:76:c5:4c:77:83:b7:48:64:bb:31: 15:1b:3d:98:cd:3a:8c:13:0f:53:64:2d:92:fc:8a: 63:e9:37:70:93:f7:f8:ae:8f:d0:38:1f:a2:e3:29: b3:f3:5e:2c:22:d6:60:a5:16:ee:7c:4d:c8:71:99: 52:aa:4b:f5:49:63:b0:d1:0d:be:f8:7d:af:c6:17: 16:a6:13:3b:1f:de:9f:aa:85:f8:f5:9d:35:e9:76: e0:47:e3:4b:87:e4:ea:c7:ca:a7:51:1e:f1:1e:0f: 3d:00:60:60:8e:5f:d2:a4:f1:b4:52:55:2e:c4:f3: 5d:94:0a:b4:ca:7d:de:ad:21:ce:b5:3f:db:3a:dc: 80:d7:e4:83:5d:c9:70:04:19:11:97:d9:a4:26:07: e9:8c:8d:0f:d1:62:08:fc:cf:50:93:89:fb:6f:47: df:28:5b:28:2d:dc:7b:b7:68:e8:bc:76:db:44:3c: b2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AF:85:5A:95:37:9C:4A:0B:74:C1:98:AF:1C:3B:F4:CE:1D:7D:78 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d6:d0:c8:4a:1b:1c:b5:0a:e5:54:4d:71:84:c7:fa:7a:ba: 89:bb:54:93:60:d9:01:b7:e7:25:d5:c4:0c:2d:9e:33:c8:7b: a0:f6:bb:7d:3c:af:ae:bd:c2:e5:da:6f:c2:e0:ed:41:ba:ee: e8:33:6c:85:bd:11:59:8a:db:5e:dd:3b:01:6e:78:79:c8:5c: bb:e2:3c:be:69:c8:4e:e9:2d:b8:b2:58:62:e8:ac:12:c7:39: 40:d4:0d:cf:ee:81:77:72:fb:5e:fb:fd:07:04:99:31:e2:aa: ee:e9:16:76:b5:b9:a5:ec:45:29:c1:3d:a6:86:5a:36:85:e4: a1:b3:7d:52:eb:0b:07:99:bf:3f:9b:0f:dd:62:e1:72:60:49: c1:96:0c:fa:aa:5d:69:07:f4:38:b1:7d:5d:41:ff:35:b1:5f: 04:a5:19:45:c4:7c:01:a8:78:7e:99:5b:eb:1f:d4:64:c2:ad: 9a:c7:46:a1:31:4c:88:4d:d3:9f:2a:bb:ef:e6:25:6c:16:b5: ef:bf:ea:e6:60:82:52:26:0a:3f:54:e2:36:b9:ab:39:87:11: 0a:fe:94:69:32:b7:eb:7e:7b:81:8e:cc:2b:81:27:2a:da:58: ff:3f:ba:23:07:a4:85:4c:d0:c0:7e:39:84:33:c0:90:06:39: 5a:5e:2f:b7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITS7IgvuHdSr8o//5PnN3UUD6LfjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygyNUY0NjQwMjBEOUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0 RjRGMUJFMB4XDTI1MDYwMzAzNTg1M1oXDTI1MDYwNjA2MTM1M1owMzExMC8GA1UE AxMoNkRBRjg1NUE5NTM3OUM0QTBCNzRDMTk4QUYxQzNCRjRDRTFEN0Q3ODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO7/Q7/n2q4t49MvSqmC27gtuFD6 xEpvUO5aXsdZ/gMCB2RP2pQzYqUysu+DTflEISkKSSTFnySy1sSYtfF5KFnxaURu YGrsd48Hpki9qGF2xUx3g7dIZLsxFRs9mM06jBMPU2QtkvyKY+k3cJP3+K6P0Dgf ouMps/NeLCLWYKUW7nxNyHGZUqpL9UljsNENvvh9r8YXFqYTOx/en6qF+PWdNel2 4EfjS4fk6sfKp1Ee8R4PPQBgYI5f0qTxtFJVLsTzXZQKtMp93q0hzrU/2zrcgNfk g13JcAQZEZfZpCYH6YyND9FiCPzPUJOJ+29H3yhbKC3ce7do6Lx220Q8sisCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRtr4ValTecSgt0wZivHDv0zh19eDAfBgNVHSME GDAWgBQl9GQCDZy7jRi8fEcWn5eNJPTxvjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYy OGRlODZiLWEyNmUtNGIwZi1hODNjLTA1ZmFiNGEzMGM3Ny8wLzI1RjQ2NDAyMEQ5 Q0JCOEQxOEJDN0M0NzE2OUY5NzhEMjRGNEYxQkUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi8yNUY0NjQwMjBEOUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRG MUJFLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82MjhkZTg2Yi1hMjZlLTRiMGYtYTgz Yy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBEOUNCQjhEMThCQzdDNDcxNjlGOTc4 RDI0RjRGMUJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEArNbQyEobHLUK5VRNcYTH+nq6ibtUk2DZAbfn JdXEDC2eM8h7oPa7fTyvrr3C5dpvwuDtQbru6DNshb0RWYrbXt07AW54echcu+I8 vmnITuktuLJYYuisEsc5QNQNz+6Bd3L7Xvv9BwSZMeKq7ukWdrW5pexFKcE9poZa NoXkobN9UusLB5m/P5sP3WLhcmBJwZYM+qpdaQf0OLF9XUH/NbFfBKUZRcR8Aah4 fplb6x/UZMKtmsdGoTFMiE3Tnyq77+YlbBa177/q5mCCUiYKP1TiNrmrOYcRCv6U aTK36357gY7MK4EnKtpY/z+6IwekhUzQwH45hDPAkAY5Wl4vtw== -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:00 2025 by rpki-client