$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: bK+yQ8vSyXGNCxm1cR/AJJuq+SPOVMyLu7SVujRqhrU= Subject key identifier: 02:EA:78:87:B8:76:56:1B:F4:38:9E:69:FA:79:39:33:53:70:66:D8 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 712669A19FB75C99457D74117D5A039E11A905F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 028B Signing time: Sat 05 Apr 2025 08:42:18 +0000 Manifest this update: Sat 05 Apr 2025 08:37:18 +0000 Manifest next update: Tue 08 Apr 2025 09:17:18 +0000 Files and hashes: 1: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: HXVc2NHh5YRZPXb+NP54CPizTxkLykrBvtKV7APf+ks=) 2: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: mIROvhV/B52jTv+b7xbtzNIsRy0qMHCKGHbEvF+jS6o=) 3: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: 8X7MnhcrGXRrLaiC6p6nb/f9+Sxh0EM3kk42oSlJDeM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:26:69:a1:9f:b7:5c:99:45:7d:74:11:7d:5a:03:9e:11:a9:05:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Apr 5 08:37:18 2025 GMT Not After : Apr 8 09:17:18 2025 GMT Subject: CN=02EA7887B876561BF4389E69FA793933537066D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:4a:2e:bf:6b:72:07:89:22:d4:40:9f:a5: 40:fa:ce:c9:18:a1:99:f1:a3:1e:7c:9f:22:7e:86: c0:d4:eb:51:dc:3c:2a:7c:44:60:9a:34:f1:0c:43: f4:be:6b:64:99:70:8b:8e:25:79:b1:b6:d0:48:02: 3c:fe:95:57:9b:c7:f0:2e:c0:e2:ed:0e:ae:1e:1f: 4c:b3:e8:3f:0a:a7:b8:e8:86:21:92:51:0b:79:26: 09:81:0a:d3:3a:32:8b:eb:01:54:cf:fa:a2:25:b9: 51:a0:a4:c6:3d:18:63:c5:ad:a1:ea:31:c9:43:3f: ef:35:12:7e:11:58:a8:82:0f:15:cc:30:e8:4e:e5: 30:5a:a5:6f:79:fc:bc:b2:5d:5c:fc:9e:d9:85:eb: 89:8e:13:af:3c:ca:0c:3b:80:fd:1f:7e:12:b1:e9: 13:2f:f8:c5:7a:a8:47:12:c0:16:ef:8d:c7:a7:85: 37:b7:a8:f7:e9:c8:37:9b:2e:d4:2e:d3:08:5d:65: 96:fa:15:24:4f:88:80:fc:06:d2:08:fa:3d:9a:58: 32:e9:6c:a8:69:bd:cc:85:53:5d:79:79:d5:0b:4a: a3:06:42:e7:1e:ce:3a:c7:a0:bf:78:25:71:91:9f: 29:4f:80:83:c6:25:1f:d7:fe:54:60:54:b9:3e:e2: 00:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EA:78:87:B8:76:56:1B:F4:38:9E:69:FA:79:39:33:53:70:66:D8 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:78:f2:35:7a:b4:72:ce:32:66:3a:76:97:58:b9:3c:2d:fb: 96:2d:52:72:5a:e2:79:9d:8b:8c:f8:7f:94:27:d7:b0:86:b0: 4d:9d:82:7a:5c:40:ac:47:af:86:ea:5e:20:13:ca:48:49:4c: 6a:6a:ab:32:56:5e:e7:d2:5f:9a:dc:8c:db:bc:b6:25:ec:bb: 75:35:51:26:66:91:99:d8:e3:fb:6c:c8:7c:72:aa:44:43:92: f4:19:c2:c3:19:f2:44:29:10:7e:42:11:fd:8d:e0:06:89:72: 53:1a:7d:fd:25:e6:20:5b:d1:c2:ea:c2:c9:39:29:75:ce:bf: 83:a5:c8:c0:ee:36:0e:08:c5:fb:55:20:da:cc:d8:78:99:41: e0:f3:71:65:6b:20:0d:cd:a2:f6:aa:ca:0d:27:56:14:5c:22: ed:08:97:ab:ad:43:b7:37:0e:cd:2e:78:b8:d3:98:5a:4f:28: 5a:15:6e:4a:d8:31:40:b4:e9:e4:ad:04:45:dd:75:27:1e:02: 73:6a:4f:31:ef:61:61:fb:76:d3:7e:70:00:78:78:77:a6:36: ca:e5:9f:6c:99:d4:8b:e1:8c:15:1e:85:f3:32:7e:87:f3:31: 5e:07:37:cb:62:2d:28:ba:e8:18:3e:9b:86:4d:39:46:dd:cc: be:df:0f:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcSZpoZ+3XJlFfXQRfVoDnhGpBfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTA0MDUwODM3MThaFw0yNTA0MDgwOTE3MThaMDMxMTAvBgNV BAMTKDAyRUE3ODg3Qjg3NjU2MUJGNDM4OUU2OUZBNzkzOTMzNTM3MDY2RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGz0ouv2tyB4ki1ECfpUD6zskY oZnxox58nyJ+hsDU61HcPCp8RGCaNPEMQ/S+a2SZcIuOJXmxttBIAjz+lVebx/Au wOLtDq4eH0yz6D8Kp7johiGSUQt5JgmBCtM6MovrAVTP+qIluVGgpMY9GGPFraHq MclDP+81En4RWKiCDxXMMOhO5TBapW95/LyyXVz8ntmF64mOE688ygw7gP0ffhKx 6RMv+MV6qEcSwBbvjcenhTe3qPfpyDebLtQu0whdZZb6FSRPiID8BtII+j2aWDLp bKhpvcyFU115edULSqMGQucezjrHoL94JXGRnylPgIPGJR/X/lRgVLk+4gArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAup4h7h2Vhv0OJ5p+nk5M1NwZtgwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAId48jV6tHLOMmY6dpdYuTwt+5YtUnJa4nmd i4z4f5Qn17CGsE2dgnpcQKxHr4bqXiATykhJTGpqqzJWXufSX5rcjNu8tiXsu3U1 USZmkZnY4/tsyHxyqkRDkvQZwsMZ8kQpEH5CEf2N4AaJclMaff0l5iBb0cLqwsk5 KXXOv4OlyMDuNg4IxftVINrM2HiZQeDzcWVrIA3Novaqyg0nVhRcIu0Il6utQ7c3 Ds0ueLjTmFpPKFoVbkrYMUC06eStBEXddSceAnNqTzHvYWH7dtN+cAB4eHemNsrl n2yZ1IvhjBUehfMyfofzMV4HN8tiLSi66Bg+m4ZNOUbdzL7fDyE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:16 2025 by rpki-client