$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: 0MmfQyvQv/SsNQoMZ4W9YDvReDf4jCdcXPE0xMn0jqo= Subject key identifier: B0:B3:26:C8:38:04:FB:93:71:37:91:FB:FC:0F:82:61:59:95:2E:D1 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: C21C64D3227BDB8F0C64FF4B6AB230ED2F152C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 02D0 Signing time: Fri 05 Sep 2025 07:02:23 +0000 Manifest this update: Fri 05 Sep 2025 06:57:23 +0000 Manifest next update: Mon 08 Sep 2025 12:57:23 +0000 Files and hashes: 1: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=) 2: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: sISSZtl/MX0O2yEy6o1+DHeWCEe5MqTiO6YaEWgUrVE=) 3: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 12:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c2:1c:64:d3:22:7b:db:8f:0c:64:ff:4b:6a:b2:30:ed:2f:15:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Sep 5 06:57:23 2025 GMT Not After : Sep 8 12:57:23 2025 GMT Subject: CN=B0B326C83804FB93713791FBFC0F826159952ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4e:c1:0e:d2:d2:54:95:4f:53:c2:09:8c:03: 6f:cb:66:e3:c3:91:16:71:2c:eb:ff:c7:35:2a:67: c2:de:40:83:49:02:ca:b5:3d:68:2a:04:e3:92:db: 91:7e:d9:aa:6e:20:57:58:63:1c:bc:57:2a:88:fa: c0:90:93:99:55:16:3f:0c:14:05:53:41:4f:bb:f5: 74:6b:1d:a6:ac:c4:13:10:50:00:b2:fb:76:ac:15: 5e:e2:22:11:53:8e:53:f6:3e:0d:6d:ba:e0:fe:2c: 24:20:9d:a2:c1:82:f2:5e:c8:48:b3:9a:cc:be:68: b6:3f:ec:3b:e3:33:d4:91:80:7f:e6:9e:07:24:35: e9:3d:5b:c0:dd:2e:d6:49:9d:55:cc:3e:59:4c:6c: 4f:7f:11:71:51:9c:e7:d3:a8:50:04:6f:c9:10:a7: c3:8f:66:83:20:3a:b0:43:2d:4a:66:31:08:cf:73: 56:41:85:a7:8d:b2:64:ee:4a:fe:a3:91:5b:1c:3e: 42:f1:b4:90:c9:a8:c8:fc:9a:e5:e8:fd:00:c7:3f: 2b:bd:b1:90:68:bc:bf:ef:9c:94:30:1b:b0:f7:1d: dd:0b:ed:49:2e:01:ea:b4:82:eb:18:ff:63:ff:ce: d3:02:3d:5d:a9:85:f9:e4:84:96:a5:80:34:16:77: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B3:26:C8:38:04:FB:93:71:37:91:FB:FC:0F:82:61:59:95:2E:D1 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a7:b6:8b:01:49:c0:8e:67:12:95:0e:d1:c4:ba:c7:06:66: 20:92:c8:88:c7:f1:95:f6:04:1a:ab:34:90:44:99:bb:e6:da: a7:ff:15:15:da:cd:36:5f:4a:c5:3c:98:fd:e6:39:47:f0:f4: ea:ea:37:9d:96:6e:02:75:c0:f8:bb:1a:37:6c:53:08:6a:6c: 6b:85:f3:45:0a:88:f6:4d:e7:ec:2a:53:fa:38:61:b2:b8:82: ce:2e:93:1f:b9:8f:3a:ea:fa:68:d1:63:26:fd:72:8a:dc:7a: fa:ce:a6:f9:db:0e:f8:51:85:ac:83:12:4b:60:e7:25:8d:99: b6:1f:25:ee:77:f6:a3:c7:61:bd:7b:17:77:2d:a4:38:09:03: 7a:3f:43:e0:67:c4:d6:20:e4:41:2e:eb:84:1e:8f:fa:77:f1: e4:70:27:42:5b:49:09:6d:ec:11:fd:dd:bb:7e:a5:c2:35:8e: 7c:df:e7:25:f3:5f:66:0d:ed:70:58:ba:b9:aa:6c:88:9c:8e: c8:66:5f:bd:b0:f0:a3:fe:6c:54:bc:c2:5d:c4:f3:05:b8:45: ee:9a:84:0e:ed:1d:f0:65:f1:c7:98:0c:8d:97:06:fa:a9:2c: f7:2c:7f:93:f3:46:ab:3a:6d:4e:b2:a8:cc:39:82:b3:b4:56: f2:21:97:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMIcZNMie9uPDGT/S2qyMO0vFSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTA5MDUwNjU3MjNaFw0yNTA5MDgxMjU3MjNaMDMxMTAvBgNV BAMTKEIwQjMyNkM4MzgwNEZCOTM3MTM3OTFGQkZDMEY4MjYxNTk5NTJFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuTsEO0tJUlU9TwgmMA2/LZuPD kRZxLOv/xzUqZ8LeQINJAsq1PWgqBOOS25F+2apuIFdYYxy8VyqI+sCQk5lVFj8M FAVTQU+79XRrHaasxBMQUACy+3asFV7iIhFTjlP2Pg1tuuD+LCQgnaLBgvJeyEiz msy+aLY/7DvjM9SRgH/mngckNek9W8DdLtZJnVXMPllMbE9/EXFRnOfTqFAEb8kQ p8OPZoMgOrBDLUpmMQjPc1ZBhaeNsmTuSv6jkVscPkLxtJDJqMj8muXo/QDHPyu9 sZBovL/vnJQwG7D3Hd0L7UkuAeq0gusY/2P/ztMCPV2phfnkhJalgDQWd2rdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsLMmyDgE+5NxN5H7/A+CYVmVLtEwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+ntosBScCOZxKVDtHEuscGZiCSyIjH8ZX2 BBqrNJBEmbvm2qf/FRXazTZfSsU8mP3mOUfw9OrqN52WbgJ1wPi7GjdsUwhqbGuF 80UKiPZN5+wqU/o4YbK4gs4ukx+5jzrq+mjRYyb9corcevrOpvnbDvhRhayDEktg 5yWNmbYfJe539qPHYb17F3ctpDgJA3o/Q+BnxNYg5EEu64Qej/p38eRwJ0JbSQlt 7BH93bt+pcI1jnzf5yXzX2YN7XBYurmqbIicjshmX72w8KP+bFS8wl3E8wW4Re6a hA7tHfBl8ceYDI2XBvqpLPcsf5PzRqs6bU6yqMw5grO0VvIhlyU= -----END CERTIFICATE-----Generated at Fri Sep 5 12:13:58 2025 by rpki-client