$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: neO/g0FGjnQexXh7gg2gkJnOboZnSp3TL5PKl8Itve8= Subject key identifier: C4:EE:8E:31:0E:51:CD:8F:75:33:6F:12:E3:59:C8:0F:27:37:80:99 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 23D49A98DFA7455D047E2ABED22AB2F55FA3EF74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 04AE Signing time: Sun 01 Jun 2025 10:30:49 +0000 Manifest this update: Sun 01 Jun 2025 10:25:49 +0000 Manifest next update: Wed 04 Jun 2025 21:21:49 +0000 Files and hashes: 1: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: ls44OG0TlScZudQjWi2hOoJfckGlkJcK1X+4UZNTijw=) 2: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: y5FW1sgnfU+HeLMU5Bqbn06zuZEAtwFBXzjZotq5ERw=) 3: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: UvnP9Fx02//mlc3oDHoVbF5LEqpl8lo1PqZPWR5aPQM=) 4: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ZQI865FxGh10FmxCAL3EfpXRTSxcXYfsdjKIE28NGOQ=) 5: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: ZULjTp4+NYAssAp0CZz3FEnycGBYt+NoPkGuUHEyL7E=) 6: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: TNpUK4dJFrU18RMU9Zgd4YTXy5oNCmoEosozxJBeWMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 21:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d4:9a:98:df:a7:45:5d:04:7e:2a:be:d2:2a:b2:f5:5f:a3:ef:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Jun 1 10:25:49 2025 GMT Not After : Jun 4 21:21:49 2025 GMT Subject: CN=C4EE8E310E51CD8F75336F12E359C80F27378099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:d3:01:d2:0c:c9:74:93:c9:7d:5e:05:53: 40:31:18:da:fc:18:5a:8e:01:e1:ec:be:21:09:1d: af:2a:fc:56:e0:ec:bd:95:0d:17:2f:20:b7:c7:20: cc:ec:41:f4:3f:ca:9d:8b:eb:45:1b:f3:67:3f:7c: 9c:47:a3:19:af:0c:4c:30:c9:d1:12:a8:63:ce:3c: 3c:b8:0c:46:f6:f8:20:9a:70:30:b6:fa:1b:c9:a4: 27:b9:17:a9:b5:aa:16:3f:a8:2f:fc:6f:63:47:64: 73:dd:70:44:c8:ed:8c:0c:4e:19:3a:40:a0:79:d2: 21:dd:c2:f6:a5:68:6c:b9:a8:7f:18:72:d4:c3:42: 48:d2:ed:26:34:c7:4a:1b:c6:55:0e:78:4c:77:0b: 9f:07:f3:ce:5f:12:4a:c2:61:4a:82:68:1b:c5:9f: cd:2e:20:30:9b:cf:5c:d7:76:9d:d7:90:a8:0c:dd: 1a:14:6b:1e:0a:6b:54:0b:22:c2:df:30:ec:b0:48: 78:87:d3:1d:00:a2:a6:36:d0:ba:82:75:05:b6:3e: 4c:aa:8a:5f:21:ad:7d:d7:f8:ae:57:15:02:7e:c7: 91:fd:21:5a:aa:51:39:e7:8c:eb:87:b1:1f:b8:29: 6a:18:ff:53:ec:1c:f6:41:f9:84:08:08:a2:26:c5: fb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EE:8E:31:0E:51:CD:8F:75:33:6F:12:E3:59:C8:0F:27:37:80:99 X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:a8:35:8e:e0:9e:bd:30:f6:3c:4b:f9:23:93:e6:42:a2:b7: a4:6d:37:8e:af:b8:18:53:ca:27:26:b5:3b:77:a1:0a:52:8c: 30:e1:e7:e3:90:77:f7:62:55:7b:dd:db:51:ab:5e:e9:66:01: 41:65:3e:2a:8a:c0:61:7d:af:0a:11:87:5a:80:b3:a5:24:b0: 8c:4c:25:c2:03:c0:86:1f:bc:fa:32:37:d9:91:c4:50:63:09: a1:65:45:8f:af:bf:7b:1a:3c:61:7a:a9:62:64:b3:18:1d:21: af:65:75:6e:e2:54:8e:95:a4:cc:f8:c6:65:ff:38:32:f4:aa: f4:12:d9:ac:c4:d2:2b:07:88:92:45:c8:f3:84:6b:b0:89:87: 16:a7:61:91:60:8a:53:a2:a9:fb:d8:7d:14:02:d4:fa:5f:2b: 4b:61:2f:2b:3d:7d:42:db:cf:5b:08:37:fa:68:ce:bc:55:2c: b0:f1:22:dd:22:75:2b:38:b9:5b:18:4a:26:5e:db:de:ea:9e: a4:63:1e:da:45:60:a0:b5:2c:8b:0a:49:93:e9:ba:14:28:fc: 72:fa:c2:51:4f:5b:cb:79:30:41:51:7d:f7:6c:8c:38:e6:19: 65:3f:d0:63:1b:5b:4d:25:d3:20:d5:59:a7:44:ea:a3:9d:96: b8:62:49:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9SamN+nRV0Efiq+0iqy9V+j73QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTA2MDExMDI1NDlaFw0yNTA2MDQyMTIxNDlaMDMxMTAvBgNV BAMTKEM0RUU4RTMxMEU1MUNEOEY3NTMzNkYxMkUzNTlDODBGMjczNzgwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQadMB0gzJdJPJfV4FU0AxGNr8 GFqOAeHsviEJHa8q/Fbg7L2VDRcvILfHIMzsQfQ/yp2L60Ub82c/fJxHoxmvDEww ydESqGPOPDy4DEb2+CCacDC2+hvJpCe5F6m1qhY/qC/8b2NHZHPdcETI7YwMThk6 QKB50iHdwvalaGy5qH8YctTDQkjS7SY0x0obxlUOeEx3C58H885fEkrCYUqCaBvF n80uIDCbz1zXdp3XkKgM3RoUax4Ka1QLIsLfMOywSHiH0x0AoqY20LqCdQW2Pkyq il8hrX3X+K5XFQJ+x5H9IVqqUTnnjOuHsR+4KWoY/1PsHPZB+YQICKImxfvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxO6OMQ5RzY91M28S41nIDyc3gJkwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqoNY7gnr0w9jxL+SOT5kKit6RtN46vuBhT yicmtTt3oQpSjDDh5+OQd/diVXvd21GrXulmAUFlPiqKwGF9rwoRh1qAs6UksIxM JcIDwIYfvPoyN9mRxFBjCaFlRY+vv3saPGF6qWJksxgdIa9ldW7iVI6VpMz4xmX/ ODL0qvQS2azE0isHiJJFyPOEa7CJhxanYZFgilOiqfvYfRQC1PpfK0thLys9fULb z1sIN/pozrxVLLDxIt0idSs4uVsYSiZe297qnqRjHtpFYKC1LIsKSZPpuhQo/HL6 wlFPW8t5MEFRffdsjDjmGWU/0GMbW00l0yDVWadE6qOdlrhiSa4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:09:42 2025 by rpki-client