$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: P5zP+Pg7aMrgPdP1c4UzhXf5PUCO/A+zZKmzBqUXlEI= Subject key identifier: 79:37:E4:1D:A6:07:0E:CC:3F:F8:3E:5C:A2:B0:36:11:BB:B3:DE:6D Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 193DB985630D678E96F9217DD6F4F60FC6AEC9F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 04DA Signing time: Thu 04 Sep 2025 17:10:51 +0000 Manifest this update: Thu 04 Sep 2025 17:05:51 +0000 Manifest next update: Mon 08 Sep 2025 00:26:51 +0000 Files and hashes: 1: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: SXXLWSftmV1ALVHZrOGiOsQ6UfYjWN8tTipC9o8sUVM=) 2: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ikejIzym3riHv/Wk7MAPoXCGoRFxR1pASpxS+fJWi4g=) 3: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: dTbIHUhiEUknjm2UJq3m/hFm+UD2w30xmsm34dF+xX0=) 4: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: q5zSFwaJXilXSEH9WHt54LMp5tNeDWzSf/NSZ8g4irA=) 5: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: bGN1vyn9h6Yc+MemoAPYX3r1I/c2y6YPOsVFWuo0Dr0=) 6: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: YV5y0yJ3U9p9cvlNvG3FnXx2SHMj2wa+fG9Y04B6wcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 00:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3d:b9:85:63:0d:67:8e:96:f9:21:7d:d6:f4:f6:0f:c6:ae:c9:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Sep 4 17:05:51 2025 GMT Not After : Sep 8 00:26:51 2025 GMT Subject: CN=7937E41DA6070ECC3FF83E5CA2B03611BBB3DE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8d:63:45:ee:3d:85:2e:89:f2:90:d7:f0:b5: 54:8c:ad:10:c4:0b:0c:aa:a8:8a:92:c2:c1:4f:af: 44:54:02:e8:3b:20:58:ee:d4:c6:67:d1:df:a4:6b: c9:14:37:5c:77:cc:fa:49:a7:5a:8d:9e:ed:ab:98: b6:46:6e:68:1e:41:c7:6d:66:05:ee:f2:3c:ad:bb: c2:73:60:a2:55:b8:79:52:cc:12:c7:52:79:2f:10: 84:33:73:ec:ed:fb:8c:07:ca:53:9f:de:e0:6b:18: 22:12:f3:2f:d2:20:f0:5b:27:fa:34:2e:91:cc:5b: 8c:d1:14:0d:af:d9:7b:fe:fa:fe:7e:d6:13:0a:f6: af:11:81:30:e2:e9:23:52:02:97:74:dd:90:76:f8: b5:d3:aa:3b:da:cf:59:30:ab:39:34:9a:13:2a:f2: ad:e5:e7:39:c0:ae:ba:ff:0b:30:ec:ad:20:72:86: 54:98:d7:9a:33:3e:60:35:b6:d6:c2:84:6c:2a:98: c0:69:19:76:3b:0c:67:9c:95:43:57:09:5b:3f:8c: 0e:99:7f:6c:38:d2:12:61:16:81:ff:94:48:c2:ef: 31:4c:2a:1d:20:69:4e:0c:e5:2b:25:16:01:c1:32: 2a:3a:0d:f6:25:ae:bd:d3:d0:68:b8:18:42:69:07: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:37:E4:1D:A6:07:0E:CC:3F:F8:3E:5C:A2:B0:36:11:BB:B3:DE:6D X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:51:b3:a4:d2:25:0c:0d:c9:a5:29:33:69:60:d5:b1:dd:1e: ba:6b:fd:06:74:32:86:28:ea:73:fe:eb:8e:19:3f:92:f6:3d: a3:1b:25:8c:d7:05:41:fe:46:11:78:b2:bf:0b:29:57:e9:82: 09:f2:3a:a6:2a:29:6a:26:62:cf:ed:fe:26:de:af:63:d9:72: b0:fb:eb:b2:2d:dd:2e:8f:e0:5f:2a:84:a7:11:3f:3c:30:18: bf:74:e8:0a:93:8e:93:16:bb:38:7e:6c:9f:e0:81:32:16:7c: 26:93:1e:6e:c4:70:11:b0:bf:e0:a1:6a:37:4b:25:94:81:6c: 0f:78:22:d0:60:7e:be:c7:a6:85:2b:86:67:8c:d1:76:96:e0: 9b:e0:c1:26:b2:14:c1:e0:cb:5c:f5:0f:6c:c6:5d:8e:90:f2: c2:84:2a:47:fa:7b:3b:6b:6f:fe:e7:fa:93:2b:dc:31:bf:1b: 06:6c:36:0d:1e:89:42:9f:57:c3:53:cd:cc:70:68:3a:b1:a7: 3e:3b:98:10:e9:dd:36:68:5f:62:74:6f:2d:f3:f9:45:0b:49: b8:3f:1e:69:b0:df:cf:cc:f1:1e:39:5a:79:e3:ce:e2:d8:a0: 67:58:7e:f1:09:ca:9c:9d:40:97:ea:85:42:8b:27:89:6e:b0: 4e:81:4c:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGT25hWMNZ46W+SF91vT2D8auyfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNTA5MDQxNzA1NTFaFw0yNTA5MDgwMDI2NTFaMDMxMTAvBgNV BAMTKDc5MzdFNDFEQTYwNzBFQ0MzRkY4M0U1Q0EyQjAzNjExQkJCM0RFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEjWNF7j2FLonykNfwtVSMrRDE CwyqqIqSwsFPr0RUAug7IFju1MZn0d+ka8kUN1x3zPpJp1qNnu2rmLZGbmgeQcdt ZgXu8jytu8JzYKJVuHlSzBLHUnkvEIQzc+zt+4wHylOf3uBrGCIS8y/SIPBbJ/o0 LpHMW4zRFA2v2Xv++v5+1hMK9q8RgTDi6SNSApd03ZB2+LXTqjvaz1kwqzk0mhMq 8q3l5znArrr/CzDsrSByhlSY15ozPmA1ttbChGwqmMBpGXY7DGeclUNXCVs/jA6Z f2w40hJhFoH/lEjC7zFMKh0gaU4M5SslFgHBMio6DfYlrr3T0Gi4GEJpB//lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeTfkHaYHDsw/+D5corA2Ebuz3m0wHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5Rs6TSJQwNyaUpM2lg1bHdHrpr/QZ0MoYo 6nP+644ZP5L2PaMbJYzXBUH+RhF4sr8LKVfpggnyOqYqKWomYs/t/iber2PZcrD7 67It3S6P4F8qhKcRPzwwGL906AqTjpMWuzh+bJ/ggTIWfCaTHm7EcBGwv+ChajdL JZSBbA94ItBgfr7HpoUrhmeM0XaW4JvgwSayFMHgy1z1D2zGXY6Q8sKEKkf6eztr b/7n+pMr3DG/GwZsNg0eiUKfV8NTzcxwaDqxpz47mBDp3TZoX2J0by3z+UULSbg/ Hmmw38/M8R45WnnjzuLYoGdYfvEJypydQJfqhUKLJ4lusE6BTKk= -----END CERTIFICATE-----Generated at Fri Sep 5 12:34:18 2025 by rpki-client