$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: fuzbAEJ12bAmU1VjkY99euXYe+ZIRhQyHLwMN6MxSs8= Subject key identifier: 58:52:1D:AE:8B:9A:FF:15:9C:AE:38:76:45:4D:B2:91:5C:E9:D7:49 Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 77F83DC8E56DBB5569E802198ABCA6CB0020A5C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 022A Signing time: Wed 03 Sep 2025 16:00:45 +0000 Manifest this update: Wed 03 Sep 2025 15:55:45 +0000 Manifest next update: Sat 06 Sep 2025 18:03:45 +0000 Files and hashes: 1: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: 0fU+cgX2w2Seah8SyqIL5rp6DTz7LSKW3s4WYXiC+fA=) 2: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: guTEQOIPPY/zbGUfuhfsDBgcKaDnMvXYPvZOqAiePqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f8:3d:c8:e5:6d:bb:55:69:e8:02:19:8a:bc:a6:cb:00:20:a5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: Sep 3 15:55:45 2025 GMT Not After : Sep 6 18:03:45 2025 GMT Subject: CN=58521DAE8B9AFF159CAE3876454DB2915CE9D749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:6f:e8:e3:64:8e:dd:52:b0:2d:a8:54:a3: 59:6d:c5:82:4f:43:3c:ad:03:50:7c:35:b8:97:80: 11:92:6b:4d:4e:3d:6b:40:43:41:b0:9a:5a:e1:a6: 6e:b6:5f:b4:b2:4e:b3:fa:f0:33:9e:06:a3:01:25: fe:a5:22:20:23:57:4b:07:dc:9a:08:a0:f8:cd:ec: 6f:ed:34:d3:7a:e2:cf:2e:c4:94:76:cb:85:4e:7c: 32:20:bf:13:48:0f:94:c6:68:55:a9:2b:22:88:8d: bc:be:e6:36:3b:70:c7:e8:de:b0:ee:d6:c9:08:fd: 4d:8a:4e:9f:7c:dd:60:e9:29:ba:61:d1:f2:a5:26: 1a:46:1a:c5:f0:43:57:52:b6:bd:4c:19:39:45:39: 7e:ce:d5:5b:00:28:25:e9:7d:aa:b3:ca:1e:53:2a: 02:13:f7:f4:ac:a7:9e:b5:94:98:58:cb:25:af:6d: 14:6a:e5:c9:59:0a:e9:d8:ca:9b:31:12:d2:e6:e3: 40:7d:f8:da:44:4d:8f:73:28:04:07:3b:43:7f:79: c4:33:0b:fc:16:6a:47:8f:63:9b:99:ec:2a:86:f4: 7d:68:a5:dd:bf:8f:80:be:ad:ca:c6:74:0d:2d:3c: 5e:5d:6e:97:57:e3:3b:16:d1:27:b6:cd:84:cf:f2: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:52:1D:AE:8B:9A:FF:15:9C:AE:38:76:45:4D:B2:91:5C:E9:D7:49 X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0e:c0:f6:7b:98:07:96:21:d8:d7:08:6c:1f:e9:15:4d:13: 08:1f:f3:37:30:5f:ab:f0:b4:0e:7a:dd:98:c4:0f:e8:f1:c2: 16:ba:27:a3:61:a0:e5:24:c5:1c:17:bc:50:6d:74:da:fa:67: 7e:38:db:2e:8d:9c:0e:ea:c3:ea:05:d7:73:71:7e:4d:b3:72: b7:95:46:b2:aa:02:7f:d7:2b:54:b4:5b:24:41:b4:80:a1:7f: 63:19:b5:ba:a9:ad:39:74:a3:ad:21:61:20:68:1d:1e:0f:d5: d9:3b:11:2c:3d:b3:e8:86:1e:1e:12:9b:98:26:cf:bf:f2:02: 74:5c:47:7f:5a:db:46:d3:f6:c3:72:e5:7b:4c:3d:34:f9:a0: 9a:78:31:d9:72:44:74:30:cf:d9:19:64:4e:c4:78:bd:08:4d: d3:4f:6e:92:d6:4a:2c:9f:77:fd:ca:2b:5f:0f:4d:b3:5c:02: f1:89:c7:ef:9b:53:6b:1d:bf:e0:67:08:95:30:3b:53:d6:6f: 64:fd:35:03:fd:63:68:81:78:9b:29:44:42:13:c4:15:e5:3d: db:59:ee:66:c0:25:46:64:23:41:92:7c:ed:f2:b5:4e:fa:0d: b7:c3:55:22:ff:ba:d9:44:3d:2a:21:85:48:9b:0d:b4:5e:84: b7:c7:fa:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/g9yOVtu1Vp6AIZirymywAgpckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNTA5MDMxNTU1NDVaFw0yNTA5MDYxODAzNDVaMDMxMTAvBgNV BAMTKDU4NTIxREFFOEI5QUZGMTU5Q0FFMzg3NjQ1NERCMjkxNUNFOUQ3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpA2/o42SO3VKwLahUo1ltxYJP QzytA1B8NbiXgBGSa01OPWtAQ0Gwmlrhpm62X7SyTrP68DOeBqMBJf6lIiAjV0sH 3JoIoPjN7G/tNNN64s8uxJR2y4VOfDIgvxNID5TGaFWpKyKIjby+5jY7cMfo3rDu 1skI/U2KTp983WDpKbph0fKlJhpGGsXwQ1dStr1MGTlFOX7O1VsAKCXpfaqzyh5T KgIT9/Ssp561lJhYyyWvbRRq5clZCunYypsxEtLm40B9+NpETY9zKAQHO0N/ecQz C/wWakePY5uZ7CqG9H1opd2/j4C+rcrGdA0tPF5dbpdX4zsW0Se2zYTP8nfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWFIdroua/xWcrjh2RU2ykVzp10kwHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQOwPZ7mAeWIdjXCGwf6RVNEwgf8zcwX6vw tA563ZjED+jxwha6J6NhoOUkxRwXvFBtdNr6Z3442y6NnA7qw+oF13Nxfk2zcreV RrKqAn/XK1S0WyRBtIChf2MZtbqprTl0o60hYSBoHR4P1dk7ESw9s+iGHh4Sm5gm z7/yAnRcR39a20bT9sNy5XtMPTT5oJp4MdlyRHQwz9kZZE7EeL0ITdNPbpLWSiyf d/3KK18PTbNcAvGJx++bU2sdv+BnCJUwO1PWb2T9NQP9Y2iBeJspREITxBXlPdtZ 7mbAJUZkI0GSfO3ytU76DbfDVSL/utlEPSohhUibDbRehLfH+sY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:38 2025 by rpki-client