$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: FPeuYlJXKS6Nb0SF/klbrw1wPorUWADVR14eY7c87CM= Subject key identifier: C7:50:CC:3C:72:00:94:44:3B:C1:FD:B6:74:33:E0:99:A4:4C:6C:71 Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 095140749598ECA6A172976280C52AF5540970AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 0517 Signing time: Mon 20 Oct 2025 03:41:10 +0000 Manifest this update: Mon 20 Oct 2025 03:36:10 +0000 Manifest next update: Thu 23 Oct 2025 10:47:10 +0000 Files and hashes: 1: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: xwmUwCGvhyXbt9a+OQFkrjk0oh/Vnnf97YDNtwHxQy4=) 2: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: y5kSrkZuiwMGD9QWDm9x2qICFewL0ronD0gEk8WVvus=) 3: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:51:40:74:95:98:ec:a6:a1:72:97:62:80:c5:2a:f5:54:09:70:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Oct 20 03:36:10 2025 GMT Not After : Oct 23 10:47:10 2025 GMT Subject: CN=C750CC3C720094443BC1FDB67433E099A44C6C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:91:42:0e:b3:0a:82:79:ab:d0:d2:19:4d: 21:04:b3:7a:6d:45:d6:9e:5e:18:5b:e8:5e:6f:2d: 49:ef:8a:8f:a6:b0:f9:e8:af:ac:0e:7c:b1:b2:70: 48:24:5e:00:94:01:ae:cb:d3:ed:04:dc:c9:34:66: fd:e6:98:a5:e5:e8:66:32:c2:cc:a9:2d:8e:f1:ec: 15:ac:75:06:51:38:53:f8:d3:90:72:26:85:af:dd: 9d:27:dc:f4:70:e1:25:a1:97:52:a4:97:4b:67:32: b8:14:f7:70:d6:21:9b:82:e9:31:04:38:c6:75:71: 2b:41:8e:d0:2c:6e:15:09:ec:e5:77:eb:d5:d7:f4: 8d:96:4a:46:10:15:30:84:aa:e2:6b:25:8b:4d:11: 3b:c4:14:09:93:18:4b:15:a2:dd:b1:f1:0f:e6:ca: df:bb:03:0d:39:74:75:46:e1:f3:17:05:2e:5c:f7: 8b:51:62:1a:65:73:d4:aa:4e:f2:dd:b8:1a:85:f5: ec:e4:01:ed:3e:16:2d:40:39:9e:6b:ab:a6:9f:c2: 7b:4b:a1:e2:1c:b7:af:8d:5a:a8:03:67:29:52:a1: 94:bb:f9:3f:f1:68:be:5c:ac:69:79:2c:7b:da:40: ab:53:25:9d:b9:09:33:06:e3:33:79:a5:e3:d8:2b: 17:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:50:CC:3C:72:00:94:44:3B:C1:FD:B6:74:33:E0:99:A4:4C:6C:71 X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:7e:58:e1:c4:8d:17:15:70:80:94:70:f6:29:b1:3d:2f:42: 25:fa:c8:3b:25:ac:5a:7f:11:68:49:4f:33:d8:ac:e1:2c:4e: a9:ef:6f:2a:99:7b:c0:ac:4b:31:14:ae:97:a2:dc:12:8b:1a: 73:39:3e:db:7e:9e:5c:7e:36:c1:d8:4f:17:9a:d7:c1:49:76: 31:50:05:ee:55:12:a6:64:6b:b4:81:20:ff:fb:3e:17:bd:e2: e8:d6:ce:d8:73:69:af:b8:87:00:6f:e5:d0:13:46:67:a7:48: d1:4a:da:56:9c:0a:69:99:93:a7:72:a7:d4:09:74:b0:88:84: 91:d7:90:c2:ad:58:83:f4:1a:fb:f3:aa:c5:fe:78:55:ce:5f: b8:36:32:c0:72:b3:da:30:3d:ba:4c:62:6d:df:23:82:30:15: 7a:2a:c7:41:cb:6d:01:af:d7:28:57:27:56:1d:7f:72:c0:a5: 75:b5:e1:46:92:f0:48:e5:91:bc:c0:5a:c6:43:79:a2:0b:e0: d9:8b:54:59:64:01:3b:6c:b7:5b:90:22:f2:f1:bf:f5:ca:4b: dc:48:ac:8e:a6:e9:ac:95:13:8b:7b:55:22:8f:a8:b3:e4:f7: 82:69:70:3a:40:5e:eb:06:ee:11:55:ba:99:79:8a:88:1d:2f: 66:02:60:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVFAdJWY7KahcpdigMUq9VQJcKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNTEwMjAwMzM2MTBaFw0yNTEwMjMxMDQ3MTBaMDMxMTAvBgNV BAMTKEM3NTBDQzNDNzIwMDk0NDQzQkMxRkRCNjc0MzNFMDk5QTQ0QzZDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm85FCDrMKgnmr0NIZTSEEs3pt RdaeXhhb6F5vLUnvio+msPnor6wOfLGycEgkXgCUAa7L0+0E3Mk0Zv3mmKXl6GYy wsypLY7x7BWsdQZROFP405ByJoWv3Z0n3PRw4SWhl1Kkl0tnMrgU93DWIZuC6TEE OMZ1cStBjtAsbhUJ7OV369XX9I2WSkYQFTCEquJrJYtNETvEFAmTGEsVot2x8Q/m yt+7Aw05dHVG4fMXBS5c94tRYhplc9SqTvLduBqF9ezkAe0+Fi1AOZ5rq6afwntL oeIct6+NWqgDZylSoZS7+T/xaL5crGl5LHvaQKtTJZ25CTMG4zN5pePYKxefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx1DMPHIAlEQ7wf22dDPgmaRMbHEwHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJh+WOHEjRcVcICUcPYpsT0vQiX6yDslrFp/ EWhJTzPYrOEsTqnvbyqZe8CsSzEUrpei3BKLGnM5Ptt+nlx+NsHYTxea18FJdjFQ Be5VEqZka7SBIP/7Phe94ujWzthzaa+4hwBv5dATRmenSNFK2lacCmmZk6dyp9QJ dLCIhJHXkMKtWIP0GvvzqsX+eFXOX7g2MsBys9owPbpMYm3fI4IwFXoqx0HLbQGv 1yhXJ1Ydf3LApXW14UaS8EjlkbzAWsZDeaIL4NmLVFlkATtst1uQIvLxv/XKS9xI rI6m6ayVE4t7VSKPqLPk94JpcDpAXusG7hFVupl5iogdL2YCYIg= -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:05 2025 by rpki-client