$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: 5hAol89bVp9YEtvmNzL2Vij59oTlCFjPwHyBZCRR4h8= Subject key identifier: D6:71:B2:4A:DB:E4:10:47:DF:54:54:AD:77:7D:F2:97:D4:5C:81:F2 Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 21F029690EAF0DDE8CB0D339ECB0E9AF5F8FD8FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 055D Signing time: Wed 25 Mar 2026 12:21:22 +0000 Manifest this update: Wed 25 Mar 2026 12:16:22 +0000 Manifest next update: Sat 28 Mar 2026 21:28:22 +0000 Files and hashes: 1: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: 5kqLfT3b2VuAmmUE/vroSzqM8ZZlRhNYG3zhW/UqtuU=) 2: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) 3: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: y5kSrkZuiwMGD9QWDm9x2qICFewL0ronD0gEk8WVvus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f0:29:69:0e:af:0d:de:8c:b0:d3:39:ec:b0:e9:af:5f:8f:d8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Mar 25 12:16:22 2026 GMT Not After : Mar 28 21:28:22 2026 GMT Subject: CN=D671B24ADBE41047DF5454AD777DF297D45C81F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:3a:bc:29:0c:b1:50:e6:99:03:0e:26:6a: 61:ad:d8:2f:60:f9:69:eb:cd:9c:24:83:94:0b:ba: 04:c5:a8:bf:e1:ee:20:08:50:32:6c:73:0e:a3:f4: 24:45:94:cd:3c:c9:a6:dd:07:9f:c9:9c:0b:38:9a: 1a:d7:19:d4:cf:0c:5f:6f:30:65:a6:b8:31:26:81: 9a:87:14:c4:8a:71:1f:df:53:59:eb:0a:37:b1:f2: 07:72:7c:9f:17:fc:42:ad:cf:58:c6:07:6f:ca:69: f0:af:e9:71:42:7e:90:cd:c7:d8:9c:ba:bd:7b:aa: ff:22:aa:d1:32:1e:cf:c0:c8:6d:ef:c7:0e:28:35: c0:a8:eb:53:fe:5d:16:14:04:af:f9:ff:a5:6f:48: 6f:44:9a:51:ef:c8:aa:66:93:dd:02:dc:48:27:4a: 68:7b:75:7a:e0:28:86:58:a2:53:9a:01:af:43:c6: af:8e:2d:4b:c6:11:6d:90:96:55:99:2f:24:f1:44: 96:5d:a7:aa:d5:f8:40:58:29:ba:9d:51:ae:59:f7: 5d:ea:c8:89:46:81:67:1e:77:22:14:a7:46:72:bd: 87:fe:73:84:ff:2d:7e:5f:6b:79:a6:e5:2d:4a:78: d6:76:b0:e2:a6:43:c6:5a:25:98:89:f0:48:e5:74: 52:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:71:B2:4A:DB:E4:10:47:DF:54:54:AD:77:7D:F2:97:D4:5C:81:F2 X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:74:5f:29:69:91:e6:9a:a8:ac:00:d0:e8:34:53:a2:ad:1b: 8c:dd:26:28:a9:0c:83:93:0b:0d:5f:04:7c:f7:9a:3a:91:19: 21:e1:f2:03:34:b1:1f:e4:d5:8f:31:39:1c:14:85:d8:ae:01: fe:d6:99:58:20:8a:27:cc:33:fe:2b:18:72:76:67:24:61:44: f4:1f:cb:ce:6a:23:b9:d0:03:75:0e:6e:14:d7:95:e0:bf:c9: 94:36:06:a9:79:4f:a6:ff:e8:cc:1e:9e:c6:aa:f8:b4:69:cc: 39:57:52:10:22:e6:ca:8f:4b:46:6a:bb:7e:58:9f:9c:86:69: 75:13:be:41:03:af:e9:63:01:e7:6d:85:c8:4d:da:af:e9:08: bb:c8:53:3c:59:3c:9c:98:9d:e5:ef:01:15:8b:53:1b:77:e4: 5b:8a:b9:39:8e:3a:60:d3:5a:a4:a1:13:60:1f:93:4f:b4:a4: c3:30:92:86:32:02:cf:99:28:de:00:90:c1:2c:ba:7e:94:a0: 8e:12:85:37:5b:1f:e5:f3:09:cf:58:a3:e1:12:37:25:33:a3: ad:56:e6:5a:b8:44:c8:a3:42:6f:be:8e:3f:75:34:62:8d:a4: 09:d4:ec:07:cf:b0:c7:b0:5a:cb:4d:6f:95:8a:05:d0:1c:76: 65:6b:30:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfApaQ6vDd6MsNM57LDpr1+P2PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNjAzMjUxMjE2MjJaFw0yNjAzMjgyMTI4MjJaMDMxMTAvBgNV BAMTKEQ2NzFCMjRBREJFNDEwNDdERjU0NTRBRDc3N0RGMjk3RDQ1QzgxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChHzq8KQyxUOaZAw4mamGt2C9g +WnrzZwkg5QLugTFqL/h7iAIUDJscw6j9CRFlM08yabdB5/JnAs4mhrXGdTPDF9v MGWmuDEmgZqHFMSKcR/fU1nrCjex8gdyfJ8X/EKtz1jGB2/KafCv6XFCfpDNx9ic ur17qv8iqtEyHs/AyG3vxw4oNcCo61P+XRYUBK/5/6VvSG9EmlHvyKpmk90C3Egn Smh7dXrgKIZYolOaAa9Dxq+OLUvGEW2QllWZLyTxRJZdp6rV+EBYKbqdUa5Z913q yIlGgWcedyIUp0ZyvYf+c4T/LX5fa3mm5S1KeNZ2sOKmQ8ZaJZiJ8EjldFJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1nGyStvkEEffVFStd33yl9RcgfIwHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACx0XylpkeaaqKwA0Og0U6KtG4zdJiipDIOT Cw1fBHz3mjqRGSHh8gM0sR/k1Y8xORwUhdiuAf7WmVggiifMM/4rGHJ2ZyRhRPQf y85qI7nQA3UObhTXleC/yZQ2Bql5T6b/6Mwensaq+LRpzDlXUhAi5sqPS0Zqu35Y n5yGaXUTvkEDr+ljAedthchN2q/pCLvIUzxZPJyYneXvARWLUxt35FuKuTmOOmDT WqShE2Afk0+0pMMwkoYyAs+ZKN4AkMEsun6UoI4ShTdbH+XzCc9Yo+ESNyUzo61W 5lq4RMijQm++jj91NGKNpAnU7AfPsMewWstNb5WKBdAcdmVrMD4= -----END CERTIFICATE-----Generated at Thu Mar 26 21:55:14 2026 by rpki-client