$ rpki-client -vvf repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft File: 25D788BD2A450C01354B9AB70826895FDFF56208.mft (raw, json) Hash identifier: h9BYA4NgTTkZWOwDqg86KfVhxlxUtMLzdVNcn7xwP9M= Subject key identifier: A4:47:26:C1:44:58:62:C3:45:66:78:46:B2:23:47:77:31:1D:FE:3F Authority key identifier: 25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 Certificate issuer: /CN=25D788BD2A450C01354B9AB70826895FDFF56208 Certificate serial: 0E0ED79367DD0A7F0640FB64FF7D0C56B2B5540B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft Manifest number: 03AE Signing time: Wed 25 Mar 2026 23:01:14 +0000 Manifest this update: Wed 25 Mar 2026 22:56:14 +0000 Manifest next update: Sat 28 Mar 2026 23:34:14 +0000 Files and hashes: 1: 3132332e3235332e3234382e302f32332d3234203d3e20313336383235.roa (hash: g29pf8GRD5KEsQ3xMiXcjqqLaCsv5cRFguqUqUNSeQU=) 2: 323030313a6466303a663530303a3a2f34382d3438203d3e20313432333739.roa (hash: BfvR/So226bitOLhPr9CHxhxgb1Q7qOXOhbe2UXDXlU=) 3: 3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (hash: AU2BjjxLKOB7x1afsJypIVoDqfBt5Pa++/i1Uy3JBXs=) 4: 25D788BD2A450C01354B9AB70826895FDFF56208.crl (hash: wN9Fre1KlSKvKkFjyjXwIrxUPvZIuzKeT5qzDlHdRLI=) 5: 3132332e3235332e3234382e302f32332d3234203d3e20313432333739.roa (hash: T9vPzFVrVbtfkOIbIR0gBtReDHG4KgAtDeHT2T3EGwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0e:d7:93:67:dd:0a:7f:06:40:fb:64:ff:7d:0c:56:b2:b5:54:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25D788BD2A450C01354B9AB70826895FDFF56208 Validity Not Before: Mar 25 22:56:14 2026 GMT Not After : Mar 28 23:34:14 2026 GMT Subject: CN=A44726C1445862C345667846B2234777311DFE3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:94:0d:12:66:0c:ad:02:77:c6:4b:1e:e5: 42:42:4b:4d:22:a6:ff:77:6a:f5:9f:fa:28:c5:59: 2e:17:6b:42:77:3e:87:14:e0:35:b5:7a:14:f5:2b: 09:6c:25:61:cd:2d:a8:03:04:07:0a:f5:c6:9d:99: 01:e2:37:ca:6f:8f:49:32:0b:ec:07:d6:d4:1d:b3: 68:a3:2e:71:22:5b:a7:8a:20:fd:79:96:f4:12:9a: 85:30:45:ed:a8:19:70:5b:10:94:b9:8c:b3:af:b9: 5a:86:a1:76:08:b2:27:c7:4d:b4:1a:52:d8:39:c5: 9c:5e:92:1f:2e:bb:72:0f:17:09:61:ac:81:f0:17: 97:f7:c0:18:24:f4:52:19:f3:22:69:28:0d:7d:d1: fe:2c:0b:2c:b1:d3:a1:df:73:5a:54:44:77:a8:2c: f5:52:90:49:b2:78:81:88:c8:a0:71:63:ee:9d:db: 4e:86:da:f4:8f:9f:78:41:02:32:71:dc:3d:60:f4: b1:b4:3c:51:2d:c3:20:bf:19:7d:9b:92:98:2c:f8: bb:a4:ea:7a:c6:ea:95:80:f9:cb:d5:d9:69:53:2a: 26:22:be:1d:95:b0:3e:8f:64:2f:a9:4a:ef:26:0e: 08:33:ad:b7:0e:ad:4a:1a:e1:61:17:b7:fd:b6:88: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:47:26:C1:44:58:62:C3:45:66:78:46:B2:23:47:77:31:1D:FE:3F X509v3 Authority Key Identifier: keyid:25:D7:88:BD:2A:45:0C:01:35:4B:9A:B7:08:26:89:5F:DF:F5:62:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25D788BD2A450C01354B9AB70826895FDFF56208.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/25D788BD2A450C01354B9AB70826895FDFF56208.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c7:38:cf:87:8f:82:fa:ca:31:f0:d9:0b:71:dc:ac:66:9f: d7:eb:d1:57:58:50:a3:b6:94:39:b5:4c:10:21:0b:aa:c2:ab: af:46:42:e7:9b:2c:e9:f1:44:91:23:5c:87:70:40:5d:65:35: 8e:82:43:a4:19:d9:67:90:98:48:1d:7e:55:25:fb:de:06:78: 2e:e0:a1:04:62:c7:97:ad:70:27:f6:cd:7e:0d:71:ea:d5:39: 41:69:8c:fb:2c:38:73:fd:a3:4e:c0:f0:35:84:37:d9:ba:48: 7b:2d:75:a5:0e:98:d6:b0:df:79:49:2b:34:89:0c:d2:5b:89: 8f:81:15:0c:dd:14:67:63:f2:bd:35:df:d2:a6:5a:17:9a:0a: 07:19:be:6a:6b:5f:88:96:56:f3:b0:77:9f:4c:1e:d8:33:2f: 54:cf:a4:48:56:e5:16:47:e6:ba:47:d5:e2:ee:a3:cf:2f:37: 73:77:36:43:9b:34:68:56:81:21:5b:b9:79:87:0b:11:51:74: 3b:7e:6d:31:ad:7f:12:7e:5d:23:15:d2:cf:a8:2c:a3:d7:6c: 4c:bf:0e:77:b1:85:9f:22:a5:00:7f:e0:99:3c:d7:0d:22:0d: 89:a0:a8:27:82:c2:67:bd:42:73:32:44:60:3b:0e:76:ca:08: 64:89:24:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDg7Xk2fdCn8GQPtk/30MVrK1VAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZE RkY1NjIwODAeFw0yNjAzMjUyMjU2MTRaFw0yNjAzMjgyMzM0MTRaMDMxMTAvBgNV BAMTKEE0NDcyNkMxNDQ1ODYyQzM0NTY2Nzg0NkIyMjM0Nzc3MzExREZFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtepQNEmYMrQJ3xkse5UJCS00i pv93avWf+ijFWS4Xa0J3PocU4DW1ehT1KwlsJWHNLagDBAcK9cadmQHiN8pvj0ky C+wH1tQds2ijLnEiW6eKIP15lvQSmoUwRe2oGXBbEJS5jLOvuVqGoXYIsifHTbQa Utg5xZxekh8uu3IPFwlhrIHwF5f3wBgk9FIZ8yJpKA190f4sCyyx06Hfc1pURHeo LPVSkEmyeIGIyKBxY+6d206G2vSPn3hBAjJx3D1g9LG0PFEtwyC/GX2bkpgs+Luk 6nrG6pWA+cvV2WlTKiYivh2VsD6PZC+pSu8mDggzrbcOrUoa4WEXt/22iEunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpEcmwURYYsNFZnhGsiNHdzEd/j8wHwYDVR0j BBgwFoAUJdeIvSpFDAE1S5q3CCaJX9/1YggwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmE3NjY1YS1iNTBiLTRhNDUtYThmOS0wZDY5YmQ3ZDc0M2QvMC8yNUQ3ODhCRDJB NDUwQzAxMzU0QjlBQjcwODI2ODk1RkRGRjU2MjA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5NUZERkY1 NjIwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDZhNzY2NWEtYjUwYi00YTQ1LWE4 ZjktMGQ2OWJkN2Q3NDNkLzAvMjVENzg4QkQyQTQ1MEMwMTM1NEI5QUI3MDgyNjg5 NUZERkY1NjIwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTHOM+Hj4L6yjHw2Qtx3Kxmn9fr0VdYUKO2 lDm1TBAhC6rCq69GQuebLOnxRJEjXIdwQF1lNY6CQ6QZ2WeQmEgdflUl+94GeC7g oQRix5etcCf2zX4NcerVOUFpjPssOHP9o07A8DWEN9m6SHstdaUOmNaw33lJKzSJ DNJbiY+BFQzdFGdj8r0139KmWheaCgcZvmprX4iWVvOwd59MHtgzL1TPpEhW5RZH 5rpH1eLuo88vN3N3NkObNGhWgSFbuXmHCxFRdDt+bTGtfxJ+XSMV0s+oLKPXbEy/ DnexhZ8ipQB/4Jk81w0iDYmgqCeCwme9QnMyRGA7DnbKCGSJJMY= -----END CERTIFICATE-----Generated at Thu Mar 26 15:22:45 2026 by rpki-client