$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: QLstvZXPYOr7/ua9PCxhlDerrZUIOr2Apn5MPzTSB9c= Subject key identifier: 29:A1:65:26:83:5B:04:D2:38:B1:4C:19:3E:CA:E5:19:0D:3F:0D:BF Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 550865BDFA80488AEE8F9260C3FE867834278359 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 0316 Signing time: Sat 18 Oct 2025 14:30:45 +0000 Manifest this update: Sat 18 Oct 2025 14:25:45 +0000 Manifest next update: Tue 21 Oct 2025 23:31:45 +0000 Files and hashes: 1: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=) 2: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: F2MKSMfD5Dz/OPnyBgPzU+r5dFvi5M3ZVjSsF+jUCjQ=) 3: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:08:65:bd:fa:80:48:8a:ee:8f:92:60:c3:fe:86:78:34:27:83:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Oct 18 14:25:45 2025 GMT Not After : Oct 21 23:31:45 2025 GMT Subject: CN=29A16526835B04D238B14C193ECAE5190D3F0DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:06:f3:be:9a:2b:56:e8:eb:dd:d5:40:23: 68:57:4c:32:c8:63:97:46:84:0d:35:af:ba:15:d7: bb:ef:de:b0:70:e1:5c:59:49:53:3a:d3:e5:6a:b3: 8c:ea:4b:ae:b1:07:4a:a6:7a:0f:07:69:6c:7f:f6: 7e:01:84:54:18:1d:ee:dd:c8:85:95:de:2b:87:e7: d2:ef:93:82:fd:1e:15:c8:d2:2b:ea:16:63:76:27: 0e:77:d4:cb:2d:55:cb:cb:3d:52:f7:d3:b1:96:3b: 9d:29:fc:3e:e5:f3:1e:62:9e:f6:5a:67:58:01:82: 70:72:fb:dc:10:12:f8:fe:56:9d:1a:83:f5:19:d4: 76:cc:70:f5:09:07:28:ea:19:6c:bb:4a:54:3d:8d: 26:fc:82:ec:95:d4:a0:5f:57:95:a0:fe:d3:f5:cf: fe:31:ad:61:d4:79:01:ef:bf:bd:0d:9d:b1:2e:92: ae:12:86:3b:3b:54:17:b5:a1:14:de:df:0f:09:5b: 0a:ed:71:74:fe:f8:e0:b2:b6:21:56:2b:a9:ba:91: 69:d7:07:7c:3f:8e:e4:4a:11:f5:16:74:3f:47:1b: 08:f1:10:ac:da:a5:4d:14:25:69:fe:f8:1b:12:37: a4:72:58:dd:d6:9e:e3:b7:51:9a:6a:61:f9:4c:3b: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A1:65:26:83:5B:04:D2:38:B1:4C:19:3E:CA:E5:19:0D:3F:0D:BF X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:d8:8a:d2:e2:11:08:7a:4b:9b:7c:d6:0b:0d:5c:f1:67:8b: c7:5e:1d:73:67:84:05:39:70:06:7c:e4:b1:dd:ef:2a:0f:ca: 7f:73:70:eb:3c:69:a3:6b:73:b9:0f:5c:f2:eb:6f:dd:4b:03: 26:53:c9:11:56:72:47:f3:86:63:d9:43:42:bc:82:4b:60:12: d7:9a:63:e3:8d:e7:e9:60:ce:ae:b8:9e:16:61:86:86:0a:85: 24:a8:1e:f3:6b:75:89:66:49:3b:33:d9:4f:d8:e8:f0:fa:60: 70:3a:99:bb:f6:04:72:1b:90:df:1c:f1:a6:3f:43:37:5d:e4: ff:14:94:3c:d1:a3:6e:f7:30:42:28:6c:48:3e:1b:94:71:45: ee:9c:54:e5:97:3e:3d:bc:34:75:85:23:04:18:81:06:f0:58: ad:9c:6c:dc:0e:f1:d4:21:d3:4f:96:f7:11:76:d8:02:5f:be: 78:7e:89:9e:ba:e5:21:ea:7d:ef:3b:56:25:84:28:8c:d8:38: e4:d9:23:e0:05:5b:6a:cb:57:65:bc:c7:3d:6e:ee:c9:89:dd: 13:0e:36:86:e3:06:dd:9a:c4:3d:d5:97:67:a3:92:bc:b4:af: 28:fd:17:fb:23:57:d0:3e:3b:4c:71:da:b8:6c:f3:9f:f9:5b: 0a:6f:50:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQhlvfqASIruj5Jgw/6GeDQng1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNTEwMTgxNDI1NDVaFw0yNTEwMjEyMzMxNDVaMDMxMTAvBgNV BAMTKDI5QTE2NTI2ODM1QjA0RDIzOEIxNEMxOTNFQ0FFNTE5MEQzRjBEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9gbzvporVujr3dVAI2hXTDLI Y5dGhA01r7oV17vv3rBw4VxZSVM60+Vqs4zqS66xB0qmeg8HaWx/9n4BhFQYHe7d yIWV3iuH59Lvk4L9HhXI0ivqFmN2Jw531MstVcvLPVL307GWO50p/D7l8x5invZa Z1gBgnBy+9wQEvj+Vp0ag/UZ1HbMcPUJByjqGWy7SlQ9jSb8guyV1KBfV5Wg/tP1 z/4xrWHUeQHvv70NnbEukq4Shjs7VBe1oRTe3w8JWwrtcXT++OCytiFWK6m6kWnX B3w/juRKEfUWdD9HGwjxEKzapU0UJWn++BsSN6RyWN3WnuO3UZpqYflMO5C9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKaFlJoNbBNI4sUwZPsrlGQ0/Db8wHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXYitLiEQh6S5t81gsNXPFni8deHXNnhAU5 cAZ85LHd7yoPyn9zcOs8aaNrc7kPXPLrb91LAyZTyRFWckfzhmPZQ0K8gktgEtea Y+ON5+lgzq64nhZhhoYKhSSoHvNrdYlmSTsz2U/Y6PD6YHA6mbv2BHIbkN8c8aY/ Qzdd5P8UlDzRo273MEIobEg+G5RxRe6cVOWXPj28NHWFIwQYgQbwWK2cbNwO8dQh 00+W9xF22AJfvnh+iZ665SHqfe87ViWEKIzYOOTZI+AFW2rLV2W8xz1u7smJ3RMO NobjBt2axD3Vl2ejkry0ryj9F/sjV9A+O0xx2rhs85/5WwpvUNg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:34 2025 by rpki-client