$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: ZetHW2yijmfz/hCLJqDyHtEgZBlA7vFH+sGYkKag2ug= Subject key identifier: 1D:36:8E:BA:F7:C3:A5:45:FF:5E:C6:E9:42:0F:C2:96:EA:5B:B6:80 Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 2A545E9980632384F48667EEC00D0E137DC7C5F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 035B Signing time: Wed 25 Mar 2026 01:40:52 +0000 Manifest this update: Wed 25 Mar 2026 01:35:52 +0000 Manifest next update: Sat 28 Mar 2026 13:38:52 +0000 Files and hashes: 1: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=) 2: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: 5x1aTPa88lZE8BPb4xEDRfWutSxcXiDwmnbeYz7T6wg=) 3: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:54:5e:99:80:63:23:84:f4:86:67:ee:c0:0d:0e:13:7d:c7:c5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Mar 25 01:35:52 2026 GMT Not After : Mar 28 13:38:52 2026 GMT Subject: CN=1D368EBAF7C3A545FF5EC6E9420FC296EA5BB680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b6:54:90:77:a7:90:63:db:3f:a0:38:80:f1: a4:12:f9:c7:b4:5f:29:3c:c1:ed:3e:48:a7:2c:45: d4:25:25:5d:6d:df:c6:46:10:4d:75:1d:ff:01:9d: 7d:94:66:36:7f:f1:b0:b8:5d:1b:f5:ae:15:06:24: ed:27:41:b6:27:ab:47:9a:ab:8f:05:bf:2d:92:a8: 13:81:a9:f5:c0:7a:67:cf:8b:de:c5:62:1f:77:6b: 57:37:6f:a1:b8:7b:dc:7a:a4:64:46:e3:c7:16:b2: 21:52:3d:57:53:5f:4e:b0:3b:e5:aa:4c:d8:1f:ae: bb:6e:38:18:42:5c:fc:1f:f4:40:da:a5:31:ed:57: a2:af:f2:07:51:88:e6:71:96:77:80:38:be:e0:2d: c8:00:3e:56:58:c1:e2:1f:65:02:78:38:16:e2:62: 2f:3c:38:1f:f4:b1:60:a7:41:05:2c:22:56:32:1c: df:74:d9:98:d7:48:3e:c9:af:df:49:41:7a:bc:7e: c4:e0:30:78:fc:14:2a:00:3f:3a:ed:61:77:85:d3: 8e:1d:dc:4e:da:34:fd:b0:4c:22:b3:5a:3e:0c:c6: c0:4d:22:7b:cd:fd:b1:5d:b1:99:0c:c9:8d:10:39: 65:7e:b1:bd:3e:97:de:ae:b8:76:d8:b7:9d:c5:d7: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:36:8E:BA:F7:C3:A5:45:FF:5E:C6:E9:42:0F:C2:96:EA:5B:B6:80 X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:33:ca:07:35:87:0e:c3:71:ab:c8:34:d6:06:52:6d:a8:2c: df:ea:d8:d9:77:67:e9:d6:85:0f:87:08:3c:f1:d3:5f:2a:39: 89:91:ff:d9:8d:00:db:75:d1:25:cd:d3:27:bf:ff:96:53:12: 27:50:aa:5d:e1:64:8e:31:af:a3:9b:07:a4:29:e4:32:08:c1: db:9f:e5:d2:3d:de:bb:14:43:26:de:c6:3a:76:46:fa:6b:15: d8:4f:71:47:2c:d1:f7:0a:95:36:13:7e:70:59:54:0e:a7:bf: 6b:75:d9:7e:64:09:85:3a:8f:c1:d6:f2:f7:c1:42:d0:c9:ed: fc:9b:61:df:80:6e:7d:ab:0d:98:9b:26:86:61:ed:f4:3d:c6: 8d:c1:a5:36:91:ff:bb:05:f5:75:72:5e:43:b2:8c:07:11:45: 5a:4a:b7:28:b9:ca:57:f5:30:3f:2c:ca:b9:b5:8b:fd:7d:25: 7a:e1:c3:b3:ed:f5:e9:1d:89:7c:5e:1c:bb:24:f5:d7:80:f1: 2e:10:f6:47:d9:1a:8b:1a:35:6e:c6:67:29:e7:db:e1:cd:00: 8a:1a:6d:e3:5a:76:23:08:db:8b:6f:6a:f2:f8:06:78:28:38: 28:97:28:7a:fb:5e:64:bf:5d:5b:4f:64:5e:8d:a2:f0:d0:cf: ff:c1:5f:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlRemYBjI4T0hmfuwA0OE33HxfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNjAzMjUwMTM1NTJaFw0yNjAzMjgxMzM4NTJaMDMxMTAvBgNV BAMTKDFEMzY4RUJBRjdDM0E1NDVGRjVFQzZFOTQyMEZDMjk2RUE1QkI2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0tlSQd6eQY9s/oDiA8aQS+ce0 Xyk8we0+SKcsRdQlJV1t38ZGEE11Hf8BnX2UZjZ/8bC4XRv1rhUGJO0nQbYnq0ea q48Fvy2SqBOBqfXAemfPi97FYh93a1c3b6G4e9x6pGRG48cWsiFSPVdTX06wO+Wq TNgfrrtuOBhCXPwf9EDapTHtV6Kv8gdRiOZxlneAOL7gLcgAPlZYweIfZQJ4OBbi Yi88OB/0sWCnQQUsIlYyHN902ZjXSD7Jr99JQXq8fsTgMHj8FCoAPzrtYXeF044d 3E7aNP2wTCKzWj4MxsBNInvN/bFdsZkMyY0QOWV+sb0+l96uuHbYt53F138tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHTaOuvfDpUX/XsbpQg/ClupbtoAwHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIzygc1hw7DcavINNYGUm2oLN/q2Nl3Z+nW hQ+HCDzx018qOYmR/9mNANt10SXN0ye//5ZTEidQql3hZI4xr6ObB6Qp5DIIwduf 5dI93rsUQybexjp2RvprFdhPcUcs0fcKlTYTfnBZVA6nv2t12X5kCYU6j8HW8vfB QtDJ7fybYd+Abn2rDZibJoZh7fQ9xo3BpTaR/7sF9XVyXkOyjAcRRVpKtyi5ylf1 MD8syrm1i/19JXrhw7Pt9ekdiXxeHLsk9deA8S4Q9kfZGosaNW7GZynn2+HNAIoa beNadiMI24tvavL4BngoOCiXKHr7XmS/XVtPZF6NovDQz//BX/o= -----END CERTIFICATE-----Generated at Thu Mar 26 07:36:18 2026 by rpki-client