$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: GLVnwmEqwqIlAsSJ4wRQMPLYG1556bdXjg4zTLrMscI= Subject key identifier: 07:14:4E:2E:A3:6B:A0:42:8E:D4:45:7C:F0:D9:81:03:73:0A:CF:46 Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 6269A0AD8B97DB7079C336D598CF455DBB1230D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 0187 Signing time: Sat 18 Oct 2025 22:10:51 +0000 Manifest this update: Sat 18 Oct 2025 22:05:51 +0000 Manifest next update: Wed 22 Oct 2025 09:17:51 +0000 Files and hashes: 1: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: hwAz0+F1Pflvq+/i/Ox60vy6n9w5Py2JiFtWThdf0Oo=) 2: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: DAHFV0c/aFM082VX0oHdmhTVlcTRSOxGfmPDNewRFNU=) 3: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:69:a0:ad:8b:97:db:70:79:c3:36:d5:98:cf:45:5d:bb:12:30:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Oct 18 22:05:51 2025 GMT Not After : Oct 22 09:17:51 2025 GMT Subject: CN=07144E2EA36BA0428ED4457CF0D98103730ACF46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:6b:5e:ca:69:aa:10:32:ae:fa:17:b2:ee: f7:7c:83:ab:78:13:08:81:66:fe:48:12:75:c2:d5: 94:25:9c:70:13:fb:0b:f6:42:31:54:f6:4b:2f:25: 51:29:72:17:a6:f9:07:fa:3f:12:fe:85:2d:97:2a: 6e:fe:81:15:fe:4a:34:78:cf:57:12:9c:0f:45:3d: 14:67:e4:47:2a:d0:84:bc:fd:38:31:88:f5:5b:18: 1f:80:19:01:19:1a:a6:d2:ba:14:7a:13:46:47:56: 5a:d9:80:18:8f:66:1b:39:2c:87:07:6c:01:0c:c4: 80:9f:80:1a:17:dc:86:ca:07:d1:a8:dc:02:24:7a: f4:52:40:23:b5:89:e0:ec:49:bf:fe:1c:60:df:b3: c6:32:2f:f4:7e:3a:9e:f1:c9:63:2d:31:73:9a:20: c9:41:b7:f9:d1:ae:19:fa:fa:d4:c5:45:b0:be:c5: f2:60:6a:4a:72:e5:5e:d0:72:8f:55:a5:39:36:d8: e4:75:03:62:b5:fb:41:0c:e3:84:32:92:0c:c6:0c: 89:52:b1:48:85:48:af:5b:56:69:6a:80:1c:89:e4: 10:72:af:b8:95:26:f3:ff:d3:74:a1:01:9e:c2:8c: e7:fe:e1:3d:b9:70:9b:6e:b5:b1:9e:f6:e9:66:9d: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:14:4E:2E:A3:6B:A0:42:8E:D4:45:7C:F0:D9:81:03:73:0A:CF:46 X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e7:2d:4a:04:14:4c:a2:c1:8a:7c:97:49:c0:e0:36:bf:82: d2:f6:ea:bd:6a:32:c1:2c:a7:23:bf:41:02:29:eb:2f:b4:cf: a9:73:72:79:97:0c:98:94:39:8a:c4:02:6d:c9:ff:8a:c1:55: 35:69:e3:9f:52:27:6c:2a:b7:ef:d3:c9:c3:aa:80:b8:19:73: 68:81:12:35:63:a8:39:52:6d:a0:1f:b3:89:7e:06:fc:46:cf: c5:8a:f2:d1:66:ab:8d:88:6b:8b:f0:16:30:3a:39:fa:c4:b8: f3:53:ce:d0:10:92:34:82:05:3e:1c:11:e6:78:f4:49:36:c7: 43:21:70:1a:2f:8e:cc:3d:8c:d2:2d:dc:44:46:17:54:11:b7: 1a:15:26:06:1e:d9:6f:a0:36:24:8c:db:94:8d:f5:0c:28:fe: 60:58:47:97:f9:19:69:0d:67:28:8e:d1:77:d3:96:97:02:cf: 7d:60:d7:29:b8:55:00:af:4c:06:43:ae:3c:bd:de:69:b3:04: 9a:06:e6:c0:fb:8b:d9:b3:2d:6b:2b:b5:50:5c:3b:e5:80:53: b1:a8:33:2e:98:1d:75:f5:8d:a2:f4:b5:0d:c4:e7:4d:d7:b8: 25:a2:25:0e:14:60:3d:05:25:49:c3:45:29:1b:cd:fd:a1:ce: c1:24:c4:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmmgrYuX23B5wzbVmM9FXbsSMNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNTEwMTgyMjA1NTFaFw0yNTEwMjIwOTE3NTFaMDMxMTAvBgNV BAMTKDA3MTQ0RTJFQTM2QkEwNDI4RUQ0NDU3Q0YwRDk4MTAzNzMwQUNGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQ2teymmqEDKu+hey7vd8g6t4 EwiBZv5IEnXC1ZQlnHAT+wv2QjFU9ksvJVEpchem+Qf6PxL+hS2XKm7+gRX+SjR4 z1cSnA9FPRRn5Ecq0IS8/TgxiPVbGB+AGQEZGqbSuhR6E0ZHVlrZgBiPZhs5LIcH bAEMxICfgBoX3IbKB9Go3AIkevRSQCO1ieDsSb/+HGDfs8YyL/R+Op7xyWMtMXOa IMlBt/nRrhn6+tTFRbC+xfJgakpy5V7Qco9VpTk22OR1A2K1+0EM44QykgzGDIlS sUiFSK9bVmlqgByJ5BByr7iVJvP/03ShAZ7CjOf+4T25cJtutbGe9ulmnbytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxROLqNroEKO1EV88NmBA3MKz0YwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXnLUoEFEyiwYp8l0nA4Da/gtL26r1qMsEs pyO/QQIp6y+0z6lzcnmXDJiUOYrEAm3J/4rBVTVp459SJ2wqt+/TycOqgLgZc2iB EjVjqDlSbaAfs4l+BvxGz8WK8tFmq42Ia4vwFjA6OfrEuPNTztAQkjSCBT4cEeZ4 9Ek2x0MhcBovjsw9jNIt3ERGF1QRtxoVJgYe2W+gNiSM25SN9Qwo/mBYR5f5GWkN ZyiO0XfTlpcCz31g1ym4VQCvTAZDrjy93mmzBJoG5sD7i9mzLWsrtVBcO+WAU7Go My6YHXX1jaL0tQ3E503XuCWiJQ4UYD0FJUnDRSkbzf2hzsEkxKc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:50 2025 by rpki-client