$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: ++sRBtFb+7AVToC2nr1sDoCygYzRfCovaJrds4zt7YE= Subject key identifier: F4:8F:FC:77:72:67:40:E4:EA:D3:9E:B6:3C:B2:90:1F:43:96:02:98 Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 5DE63645B68247A3843EB811F38791B96C5BD53F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 01CF Signing time: Wed 25 Mar 2026 06:20:59 +0000 Manifest this update: Wed 25 Mar 2026 06:15:59 +0000 Manifest next update: Sat 28 Mar 2026 06:50:59 +0000 Files and hashes: 1: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: XPXeqyo3uAeNk8HBLerrx/vohDE1OzqrjTB8SXVyR1c=) 2: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: Or2Iz8tIA990Le0/W5Z7WFvoWcP4wAaxWCTULPVEqcc=) 3: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:e6:36:45:b6:82:47:a3:84:3e:b8:11:f3:87:91:b9:6c:5b:d5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Mar 25 06:15:59 2026 GMT Not After : Mar 28 06:50:59 2026 GMT Subject: CN=F48FFC77726740E4EAD39EB63CB2901F43960298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:35:8b:89:ac:2a:19:45:b0:3c:16:e7:44: f8:be:96:4d:5a:88:6d:cf:3b:8e:eb:fd:dd:13:56: fa:d6:24:5d:fb:81:c7:4a:ac:ec:47:e0:39:17:35: c2:cb:04:6d:91:4d:dc:fc:4b:ce:61:b1:d1:bd:58: 33:81:c9:d1:4e:d7:9e:6f:89:f5:45:ab:d5:84:9b: 5e:b7:5b:21:a8:58:aa:e7:49:ef:f8:a9:05:19:e3: 65:dd:91:47:d4:df:fe:2f:6c:18:e3:a9:3c:17:63: 70:4f:c1:93:97:a1:30:4f:1d:f9:63:59:9f:9c:f9: f3:0f:26:34:cb:2b:ed:76:44:da:83:02:b9:a8:48: 48:c9:7e:8d:99:27:5f:40:29:3d:b8:ab:dd:bf:7e: 48:bd:78:f0:34:e0:38:37:d4:01:0e:17:93:38:7f: e0:90:3e:1c:02:09:29:bd:64:54:02:12:c9:9f:3e: 93:0d:d4:7c:81:41:41:7c:41:92:81:cc:76:6b:32: 19:0e:3d:2c:4b:b9:c4:5b:b3:f9:80:80:4e:da:cd: ee:f4:49:5b:63:4e:63:f3:c2:86:ea:34:60:e7:84: d5:f9:f6:f4:f2:fa:ad:b4:df:4c:66:14:c6:f5:ec: 0d:34:27:6e:fa:c5:b6:bb:3c:1d:70:4a:5b:fd:f7: 8c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8F:FC:77:72:67:40:E4:EA:D3:9E:B6:3C:B2:90:1F:43:96:02:98 X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:95:dd:c6:52:81:a2:32:25:3d:79:93:eb:34:7b:e3:29:32: 0c:fb:f0:3c:9e:b9:92:18:4e:1c:34:98:4e:b9:77:db:7f:21: 2e:77:64:c4:f6:5c:cb:88:11:67:99:85:d7:56:9e:0d:4c:06: 47:ad:ac:6b:6a:cc:b5:e7:5f:33:a3:4a:22:ee:4d:e9:92:e7: 4c:f5:65:58:f7:07:6a:b1:4b:05:34:66:69:e0:04:f1:10:54: ff:0a:7e:e0:ae:7c:50:a5:76:31:37:da:66:9b:7f:be:8b:c2: 6e:8b:82:6e:7c:7f:b6:6e:41:6f:9d:c1:e1:4d:a0:ff:4e:79: 3b:fe:94:90:07:2f:fb:52:c3:91:9b:80:70:db:9c:a5:38:d3: e5:f7:53:17:c2:88:c5:42:23:b3:8d:1c:09:5f:0d:cb:88:4b: 6e:20:70:8b:2b:bd:98:84:7f:63:9a:0f:a0:4c:93:1f:bf:e1: 4c:e4:c9:11:cf:62:1d:38:65:0e:41:b2:a6:c2:7b:ae:d4:44: 08:67:53:8f:8d:ce:77:a6:d1:49:af:79:de:6b:f4:db:5c:5d: 77:b9:3e:e1:5c:27:b6:f3:80:25:f9:ed:f6:03:e0:80:00:c0: 20:98:03:5a:49:1e:27:c9:5b:9a:2c:b2:cc:c3:b3:36:65:b0: e3:0a:03:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXeY2RbaCR6OEPrgR84eRuWxb1T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNjAzMjUwNjE1NTlaFw0yNjAzMjgwNjUwNTlaMDMxMTAvBgNV BAMTKEY0OEZGQzc3NzI2NzQwRTRFQUQzOUVCNjNDQjI5MDFGNDM5NjAyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqmTWLiawqGUWwPBbnRPi+lk1a iG3PO47r/d0TVvrWJF37gcdKrOxH4DkXNcLLBG2RTdz8S85hsdG9WDOBydFO155v ifVFq9WEm163WyGoWKrnSe/4qQUZ42XdkUfU3/4vbBjjqTwXY3BPwZOXoTBPHflj WZ+c+fMPJjTLK+12RNqDArmoSEjJfo2ZJ19AKT24q92/fki9ePA04Dg31AEOF5M4 f+CQPhwCCSm9ZFQCEsmfPpMN1HyBQUF8QZKBzHZrMhkOPSxLucRbs/mAgE7aze70 SVtjTmPzwobqNGDnhNX59vTy+q2030xmFMb17A00J276xba7PB1wSlv994yFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9I/8d3JnQOTq0562PLKQH0OWApgwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGV3cZSgaIyJT15k+s0e+MpMgz78DyeuZIY Thw0mE65d9t/IS53ZMT2XMuIEWeZhddWng1MBketrGtqzLXnXzOjSiLuTemS50z1 ZVj3B2qxSwU0ZmngBPEQVP8KfuCufFCldjE32mabf76Lwm6Lgm58f7ZuQW+dweFN oP9OeTv+lJAHL/tSw5GbgHDbnKU40+X3UxfCiMVCI7ONHAlfDcuIS24gcIsrvZiE f2OaD6BMkx+/4UzkyRHPYh04ZQ5BsqbCe67URAhnU4+Nznem0Umved5r9NtcXXe5 PuFcJ7bzgCX57fYD4IAAwCCYA1pJHifJW5ossszDszZlsOMKA58= -----END CERTIFICATE-----Generated at Thu Mar 26 10:39:54 2026 by rpki-client