$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft File: 26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json) Hash identifier: R7xRrZh2NJXo+GdsB7+vCCDOZiGV34lt9FdghmTrJDw= Subject key identifier: 67:BF:2E:04:B3:EE:9F:4A:0C:35:0D:51:DF:88:11:6C:8B:D5:03:3D Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Certificate serial: 2A0D334F4B5BAE09D4663B3E74D4C4A033FB7223 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 08:10:01 +0000 Manifest this update: Sun 19 Oct 2025 08:05:01 +0000 Manifest next update: Wed 22 Oct 2025 18:35:01 +0000 Files and hashes: 1: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=) 2: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=) 3: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=) 4: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=) 5: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=) 6: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: HOd1zNJFOER/32mUt6HOz+ZaT6lShpFzbknFtCNTWEQ=) 7: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=) 8: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=) 9: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=) 10: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0d:33:4f:4b:5b:ae:09:d4:66:3b:3e:74:d4:c4:a0:33:fb:72:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Validity Not Before: Oct 19 08:05:01 2025 GMT Not After : Oct 22 18:35:01 2025 GMT Subject: CN=67BF2E04B3EE9F4A0C350D51DF88116C8BD5033D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a8:db:0e:ee:f0:24:21:91:8e:8e:de:f4:d0: 37:33:5d:a0:2c:b1:c6:33:5e:e0:00:76:ab:83:74: f0:47:cf:ed:ae:9f:be:6f:fa:11:dd:fa:88:9d:e3: 73:a1:86:78:79:bd:f7:11:e1:c2:6a:47:9a:17:1f: 4c:c2:c5:30:aa:f8:f5:09:ef:66:db:82:a9:4b:90: d1:66:dc:07:c9:21:af:3d:19:80:ca:7a:f2:7d:7a: 8e:0c:ce:43:31:21:7c:2e:c7:7a:63:cb:a9:ee:4a: 18:fb:15:ee:e3:28:ad:fa:0c:6a:bc:16:1c:6c:3c: 72:ab:61:0b:f7:16:52:26:ea:8a:c6:31:ef:63:2f: ea:9b:5d:c9:3a:3d:33:da:67:ea:d4:c8:de:c1:7b: 9a:b2:6c:62:d0:4e:3d:c3:06:64:d9:ee:26:b8:22: 15:95:ae:53:01:4e:e8:6b:f3:da:28:1b:cd:54:0d: 99:57:f6:01:03:11:40:93:ee:df:8c:fe:ac:3e:d9: c1:f2:ab:ef:fe:86:b9:02:19:3e:d9:8a:d3:d8:e6: 62:96:90:7c:b5:93:20:90:c4:b8:33:ab:61:f1:21: 30:2a:3a:5b:7a:5d:1c:15:a5:2c:6b:f1:6d:65:e8: b3:19:c0:ba:70:c7:f4:09:46:76:fc:6f:00:a3:8c: 6f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BF:2E:04:B3:EE:9F:4A:0C:35:0D:51:DF:88:11:6C:8B:D5:03:3D X509v3 Authority Key Identifier: keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e6:50:a8:2e:bd:e9:ab:78:a5:51:2d:6f:34:ea:32:39:cb: 6c:e0:b8:e0:80:c0:7d:9a:03:93:72:11:de:68:e7:a7:6e:8d: 3d:e5:6f:06:4f:de:04:fc:77:58:72:d0:1c:2c:9b:f0:41:9c: a1:67:f3:6e:90:8e:7a:92:98:e5:13:d9:a6:5d:74:51:37:fe: 7b:24:3e:11:4c:42:72:a3:a7:3a:7f:12:22:1f:f5:df:83:a3: c5:b2:48:7c:ac:08:e9:ec:6f:23:03:0b:2c:c9:e6:f0:b4:9c: 1f:51:77:07:63:5c:07:72:9f:34:e8:25:98:21:e8:f0:1d:bf: f9:ff:0a:99:50:f0:8e:88:92:4e:02:8b:f4:2b:eb:a5:c4:9a: 56:4c:25:dc:27:89:7e:bf:c9:d0:00:86:57:e8:d1:ae:ed:56: 1a:b9:95:19:c7:a1:1f:ac:1d:a7:4d:df:96:1e:d3:c2:c5:ef: b9:81:bc:2c:26:5f:e0:ff:50:76:39:42:3a:1e:c3:be:01:ed: 05:a4:6f:80:a3:9f:24:28:28:bf:ad:0e:b0:d6:5e:12:a2:6d: d7:0c:54:ba:3c:a5:2a:6b:e9:53:a4:ef:51:09:18:01:f9:42: 39:87:45:6a:97:2e:86:e9:28:25:dd:47:90:2b:b4:fe:52:5f: cd:1b:04:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKg0zT0tbrgnUZjs+dNTEoDP7ciMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNF QjlDOUNFNTAeFw0yNTEwMTkwODA1MDFaFw0yNTEwMjIxODM1MDFaMDMxMTAvBgNV BAMTKDY3QkYyRTA0QjNFRTlGNEEwQzM1MEQ1MURGODgxMTZDOEJENTAzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlqNsO7vAkIZGOjt700DczXaAs scYzXuAAdquDdPBHz+2un75v+hHd+oid43Ohhnh5vfcR4cJqR5oXH0zCxTCq+PUJ 72bbgqlLkNFm3AfJIa89GYDKevJ9eo4MzkMxIXwux3pjy6nuShj7Fe7jKK36DGq8 FhxsPHKrYQv3FlIm6orGMe9jL+qbXck6PTPaZ+rUyN7Be5qybGLQTj3DBmTZ7ia4 IhWVrlMBTuhr89ooG81UDZlX9gEDEUCT7t+M/qw+2cHyq+/+hrkCGT7ZitPY5mKW kHy1kyCQxLgzq2HxITAqOlt6XRwVpSxr8W1l6LMZwLpwx/QJRnb8bwCjjG/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ78uBLPun0oMNQ1R34gRbIvVAz0wHwYDVR0j BBgwFoAUJkJbcClPmANdOHiOWXpKbOucnOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YzMDkzNi1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC8yNjQyNUI3MDI5 NEY5ODAzNUQzODc4OEU1OTdBNEE2Q0VCOUM5Q0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNFQjlD OUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMzA5MzYtYzc1MC00MzNiLTlj MmEtOGZmNWYzOGU2M2Q0LzAvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRB NkNFQjlDOUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/mUKguvemreKVRLW806jI5y2zguOCAwH2a A5NyEd5o56dujT3lbwZP3gT8d1hy0Bwsm/BBnKFn826QjnqSmOUT2aZddFE3/nsk PhFMQnKjpzp/EiIf9d+Do8WySHysCOnsbyMDCyzJ5vC0nB9RdwdjXAdynzToJZgh 6PAdv/n/CplQ8I6Ikk4Ci/Qr66XEmlZMJdwniX6/ydAAhlfo0a7tVhq5lRnHoR+s HadN35Ye08LF77mBvCwmX+D/UHY5Qjoew74B7QWkb4CjnyQoKL+tDrDWXhKibdcM VLo8pSpr6VOk71EJGAH5QjmHRWqXLobpKCXdR5ArtP5SX80bBMk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:07:48 2025 by rpki-client