$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: 16EB6rsz2xIl5BtP89k/6q+ejfLotpOXxguhIcQPxJg= Subject key identifier: 45:4C:B8:81:78:72:EA:E4:97:C3:76:52:A2:D2:3D:7E:49:FC:FE:A6 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 770204B65010D08FE2FA5B90EE66F6397BCBC116 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 032A Signing time: Wed 25 Mar 2026 10:52:43 +0000 Manifest this update: Wed 25 Mar 2026 10:47:43 +0000 Manifest next update: Sat 28 Mar 2026 11:04:43 +0000 Files and hashes: 1: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=) 2: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: I7qa9Iyi+IRVqTIAvr87xr/3dmKSuuG1jIoKT//P9Mg=) 3: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:02:04:b6:50:10:d0:8f:e2:fa:5b:90:ee:66:f6:39:7b:cb:c1:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Mar 25 10:47:43 2026 GMT Not After : Mar 28 11:04:43 2026 GMT Subject: CN=454CB8817872EAE497C37652A2D23D7E49FCFEA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:72:ba:2a:85:c1:c6:34:26:39:1a:22:31:06: 46:28:e8:bc:7b:9d:5b:23:d0:14:e8:b3:6c:68:8e: 4d:d4:d6:b6:c9:d2:b2:22:59:8b:bd:96:55:c0:4e: 36:ea:25:a4:25:46:27:6d:fd:fa:27:ec:d5:02:39: 4a:39:2a:6b:50:92:bc:8c:76:7c:19:53:16:6c:dc: 52:6f:c5:de:03:fa:88:d6:f8:a4:d6:93:bc:0c:1e: 61:e5:86:09:cb:cd:50:74:a0:14:96:a5:70:59:4a: 3f:7f:02:c1:dd:7d:e3:09:21:bf:3b:29:c7:74:29: 9e:86:64:15:39:ec:c8:98:20:9c:6f:ee:8f:c3:ce: dd:bd:36:c1:a1:78:45:c5:f3:6a:e6:e0:90:b7:de: 23:01:15:37:eb:83:1f:0e:e4:74:f4:47:14:4d:d2: fd:d4:04:79:24:a5:4c:0e:b9:05:13:14:40:bb:22: 38:ae:b7:a4:35:1f:c0:ce:68:f1:8b:d4:d0:29:10: 6b:51:9c:79:d5:16:be:7a:5a:2b:47:54:ff:8b:0c: e2:5a:3d:bb:bc:cf:3d:d7:cd:02:cd:da:b1:f7:49: 6c:c8:b8:df:68:9e:1c:f0:d5:99:f4:98:98:a7:1f: ac:87:06:30:da:7a:e5:3b:ab:bd:7c:ec:9a:7b:c8: 70:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4C:B8:81:78:72:EA:E4:97:C3:76:52:A2:D2:3D:7E:49:FC:FE:A6 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:4c:9f:e2:a9:84:a1:68:58:64:db:10:6a:2a:35:85:e5:1a: c8:ba:49:53:85:db:9d:94:7a:46:89:c7:fb:cb:62:52:aa:8e: a5:7f:81:cb:b4:6f:fe:49:79:ac:1d:5f:8e:78:13:2d:c6:4d: 13:ff:28:62:7e:97:0c:5b:3e:25:20:49:44:4b:ec:2d:c2:49: 71:a8:97:9e:17:ba:be:0f:5a:23:45:07:a6:f1:40:e0:bf:61: 94:2b:59:a7:92:b5:1b:3c:fe:c0:ae:11:0d:2b:b4:d8:96:f3: 4f:7c:be:87:da:08:07:e4:53:b7:b8:26:5e:46:84:6f:82:1c: b8:c7:80:98:d3:e8:13:8e:c5:6d:a4:db:99:47:d9:c2:f7:b5: b4:ba:04:1b:4d:a8:67:62:75:a4:5d:2c:fb:1b:9f:3a:05:62: e7:8c:67:96:ac:86:d4:6a:e0:72:6f:e8:fc:6b:0d:a5:6d:ae: d2:b5:57:9f:d9:fe:10:fb:24:69:17:6f:ac:ed:ad:23:42:ca: 5b:d3:13:38:be:2b:0e:a9:38:d6:bd:2a:e5:54:1b:e6:2e:97: 52:35:0a:a1:31:49:f5:35:19:3c:55:93:e8:9c:70:f9:db:0d: 8e:06:2b:91:e4:94:1a:aa:60:6d:a7:85:c3:44:7e:ab:c6:ee: be:2e:c4:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwIEtlAQ0I/i+luQ7mb2OXvLwRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNjAzMjUxMDQ3NDNaFw0yNjAzMjgxMTA0NDNaMDMxMTAvBgNV BAMTKDQ1NENCODgxNzg3MkVBRTQ5N0MzNzY1MkEyRDIzRDdFNDlGQ0ZFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7croqhcHGNCY5GiIxBkYo6Lx7 nVsj0BTos2xojk3U1rbJ0rIiWYu9llXATjbqJaQlRidt/fon7NUCOUo5KmtQkryM dnwZUxZs3FJvxd4D+ojW+KTWk7wMHmHlhgnLzVB0oBSWpXBZSj9/AsHdfeMJIb87 Kcd0KZ6GZBU57MiYIJxv7o/Dzt29NsGheEXF82rm4JC33iMBFTfrgx8O5HT0RxRN 0v3UBHkkpUwOuQUTFEC7Ijiut6Q1H8DOaPGL1NApEGtRnHnVFr56WitHVP+LDOJa Pbu8zz3XzQLN2rH3SWzIuN9onhzw1Zn0mJinH6yHBjDaeuU7q7187Jp7yHDNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURUy4gXhy6uSXw3ZSotI9fkn8/qYwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlMn+KphKFoWGTbEGoqNYXlGsi6SVOF252U ekaJx/vLYlKqjqV/gcu0b/5JeawdX454Ey3GTRP/KGJ+lwxbPiUgSURL7C3CSXGo l54Xur4PWiNFB6bxQOC/YZQrWaeStRs8/sCuEQ0rtNiW8098vofaCAfkU7e4Jl5G hG+CHLjHgJjT6BOOxW2k25lH2cL3tbS6BBtNqGdidaRdLPsbnzoFYueMZ5ashtRq 4HJv6PxrDaVtrtK1V5/Z/hD7JGkXb6ztrSNCylvTEzi+Kw6pONa9KuVUG+Yul1I1 CqExSfU1GTxVk+iccPnbDY4GK5HklBqqYG2nhcNEfqvG7r4uxF4= -----END CERTIFICATE-----Generated at Thu Mar 26 09:24:05 2026 by rpki-client