$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: qlHPhaiIw8FZY4CerpgMOVZP6Cs1PK3pGndxcCEWHKM= Subject key identifier: 7F:D5:32:BF:60:42:E9:DF:1B:2F:DF:36:3E:20:00:42:5D:F4:B9:91 Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 4065FF6E6F23D9B7F4FBEB73833D4E43455131A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 02E4 Signing time: Sun 19 Oct 2025 23:42:21 +0000 Manifest this update: Sun 19 Oct 2025 23:37:21 +0000 Manifest next update: Thu 23 Oct 2025 05:29:21 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=) 2: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=) 3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: Ks+R8L34GIsQSp4wjZlVjDPu8NgBVYla3Vg6kmqLZsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:65:ff:6e:6f:23:d9:b7:f4:fb:eb:73:83:3d:4e:43:45:51:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Oct 19 23:37:21 2025 GMT Not After : Oct 23 05:29:21 2025 GMT Subject: CN=7FD532BF6042E9DF1B2FDF363E2000425DF4B991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0a:fd:53:e8:58:69:15:a1:b2:e0:6b:53:33: 24:b0:d2:1b:c9:0f:5f:cf:3a:de:8e:73:96:70:30: f3:84:f0:e3:74:2f:82:26:b1:89:e9:9c:94:6d:d0: cb:72:93:09:52:96:a0:42:70:8c:47:d3:d0:06:51: 5f:81:f5:85:ce:5f:73:dc:3f:19:96:10:3c:24:7a: 54:c7:7a:c8:ed:34:37:98:00:65:40:f6:d6:e8:8a: 02:16:dd:9f:37:07:e8:a6:b6:73:f5:a3:7a:35:66: e7:91:36:b4:97:0e:f3:a4:e8:23:ee:31:18:57:4c: a6:7c:9a:6e:b4:a0:84:52:b2:0d:09:1b:07:a4:11: 71:90:83:8d:b0:48:48:45:db:a5:c9:49:7d:9e:a9: 15:f4:67:69:42:62:5d:7e:58:b8:9c:25:56:7a:8c: 0e:b6:a1:46:1e:5b:a0:61:b4:69:fe:6a:5c:9d:3d: 09:62:31:6f:49:86:b6:60:26:93:ce:27:76:92:37: 56:0d:c5:89:f8:e6:a0:3f:85:79:9f:7b:54:53:0b: 91:8f:19:58:80:e1:ea:de:4d:36:a4:60:4e:07:9c: 6c:2a:68:19:e4:92:87:96:53:0c:a6:51:fb:cf:5c: 23:0e:a7:05:62:ca:b8:cd:bb:cd:d1:6d:0a:b2:02: e7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D5:32:BF:60:42:E9:DF:1B:2F:DF:36:3E:20:00:42:5D:F4:B9:91 X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:28:c3:0f:b4:cc:f7:20:94:b9:ce:8f:ee:97:cf:ee:b0:aa: 1d:46:6c:ef:37:99:83:43:a4:47:3a:c0:8c:91:95:19:23:ec: d6:3f:56:8c:c9:77:46:8c:28:de:17:ce:c0:37:a6:2d:5f:dd: 97:e3:36:a6:0a:6c:a3:b2:aa:2d:cc:42:be:91:ff:fa:00:21: 60:1e:01:08:25:3c:4f:ee:b8:06:bd:a5:a3:72:6d:fa:7f:fc: 05:28:5a:c9:50:fe:89:dc:de:6b:a0:e5:24:87:05:cf:44:4d: e2:19:05:e7:7d:0f:53:a1:88:e2:d5:71:e2:d4:7e:20:05:11: 3a:de:f0:b9:6b:13:29:da:db:4d:52:63:c8:20:d8:58:e2:8d: 75:04:47:eb:bb:c2:53:51:2b:4f:86:b6:e9:fb:75:cc:58:55: e0:3c:3f:82:f8:78:4d:e3:31:02:82:db:bf:d1:7c:22:7d:61: b0:a0:e0:51:52:cb:64:6a:d5:12:0f:47:97:14:a4:2d:39:c2: 34:5e:31:43:52:0c:59:81:f5:db:25:fe:f3:c6:e2:94:e9:3b: 8f:08:b6:76:91:de:cd:f4:e3:30:c5:46:cf:64:9c:d7:f3:12: 07:c2:cd:a5:8f:7a:b5:eb:95:f5:11:d5:8c:74:f4:2a:03:a7: 61:4c:83:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGX/bm8j2bf0++tzgz1OQ0VRMaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTEwMTkyMzM3MjFaFw0yNTEwMjMwNTI5MjFaMDMxMTAvBgNV BAMTKDdGRDUzMkJGNjA0MkU5REYxQjJGREYzNjNFMjAwMDQyNURGNEI5OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwCv1T6FhpFaGy4GtTMySw0hvJ D1/POt6Oc5ZwMPOE8ON0L4ImsYnpnJRt0MtykwlSlqBCcIxH09AGUV+B9YXOX3Pc PxmWEDwkelTHesjtNDeYAGVA9tboigIW3Z83B+imtnP1o3o1ZueRNrSXDvOk6CPu MRhXTKZ8mm60oIRSsg0JGwekEXGQg42wSEhF26XJSX2eqRX0Z2lCYl1+WLicJVZ6 jA62oUYeW6BhtGn+alydPQliMW9JhrZgJpPOJ3aSN1YNxYn45qA/hXmfe1RTC5GP GViA4ereTTakYE4HnGwqaBnkkoeWUwymUfvPXCMOpwViyrjNu83RbQqyAuf9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf9Uyv2BC6d8bL982PiAAQl30uZEwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQoww+0zPcglLnOj+6Xz+6wqh1GbO83mYND pEc6wIyRlRkj7NY/VozJd0aMKN4XzsA3pi1f3ZfjNqYKbKOyqi3MQr6R//oAIWAe AQglPE/uuAa9paNybfp//AUoWslQ/onc3mug5SSHBc9ETeIZBed9D1OhiOLVceLU fiAFETre8LlrEyna201SY8gg2FjijXUER+u7wlNRK0+Gtun7dcxYVeA8P4L4eE3j MQKC27/RfCJ9YbCg4FFSy2Rq1RIPR5cUpC05wjReMUNSDFmB9dsl/vPG4pTpO48I tnaR3s304zDFRs9knNfzEgfCzaWPerXrlfUR1Yx09CoDp2FMg18= -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:50 2025 by rpki-client