$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: yJMIrFkPrJ3tIOXvnskCiJhK2pgne60w55IABC9+1U0= Subject key identifier: 30:77:81:2B:CB:53:B5:A2:76:44:AD:41:13:36:B8:9C:AF:89:5C:81 Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 3E03DD397057A97C668C7DA852F542930A708C1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 0284 Signing time: Tue 24 Mar 2026 16:30:53 +0000 Manifest this update: Tue 24 Mar 2026 16:25:53 +0000 Manifest next update: Fri 27 Mar 2026 17:57:53 +0000 Files and hashes: 1: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: TA1eUafUeiJYILhH4HYViFTtOG1Yb421QDz2gzPo4kU=) 2: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: PTfP/ORAadNCRqn6GRUl67PChsh7/azn8ts3Pm8KgQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:03:dd:39:70:57:a9:7c:66:8c:7d:a8:52:f5:42:93:0a:70:8c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: Mar 24 16:25:53 2026 GMT Not After : Mar 27 17:57:53 2026 GMT Subject: CN=3077812BCB53B5A27644AD411336B89CAF895C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:f4:4e:de:d2:bd:75:9e:4f:c6:ba:7e:c2: 94:44:f7:a8:8e:f0:d8:1c:12:2a:1a:3c:9c:20:6e: 81:6a:26:45:91:83:94:a3:40:f0:aa:c3:b0:8d:c9: 54:cd:94:6e:c3:85:05:dc:a0:f6:65:26:c7:18:8f: e6:32:70:17:f5:99:08:2f:11:d7:7b:da:06:e7:00: a1:95:83:5b:4b:89:29:2e:98:20:e4:0d:6d:9a:ef: 32:a4:84:ae:42:03:87:e8:39:49:63:ba:b0:bf:f6: 2f:1e:8c:cf:76:dd:58:91:c5:6a:2e:f1:6d:06:db: c5:e4:2f:a7:bf:8c:f2:12:58:05:05:03:a9:3d:d9: 1c:26:cf:63:e7:a1:3b:c0:05:a0:bf:a5:fd:63:40: f2:0e:21:bc:69:bf:38:c1:86:62:f4:5c:8c:be:f9: 66:4c:79:5e:39:8b:05:7c:bb:62:43:fc:d6:d7:71: e0:ee:09:c6:a7:3a:a8:39:f8:76:0b:44:ec:db:b9: 20:be:89:1f:f8:91:bb:88:aa:0d:93:43:2b:d8:58: 4b:3b:c6:70:9f:20:9c:44:7d:9f:5c:8f:12:6c:3b: 7b:fc:7b:ac:a0:ef:2c:fd:6d:ab:c6:41:c8:3c:d7: d1:c3:6c:c7:f8:f6:65:dd:c2:97:91:98:24:a8:d0: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:77:81:2B:CB:53:B5:A2:76:44:AD:41:13:36:B8:9C:AF:89:5C:81 X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f1:b6:25:f4:df:ad:5a:b7:2f:f7:88:66:c5:54:27:cd:b3: 0e:37:90:72:4d:4c:98:5a:ae:13:ff:d8:65:cc:b7:d2:3c:d2: 18:f1:40:6f:5b:30:a3:cb:e9:ea:cb:fb:74:65:cf:e6:ea:b4: 31:3c:3b:c8:a4:d5:9f:dd:9b:a3:85:3b:ce:d4:97:07:cc:8d: cf:3c:23:09:7f:dc:d4:26:f5:85:5f:16:b4:10:a7:24:55:d2: 67:6a:82:35:48:4e:cd:0a:9c:03:40:0d:f6:53:bb:81:3b:68: 31:b6:72:4e:28:42:56:37:8a:7b:e0:8c:54:83:ba:c9:1b:ee: 5a:6d:16:c6:07:b0:26:fa:1e:8e:16:65:37:ed:7d:f6:60:58: be:cc:e2:14:71:f2:87:09:bb:15:fd:ea:07:af:f1:73:45:57: c1:fc:93:b3:3f:71:e7:87:23:52:1d:df:08:59:99:de:f2:af: 01:9e:65:97:54:06:06:6c:98:cf:d5:81:f8:0a:4d:b6:ff:b3: 71:2b:41:bf:51:d3:cc:ab:aa:f9:28:78:7f:a1:97:a9:54:de: 85:9b:2d:7c:74:dd:69:1a:92:96:af:37:20:a0:67:cf:6d:db: 6e:a2:f7:e0:a9:84:b8:07:f3:0f:cc:aa:a5:67:06:43:b7:fc: d4:66:7d:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgPdOXBXqXxmjH2oUvVCkwpwjB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNjAzMjQxNjI1NTNaFw0yNjAzMjcxNzU3NTNaMDMxMTAvBgNV BAMTKDMwNzc4MTJCQ0I1M0I1QTI3NjQ0QUQ0MTEzMzZCODlDQUY4OTVDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAPRO3tK9dZ5Pxrp+wpRE96iO 8NgcEioaPJwgboFqJkWRg5SjQPCqw7CNyVTNlG7DhQXcoPZlJscYj+YycBf1mQgv Edd72gbnAKGVg1tLiSkumCDkDW2a7zKkhK5CA4foOUljurC/9i8ejM923ViRxWou 8W0G28XkL6e/jPISWAUFA6k92Rwmz2PnoTvABaC/pf1jQPIOIbxpvzjBhmL0XIy+ +WZMeV45iwV8u2JD/NbXceDuCcanOqg5+HYLROzbuSC+iR/4kbuIqg2TQyvYWEs7 xnCfIJxEfZ9cjxJsO3v8e6yg7yz9bavGQcg819HDbMf49mXdwpeRmCSo0HeLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMHeBK8tTtaJ2RK1BEza4nK+JXIEwHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7xtiX0361aty/3iGbFVCfNsw43kHJNTJha rhP/2GXMt9I80hjxQG9bMKPL6erL+3Rlz+bqtDE8O8ik1Z/dm6OFO87UlwfMjc88 Iwl/3NQm9YVfFrQQpyRV0mdqgjVITs0KnANADfZTu4E7aDG2ck4oQlY3invgjFSD uskb7lptFsYHsCb6Ho4WZTftffZgWL7M4hRx8ocJuxX96gev8XNFV8H8k7M/ceeH I1Id3whZmd7yrwGeZZdUBgZsmM/VgfgKTbb/s3ErQb9R08yrqvkoeH+hl6lU3oWb LXx03WkakpavNyCgZ89t226i9+CphLgH8w/MqqVnBkO3/NRmfbY= -----END CERTIFICATE-----Generated at Thu Mar 26 05:42:12 2026 by rpki-client