$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: SHJ79ysk1sPmHDi8eESZ5B8q/AsBayDSWLWSrIwdomU= Subject key identifier: 10:D2:05:EA:4C:DE:6F:79:A7:D4:29:82:B6:3B:DF:28:B7:D9:5E:3D Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 55966808BA35654CDD0C3C8837063857CDAD6114 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 0569 Signing time: Wed 25 Mar 2026 08:21:23 +0000 Manifest this update: Wed 25 Mar 2026 08:16:23 +0000 Manifest next update: Sat 28 Mar 2026 09:45:23 +0000 Files and hashes: 1: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: KWhFP88aQIWgcnUslnjvyh5Swkim9DgQUrbO0uBN5Uc=) 2: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: Nk2WCVIURyLwWB6Q7vDwh+t8XTocT/Gb5P/LoHNRTqM=) 3: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: ycLrFSluhQHbHMeR5mx7HDHqT3Cknj/hMk/uIjRqWwc=) 4: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (hash: u3SbbNuX76ouLAbh2avANQTDQ1dz0YKRwMgpyt5FWwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:96:68:08:ba:35:65:4c:dd:0c:3c:88:37:06:38:57:cd:ad:61:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Mar 25 08:16:23 2026 GMT Not After : Mar 28 09:45:23 2026 GMT Subject: CN=10D205EA4CDE6F79A7D42982B63BDF28B7D95E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:2b:6e:06:54:4f:3a:27:6f:1d:ad:f9:61: 89:d3:30:4d:ec:7f:4d:d1:fc:08:f9:aa:c9:42:c4: 78:5b:31:ff:2c:34:74:51:da:fb:59:02:ba:42:9e: ef:1d:96:f3:4c:5a:60:61:7b:e5:34:4e:be:e7:86: cf:1f:ff:8b:b8:20:8b:63:70:2a:51:df:13:91:fc: 47:9b:15:c7:1d:fd:e7:02:44:24:60:ea:1d:7e:98: 1d:99:f7:39:98:a1:54:8f:db:e0:d7:90:d3:3d:60: 76:23:57:c9:c7:b2:d1:54:ca:33:76:46:51:06:b0: 1f:08:50:95:4f:d9:a7:f5:59:94:64:e8:28:13:e1: dd:23:b2:a5:7f:fc:ec:40:41:b1:7b:f7:63:5a:c3: e9:09:8b:7a:f6:92:85:ef:07:54:be:ed:1e:b0:57: 71:4b:05:58:53:22:b6:bb:82:41:80:77:19:8d:4e: 9e:48:cd:fd:39:d5:96:a8:e4:01:b4:21:87:35:b8: de:76:67:cf:24:aa:c0:3d:d7:a4:4a:59:32:ce:35: 7d:29:2a:64:09:da:1e:3e:3b:92:5c:f8:0b:d2:d2: 20:7b:97:7b:81:87:4d:11:1b:f5:73:b7:2d:b6:35: 7d:2a:1f:fe:df:36:8b:92:6a:5b:9f:19:3d:13:ba: a6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D2:05:EA:4C:DE:6F:79:A7:D4:29:82:B6:3B:DF:28:B7:D9:5E:3D X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ff:44:e6:c1:c9:b2:54:84:bd:fe:5b:19:b0:02:12:f9:8c: 8d:f8:57:93:69:d2:31:f3:53:fd:bb:ff:68:53:82:7d:23:c1: df:cc:0e:3b:16:67:ae:80:48:30:a3:4d:90:98:69:da:68:26: 01:85:08:e3:4f:34:45:e0:99:7d:35:bf:88:e0:c0:15:1d:ce: 01:f9:c2:d7:c1:cd:57:ff:3e:a0:32:11:ad:64:f9:e5:be:ae: b9:68:9d:ee:68:1a:b7:10:86:39:9f:c5:db:91:db:66:3e:f3: 5b:fd:fd:4f:a5:9b:1e:c5:94:8c:50:16:5a:1f:08:b8:56:58: a1:8d:8c:fa:1f:1f:5f:4d:7c:d3:fe:0e:e1:ca:76:ae:85:51: 62:d0:70:df:5e:39:2b:06:89:9a:4c:f8:b5:f2:7f:f7:90:c5: 60:f9:b3:9f:05:32:3d:91:a0:c7:45:45:f1:76:71:7f:49:31: 5a:ef:f6:a7:aa:83:07:51:b7:5e:07:14:b7:00:e7:67:4b:b9: 74:a2:c5:45:b1:1c:8c:9c:b9:d8:93:fa:d8:31:1a:30:7c:c2: 28:58:e6:22:f5:92:7d:81:0f:c5:a3:b2:f6:99:2f:26:36:cc: 98:33:6b:73:c1:f4:c3:87:32:c0:e8:fe:4c:34:2c:5f:20:44: ae:07:61:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZZoCLo1ZUzdDDyINwY4V82tYRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNjAzMjUwODE2MjNaFw0yNjAzMjgwOTQ1MjNaMDMxMTAvBgNV BAMTKDEwRDIwNUVBNENERTZGNzlBN0Q0Mjk4MkI2M0JERjI4QjdEOTVFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbStuBlRPOidvHa35YYnTME3s f03R/Aj5qslCxHhbMf8sNHRR2vtZArpCnu8dlvNMWmBhe+U0Tr7nhs8f/4u4IItj cCpR3xOR/EebFccd/ecCRCRg6h1+mB2Z9zmYoVSP2+DXkNM9YHYjV8nHstFUyjN2 RlEGsB8IUJVP2af1WZRk6CgT4d0jsqV//OxAQbF792Naw+kJi3r2koXvB1S+7R6w V3FLBVhTIra7gkGAdxmNTp5Izf051Zao5AG0IYc1uN52Z88kqsA916RKWTLONX0p KmQJ2h4+O5Jc+AvS0iB7l3uBh00RG/Vzty22NX0qH/7fNouSalufGT0TuqbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUENIF6kzeb3mn1CmCtjvfKLfZXj0wHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKD/RObBybJUhL3+WxmwAhL5jI34V5Np0jHz U/27/2hTgn0jwd/MDjsWZ66ASDCjTZCYadpoJgGFCONPNEXgmX01v4jgwBUdzgH5 wtfBzVf/PqAyEa1k+eW+rrlone5oGrcQhjmfxduR22Y+81v9/U+lmx7FlIxQFlof CLhWWKGNjPofH19NfNP+DuHKdq6FUWLQcN9eOSsGiZpM+LXyf/eQxWD5s58FMj2R oMdFRfF2cX9JMVrv9qeqgwdRt14HFLcA52dLuXSixUWxHIycudiT+tgxGjB8wihY 5iL1kn2BD8WjsvaZLyY2zJgza3PB9MOHMsDo/kw0LF8gRK4HYSo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:10:18 2026 by rpki-client