$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: JC9IjHFJpHiWgLWdRlPak33pZa+I5KiOAx7QuiO7Q3I= Subject key identifier: 98:5C:29:B4:E9:67:A0:10:F8:9D:F4:8E:D5:7C:98:8C:9A:CA:05:1B Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 3D1CBAE04DCB43DD6190DE091F64DA0287C3F2AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 051D Signing time: Sun 02 Nov 2025 08:31:10 +0000 Manifest this update: Sun 02 Nov 2025 08:26:10 +0000 Manifest next update: Wed 05 Nov 2025 16:02:10 +0000 Files and hashes: 1: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: kBD+7MjsjD8JwLvccwch8dg5NfDsdTsiv5wNw8DFo5o=) 2: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: y5kSrkZuiwMGD9QWDm9x2qICFewL0ronD0gEk8WVvus=) 3: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:1c:ba:e0:4d:cb:43:dd:61:90:de:09:1f:64:da:02:87:c3:f2:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Nov 2 08:26:10 2025 GMT Not After : Nov 5 16:02:10 2025 GMT Subject: CN=985C29B4E967A010F89DF48ED57C988C9ACA051B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:80:bc:05:a6:60:cb:67:5d:02:78:67:0f: b3:2c:21:5e:10:ba:d9:9c:b2:15:e5:f1:00:f1:01: 7a:50:b6:64:87:03:cb:b7:62:59:cc:d9:75:54:d8: dc:7e:40:6b:bd:fa:d9:f0:9c:c5:eb:5c:e7:88:4b: 8d:4e:cb:fc:a6:44:d3:61:70:b7:a8:73:04:c9:13: e8:1a:50:38:c6:82:05:59:e7:be:b4:10:7f:b2:07: e0:23:84:bb:90:ef:f5:b6:88:f9:4a:6c:56:a9:4d: 6e:f8:9a:5e:a4:63:54:91:ec:c2:52:b4:15:e4:c8: a7:8c:6b:85:74:9a:9f:5b:41:b3:dc:31:32:33:2c: 5a:36:e1:eb:73:ee:6c:43:bd:76:16:dd:0a:75:da: 99:f9:37:c6:03:6c:b3:4d:e0:75:98:77:7b:25:c9: 97:0d:38:78:61:8a:9e:8e:2b:19:af:4f:66:29:77: 26:89:6a:2e:28:87:fd:1e:3e:d9:48:29:01:b7:b0: 43:bf:18:7f:fe:85:a4:be:ec:a8:f3:7a:c6:e4:bf: c8:3e:fd:3b:8a:10:cb:14:9a:18:c8:0b:33:8e:b9: 1e:d4:c5:9c:4a:d3:86:6c:77:2b:02:8d:67:9e:d6: ea:0f:eb:c6:97:49:52:20:4c:b1:7f:b0:8e:85:a5: 18:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5C:29:B4:E9:67:A0:10:F8:9D:F4:8E:D5:7C:98:8C:9A:CA:05:1B X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:86:6a:1a:1c:42:45:3b:7d:a4:93:83:fc:20:92:cc:55:e1: d8:1d:74:76:d8:16:28:2f:62:9b:cc:53:dc:31:9e:13:a4:2b: 17:b9:10:c8:fd:7a:57:e9:cf:db:87:ac:67:c0:ea:0c:c6:2a: 29:4b:ce:b6:44:1b:fe:76:03:4b:da:dc:17:ee:e4:0c:95:27: 5d:d8:09:8e:d5:12:51:65:bd:36:ba:8f:9e:b3:e3:b9:aa:13: c4:a4:ba:7f:e2:b6:1b:3e:39:06:9a:31:49:8b:24:ab:d9:8e: 49:23:6e:de:db:ac:b5:3c:73:4b:d9:27:df:c2:34:26:10:77: 59:a9:c9:1b:e8:b7:02:4d:8b:e2:eb:4e:da:9a:67:05:7c:c5: 43:17:6e:32:21:4d:d9:98:b6:39:58:c8:38:d2:9a:df:d8:60: a0:30:25:91:39:27:23:fa:a3:5b:80:80:e0:f4:4e:44:b0:c7: 82:a1:e8:c6:59:b0:f6:6a:16:88:72:71:76:81:7e:55:8d:2d: c7:50:4d:0a:3a:33:f1:66:7c:db:6f:0f:f6:5c:ee:52:fc:23: 10:24:dc:49:d5:d3:19:5e:d6:9e:39:70:03:e9:9e:63:32:d3: c3:2d:63:44:89:21:c0:cf:cd:16:58:cf:98:a2:0b:c1:d2:e9: 2c:26:ab:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPRy64E3LQ91hkN4JH2TaAofD8q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNTExMDIwODI2MTBaFw0yNTExMDUxNjAyMTBaMDMxMTAvBgNV BAMTKDk4NUMyOUI0RTk2N0EwMTBGODlERjQ4RUQ1N0M5ODhDOUFDQTA1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4IC8BaZgy2ddAnhnD7MsIV4Q utmcshXl8QDxAXpQtmSHA8u3YlnM2XVU2Nx+QGu9+tnwnMXrXOeIS41Oy/ymRNNh cLeocwTJE+gaUDjGggVZ5760EH+yB+AjhLuQ7/W2iPlKbFapTW74ml6kY1SR7MJS tBXkyKeMa4V0mp9bQbPcMTIzLFo24etz7mxDvXYW3Qp12pn5N8YDbLNN4HWYd3sl yZcNOHhhip6OKxmvT2YpdyaJai4oh/0ePtlIKQG3sEO/GH/+haS+7Kjzesbkv8g+ /TuKEMsUmhjICzOOuR7UxZxK04ZsdysCjWee1uoP68aXSVIgTLF/sI6FpRhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmFwptOlnoBD4nfSO1XyYjJrKBRswHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKGahocQkU7faSTg/wgksxV4dgddHbYFigv YpvMU9wxnhOkKxe5EMj9elfpz9uHrGfA6gzGKilLzrZEG/52A0va3Bfu5AyVJ13Y CY7VElFlvTa6j56z47mqE8Skun/iths+OQaaMUmLJKvZjkkjbt7brLU8c0vZJ9/C NCYQd1mpyRvotwJNi+LrTtqaZwV8xUMXbjIhTdmYtjlYyDjSmt/YYKAwJZE5JyP6 o1uAgOD0TkSwx4Kh6MZZsPZqFohycXaBflWNLcdQTQo6M/FmfNtvD/Zc7lL8IxAk 3EnV0xle1p45cAPpnmMy08MtY0SJIcDPzRZYz5iiC8HS6Swmq2I= -----END CERTIFICATE-----Generated at Tue Nov 4 15:54:17 2025 by rpki-client