$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: No7NSvy7OJbAzytQmQqKJZkgWSx7cMP4fPPVeefz26s= Subject key identifier: D6:D9:D5:40:AA:52:AE:37:6E:B1:BF:A5:4F:FA:23:A0:CD:08:BC:DD Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 0D2CAD3CCAF2B3F1870DA9205245F86E4004DA3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 0351 Signing time: Mon 02 Mar 2026 04:50:51 +0000 Manifest this update: Mon 02 Mar 2026 04:45:51 +0000 Manifest next update: Thu 05 Mar 2026 09:08:51 +0000 Files and hashes: 1: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=) 2: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=) 3: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: UFra1Zvl69bCPxgd/0/Gma3knWBRDr7Pj8mEtv6U11I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2c:ad:3c:ca:f2:b3:f1:87:0d:a9:20:52:45:f8:6e:40:04:da:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Mar 2 04:45:51 2026 GMT Not After : Mar 5 09:08:51 2026 GMT Subject: CN=D6D9D540AA52AE376EB1BFA54FFA23A0CD08BCDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:51:d9:f2:46:ba:ea:5c:e0:b8:82:e9:36:2d: fd:4b:29:84:30:dd:7b:9b:6e:33:bd:95:01:50:d9: 6c:53:dc:55:1f:b6:02:90:a4:fe:30:c4:9f:ba:fb: cd:60:c4:1c:bf:d6:25:6a:60:78:b2:de:7d:91:82: f9:98:23:ec:c2:b3:92:72:90:e3:ea:c2:95:48:d8: aa:24:ec:62:c0:b6:49:74:40:ac:1e:d7:47:5f:0e: f3:1c:c3:56:ed:c9:a7:a3:eb:df:74:fb:d6:bf:4e: 4d:c0:6d:7f:d4:c5:59:f2:c4:cc:ca:e9:8c:9f:4c: e0:f9:a7:bb:8c:62:64:0b:dc:da:22:38:40:43:a1: 57:96:f8:2c:b3:8b:e1:d2:02:d8:ff:dd:cb:0a:23: 06:8b:24:62:f9:c4:19:58:ad:4c:13:93:32:1d:fd: 93:b0:c6:a3:94:4f:11:50:28:73:de:97:db:12:de: 97:ad:6c:80:ad:c1:b2:e7:88:c6:8c:e1:ed:72:69: 96:70:84:db:2a:ef:d9:b9:d2:8e:56:8d:8d:9a:86: 80:04:64:e8:99:7c:90:5c:54:6c:52:4b:c9:35:4a: d2:88:a9:42:52:c1:7c:ce:3e:bd:8c:5b:1e:ec:ed: 84:18:e6:bc:36:c4:58:28:56:d7:b5:58:2a:1d:18: cc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D9:D5:40:AA:52:AE:37:6E:B1:BF:A5:4F:FA:23:A0:CD:08:BC:DD X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:cc:41:72:20:53:87:ac:cf:1e:54:81:09:5c:a8:16:d5:10: 7b:17:11:f5:fd:b0:cb:96:b4:87:b0:9f:03:64:68:e5:5f:c4: 2b:73:69:64:74:06:1b:39:90:34:b9:2e:05:36:41:71:fc:0f: f1:0b:15:b7:2f:59:ab:58:b0:67:d2:b1:e8:2a:69:48:a0:05: c2:74:bf:06:88:ab:ae:e9:eb:e0:9e:d7:c4:b7:9f:3c:2e:d3: c8:d8:ef:94:dc:89:ff:7d:24:b6:a6:16:03:b5:e6:90:57:29: 1f:7e:39:14:2b:16:30:ab:4d:5a:2f:9e:03:d7:5f:b3:01:cb: 45:8c:df:32:de:8b:5c:06:49:1c:9f:4a:a6:ff:99:a2:60:47: 1c:eb:c6:35:3e:78:a6:df:b2:5a:13:18:05:c7:49:ee:83:21: a8:9d:a3:53:8f:bb:64:8c:87:7c:2b:5d:36:13:42:a9:82:48: 48:c1:14:88:e6:df:03:84:79:03:e7:d7:82:fc:73:8b:ef:27: fe:c8:15:c2:32:3a:08:1a:f0:cb:27:9c:75:4d:a2:14:16:f8: a3:ae:e4:43:1a:e3:4c:33:46:5f:b0:0c:d0:e3:5f:a4:79:9a: 4c:0d:df:e0:a5:26:e2:df:95:13:7a:59:d2:d8:a4:78:67:0f: b7:ec:b6:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDSytPMrys/GHDakgUkX4bkAE2jswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNjAzMDIwNDQ1NTFaFw0yNjAzMDUwOTA4NTFaMDMxMTAvBgNV BAMTKEQ2RDlENTQwQUE1MkFFMzc2RUIxQkZBNTRGRkEyM0EwQ0QwOEJDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUdnyRrrqXOC4guk2Lf1LKYQw 3XubbjO9lQFQ2WxT3FUftgKQpP4wxJ+6+81gxBy/1iVqYHiy3n2RgvmYI+zCs5Jy kOPqwpVI2Kok7GLAtkl0QKwe10dfDvMcw1btyaej6990+9a/Tk3AbX/UxVnyxMzK 6YyfTOD5p7uMYmQL3NoiOEBDoVeW+Cyzi+HSAtj/3csKIwaLJGL5xBlYrUwTkzId /ZOwxqOUTxFQKHPel9sS3petbICtwbLniMaM4e1yaZZwhNsq79m50o5WjY2ahoAE ZOiZfJBcVGxSS8k1StKIqUJSwXzOPr2MWx7s7YQY5rw2xFgoVte1WCodGMwBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1tnVQKpSrjdusb+lT/ojoM0IvN0wHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLMQXIgU4eszx5UgQlcqBbVEHsXEfX9sMuW tIewnwNkaOVfxCtzaWR0Bhs5kDS5LgU2QXH8D/ELFbcvWatYsGfSsegqaUigBcJ0 vwaIq67p6+Ce18S3nzwu08jY75Tcif99JLamFgO15pBXKR9+ORQrFjCrTVovngPX X7MBy0WM3zLei1wGSRyfSqb/maJgRxzrxjU+eKbfsloTGAXHSe6DIaido1OPu2SM h3wrXTYTQqmCSEjBFIjm3wOEeQPn14L8c4vvJ/7IFcIyOgga8MsnnHVNohQW+KOu 5EMa40wzRl+wDNDjX6R5mkwN3+ClJuLflRN6WdLYpHhnD7fstso= -----END CERTIFICATE-----Generated at Mon Mar 2 07:51:07 2026 by rpki-client