$ rpki-client -vvf repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.mft (raw, json) Hash identifier: gxqicLovLE/0hrG7f7jIbcFRsII6P9o+WhQKW36KSMo= Subject key identifier: 35:AB:BC:E3:AD:45:DE:3A:3E:F6:81:10:C6:1F:A0:F8:E3:1A:57:8E Authority key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Certificate issuer: /CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Certificate serial: 126A02198B60FEE5B5C827D655C5E26D0221E739 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft Manifest number: 0366 Signing time: Sat 18 Apr 2026 00:30:54 +0000 Manifest this update: Sat 18 Apr 2026 00:25:54 +0000 Manifest next update: Tue 21 Apr 2026 11:23:54 +0000 Files and hashes: 1: 3130332e3137342e3132332e302f32342d3234203d3e20313437303936.roa (hash: wmqYtJvU2F6eupSHLrf9mkfhLq9E6hEn7siKrmp27wo=) 2: 25F283F3EEC39D541DF359689045D2073EBB3FE0.crl (hash: /PMQ0cuqW5YOLWXc+xBJwK/YUtgrQtqmHaQtsfWNcvM=) 3: 3130332e3137342e3132322e302f32332d3233203d3e20313437303936.roa (hash: ztPHo3yVGw7HPwp5p47CJrgcand2ekTtKedou9z0ERo=) 4: 3130332e3137342e3132322e302f32342d3234203d3e20313437303936.roa (hash: JFWNh/TCjn8caLGCRcOB8LkkfKgWkq2tvrjf0Ta/M4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:23:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6a:02:19:8b:60:fe:e5:b5:c8:27:d6:55:c5:e2:6d:02:21:e7:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Validity Not Before: Apr 18 00:25:54 2026 GMT Not After : Apr 21 11:23:54 2026 GMT Subject: CN=35ABBCE3AD45DE3A3EF68110C61FA0F8E31A578E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:cd:3d:98:3b:d6:06:82:4f:f1:04:25:14: 6d:18:e4:14:b4:54:04:17:4b:15:9f:63:a3:bc:b4: 16:2f:ff:48:52:d7:00:9f:49:04:11:af:83:8f:e6: 16:26:e6:e2:c2:39:94:06:ea:6f:59:fd:0d:7e:44: 79:f2:57:aa:7c:f4:98:06:47:61:c9:66:45:73:33: 7a:70:dd:d9:4b:ea:9f:00:2a:11:35:46:5c:5a:3c: 87:c8:51:ac:c7:56:07:01:b0:1e:9f:71:1e:ff:bb: 12:ac:0e:29:64:0d:8c:f8:9e:31:f9:60:d9:ad:2c: 1e:89:81:7f:86:d7:c4:5c:b8:da:5a:0b:99:61:87: 5e:3d:c5:35:ec:75:4e:30:be:82:b2:27:1a:2a:f3: 79:29:bc:3a:cc:c2:e7:2e:13:34:cf:9f:21:17:eb: f3:69:77:58:eb:9f:97:69:1b:84:c8:a1:b3:0e:5f: a7:15:84:b0:98:5f:03:0f:08:17:3e:a5:27:99:4c: d6:ef:3c:d9:d3:c8:8f:79:24:1c:1d:3d:8e:84:f0: 1c:a0:4c:85:46:c0:b2:7f:b6:b6:18:17:22:14:b0: 55:e4:c4:71:ef:27:78:33:c6:32:03:cd:05:af:51: 02:11:b7:c8:7a:17:73:c2:12:16:4b:72:25:a1:13: db:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AB:BC:E3:AD:45:DE:3A:3E:F6:81:10:C6:1F:A0:F8:E3:1A:57:8E X509v3 Authority Key Identifier: keyid:25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:91:0a:78:b0:c1:81:d0:72:76:c2:d7:e2:a7:79:ed:f6:ba: b6:bf:24:7d:20:94:d5:ed:01:43:70:58:39:18:2b:de:31:61: 0e:33:4b:76:4d:70:92:7d:a8:20:21:bc:4c:4b:af:c6:e2:d9: 5c:47:d6:42:53:2a:7d:8a:2e:fc:cb:51:b9:8c:dd:d1:a5:10: 1b:1e:6f:06:12:cf:4a:c6:22:82:86:fa:dd:4d:51:56:bc:d1: 3c:a1:82:5f:f6:6a:33:c0:86:d3:5b:d4:bd:a1:64:69:49:54: b6:47:23:a0:f4:27:6e:bc:a0:4c:f7:83:dc:32:b5:76:2a:cb: 02:10:7f:20:c1:5f:e3:69:b6:7c:b3:d4:9f:fd:04:e9:85:61: 70:f9:b1:6d:d3:25:d5:86:55:0e:fc:2b:9b:3d:13:1b:c5:fa: 1c:91:0b:42:28:4c:0f:1f:43:86:9d:d3:a4:a6:b8:86:cd:6e: 00:99:52:02:92:6a:b0:8d:ae:2d:99:d5:5f:29:2a:86:38:85: 68:fc:8d:80:51:86:ba:91:83:db:bd:44:5e:69:e2:90:dc:6a: 4a:a7:49:68:a7:5a:a4:ad:37:56:2e:7e:e4:8f:01:df:0f:85: 9e:d5:6c:4c:4d:66:39:d4:b2:5f:de:b2:c8:6b:db:a7:60:af: 81:67:7c:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmoCGYtg/uW1yCfWVcXibQIh5zkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDcz RUJCM0ZFMDAeFw0yNjA0MTgwMDI1NTRaFw0yNjA0MjExMTIzNTRaMDMxMTAvBgNV BAMTKDM1QUJCQ0UzQUQ0NURFM0EzRUY2ODExMEM2MUZBMEY4RTMxQTU3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo1s09mDvWBoJP8QQlFG0Y5BS0 VAQXSxWfY6O8tBYv/0hS1wCfSQQRr4OP5hYm5uLCOZQG6m9Z/Q1+RHnyV6p89JgG R2HJZkVzM3pw3dlL6p8AKhE1RlxaPIfIUazHVgcBsB6fcR7/uxKsDilkDYz4njH5 YNmtLB6JgX+G18RcuNpaC5lhh149xTXsdU4wvoKyJxoq83kpvDrMwucuEzTPnyEX 6/Npd1jrn5dpG4TIobMOX6cVhLCYXwMPCBc+pSeZTNbvPNnTyI95JBwdPY6E8Byg TIVGwLJ/trYYFyIUsFXkxHHvJ3gzxjIDzQWvUQIRt8h6F3PCEhZLciWhE9u3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNau8461F3jo+9oEQxh+g+OMaV44wHwYDVR0j BBgwFoAUJfKD8+7DnVQd81lokEXSBz67P+AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMC8yNUYyODNGM0VF QzM5RDU0MURGMzU5Njg5MDQ1RDIwNzNFQkIzRkUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQyMDczRUJC M0ZFMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI3MzAyN2EtMDk2Yi00ZTk1LWE2 NTYtZGFiZTk4YWM2ZjZkLzAvMjVGMjgzRjNFRUMzOUQ1NDFERjM1OTY4OTA0NUQy MDczRUJCM0ZFMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuRCniwwYHQcnbC1+Knee32ura/JH0glNXt AUNwWDkYK94xYQ4zS3ZNcJJ9qCAhvExLr8bi2VxH1kJTKn2KLvzLUbmM3dGlEBse bwYSz0rGIoKG+t1NUVa80Tyhgl/2ajPAhtNb1L2hZGlJVLZHI6D0J268oEz3g9wy tXYqywIQfyDBX+Nptnyz1J/9BOmFYXD5sW3TJdWGVQ78K5s9ExvF+hyRC0IoTA8f Q4ad06SmuIbNbgCZUgKSarCNri2Z1V8pKoY4hWj8jYBRhrqRg9u9RF5p4pDcakqn SWinWqStN1YufuSPAd8PhZ7VbExNZjnUsl/esshr26dgr4FnfIo= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:47 2026 by rpki-client