$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: tjqrZvQrPYrwQ6j7vfBkIRj9Vy4embbr9EEo6o67fs8= Subject key identifier: 56:68:08:E2:06:B8:28:1E:32:D9:AD:94:D9:EB:64:D3:12:1C:54:AF Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 0C48BCA9AF95A75E0677F8B5D0E2C650A003A9E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 01D9 Signing time: Thu 16 Apr 2026 14:21:01 +0000 Manifest this update: Thu 16 Apr 2026 14:16:01 +0000 Manifest next update: Sun 19 Apr 2026 21:01:01 +0000 Files and hashes: 1: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: XPXeqyo3uAeNk8HBLerrx/vohDE1OzqrjTB8SXVyR1c=) 2: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: nqcPOBMzsT7VWa++GixD9MBdWrPGrEylgU+80uacJ6w=) 3: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:48:bc:a9:af:95:a7:5e:06:77:f8:b5:d0:e2:c6:50:a0:03:a9:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Apr 16 14:16:01 2026 GMT Not After : Apr 19 21:01:01 2026 GMT Subject: CN=566808E206B8281E32D9AD94D9EB64D3121C54AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b2:55:01:77:fb:9b:65:bf:38:9d:0c:c9:6a: 5d:92:c6:92:a8:43:66:ad:22:2e:47:dc:96:7a:a5: 54:6e:49:12:1b:aa:97:45:bb:ae:3e:55:79:4d:8c: c1:f1:a4:9c:c9:32:22:00:72:e2:cb:e1:f9:87:48: 65:02:9a:8e:bc:26:6e:a8:8f:47:83:64:ab:6c:65: cd:c6:67:8e:5a:ac:5e:2d:00:c7:c8:bd:c3:9f:a3: fc:cf:a8:67:61:32:ba:7b:e0:3e:c3:f9:85:3b:a1: 18:6a:96:a3:50:5f:94:db:7c:a6:44:33:3d:80:d7: 26:e9:08:dd:7b:51:ab:df:4e:b9:d7:b7:ac:57:4d: b0:7b:c7:dd:fd:a8:f2:8e:2b:e0:81:70:58:56:54: 1b:24:a2:0f:34:78:be:58:8a:80:bf:9d:fa:33:4e: 75:10:11:8d:f5:4d:d9:65:09:a2:33:9e:6e:95:a9: 70:88:da:ad:c0:4a:18:21:e3:ea:dd:f9:df:50:dc: 65:7d:c8:14:1d:2a:e7:19:d9:77:05:ea:91:2e:41: 13:16:33:8d:25:40:ed:5c:75:e0:1a:1a:46:64:19: a6:ef:40:38:a6:14:57:f0:2b:7b:e5:c6:21:1b:bd: a4:a8:b3:33:7d:76:e6:53:e7:6e:57:b1:ff:7f:7b: 3f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:68:08:E2:06:B8:28:1E:32:D9:AD:94:D9:EB:64:D3:12:1C:54:AF X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:94:c4:1a:26:22:4e:b8:e2:93:8d:e5:7c:aa:f8:a1:d8:e3: 26:a3:00:74:e9:da:8f:09:e8:b3:2b:25:4d:00:62:38:12:cc: ed:9a:b2:62:c1:c2:50:84:07:d9:f4:af:58:a1:23:ab:5a:1d: 82:ef:01:9d:49:75:7f:04:d2:0f:6c:67:70:fc:1c:e1:6d:db: 60:dc:3b:31:dd:21:50:f8:4b:05:48:68:1e:2c:5d:08:e0:01: 90:cb:48:f0:08:39:40:fa:b1:2e:e9:3b:d9:ba:4f:ee:39:84: c1:d4:d3:91:78:73:a7:50:ab:9a:8d:7d:2b:93:94:f4:28:69: 17:3a:42:2a:8b:e7:a3:99:d2:66:0e:62:20:ed:55:36:d1:ae: ef:28:80:53:b0:e7:d5:8b:a6:85:65:2b:c5:7b:ad:8d:12:72: 2e:4e:b5:4d:a3:10:17:c9:42:ee:77:e8:21:fd:cd:af:67:79: da:81:2c:b3:8a:7f:56:57:cb:1f:d5:b8:06:65:05:85:86:38: f1:6e:57:de:68:2f:32:95:ba:bf:bf:18:88:a5:f9:10:97:ef: 48:6a:f7:3c:7c:9f:df:1a:a2:d1:a6:73:f9:50:df:c3:72:9d: 00:9a:c7:a8:a9:05:6d:99:5f:08:84:b9:92:61:d7:82:7b:20: 4b:ee:46:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDEi8qa+Vp14Gd/i10OLGUKADqeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNjA0MTYxNDE2MDFaFw0yNjA0MTkyMTAxMDFaMDMxMTAvBgNV BAMTKDU2NjgwOEUyMDZCODI4MUUzMkQ5QUQ5NEQ5RUI2NEQzMTIxQzU0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdslUBd/ubZb84nQzJal2SxpKo Q2atIi5H3JZ6pVRuSRIbqpdFu64+VXlNjMHxpJzJMiIAcuLL4fmHSGUCmo68Jm6o j0eDZKtsZc3GZ45arF4tAMfIvcOfo/zPqGdhMrp74D7D+YU7oRhqlqNQX5TbfKZE Mz2A1ybpCN17UavfTrnXt6xXTbB7x939qPKOK+CBcFhWVBskog80eL5YioC/nfoz TnUQEY31TdllCaIznm6VqXCI2q3AShgh4+rd+d9Q3GV9yBQdKucZ2XcF6pEuQRMW M40lQO1cdeAaGkZkGabvQDimFFfwK3vlxiEbvaSoszN9duZT525Xsf9/ez/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVmgI4ga4KB4y2a2U2etk0xIcVK8wHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqUxBomIk644pON5Xyq+KHY4yajAHTp2o8J 6LMrJU0AYjgSzO2asmLBwlCEB9n0r1ihI6taHYLvAZ1JdX8E0g9sZ3D8HOFt22Dc OzHdIVD4SwVIaB4sXQjgAZDLSPAIOUD6sS7pO9m6T+45hMHU05F4c6dQq5qNfSuT lPQoaRc6QiqL56OZ0mYOYiDtVTbRru8ogFOw59WLpoVlK8V7rY0Sci5OtU2jEBfJ Qu536CH9za9nedqBLLOKf1ZXyx/VuAZlBYWGOPFuV95oLzKVur+/GIil+RCX70hq 9zx8n98aotGmc/lQ38NynQCax6ipBW2ZXwiEuZJh14J7IEvuRgM= -----END CERTIFICATE-----Generated at Sat Apr 18 00:40:34 2026 by rpki-client