$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: x8jI7Iw0Ew8N7fCO9QTpSyzBivC98NCtwhz6Zqqf9J4= Subject key identifier: B5:9B:19:AB:5F:C0:E9:C4:32:AF:00:22:AE:EE:F7:00:AA:47:99:B4 Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 1194748491FF8AD38301B101E5C52699DF162196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 0190 Signing time: Wed 05 Nov 2025 12:30:52 +0000 Manifest this update: Wed 05 Nov 2025 12:25:52 +0000 Manifest next update: Sat 08 Nov 2025 15:04:52 +0000 Files and hashes: 1: 3130332e3138392e3232392e302f32342d3234203d3e20313533303637.roa (hash: vjhjgRhzt1JqsmC1aofaHI99IqjsXLKnPCxe8EhPf/U=) 2: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: zyYWa0Rd8JYeHc2p/iRxumbjWTdqLTJAn2/WIVVlauA=) 3: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 15:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:94:74:84:91:ff:8a:d3:83:01:b1:01:e5:c5:26:99:df:16:21:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Nov 5 12:25:52 2025 GMT Not After : Nov 8 15:04:52 2025 GMT Subject: CN=B59B19AB5FC0E9C432AF0022AEEEF700AA4799B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:05:63:ad:15:51:4f:b1:de:2a:ca:d5:78:fb: b5:39:7f:e5:75:c7:fd:e1:bf:d7:2b:40:48:f2:d0: 96:d5:6b:ff:7d:38:88:20:3b:ca:11:de:56:f6:98: c5:f1:1d:aa:01:c3:13:57:e5:29:fa:08:93:78:b8: fa:be:70:4a:bb:57:d4:3c:62:46:10:d1:c9:cc:9d: 15:ea:a7:41:50:ec:b9:24:50:1d:b3:12:1c:d7:4f: bb:00:61:4c:c4:f0:05:a9:b2:bb:4d:30:f0:b5:fd: ac:8b:3b:c9:f9:59:57:d9:a1:c3:6a:8a:b0:9a:bd: 1b:02:55:63:b4:36:45:48:2f:24:ad:c0:7f:45:5c: 23:88:44:61:b9:72:99:d6:ad:be:35:be:7e:f5:33: b1:3b:3c:70:30:85:2f:de:27:d9:e2:38:25:ff:75: ee:ba:44:ea:cb:2d:f0:a8:12:b1:a0:ce:99:ec:ad: 3e:df:b2:2a:e1:13:67:ea:77:e7:c9:8b:26:87:7e: dd:a6:69:39:08:34:64:fc:31:cf:d2:7f:51:c7:e1: 1b:dd:be:54:dd:40:e8:17:07:d2:63:00:6e:d4:66: 9e:65:f7:da:cc:4d:d2:9f:7f:1e:82:6a:7c:a0:c5: 56:be:2f:a5:94:b3:22:52:a3:f0:23:15:48:7c:68: 65:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9B:19:AB:5F:C0:E9:C4:32:AF:00:22:AE:EE:F7:00:AA:47:99:B4 X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:cb:98:46:ed:95:41:85:eb:be:c9:08:ae:0b:43:6d:57:97: 41:e1:d9:6a:c7:6e:fe:8f:9d:dd:8a:35:8e:60:9e:c5:3b:ad: c4:57:a7:78:33:a2:e5:62:e7:ce:d0:ad:fa:9c:03:ea:b1:d2: c0:7b:cc:27:db:25:30:11:70:22:75:d6:e6:f6:c7:c9:d8:26: b7:9f:6a:64:c9:b8:9e:d8:62:5e:45:df:17:44:be:5e:00:64: 57:56:7c:f9:c1:91:c5:69:95:6b:52:24:3e:40:e6:e5:5f:17: 8c:42:a2:5f:0d:6a:85:f6:ec:10:7b:fd:25:ec:e4:93:0c:e4: b8:0d:6b:86:57:06:e2:1f:47:27:31:11:d5:49:84:13:16:e4: 50:00:c1:b1:0b:e8:09:54:30:7f:55:08:51:af:97:e4:f5:e9: 4e:67:68:f1:0e:02:44:46:21:11:11:3b:c7:01:31:28:39:a8: 6f:28:0c:ef:bf:39:1f:7e:6a:58:c3:90:85:4b:7a:93:97:71: 69:fb:36:cb:b8:57:b0:02:19:40:7a:3c:81:31:03:5e:a2:83: 47:40:bb:24:c6:ea:c0:d2:ca:63:23:30:25:48:9d:ab:d0:b3: 98:87:27:69:da:95:4b:b1:9f:9a:aa:0c:b4:ea:6c:22:59:32: dc:91:b9:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZR0hJH/itODAbEB5cUmmd8WIZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNTExMDUxMjI1NTJaFw0yNTExMDgxNTA0NTJaMDMxMTAvBgNV BAMTKEI1OUIxOUFCNUZDMEU5QzQzMkFGMDAyMkFFRUVGNzAwQUE0Nzk5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkBWOtFVFPsd4qytV4+7U5f+V1 x/3hv9crQEjy0JbVa/99OIggO8oR3lb2mMXxHaoBwxNX5Sn6CJN4uPq+cEq7V9Q8 YkYQ0cnMnRXqp0FQ7LkkUB2zEhzXT7sAYUzE8AWpsrtNMPC1/ayLO8n5WVfZocNq irCavRsCVWO0NkVILyStwH9FXCOIRGG5cpnWrb41vn71M7E7PHAwhS/eJ9niOCX/ de66ROrLLfCoErGgzpnsrT7fsirhE2fqd+fJiyaHft2maTkINGT8Mc/Sf1HH4Rvd vlTdQOgXB9JjAG7UZp5l99rMTdKffx6CanygxVa+L6WUsyJSo/AjFUh8aGXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZsZq1/A6cQyrwAiru73AKpHmbQwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/LmEbtlUGF677JCK4LQ21Xl0Hh2WrHbv6P nd2KNY5gnsU7rcRXp3gzouVi587QrfqcA+qx0sB7zCfbJTARcCJ11ub2x8nYJref amTJuJ7YYl5F3xdEvl4AZFdWfPnBkcVplWtSJD5A5uVfF4xCol8NaoX27BB7/SXs 5JMM5LgNa4ZXBuIfRycxEdVJhBMW5FAAwbEL6AlUMH9VCFGvl+T16U5naPEOAkRG IRERO8cBMSg5qG8oDO+/OR9+aljDkIVLepOXcWn7Nsu4V7ACGUB6PIExA16ig0dA uyTG6sDSymMjMCVInavQs5iHJ2nalUuxn5qqDLTqbCJZMtyRuV0= -----END CERTIFICATE-----Generated at Wed Nov 5 14:58:42 2025 by rpki-client