$ rpki-client -vvf repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft (raw, json) Hash identifier: TfGqflvNw50rxnr1cksvvZYox8nqG/mQfj/+92CNxcE= Subject key identifier: 18:FC:D7:9D:63:85:A4:23:1E:46:76:B1:8C:CF:30:F7:D8:56:51:80 Authority key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Certificate issuer: /CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Certificate serial: 084BD2A9A0071ED85753C7A2867C40E281662D4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft Manifest number: 01C4 Signing time: Sat 28 Feb 2026 01:03:54 +0000 Manifest this update: Sat 28 Feb 2026 00:58:54 +0000 Manifest next update: Tue 03 Mar 2026 04:06:54 +0000 Files and hashes: 1: 3130332e3137322e39362e302f32342d3234203d3e20313437303736.roa (hash: FzTv12UM/2i3EnGYSLbw7ffZNNwkSLTinstojsz6igs=) 2: 3130332e3138392e3232392e302f32342d3234203d3e20313437303736.roa (hash: XPXeqyo3uAeNk8HBLerrx/vohDE1OzqrjTB8SXVyR1c=) 3: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl (hash: 52vW08qVcp69cCkxLB0etEvkusLOfa+Z1Yccq7hT4FE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4b:d2:a9:a0:07:1e:d8:57:53:c7:a2:86:7c:40:e2:81:66:2d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Validity Not Before: Feb 28 00:58:54 2026 GMT Not After : Mar 3 04:06:54 2026 GMT Subject: CN=18FCD79D6385A4231E4676B18CCF30F7D8565180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:48:4a:cd:24:97:5c:be:6e:a2:3d:7d:91: b6:9e:dc:13:6f:e3:b1:59:85:69:70:4c:19:e1:df: 88:35:07:bb:fe:bf:8c:d2:4f:2d:5f:30:11:5e:b8: 21:ea:08:72:99:19:b3:cb:ad:63:20:12:84:97:2d: 6e:27:bd:8a:d8:02:a2:7a:39:53:ed:70:7f:cc:b0: 25:3e:c0:e7:f2:bd:c2:aa:a6:7b:c8:78:0e:6d:a0: 5c:86:c0:05:0c:64:1a:59:89:ae:6b:36:f0:d0:a7: 3b:1e:45:29:39:2d:f7:67:02:7e:67:b8:ff:c6:97: fc:de:c8:32:93:74:b4:eb:50:c3:b9:71:8f:f0:28: 95:35:12:24:b9:22:45:ca:25:6a:a8:dd:d5:fb:49: fb:ca:e4:d6:f7:95:74:1a:e1:87:4c:0d:8c:23:fd: 67:c5:de:11:1b:db:1c:f7:a4:21:63:46:62:d4:80: a0:f0:6e:e6:ee:25:da:de:29:8b:e4:5c:f0:b8:67: 87:98:a5:cd:d3:ae:3f:e2:6a:08:5b:68:5c:63:7e: e6:ca:cf:b2:0c:ef:5f:be:e2:2d:de:d7:ff:3b:c0: ae:71:3d:02:2b:6e:bb:01:24:11:e3:dc:6c:c0:56: 4e:75:d4:ca:79:b0:ec:1f:f4:07:48:03:a7:5a:73: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FC:D7:9D:63:85:A4:23:1E:46:76:B1:8C:CF:30:F7:D8:56:51:80 X509v3 Authority Key Identifier: keyid:25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b5:3d:fe:19:7d:9b:4a:da:05:da:64:cd:e1:96:bd:ff:3e: d2:d6:d9:13:39:19:a1:42:0a:63:ec:c6:96:59:34:9d:45:b6: 67:49:e3:3f:66:65:e2:b8:b5:ad:e1:4a:1d:d6:09:87:e6:7c: aa:9c:4e:19:cd:a2:4b:ce:58:a5:1a:fc:5c:b2:8f:92:cc:f0: 86:08:53:42:5f:49:27:1a:59:b1:23:51:e3:a8:39:9a:eb:ee: eb:8e:8d:b4:19:96:ad:9a:26:c5:8d:9a:68:3f:f1:66:d0:91: 80:10:92:50:91:3f:bb:d0:69:45:e1:9c:d9:32:4d:df:2b:0a: 7c:ee:eb:64:df:22:d5:e2:7e:06:0c:4b:c1:ee:de:94:09:08: bf:14:0b:30:8b:9a:18:d3:18:31:bf:c9:fc:f2:49:d1:75:86: 56:1f:38:71:a7:d7:81:57:1b:24:ab:6c:a3:32:00:f1:71:ea: f3:46:1f:3d:4a:0e:52:59:72:43:e8:78:c7:a3:92:ac:90:b5: 5e:e1:2c:d0:ac:2c:0d:2c:11:b8:f3:7b:6b:f1:d6:3e:86:c3: 40:d6:70:11:23:33:d6:b8:2c:f7:62:91:a9:81:df:6c:7c:9a: 67:e3:35:0c:a8:74:ee:6e:e2:c3:ac:ed:97:fc:0f:94:cd:eb: 13:3e:44:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCEvSqaAHHthXU8eihnxA4oFmLUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1 MDFCODdFMzAeFw0yNjAyMjgwMDU4NTRaFw0yNjAzMDMwNDA2NTRaMDMxMTAvBgNV BAMTKDE4RkNENzlENjM4NUE0MjMxRTQ2NzZCMThDQ0YzMEY3RDg1NjUxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsEhKzSSXXL5uoj19kbae3BNv 47FZhWlwTBnh34g1B7v+v4zSTy1fMBFeuCHqCHKZGbPLrWMgEoSXLW4nvYrYAqJ6 OVPtcH/MsCU+wOfyvcKqpnvIeA5toFyGwAUMZBpZia5rNvDQpzseRSk5LfdnAn5n uP/Gl/zeyDKTdLTrUMO5cY/wKJU1EiS5IkXKJWqo3dX7SfvK5Nb3lXQa4YdMDYwj /WfF3hEb2xz3pCFjRmLUgKDwbubuJdreKYvkXPC4Z4eYpc3Trj/iaghbaFxjfubK z7IM71++4i3e1/87wK5xPQIrbrsBJBHj3GzAVk511Mp5sOwf9AdIA6dacwNxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGPzXnWOFpCMeRnaxjM8w99hWUYAwHwYDVR0j BBgwFoAUJd/xyZ3N8Z86S57Tb9M7qlAbh+MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMC8yNURGRjFDOTlE Q0RGMTlGM0E0QjlFRDM2RkQzM0JBQTUwMUI4N0UzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNCQUE1MDFC ODdFMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk4ZWViMzgtNzc0Ni00ODk5LTlh MTAtNzk4MGY4YjkwNTMyLzAvMjVERkYxQzk5RENERjE5RjNBNEI5RUQzNkZEMzNC QUE1MDFCODdFMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALO1Pf4ZfZtK2gXaZM3hlr3/PtLW2RM5GaFC CmPsxpZZNJ1FtmdJ4z9mZeK4ta3hSh3WCYfmfKqcThnNokvOWKUa/Fyyj5LM8IYI U0JfSScaWbEjUeOoOZrr7uuOjbQZlq2aJsWNmmg/8WbQkYAQklCRP7vQaUXhnNky Td8rCnzu62TfItXifgYMS8Hu3pQJCL8UCzCLmhjTGDG/yfzySdF1hlYfOHGn14FX GySrbKMyAPFx6vNGHz1KDlJZckPoeMejkqyQtV7hLNCsLA0sEbjze2vx1j6Gw0DW cBEjM9a4LPdikamB32x8mmfjNQyodO5u4sOs7Zf8D5TN6xM+RKs= -----END CERTIFICATE-----Generated at Mon Mar 2 06:20:53 2026 by rpki-client