$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft File: 26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json) Hash identifier: W8olgZuX2LgNkU8dyDcd+3+AYlR6QHCck2SkolrupRc= Subject key identifier: 16:D1:91:6C:60:FE:57:99:AA:5D:AE:D9:49:14:98:70:AD:E7:87:79 Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Certificate serial: 164209896CEFFB92832CEACB93F6F57388AA452C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft Manifest number: 051E Signing time: Tue 04 Nov 2025 12:10:01 +0000 Manifest this update: Tue 04 Nov 2025 12:05:01 +0000 Manifest next update: Fri 07 Nov 2025 20:20:01 +0000 Files and hashes: 1: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=) 2: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=) 3: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=) 4: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=) 5: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=) 6: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: I5+aq6ZxH8YNO7YbuVB0wUqqD27bdAStyxs3BEFHqVE=) 7: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=) 8: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=) 9: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=) 10: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:42:09:89:6c:ef:fb:92:83:2c:ea:cb:93:f6:f5:73:88:aa:45:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Validity Not Before: Nov 4 12:05:01 2025 GMT Not After : Nov 7 20:20:01 2025 GMT Subject: CN=16D1916C60FE5799AA5DAED949149870ADE78779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:7d:07:59:e0:24:d0:f0:48:64:04:a8:58: 47:a5:b1:01:3d:31:84:56:55:12:ca:c4:5a:25:2d: a9:9b:f7:db:11:6c:d0:f4:0a:2a:3b:75:bb:fb:24: 1d:9c:f3:7e:f0:f4:9a:b7:de:d7:1c:ff:51:66:45: 33:8d:c1:de:c1:09:54:3b:ff:6d:49:58:b9:ee:f1: 8a:e3:2a:04:86:25:3c:86:67:29:a5:e1:72:08:5e: 27:94:c1:5c:4c:9d:ec:c5:4e:8e:a5:d8:1e:39:34: 01:40:c3:76:1c:f2:23:8e:09:ca:89:19:6c:c7:f9: 3f:31:92:b5:2f:c9:cc:a0:fd:b2:0a:59:49:12:eb: 19:87:f2:e5:f7:ac:b7:d5:ec:a4:18:5f:26:74:a9: 18:09:3e:c7:6b:25:e8:95:ab:0f:e3:37:6d:26:0d: e2:96:a7:8b:c8:67:86:27:85:5f:2d:aa:fc:e7:16: 16:a3:51:12:c8:60:3e:40:2d:d8:1a:1d:bf:27:57: 06:e3:eb:5d:91:73:27:95:4b:1d:d2:50:f1:f0:6a: ef:7d:0d:c4:5d:25:a4:bd:f5:92:ec:bc:9a:3c:50: 0b:d4:03:20:1c:71:ff:53:7c:73:2c:d0:53:d3:7b: 6d:19:54:51:2b:eb:69:fd:9b:46:4c:90:2c:14:95: cd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D1:91:6C:60:FE:57:99:AA:5D:AE:D9:49:14:98:70:AD:E7:87:79 X509v3 Authority Key Identifier: keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:38:21:f5:c6:2a:b1:b6:97:71:a9:18:e1:70:8f:5b:a4:c3: 9c:a9:d1:72:35:9e:21:82:df:2e:d7:97:1d:ee:3e:45:80:b3: 25:f3:0c:45:86:99:e7:06:c6:f9:7e:9c:5a:01:62:3c:ed:5a: 37:6b:16:4c:ef:9b:1a:54:15:cb:fe:5f:d6:aa:ec:82:31:e7: f8:82:57:5d:7a:08:72:4e:ec:a6:ff:1a:51:ee:7b:23:43:8c: a0:ea:42:18:94:5a:8c:bb:67:54:18:14:2d:99:6a:7c:eb:99: 28:fc:38:15:97:dd:c2:cb:7e:9d:13:9e:d0:6d:ad:5e:40:4b: 5f:92:32:b2:b3:c7:31:08:7a:c9:0a:bd:33:c3:b8:88:62:5f: a6:0f:d4:b4:7c:24:b9:cc:da:51:0b:30:76:0a:61:b5:09:bb: 36:d2:69:89:70:cc:a4:13:e9:f3:95:f0:12:aa:77:61:d7:15: 29:72:bf:3f:4a:8a:2f:b0:1d:58:b7:90:52:28:fa:e3:a1:ba: e9:9d:22:dc:b0:fe:3a:39:63:71:20:bd:a1:05:70:c7:8f:bf: 29:1b:79:35:8f:2a:cd:33:c6:6b:89:e4:e5:ac:10:f7:f9:3c: 6c:c2:dd:28:88:7e:83:ef:96:7f:0a:ca:b7:30:aa:6a:92:a7: b7:bb:fa:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkIJiWzv+5KDLOrLk/b1c4iqRSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNF QjlDOUNFNTAeFw0yNTExMDQxMjA1MDFaFw0yNTExMDcyMDIwMDFaMDMxMTAvBgNV BAMTKDE2RDE5MTZDNjBGRTU3OTlBQTVEQUVEOTQ5MTQ5ODcwQURFNzg3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZH0HWeAk0PBIZASoWEelsQE9 MYRWVRLKxFolLamb99sRbND0Cio7dbv7JB2c837w9Jq33tcc/1FmRTONwd7BCVQ7 /21JWLnu8YrjKgSGJTyGZyml4XIIXieUwVxMnezFTo6l2B45NAFAw3Yc8iOOCcqJ GWzH+T8xkrUvycyg/bIKWUkS6xmH8uX3rLfV7KQYXyZ0qRgJPsdrJeiVqw/jN20m DeKWp4vIZ4YnhV8tqvznFhajURLIYD5ALdgaHb8nVwbj612RcyeVSx3SUPHwau99 DcRdJaS99ZLsvJo8UAvUAyAccf9TfHMs0FPTe20ZVFEr62n9m0ZMkCwUlc2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFtGRbGD+V5mqXa7ZSRSYcK3nh3kwHwYDVR0j BBgwFoAUJkJbcClPmANdOHiOWXpKbOucnOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YzMDkzNi1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC8yNjQyNUI3MDI5 NEY5ODAzNUQzODc4OEU1OTdBNEE2Q0VCOUM5Q0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNFQjlD OUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMzA5MzYtYzc1MC00MzNiLTlj MmEtOGZmNWYzOGU2M2Q0LzAvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRB NkNFQjlDOUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw4IfXGKrG2l3GpGOFwj1ukw5yp0XI1niGC 3y7Xlx3uPkWAsyXzDEWGmecGxvl+nFoBYjztWjdrFkzvmxpUFcv+X9aq7IIx5/iC V116CHJO7Kb/GlHueyNDjKDqQhiUWoy7Z1QYFC2ZanzrmSj8OBWX3cLLfp0TntBt rV5AS1+SMrKzxzEIeskKvTPDuIhiX6YP1LR8JLnM2lELMHYKYbUJuzbSaYlwzKQT 6fOV8BKqd2HXFSlyvz9Kii+wHVi3kFIo+uOhuumdItyw/jo5Y3EgvaEFcMePvykb eTWPKs0zxmuJ5OWsEPf5PGzC3SiIfoPvln8KyrcwqmqSp7e7+rg= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:54 2025 by rpki-client