$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: SbeD7Seysl9GPJBUNeJR3X0Znro96UBi3d4XKfdZPUc= Subject key identifier: 8C:09:45:44:65:49:83:B6:CB:C0:75:94:23:4E:DF:65:34:41:CC:6C Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 7ED39796ABE93F0EEE047961844DC676A15D2396 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 0335 Signing time: Sat 18 Apr 2026 22:12:46 +0000 Manifest this update: Sat 18 Apr 2026 22:07:46 +0000 Manifest next update: Wed 22 Apr 2026 08:26:46 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=) 2: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=) 3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: g+rgY7ZogVF/w7Ks2q8yk0hp4sfCWInVKs0AM5Y8p30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d3:97:96:ab:e9:3f:0e:ee:04:79:61:84:4d:c6:76:a1:5d:23:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Apr 18 22:07:46 2026 GMT Not After : Apr 22 08:26:46 2026 GMT Subject: CN=8C094544654983B6CBC07594234EDF653441CC6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3f:05:67:be:20:e7:4c:d0:ec:2c:ad:a0:3f: b8:a1:76:ce:ee:d6:d5:e2:a7:03:08:f8:eb:f6:b7: cf:96:6f:b0:66:4b:b9:a0:32:6d:50:0e:3f:50:18: ed:bd:8b:50:5d:e9:55:d5:9b:69:57:c9:f2:40:bf: d8:ff:2a:44:01:08:73:cb:bf:a8:97:84:d5:02:c9: a2:8b:c0:c7:f2:30:31:8e:55:41:bb:e0:1f:bb:da: 51:31:00:a5:b3:39:f0:0b:fa:63:20:8c:7e:6d:b4: e5:cc:26:76:73:c1:c6:64:ea:6a:4b:d3:16:2d:50: ee:78:c7:84:c5:01:91:27:1b:1d:b0:9e:26:8b:df: 45:25:a5:2d:6b:2c:19:66:96:57:f5:49:ae:77:9c: ca:67:de:ff:a1:2a:b8:f0:b2:88:b8:04:9c:93:13: 3c:fe:49:45:00:0e:f2:65:b5:53:39:e1:40:80:e5: dc:98:b6:ff:3d:aa:7e:3f:3a:b8:62:78:37:ab:69: 58:3d:fd:6a:8e:f0:3d:36:bb:63:b1:05:27:0d:57: 7c:9d:fd:83:3a:85:07:ee:0f:90:79:df:68:f7:1c: d7:fd:68:60:ea:46:85:bd:71:8d:ad:47:5b:f1:87: 61:c9:e7:4d:82:1f:d6:9a:43:60:5e:9a:12:8b:ba: a0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:09:45:44:65:49:83:B6:CB:C0:75:94:23:4E:DF:65:34:41:CC:6C X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:dd:5c:91:43:62:6d:b2:ce:af:3e:62:6f:ad:76:85:a4:b8: 0b:ef:a2:45:04:b3:2f:cb:e6:83:53:74:af:85:30:ad:20:d7: d2:3d:99:86:1d:a5:f0:22:12:eb:cd:ff:05:c3:73:7a:4a:87: 89:0c:0b:10:47:42:f8:ba:64:d2:f3:f3:1f:06:da:1e:02:f5: 3e:c1:a4:a2:ce:c0:21:41:d6:2d:8b:6c:40:52:1e:ce:7f:ff: 9c:1c:56:34:e9:8d:e5:d2:85:c6:c4:7b:c7:c4:ca:6c:52:a9: d8:6c:1c:2e:c5:14:fd:bb:0a:b3:51:79:81:bb:88:1b:4b:44: 37:d0:74:f4:6e:0f:dc:1d:1a:97:d7:aa:52:98:77:10:0d:a2: 24:a2:3c:24:21:96:43:b9:e7:a2:fb:3f:58:03:a4:ef:2f:59: c9:3d:2b:45:b5:58:87:49:98:15:35:d9:c2:b7:22:df:84:29: 8b:1a:26:ee:7f:75:ae:35:26:48:53:58:d3:f6:c1:fd:0f:f0: 03:9c:e8:14:84:f4:d4:40:36:68:51:76:d2:e6:e5:86:43:e7: f9:a2:f1:d2:5e:d2:5c:3a:0c:e0:2f:1a:f2:75:63:a5:4b:f0: 47:ad:60:c7:17:d3:58:87:3c:3f:4b:d7:96:b5:76:f8:fc:bc: 82:b7:6f:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftOXlqvpPw7uBHlhhE3GdqFdI5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNjA0MTgyMjA3NDZaFw0yNjA0MjIwODI2NDZaMDMxMTAvBgNV BAMTKDhDMDk0NTQ0NjU0OTgzQjZDQkMwNzU5NDIzNEVERjY1MzQ0MUNDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgPwVnviDnTNDsLK2gP7ihds7u 1tXipwMI+Ov2t8+Wb7BmS7mgMm1QDj9QGO29i1Bd6VXVm2lXyfJAv9j/KkQBCHPL v6iXhNUCyaKLwMfyMDGOVUG74B+72lExAKWzOfAL+mMgjH5ttOXMJnZzwcZk6mpL 0xYtUO54x4TFAZEnGx2wniaL30UlpS1rLBlmllf1Sa53nMpn3v+hKrjwsoi4BJyT Ezz+SUUADvJltVM54UCA5dyYtv89qn4/OrhieDeraVg9/WqO8D02u2OxBScNV3yd /YM6hQfuD5B532j3HNf9aGDqRoW9cY2tR1vxh2HJ502CH9aaQ2BemhKLuqALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjAlFRGVJg7bLwHWUI07fZTRBzGwwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3dXJFDYm2yzq8+Ym+tdoWkuAvvokUEsy/L 5oNTdK+FMK0g19I9mYYdpfAiEuvN/wXDc3pKh4kMCxBHQvi6ZNLz8x8G2h4C9T7B pKLOwCFB1i2LbEBSHs5//5wcVjTpjeXShcbEe8fEymxSqdhsHC7FFP27CrNReYG7 iBtLRDfQdPRuD9wdGpfXqlKYdxANoiSiPCQhlkO556L7P1gDpO8vWck9K0W1WIdJ mBU12cK3It+EKYsaJu5/da41JkhTWNP2wf0P8AOc6BSE9NRANmhRdtLm5YZD5/mi 8dJe0lw6DOAvGvJ1Y6VL8EetYMcX01iHPD9L15a1dvj8vIK3b78= -----END CERTIFICATE-----Generated at Sun Apr 19 14:07:18 2026 by rpki-client