$ rpki-client -vvf repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft (raw, json) Hash identifier: 3PIjeT8M++DVp76HqRs2zQ7n018bITvxg3qUFDd0QU4= Subject key identifier: 42:59:D3:91:86:24:C8:6E:85:64:5F:8D:A6:DC:50:6E:12:17:FB:5C Authority key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Certificate issuer: /CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Certificate serial: 70CBA725426887738C5511310524699494D77268 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft Manifest number: 02EB Signing time: Tue 04 Nov 2025 04:22:23 +0000 Manifest this update: Tue 04 Nov 2025 04:17:23 +0000 Manifest next update: Fri 07 Nov 2025 07:33:23 +0000 Files and hashes: 1: 3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (hash: Up9LSeGrEk86AmZx1Mz4hpZPUaY/z7DkI+kYAtlMDxc=) 2: 3130332e3137362e3138312e302f32342d3234203d3e20313437313333.roa (hash: h6CeT5uHVftwL+MFbDdlezLq5p9Ihp/9/N4/ZrFunI0=) 3: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl (hash: zB7HmaIqD/0rKuKIdRWyGEKeZYrhO8DQ5dgsUIFx8qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cb:a7:25:42:68:87:73:8c:55:11:31:05:24:69:94:94:d7:72:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Validity Not Before: Nov 4 04:17:23 2025 GMT Not After : Nov 7 07:33:23 2025 GMT Subject: CN=4259D3918624C86E85645F8DA6DC506E1217FB5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:97:cc:81:bc:9d:a4:22:7c:52:55:79:ba: 3b:f4:0f:71:d3:7f:2f:54:63:5d:47:45:18:39:1a: 5a:1e:a0:fa:44:64:39:6f:e0:df:27:d3:93:8f:4c: 4d:4d:83:ce:94:5c:03:9b:52:09:d1:69:8e:0a:6e: 40:ad:99:ce:9a:63:d1:f0:3c:e0:48:0e:7f:73:b1: c4:85:05:b4:73:ab:94:4a:6c:81:00:ea:6d:c8:49: 15:df:e9:13:0e:0d:8c:bb:78:0e:0e:f1:41:47:05: 2e:8e:2c:b1:97:44:a3:cf:1d:39:89:93:c9:1e:02: d6:66:2b:78:0b:f1:04:c5:49:84:87:56:1a:e0:9c: e7:b7:a1:14:0d:58:01:a4:4e:a5:18:f2:a4:2f:df: a0:18:7a:27:7c:a9:b7:b7:30:21:ee:a1:a0:ff:13: 49:e2:bc:1f:46:83:64:97:93:cd:43:94:a4:eb:e6: 7f:76:1e:98:ee:f1:2c:a4:9c:b9:3e:ed:cc:49:47: 63:68:fb:38:28:c2:2d:98:54:b2:58:14:c7:0b:23: 98:84:de:ec:ff:8e:0c:10:42:5c:16:07:7b:f0:16: 1e:b3:17:ac:f8:a6:30:86:60:ed:40:2a:3d:15:63: 3f:e0:08:38:07:45:f4:ed:7b:18:70:01:7f:5a:74: b9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:59:D3:91:86:24:C8:6E:85:64:5F:8D:A6:DC:50:6E:12:17:FB:5C X509v3 Authority Key Identifier: keyid:25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b8:e6:22:2b:bd:f8:e5:06:a4:0b:a7:22:6d:73:d6:08:75: 69:92:22:81:f9:ab:53:5e:55:e6:49:d8:c6:4c:4c:8a:c2:46: 66:22:ac:db:c2:0a:77:c6:41:49:c9:e0:d0:a0:84:4d:a3:33: 59:ba:ba:59:4c:31:6b:77:5b:14:75:9a:9e:73:be:25:32:38: 8f:44:0f:19:5b:59:ee:10:9b:31:e4:1d:38:4d:d3:e8:d4:42: 3e:67:1e:cb:39:fa:de:9e:c3:1c:71:9d:31:1b:98:10:11:6d: 08:72:ed:db:e0:e0:fc:ee:fb:34:06:72:03:0c:2f:f6:2e:fd: 38:30:e7:f5:28:14:67:62:3e:5d:d8:08:83:cb:ec:4f:e7:9e: eb:c8:6e:08:5a:0d:d5:78:f2:b9:cb:5d:f8:ad:69:b2:83:77: 5b:af:82:50:9c:8f:e0:23:a3:a5:de:f9:ad:3e:0a:4d:8d:cc: a7:f5:3a:6a:aa:f8:d8:a9:d4:1e:fe:60:11:8e:ff:70:dc:1e: 40:2d:de:b7:b6:db:ab:fb:6c:de:01:82:5c:c2:40:bd:d6:58: 14:e4:2e:8d:df:5c:27:f3:33:75:92:0c:d5:ee:c8:80:19:87: 9a:90:02:c7:88:9a:0b:0d:f4:1c:02:b9:ff:7b:93:89:f3:7c: 33:1e:c1:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMunJUJoh3OMVRExBSRplJTXcmgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQy NEY0RjFCRTAeFw0yNTExMDQwNDE3MjNaFw0yNTExMDcwNzMzMjNaMDMxMTAvBgNV BAMTKDQyNTlEMzkxODYyNEM4NkU4NTY0NUY4REE2REM1MDZFMTIxN0ZCNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oJfMgbydpCJ8UlV5ujv0D3HT fy9UY11HRRg5GloeoPpEZDlv4N8n05OPTE1Ng86UXAObUgnRaY4KbkCtmc6aY9Hw POBIDn9zscSFBbRzq5RKbIEA6m3ISRXf6RMODYy7eA4O8UFHBS6OLLGXRKPPHTmJ k8keAtZmK3gL8QTFSYSHVhrgnOe3oRQNWAGkTqUY8qQv36AYeid8qbe3MCHuoaD/ E0nivB9Gg2SXk81DlKTr5n92Hpju8SyknLk+7cxJR2No+zgowi2YVLJYFMcLI5iE 3uz/jgwQQlwWB3vwFh6zF6z4pjCGYO1AKj0VYz/gCDgHRfTtexhwAX9adLnFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQlnTkYYkyG6FZF+NptxQbhIX+1wwHwYDVR0j BBgwFoAUJfRkAg2cu40YvHxHFp+XjST08b4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMC8yNUY0NjQwMjBE OUNCQjhEMThCQzdDNDcxNjlGOTc4RDI0RjRGMUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3OEQyNEY0 RjFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI4ZGU4NmItYTI2ZS00YjBmLWE4 M2MtMDVmYWI0YTMwYzc3LzAvMjVGNDY0MDIwRDlDQkI4RDE4QkM3QzQ3MTY5Rjk3 OEQyNEY0RjFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGq45iIrvfjlBqQLpyJtc9YIdWmSIoH5q1Ne VeZJ2MZMTIrCRmYirNvCCnfGQUnJ4NCghE2jM1m6ullMMWt3WxR1mp5zviUyOI9E DxlbWe4QmzHkHThN0+jUQj5nHss5+t6ewxxxnTEbmBARbQhy7dvg4Pzu+zQGcgMM L/Yu/Tgw5/UoFGdiPl3YCIPL7E/nnuvIbghaDdV48rnLXfitabKDd1uvglCcj+Aj o6Xe+a0+Ck2NzKf1Omqq+Nip1B7+YBGO/3DcHkAt3re226v7bN4BglzCQL3WWBTk Lo3fXCfzM3WSDNXuyIAZh5qQAseImgsN9BwCuf97k4nzfDMewfw= -----END CERTIFICATE-----Generated at Wed Nov 5 00:31:17 2025 by rpki-client