$ rpki-client -vvf repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft File: E025EB5354ADB573B451D02820EA68FD4CAE920A.mft (raw, json) Hash identifier: H5cHMteyALnpP2HiAqFaSUmClNFG95mQ3vDr7EARj+I= Subject key identifier: 25:01:0C:10:9A:84:47:DB:50:29:22:D8:2E:D7:84:AE:D3:F9:FA:9E Authority key identifier: E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A Certificate issuer: /CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Certificate serial: 210AFB036CF92714672A6B2B189A29F99C75C796 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft Manifest number: 01B4 Signing time: Sat 28 Feb 2026 16:40:47 +0000 Manifest this update: Sat 28 Feb 2026 16:35:47 +0000 Manifest next update: Wed 04 Mar 2026 02:16:47 +0000 Files and hashes: 1: E025EB5354ADB573B451D02820EA68FD4CAE920A.crl (hash: f9dhnxqA2WM9yA6Jsjcw0nJauz0olkXehbhDvRrsz1g=) 2: 3130332e3233302e38312e302f32342d3234203d3e20313530393631.roa (hash: BRyZcy7P9c9jO1spuL0mDoDN9aAC7pRi+y0OjtQk3Qc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0a:fb:03:6c:f9:27:14:67:2a:6b:2b:18:9a:29:f9:9c:75:c7:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E025EB5354ADB573B451D02820EA68FD4CAE920A Validity Not Before: Feb 28 16:35:47 2026 GMT Not After : Mar 4 02:16:47 2026 GMT Subject: CN=25010C109A8447DB502922D82ED784AED3F9FA9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:5f:71:0f:b4:9d:ee:1d:17:8a:dc:8a:cb: 9e:5b:4b:3c:f7:36:45:7d:bf:9e:87:11:02:8a:fd: 33:c5:6b:f2:61:36:ad:65:dc:b6:d0:98:3c:84:8a: 69:2a:62:2f:94:f2:8d:9e:6a:44:a1:43:07:b7:68: 65:98:01:94:2a:d3:9a:54:19:81:a6:9a:56:50:5f: c0:4b:4f:25:2f:bb:1b:ae:c3:36:a3:e3:c5:a8:e3: 74:a6:e4:ac:f4:ce:8e:ef:f9:bd:61:32:41:65:57: 9d:6f:4f:fc:c5:77:36:c6:5c:c7:c6:4d:63:26:92: 85:0e:d7:cc:f6:6b:b8:e9:4c:e8:9f:83:47:f6:d0: 17:38:83:f3:88:fb:57:d4:d2:22:82:7c:c4:c1:7f: 1f:57:4f:9a:7e:03:97:79:2e:6d:bc:54:1a:81:59: a9:ae:3a:1e:93:7c:a1:6a:9a:4b:90:76:2f:a0:82: 4a:bb:02:23:c7:1d:ca:32:f3:be:2e:79:38:cc:74: 31:ef:b9:06:c8:b4:1a:00:2b:e2:75:be:c2:ae:33: 7f:49:b0:d2:ad:14:f2:4c:e5:9d:1f:e4:4c:6b:fd: 68:60:5f:f3:6b:70:12:91:49:16:50:0c:0c:bf:92: ff:98:20:f8:d2:04:f5:80:98:76:fd:78:7f:f1:29: 46:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:01:0C:10:9A:84:47:DB:50:29:22:D8:2E:D7:84:AE:D3:F9:FA:9E X509v3 Authority Key Identifier: keyid:E0:25:EB:53:54:AD:B5:73:B4:51:D0:28:20:EA:68:FD:4C:AE:92:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E025EB5354ADB573B451D02820EA68FD4CAE920A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14a2a41-2838-4369-997b-4299f17eee90/0/E025EB5354ADB573B451D02820EA68FD4CAE920A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:94:bb:4e:d1:29:7f:bd:4e:20:13:76:43:ab:7e:2e:6b:94: f8:1f:d4:1a:86:00:48:3a:e8:1b:2d:b6:c4:cb:5c:8c:53:0a: a6:22:af:9d:84:10:35:2a:d9:ee:8e:48:60:b5:ed:92:a9:85: b6:4b:cc:b1:1c:00:00:02:aa:93:7e:45:35:46:bc:ef:28:de: d6:53:03:0c:e1:19:bf:b6:dd:6f:e4:37:d7:78:75:ce:af:de: 8c:c8:65:9a:47:32:11:94:2c:c5:e2:a9:19:9c:d2:da:bf:55: df:27:e8:57:4f:44:4b:4c:01:d7:33:cf:f4:5e:55:d1:8f:23: 85:4b:ae:87:af:7b:86:fe:26:e1:99:84:e1:81:35:ec:39:77: 1c:d6:cf:f8:45:27:33:92:2c:4e:64:6e:62:68:4d:59:c2:1e: ab:cb:d8:21:83:74:b8:aa:e9:b3:27:56:50:15:86:cc:bb:96: ba:b7:25:01:25:a3:a6:41:c8:bc:5f:c8:cf:6c:0d:6a:a7:d6: bd:a3:00:f8:be:b1:71:2b:a1:c0:a0:a0:de:5d:6f:28:0d:c9: 16:36:cd:7e:64:43:3a:6d:ba:98:74:0c:7c:cd:a4:b6:7a:87: de:61:1a:7e:23:a3:61:f4:46:c3:83:a6:ae:4a:7e:07:29:ca: cb:2e:38:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIQr7A2z5JxRnKmsrGJop+Zx1x5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0 Q0FFOTIwQTAeFw0yNjAyMjgxNjM1NDdaFw0yNjAzMDQwMjE2NDdaMDMxMTAvBgNV BAMTKDI1MDEwQzEwOUE4NDQ3REI1MDI5MjJEODJFRDc4NEFFRDNGOUZBOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkl9xD7Sd7h0XityKy55bSzz3 NkV9v56HEQKK/TPFa/JhNq1l3LbQmDyEimkqYi+U8o2eakShQwe3aGWYAZQq05pU GYGmmlZQX8BLTyUvuxuuwzaj48Wo43Sm5Kz0zo7v+b1hMkFlV51vT/zFdzbGXMfG TWMmkoUO18z2a7jpTOifg0f20Bc4g/OI+1fU0iKCfMTBfx9XT5p+A5d5Lm28VBqB WamuOh6TfKFqmkuQdi+ggkq7AiPHHcoy874ueTjMdDHvuQbItBoAK+J1vsKuM39J sNKtFPJM5Z0f5Exr/WhgX/NrcBKRSRZQDAy/kv+YIPjSBPWAmHb9eH/xKUZxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJQEMEJqER9tQKSLYLteErtP5+p4wHwYDVR0j BBgwFoAU4CXrU1SttXO0UdAoIOpo/UyukgowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MTRhMmE0MS0yODM4LTQzNjktOTk3Yi00Mjk5ZjE3ZWVlOTAvMC9FMDI1RUI1MzU0 QURCNTczQjQ1MUQwMjgyMEVBNjhGRDRDQUU5MjBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4RkQ0Q0FF OTIwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0YTJhNDEtMjgzOC00MzY5LTk5 N2ItNDI5OWYxN2VlZTkwLzAvRTAyNUVCNTM1NEFEQjU3M0I0NTFEMDI4MjBFQTY4 RkQ0Q0FFOTIwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmUu07RKX+9TiATdkOrfi5rlPgf1BqGAEg6 6BsttsTLXIxTCqYir52EEDUq2e6OSGC17ZKphbZLzLEcAAACqpN+RTVGvO8o3tZT AwzhGb+23W/kN9d4dc6v3ozIZZpHMhGULMXiqRmc0tq/Vd8n6FdPREtMAdczz/Re VdGPI4VLroeve4b+JuGZhOGBNew5dxzWz/hFJzOSLE5kbmJoTVnCHqvL2CGDdLiq 6bMnVlAVhsy7lrq3JQElo6ZByLxfyM9sDWqn1r2jAPi+sXErocCgoN5dbygNyRY2 zX5kQzptuph0DHzNpLZ6h95hGn4jo2H0RsODpq5KfgcpyssuOBw= -----END CERTIFICATE-----Generated at Mon Mar 2 20:06:33 2026 by rpki-client