$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: s/VphFJMojzCS4sHVUTigpPiZDM4j+4woByZCqOhwF8= Subject key identifier: 17:6F:55:6D:CA:5E:AC:B5:05:0C:99:C6:57:9E:5B:B2:0C:8E:4D:A0 Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 4A3F889463E4D3AAE73B87B3A2FB3850709A5038 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 027A Signing time: Sun 01 Mar 2026 23:40:51 +0000 Manifest this update: Sun 01 Mar 2026 23:35:51 +0000 Manifest next update: Thu 05 Mar 2026 05:23:51 +0000 Files and hashes: 1: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: TA1eUafUeiJYILhH4HYViFTtOG1Yb421QDz2gzPo4kU=) 2: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: 4geLubAMU7c7FqVJcb3Rt8OeL8ijaFyknoO7RMj9yGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3f:88:94:63:e4:d3:aa:e7:3b:87:b3:a2:fb:38:50:70:9a:50:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: Mar 1 23:35:51 2026 GMT Not After : Mar 5 05:23:51 2026 GMT Subject: CN=176F556DCA5EACB5050C99C6579E5BB20C8E4DA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6f:a9:db:d6:8e:6f:79:d6:0d:22:c8:c9:aa: f3:88:7c:13:5e:d5:bc:84:b5:fd:97:70:0a:1f:e4: 44:75:c7:5b:a7:e5:8a:7d:35:c0:6b:1e:8c:24:9e: ea:17:54:b5:d6:45:6d:44:27:1a:60:67:0f:bd:37: 04:35:bb:a3:a0:0e:85:a8:9c:41:57:b7:1c:b7:ca: 3b:68:9a:64:ee:09:e2:d8:3f:cd:78:30:6c:20:80: d6:69:5e:5c:3b:55:2b:8e:10:35:01:7e:83:30:6f: cd:27:01:22:32:c6:f3:e0:8c:f1:cc:fa:f1:f2:f3: 17:e1:2c:71:c4:0d:67:2a:27:6e:b2:4c:af:6d:72: 36:45:af:c2:08:32:84:47:f3:f6:9a:e0:f0:c9:4e: 64:29:dc:dc:eb:df:19:e9:02:f0:35:67:64:4b:91: 6a:f1:51:41:1c:d6:44:32:84:29:76:0e:bc:1e:0b: 1c:e7:8b:bc:75:fb:6e:9e:ac:93:7f:6e:ba:0a:d1: 11:a2:10:ab:3e:a5:a3:71:7b:7d:db:b8:17:93:64: 30:03:19:58:ab:75:ef:59:4f:af:47:41:55:d4:7d: b2:53:ea:91:37:0f:bd:35:08:da:92:6f:6e:87:57: d9:0c:88:b1:2e:bb:b1:3c:e4:a3:d7:5e:da:a5:f0: 93:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:6F:55:6D:CA:5E:AC:B5:05:0C:99:C6:57:9E:5B:B2:0C:8E:4D:A0 X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:75:a6:ab:e4:17:ba:80:b0:78:c4:db:70:5c:02:b1:11:27: 1b:57:80:8b:bf:81:c3:85:7e:da:72:d5:e3:f8:1e:03:ce:0d: e6:77:eb:5d:e5:5a:92:3b:f4:a0:1d:5a:20:ed:bb:08:1c:2f: 7c:e1:99:58:06:38:2d:e0:0a:46:17:b1:31:27:41:97:06:da: 4a:75:ae:09:37:9c:55:a3:e9:67:aa:82:21:db:ef:5e:00:8a: 86:b2:13:bc:2a:a9:4d:dc:94:40:e9:eb:11:19:46:8e:e9:6e: 7b:d8:66:0b:96:7d:54:eb:ed:4a:7d:d5:57:7f:b9:99:34:e7: f7:b9:32:5b:26:97:8d:58:a5:a2:d0:d4:a0:34:03:1d:c4:7b: 60:2c:17:92:11:7c:c1:e7:97:70:10:e4:b1:79:8c:5d:f0:86: 8c:fc:01:ce:7a:00:03:8c:33:e9:87:e6:74:86:b4:29:de:ee: 3a:45:3b:0f:1e:54:d2:fb:05:38:ac:9c:0b:52:e0:22:38:2e: 9c:b4:dd:f1:68:05:d2:dc:91:d3:00:8a:79:3f:ec:3d:d5:ee: 8e:e0:c8:ea:2e:21:08:74:4f:7d:9b:73:b4:92:a1:41:cc:58: df:c0:90:2f:8e:14:67:31:b5:b8:fb:eb:59:9a:54:7f:5e:37: 08:ad:7d:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSj+IlGPk06rnO4ezovs4UHCaUDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNjAzMDEyMzM1NTFaFw0yNjAzMDUwNTIzNTFaMDMxMTAvBgNV BAMTKDE3NkY1NTZEQ0E1RUFDQjUwNTBDOTlDNjU3OUU1QkIyMEM4RTREQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIb6nb1o5vedYNIsjJqvOIfBNe 1byEtf2XcAof5ER1x1un5Yp9NcBrHowknuoXVLXWRW1EJxpgZw+9NwQ1u6OgDoWo nEFXtxy3yjtommTuCeLYP814MGwggNZpXlw7VSuOEDUBfoMwb80nASIyxvPgjPHM +vHy8xfhLHHEDWcqJ26yTK9tcjZFr8IIMoRH8/aa4PDJTmQp3Nzr3xnpAvA1Z2RL kWrxUUEc1kQyhCl2DrweCxzni7x1+26erJN/broK0RGiEKs+paNxe33buBeTZDAD GVirde9ZT69HQVXUfbJT6pE3D701CNqSb26HV9kMiLEuu7E85KPXXtql8JNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF29VbcperLUFDJnGV55bsgyOTaAwHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL91pqvkF7qAsHjE23BcArERJxtXgIu/gcOF ftpy1eP4HgPODeZ3613lWpI79KAdWiDtuwgcL3zhmVgGOC3gCkYXsTEnQZcG2kp1 rgk3nFWj6WeqgiHb714AioayE7wqqU3clEDp6xEZRo7pbnvYZguWfVTr7Up91Vd/ uZk05/e5Mlsml41YpaLQ1KA0Ax3Ee2AsF5IRfMHnl3AQ5LF5jF3whoz8Ac56AAOM M+mH5nSGtCne7jpFOw8eVNL7BTisnAtS4CI4Lpy03fFoBdLckdMAink/7D3V7o7g yOouIQh0T32bc7SSoUHMWN/AkC+OFGcxtbj761maVH9eNwitfeg= -----END CERTIFICATE-----Generated at Mon Mar 2 05:59:29 2026 by rpki-client