$ rpki-client -vvf repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft File: 625D3D358DEFDD65359387A6A36775411462B4D4.mft (raw, json) Hash identifier: AaCEHvP/DEcNSVwbu+AszL8yb7ZFYNHA6HQNRmgkckw= Subject key identifier: BA:D7:E9:C6:4A:63:A6:45:58:AB:8E:F1:47:F0:3D:73:F3:AF:BF:95 Authority key identifier: 62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 Certificate issuer: /CN=625D3D358DEFDD65359387A6A36775411462B4D4 Certificate serial: 4884EF3154CFD9008AA004BD1AF350AAA7D0DF89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft Manifest number: 028E Signing time: Thu 16 Apr 2026 04:40:53 +0000 Manifest this update: Thu 16 Apr 2026 04:35:53 +0000 Manifest next update: Sun 19 Apr 2026 14:37:53 +0000 Files and hashes: 1: 3130332e3138362e382e302f32332d3234203d3e20313339393737.roa (hash: TA1eUafUeiJYILhH4HYViFTtOG1Yb421QDz2gzPo4kU=) 2: 625D3D358DEFDD65359387A6A36775411462B4D4.crl (hash: ewpcPsMDqEerpWOezVd6ldkRiXDPGBWZDFqOTDtbLlA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 14:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:84:ef:31:54:cf:d9:00:8a:a0:04:bd:1a:f3:50:aa:a7:d0:df:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=625D3D358DEFDD65359387A6A36775411462B4D4 Validity Not Before: Apr 16 04:35:53 2026 GMT Not After : Apr 19 14:37:53 2026 GMT Subject: CN=BAD7E9C64A63A64558AB8EF147F03D73F3AFBF95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:cd:0c:da:92:70:d4:89:dd:69:88:7e:f1: d5:17:4f:6d:22:17:7a:4e:92:29:af:38:88:da:66: 30:b3:6a:16:19:5f:cf:cc:76:5d:e6:e7:c4:74:ef: 62:89:45:1c:47:6f:c5:e9:95:10:c0:3f:a2:2f:b2: e4:fe:5b:10:ac:e2:48:6a:51:cc:c1:70:04:55:9a: 93:54:74:6c:e6:b2:db:a3:a9:c9:aa:9b:c5:3a:2d: fd:02:26:17:2a:44:4e:4d:9c:fc:75:02:a7:05:fd: 3b:37:1d:b7:3c:bc:0d:78:5c:ec:f4:c0:0a:61:d4: 18:9f:38:85:29:3d:af:5b:bf:31:01:2e:a9:02:be: 75:da:95:3a:a2:74:a9:ca:4a:59:74:0f:f6:e8:a9: fc:9f:ab:2d:00:ab:a6:23:c4:3a:06:90:5b:0f:1f: c7:6a:14:4c:0f:84:0d:ad:ca:6f:7e:c2:22:c3:9f: 44:f7:c8:f6:e4:79:60:65:6d:98:69:05:16:73:b4: 34:d3:2f:53:7a:2d:d8:ea:f5:44:51:bd:4b:7e:6a: a5:86:d2:b8:2c:8f:ca:61:b5:dc:ba:20:e0:58:64: b3:4b:f8:a4:6e:03:fe:ab:cd:47:60:a2:ed:c5:d8: 75:a9:7b:a9:bb:ab:4e:75:e2:60:fd:ea:68:16:eb: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D7:E9:C6:4A:63:A6:45:58:AB:8E:F1:47:F0:3D:73:F3:AF:BF:95 X509v3 Authority Key Identifier: keyid:62:5D:3D:35:8D:EF:DD:65:35:93:87:A6:A3:67:75:41:14:62:B4:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/625D3D358DEFDD65359387A6A36775411462B4D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ef3d4da9-182f-4a73-a110-4c8bff894fbc/0/625D3D358DEFDD65359387A6A36775411462B4D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:13:bf:29:e3:6b:d5:d2:32:27:ee:8a:1a:02:a9:ed:f2:2e: 77:5e:9a:6a:07:9f:02:91:95:fb:85:a4:21:7f:c8:3a:4e:69: 51:d6:af:18:c6:04:1c:7f:37:00:ac:46:fb:5f:35:56:92:f5: 6b:17:ba:12:72:6d:0c:c8:25:73:eb:68:ea:26:b9:da:98:cb: 4f:cd:c4:bb:01:5e:69:2c:21:89:b3:1d:92:68:de:ea:d2:d9: b6:d0:23:19:e2:a0:66:80:cf:ea:12:03:bf:49:44:fd:de:d9: 7e:9f:d6:20:16:14:9f:86:cf:47:8b:ee:56:be:28:1c:41:2c: 3c:3a:ad:78:39:a2:20:5a:1a:09:7b:79:05:44:96:80:e2:7a: b8:84:1e:05:fb:11:7e:4b:e4:f5:f9:18:19:31:97:61:02:49: c4:bf:c4:fe:4c:c2:c6:82:33:45:60:ed:9f:8f:98:11:45:6c: 20:7f:39:fe:53:48:12:ee:c4:18:14:c8:cc:31:6f:7e:4e:16: d5:b0:25:03:48:c6:47:77:16:f0:c4:06:83:96:3b:fe:01:0a: d8:7e:4f:90:9f:52:bf:57:bc:aa:06:15:88:ad:e6:7a:ee:ca: c3:fa:26:6b:43:ea:60:e9:0b:d3:bb:84:8d:51:4e:73:1e:35: 61:ed:b9:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSITvMVTP2QCKoAS9GvNQqqfQ34kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDEx NDYyQjRENDAeFw0yNjA0MTYwNDM1NTNaFw0yNjA0MTkxNDM3NTNaMDMxMTAvBgNV BAMTKEJBRDdFOUM2NEE2M0E2NDU1OEFCOEVGMTQ3RjAzRDczRjNBRkJGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX9M0M2pJw1IndaYh+8dUXT20i F3pOkimvOIjaZjCzahYZX8/Mdl3m58R072KJRRxHb8XplRDAP6IvsuT+WxCs4khq UczBcARVmpNUdGzmstujqcmqm8U6Lf0CJhcqRE5NnPx1AqcF/Ts3Hbc8vA14XOz0 wAph1BifOIUpPa9bvzEBLqkCvnXalTqidKnKSll0D/boqfyfqy0Aq6YjxDoGkFsP H8dqFEwPhA2tym9+wiLDn0T3yPbkeWBlbZhpBRZztDTTL1N6Ldjq9URRvUt+aqWG 0rgsj8phtdy6IOBYZLNL+KRuA/6rzUdgou3F2HWpe6m7q0514mD96mgW62KLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUutfpxkpjpkVYq47xR/A9c/Ovv5UwHwYDVR0j BBgwFoAUYl09NY3v3WU1k4emo2d1QRRitNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZjNkNGRhOS0xODJmLTRhNzMtYTExMC00YzhiZmY4OTRmYmMvMC82MjVEM0QzNThE RUZERDY1MzU5Mzg3QTZBMzY3NzU0MTE0NjJCNEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1NDExNDYy QjRENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWYzZDRkYTktMTgyZi00YTczLWEx MTAtNGM4YmZmODk0ZmJjLzAvNjI1RDNEMzU4REVGREQ2NTM1OTM4N0E2QTM2Nzc1 NDExNDYyQjRENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsTvynja9XSMifuihoCqe3yLndemmoHnwKR lfuFpCF/yDpOaVHWrxjGBBx/NwCsRvtfNVaS9WsXuhJybQzIJXPraOomudqYy0/N xLsBXmksIYmzHZJo3urS2bbQIxnioGaAz+oSA79JRP3e2X6f1iAWFJ+Gz0eL7la+ KBxBLDw6rXg5oiBaGgl7eQVEloDieriEHgX7EX5L5PX5GBkxl2ECScS/xP5MwsaC M0Vg7Z+PmBFFbCB/Of5TSBLuxBgUyMwxb35OFtWwJQNIxkd3FvDEBoOWO/4BCth+ T5CfUr9XvKoGFYit5nruysP6JmtD6mDpC9O7hI1RTnMeNWHtuUA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:06:59 2026 by rpki-client