$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: yJF7UO0gu/B6O4nXdIuAEC8sfPPdfTyz9tUSCdfSumI= Subject key identifier: DF:B9:AC:FC:78:22:D9:8F:7C:7C:7B:98:A8:24:6E:14:D2:79:D7:E1 Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 2539E466A6B7E4EE295C3740E8B319F4E5BBF219 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 0573 Signing time: Fri 17 Apr 2026 05:02:20 +0000 Manifest this update: Fri 17 Apr 2026 04:57:20 +0000 Manifest next update: Mon 20 Apr 2026 06:34:20 +0000 Files and hashes: 1: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: nEUnIAXodQIvY/DL9VkKmYJGYrBZ7fF8WEt7yPns5LA=) 2: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: KWhFP88aQIWgcnUslnjvyh5Swkim9DgQUrbO0uBN5Uc=) 3: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: ycLrFSluhQHbHMeR5mx7HDHqT3Cknj/hMk/uIjRqWwc=) 4: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (hash: u3SbbNuX76ouLAbh2avANQTDQ1dz0YKRwMgpyt5FWwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 06:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:39:e4:66:a6:b7:e4:ee:29:5c:37:40:e8:b3:19:f4:e5:bb:f2:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Apr 17 04:57:20 2026 GMT Not After : Apr 20 06:34:20 2026 GMT Subject: CN=DFB9ACFC7822D98F7C7C7B98A8246E14D279D7E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:31:21:96:1a:cd:01:38:c6:71:71:90:83:99: f3:04:6b:fc:e7:f8:dd:3b:9f:61:92:28:92:8e:5e: 59:1b:76:5d:0e:6f:64:e6:bb:0f:a3:63:8e:5d:d6: 79:f3:ac:e4:fd:86:a1:fe:68:c3:79:d1:9a:4e:9f: 4f:4c:0a:26:33:65:3d:74:b2:48:78:24:5b:7f:c4: 05:78:4d:b7:89:e7:ad:25:a0:5c:98:9c:ca:ba:07: 38:9f:bf:74:23:be:13:14:db:cc:f4:f3:4f:82:f2: e1:ed:a5:cc:64:ea:7a:9f:0d:f7:9d:83:f8:34:3f: f2:8a:e8:df:75:73:be:54:43:92:63:ac:46:ce:81: 65:27:61:f5:2a:33:61:5e:d5:08:65:a2:83:fd:ed: 2c:1e:aa:b7:d2:9a:3b:bd:74:77:8c:54:08:37:21: d5:7c:56:b6:24:f6:fb:ea:1e:cf:98:d0:18:91:e8: 84:86:67:7c:e8:1d:45:bb:13:d0:68:72:78:ba:59: ba:89:01:05:a7:74:8a:39:32:04:aa:ba:3d:b2:fd: cb:31:a5:64:bd:07:c6:80:bf:81:92:1b:17:9d:50: de:8d:8c:46:33:fa:c8:75:33:5e:36:f7:94:94:0e: c0:f8:e2:3d:2b:ba:fc:e0:ff:2b:b5:d2:db:19:3b: 3a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B9:AC:FC:78:22:D9:8F:7C:7C:7B:98:A8:24:6E:14:D2:79:D7:E1 X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b3:74:3e:32:a2:53:ee:3f:c9:93:a8:8d:e2:50:e8:e6:d9: b9:0c:76:60:eb:04:24:47:c5:90:9e:be:37:ec:31:89:d4:dd: f1:b9:48:5f:97:5c:73:df:2d:16:52:05:a2:49:0d:bc:84:0e: 0b:57:fc:02:a1:21:98:85:e9:06:42:ba:53:ef:ca:e6:86:2c: 15:51:0c:14:2a:56:02:39:79:36:07:f5:f5:a9:78:8a:c1:99: b0:1a:97:3b:a7:b8:f3:0c:69:e7:65:17:62:f8:e7:56:28:d5: 10:75:d2:82:6b:90:28:6c:76:6b:12:eb:e4:32:b8:32:a3:f5: 35:aa:48:c0:ec:5d:ca:17:5a:27:b9:82:3f:bc:59:77:4e:ac: 3e:ae:cb:79:af:f9:9e:a7:b6:b9:e8:9e:eb:b9:01:92:13:a9: 86:9e:0b:b5:3a:c5:02:47:9c:96:0f:a8:1f:16:79:07:6e:5d: 59:6a:e8:9f:d3:0d:57:97:80:76:05:06:1c:84:74:83:b3:60: 22:03:18:f5:0b:46:29:70:43:af:00:4b:66:6e:16:01:a4:ad: e6:11:b7:46:56:02:d6:2d:35:6c:44:28:e9:44:b9:7b:0f:27: 09:05:c9:68:72:ed:a9:d8:b3:3a:dc:58:80:39:ef:f8:7f:94: 8c:35:cb:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJTnkZqa35O4pXDdA6LMZ9OW78hkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNjA0MTcwNDU3MjBaFw0yNjA0MjAwNjM0MjBaMDMxMTAvBgNV BAMTKERGQjlBQ0ZDNzgyMkQ5OEY3QzdDN0I5OEE4MjQ2RTE0RDI3OUQ3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMSGWGs0BOMZxcZCDmfMEa/zn +N07n2GSKJKOXlkbdl0Ob2Tmuw+jY45d1nnzrOT9hqH+aMN50ZpOn09MCiYzZT10 skh4JFt/xAV4TbeJ560loFyYnMq6Bzifv3QjvhMU28z080+C8uHtpcxk6nqfDfed g/g0P/KK6N91c75UQ5JjrEbOgWUnYfUqM2Fe1QhlooP97SweqrfSmju9dHeMVAg3 IdV8VrYk9vvqHs+Y0BiR6ISGZ3zoHUW7E9Bocni6WbqJAQWndIo5MgSquj2y/csx pWS9B8aAv4GSGxedUN6NjEYz+sh1M14295SUDsD44j0ruvzg/yu10tsZOzpdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU37ms/Hgi2Y98fHuYqCRuFNJ51+EwHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqzdD4yolPuP8mTqI3iUOjm2bkMdmDrBCRH xZCevjfsMYnU3fG5SF+XXHPfLRZSBaJJDbyEDgtX/AKhIZiF6QZCulPvyuaGLBVR DBQqVgI5eTYH9fWpeIrBmbAalzunuPMMaedlF2L451Yo1RB10oJrkChsdmsS6+Qy uDKj9TWqSMDsXcoXWie5gj+8WXdOrD6uy3mv+Z6ntrnonuu5AZITqYaeC7U6xQJH nJYPqB8WeQduXVlq6J/TDVeXgHYFBhyEdIOzYCIDGPULRilwQ68AS2ZuFgGkreYR t0ZWAtYtNWxEKOlEuXsPJwkFyWhy7anYszrcWIA57/h/lIw1y1s= -----END CERTIFICATE-----Generated at Fri Apr 17 22:48:32 2026 by rpki-client