$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft (raw, json) Hash identifier: COAOdrmCSeMBMMSSP6CI/lR7bmRQCZFcTbU2PjKGzV0= Subject key identifier: 82:C4:1E:8C:C6:CD:66:C2:85:8E:0F:B1:5A:EC:F4:38:61:4C:18:4E Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Certificate issuer: /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Certificate serial: 31112EF1448C1FDE5751498A89AB0C85D79D4768 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft Manifest number: 055F Signing time: Mon 02 Mar 2026 03:51:24 +0000 Manifest this update: Mon 02 Mar 2026 03:46:24 +0000 Manifest next update: Thu 05 Mar 2026 08:23:24 +0000 Files and hashes: 1: 323430363a376263303a3a2f33322d3332203d3e20313431303737.roa (hash: ycLrFSluhQHbHMeR5mx7HDHqT3Cknj/hMk/uIjRqWwc=) 2: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl (hash: mQePVXOUiccJme/Vww9y4WqP6X83MNqu1B/z3ai1bBo=) 3: 3130332e3135362e31362e302f32332d3233203d3e20313431303737.roa (hash: u3SbbNuX76ouLAbh2avANQTDQ1dz0YKRwMgpyt5FWwk=) 4: 3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (hash: KWhFP88aQIWgcnUslnjvyh5Swkim9DgQUrbO0uBN5Uc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:11:2e:f1:44:8c:1f:de:57:51:49:8a:89:ab:0c:85:d7:9d:47:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Validity Not Before: Mar 2 03:46:24 2026 GMT Not After : Mar 5 08:23:24 2026 GMT Subject: CN=82C41E8CC6CD66C2858E0FB15AECF438614C184E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:93:66:de:7b:e2:2d:8b:c4:e2:99:36:6d:39: fd:d4:6e:53:45:66:ff:79:be:11:27:79:29:29:c5: a2:df:9b:c5:09:1c:4b:82:d3:90:be:0f:48:7a:6e: 79:fa:bd:9e:10:5f:66:5c:3d:8c:5a:19:4b:80:85: da:4f:67:92:f5:01:15:ac:f2:9a:2e:98:15:f9:50: 82:b2:81:5f:d9:1b:5b:67:5c:0a:35:9b:04:dc:42: 9f:a4:d8:93:94:a8:97:46:64:c0:eb:a9:ae:12:44: c4:1f:1b:63:c7:56:a1:7a:53:b6:e7:f8:39:cc:c8: e4:51:cf:90:6f:5f:2b:88:e7:81:b0:e4:ea:29:1a: d8:e5:87:20:13:ad:78:85:12:2d:e0:33:95:06:8c: 65:30:c4:5c:b9:25:fd:37:2f:a4:99:27:50:1b:62: 4d:1c:8c:62:50:32:22:31:ad:c8:4d:51:5a:fc:27: 51:2a:bb:47:29:cf:d5:53:5e:e4:85:bc:ef:62:16: dc:23:f8:a2:cc:15:1c:dc:f8:f1:ba:f7:58:ae:4c: 82:58:84:ad:6f:e8:19:39:2c:69:f3:ea:23:9d:ec: a0:25:7d:8c:2b:37:ef:2d:fa:43:b8:75:a8:95:02: ac:57:65:04:4b:65:1d:29:84:9f:ac:b4:78:51:47: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C4:1E:8C:C6:CD:66:C2:85:8E:0F:B1:5A:EC:F4:38:61:4C:18:4E X509v3 Authority Key Identifier: keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:46:fe:2c:ab:90:fa:26:eb:9a:3f:53:c7:3f:49:48:84:75: 9f:88:fb:ec:c4:85:55:50:18:3f:d7:73:9c:73:5d:5b:e1:34: b0:40:33:ae:a5:31:86:a5:5c:88:43:41:21:f7:31:77:b7:6f: 63:9f:4d:a7:c6:e9:d5:f3:94:d1:d6:0c:c1:6f:75:c2:0c:ea: 73:e3:a2:d5:b7:ac:80:71:47:d2:10:6e:b7:6d:ff:c4:1d:21: c9:29:43:a6:ac:0f:6f:9c:2d:8a:d5:b0:ec:22:eb:6b:77:db: 34:42:64:a4:40:72:aa:75:3b:d9:52:8c:98:28:16:04:79:86: 0a:e7:6e:97:58:f5:82:92:85:ab:9e:5c:83:64:ab:40:d5:54: 7f:95:44:78:1c:1e:a7:6b:02:47:87:60:e8:f4:df:53:6c:de: 07:05:4c:2d:eb:d2:e4:cb:de:1f:ee:52:d4:b0:07:0d:d7:22: 22:cb:48:c4:cd:54:31:a7:95:9e:6d:70:92:de:98:c0:9f:60: 69:c0:1b:6e:d5:ea:2d:ff:7b:23:a4:d5:01:83:9d:21:6a:68: e2:55:cf:e7:7d:83:13:67:c8:a3:75:49:e3:ab:a1:95:ea:3a: 8f:41:06:5a:7a:30:9e:3d:ad:9b:1e:2f:8f:35:b7:e7:db:f1: ab:ec:c7:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMREu8USMH95XUUmKiasMhdedR2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2 MkE1QzU4MjAeFw0yNjAzMDIwMzQ2MjRaFw0yNjAzMDUwODIzMjRaMDMxMTAvBgNV BAMTKDgyQzQxRThDQzZDRDY2QzI4NThFMEZCMTVBRUNGNDM4NjE0QzE4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlk2bee+Iti8TimTZtOf3UblNF Zv95vhEneSkpxaLfm8UJHEuC05C+D0h6bnn6vZ4QX2ZcPYxaGUuAhdpPZ5L1ARWs 8poumBX5UIKygV/ZG1tnXAo1mwTcQp+k2JOUqJdGZMDrqa4SRMQfG2PHVqF6U7bn +DnMyORRz5BvXyuI54Gw5OopGtjlhyATrXiFEi3gM5UGjGUwxFy5Jf03L6SZJ1Ab Yk0cjGJQMiIxrchNUVr8J1Equ0cpz9VTXuSFvO9iFtwj+KLMFRzc+PG691iuTIJY hK1v6Bk5LGnz6iOd7KAlfYwrN+8t+kO4daiVAqxXZQRLZR0phJ+stHhRRzQnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgsQejMbNZsKFjg+xWuz0OGFMGE4wHwYDVR0j BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2 OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1 QzU4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjk2NDAxZTMtOWY2Mi00YjNjLWJm ZmItNzgzMzU1YWU2NzcwLzAvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNB NEE2MkE1QzU4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMlG/iyrkPom65o/U8c/SUiEdZ+I++zEhVVQ GD/Xc5xzXVvhNLBAM66lMYalXIhDQSH3MXe3b2OfTafG6dXzlNHWDMFvdcIM6nPj otW3rIBxR9IQbrdt/8QdIckpQ6asD2+cLYrVsOwi62t32zRCZKRAcqp1O9lSjJgo FgR5hgrnbpdY9YKShaueXINkq0DVVH+VRHgcHqdrAkeHYOj031Ns3gcFTC3r0uTL 3h/uUtSwBw3XIiLLSMTNVDGnlZ5tcJLemMCfYGnAG27V6i3/eyOk1QGDnSFqaOJV z+d9gxNnyKN1SeOroZXqOo9BBlp6MJ49rZseL481t+fb8avsx5U= -----END CERTIFICATE-----Generated at Mon Mar 2 16:32:29 2026 by rpki-client