$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: suFtYMNvLHKEQ23zwNHJ80xCL5tZzdzqaZlPVAmzTlY= Subject key identifier: 58:40:06:46:BB:4F:B5:7F:0B:68:8C:F8:63:06:3B:0E:95:DD:A7:5B Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 0D0DD2ED4033896675EB62423441116E48767753 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 0567 Signing time: Thu 16 Apr 2026 03:21:19 +0000 Manifest this update: Thu 16 Apr 2026 03:16:19 +0000 Manifest next update: Sun 19 Apr 2026 05:35:19 +0000 Files and hashes: 1: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: y5kSrkZuiwMGD9QWDm9x2qICFewL0ronD0gEk8WVvus=) 2: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) 3: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: nD/DD5Hc3MTaAq6S9uy1OPEWZjdcHy63zddA/n0tVYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0d:d2:ed:40:33:89:66:75:eb:62:42:34:41:11:6e:48:76:77:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Apr 16 03:16:19 2026 GMT Not After : Apr 19 05:35:19 2026 GMT Subject: CN=58400646BB4FB57F0B688CF863063B0E95DDA75B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:93:13:be:16:a6:45:38:0a:3a:6a:78:36:d3: db:a4:b5:c3:4a:a2:e3:c6:81:76:ba:df:31:61:17: 9e:4e:43:e4:4d:41:ed:bc:d7:f1:fd:ba:85:b0:9a: 94:5a:3e:0f:ee:d7:9f:8b:f6:60:af:f2:5a:7e:0f: 27:09:24:10:f1:aa:34:88:a1:3a:80:9a:59:c2:84: 3e:39:fa:e3:f3:e3:8f:69:af:b2:ad:da:50:02:bf: f0:ad:d6:6b:f6:7b:d3:7a:9c:37:92:40:f5:14:97: 69:c4:64:cb:24:8e:d9:86:10:ef:7a:9e:51:0d:5b: e3:5d:05:af:3b:0d:2a:e4:c2:db:1e:f5:8f:4d:d0: 47:ec:15:48:53:8e:6d:77:1c:45:d5:89:e2:55:bd: 02:9e:49:75:83:bc:14:0c:fa:1b:5c:d5:53:fb:8d: c5:ef:8d:ec:38:57:e0:b9:17:85:cd:f3:43:f6:b2: ad:43:41:f8:95:a3:63:a7:54:0c:64:7a:82:82:b2: 6e:54:16:b2:ae:be:b8:02:68:74:b1:d4:fb:03:76: ad:87:6f:a4:ea:5b:48:83:ff:33:8f:01:41:6c:f9: ce:08:33:77:40:79:98:f9:22:40:4e:0f:c9:c9:4a: ef:c3:57:6a:3d:bb:ca:f2:c4:6f:48:82:0d:1b:2d: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:40:06:46:BB:4F:B5:7F:0B:68:8C:F8:63:06:3B:0E:95:DD:A7:5B X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:15:cc:ef:63:a5:a0:5c:50:ed:a2:42:a4:e1:c4:a4:45:98: 08:b3:d6:ab:48:cb:f4:c8:11:15:47:71:74:85:36:02:46:d1: 1a:e1:f2:66:69:87:ed:f1:57:b8:92:b3:a1:9e:ea:99:02:e2: f5:0f:16:ab:91:e7:72:e3:cf:34:5c:b0:84:dc:f7:40:1a:cf: 5e:bb:fa:0d:bb:f7:a5:60:6c:71:46:40:66:87:c5:3b:ac:ca: 2a:1f:71:87:f6:30:a5:62:8b:70:be:51:f1:3a:e7:34:e8:30: 71:fe:99:d6:b6:39:e8:9c:66:08:69:5e:4a:89:09:cf:47:5a: 83:c7:8d:ca:14:41:c9:c9:ae:5d:cd:e6:6a:0d:f1:f3:3d:fc: 1c:e0:aa:cf:ed:e6:16:37:61:c2:95:c8:24:5f:7f:5b:07:93: 5b:e2:aa:fd:b2:6a:68:59:26:a6:ff:2e:78:fc:b8:c9:30:db: ba:67:15:ab:14:6f:82:51:a8:57:c2:fa:c5:fc:2e:67:01:24: 4d:99:cc:f8:58:1d:94:a2:12:6b:54:af:ec:56:fa:c8:a4:d3: ab:04:ff:1b:66:32:b5:29:7f:2d:66:36:32:5b:d9:77:2c:78: 0a:08:9b:a3:61:40:3a:4f:c9:0f:a1:b0:75:8d:0b:6f:7b:cb: 05:c9:9b:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQ3S7UAziWZ162JCNEERbkh2d1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNjA0MTYwMzE2MTlaFw0yNjA0MTkwNTM1MTlaMDMxMTAvBgNV BAMTKDU4NDAwNjQ2QkI0RkI1N0YwQjY4OENGODYzMDYzQjBFOTVEREE3NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkxO+FqZFOAo6ang209uktcNK ouPGgXa63zFhF55OQ+RNQe281/H9uoWwmpRaPg/u15+L9mCv8lp+DycJJBDxqjSI oTqAmlnChD45+uPz449pr7Kt2lACv/Ct1mv2e9N6nDeSQPUUl2nEZMskjtmGEO96 nlENW+NdBa87DSrkwtse9Y9N0EfsFUhTjm13HEXVieJVvQKeSXWDvBQM+htc1VP7 jcXvjew4V+C5F4XN80P2sq1DQfiVo2OnVAxkeoKCsm5UFrKuvrgCaHSx1PsDdq2H b6TqW0iD/zOPAUFs+c4IM3dAeZj5IkBOD8nJSu/DV2o9u8ryxG9Igg0bLVa5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWEAGRrtPtX8LaIz4YwY7DpXdp1swHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoVzO9jpaBcUO2iQqThxKRFmAiz1qtIy/TI ERVHcXSFNgJG0Rrh8mZph+3xV7iSs6Ge6pkC4vUPFquR53LjzzRcsITc90Aaz167 +g2796VgbHFGQGaHxTusyiofcYf2MKVii3C+UfE65zToMHH+mda2OeicZghpXkqJ Cc9HWoPHjcoUQcnJrl3N5moN8fM9/Bzgqs/t5hY3YcKVyCRff1sHk1viqv2yamhZ Jqb/Lnj8uMkw27pnFasUb4JRqFfC+sX8LmcBJE2ZzPhYHZSiEmtUr+xW+sik06sE /xtmMrUpfy1mNjJb2XcseAoIm6NhQDpPyQ+hsHWNC297ywXJm0k= -----END CERTIFICATE-----Generated at Sat Apr 18 02:37:36 2026 by rpki-client