$ rpki-client -vvf repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft (raw, json) Hash identifier: Yk05IqGzAg34kptRqIjTzJ6XNCc0/wpR4/h7D0n+v6Y= Subject key identifier: 5B:3A:C9:56:E6:96:D7:91:F7:E5:BB:41:D9:1E:BE:62:D0:CA:95:0B Authority key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Certificate issuer: /CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Certificate serial: 10151B192F689D99E3CC5A6B93BC2D7B8EEC4FDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject info access: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft Manifest number: 051A Signing time: Sun 26 Oct 2025 15:41:09 +0000 Manifest this update: Sun 26 Oct 2025 15:36:09 +0000 Manifest next update: Wed 29 Oct 2025 18:47:09 +0000 Files and hashes: 1: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl (hash: ZYFJvyanKRD+KaSuzojRHq172mi0Sovv0AJTsVB3HKs=) 2: 3130332e3132362e382e302f32322d3234203d3e20313338313036.roa (hash: ZsZIR/g2J09b8mzwbXIsn9lVQoQrr39ZtxdAzPnbJQw=) 3: 323430343a34303a3a2f33322d3438203d3e20313338313036.roa (hash: y5kSrkZuiwMGD9QWDm9x2qICFewL0ronD0gEk8WVvus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:15:1b:19:2f:68:9d:99:e3:cc:5a:6b:93:bc:2d:7b:8e:ec:4f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Validity Not Before: Oct 26 15:36:09 2025 GMT Not After : Oct 29 18:47:09 2025 GMT Subject: CN=5B3AC956E696D791F7E5BB41D91EBE62D0CA950B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:d1:bc:c6:3c:db:7b:f5:78:7b:00:f0:fc: 4a:eb:69:ff:fb:61:41:32:59:2f:0c:84:fc:8a:f5: 2a:e3:5e:b5:0f:a6:db:bb:dc:ae:fa:82:b3:06:c4: 0c:49:5e:1e:0a:ff:91:85:41:5f:58:54:bd:62:20: 36:da:dd:6d:63:1a:44:4b:b5:83:98:3b:40:5a:e4: db:16:41:01:76:52:a3:b0:b5:d3:99:db:de:18:30: 37:c5:27:a9:29:eb:62:fd:2c:1e:ca:4e:03:e0:01: 33:d6:03:08:c1:ea:ab:14:10:9d:ca:3f:f3:2a:f0: 2c:d2:c3:ed:27:36:ad:18:24:7f:5b:dd:fb:fb:87: cb:05:d0:6e:93:e9:b5:0d:3f:59:9c:5d:b5:be:86: 1a:c2:45:c5:44:5e:6e:5b:33:84:fa:6f:05:bc:b2: 50:48:06:96:ba:a3:bf:2a:bb:72:c3:f1:13:a5:79: 1e:7c:a7:d4:c5:82:55:6f:93:0b:76:c8:61:ea:17: 5f:7e:64:b7:b8:69:84:d6:c8:9f:78:9d:41:d5:d3: 18:66:87:32:37:82:75:e5:60:c3:68:8f:fb:0d:a8: 3e:da:89:dd:4e:ea:bd:bc:7d:2e:e4:a7:da:0e:cd: 36:31:cf:08:7f:73:4d:72:60:d8:1b:8a:99:cb:4c: f2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3A:C9:56:E6:96:D7:91:F7:E5:BB:41:D9:1E:BE:62:D0:CA:95:0B X509v3 Authority Key Identifier: keyid:25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:53:9e:e8:93:8a:97:1a:6c:e9:dd:bb:0b:8d:33:96:11:a8: c6:05:1f:c0:a0:1e:ad:eb:86:ca:6f:ef:67:6e:44:97:42:b7: 81:8f:43:d9:76:95:de:d1:b7:6e:4d:ea:97:37:27:ff:59:5b: 12:30:02:d0:01:f5:e4:9f:4f:7a:c4:92:52:bc:7c:8d:f8:78: a5:4b:47:51:2d:38:6e:ab:4c:cb:9a:2e:27:6f:b8:67:ec:59: 53:4d:ef:8a:b7:80:2e:e0:06:77:a0:f1:7d:ab:81:85:b0:87: 3f:b9:3e:0e:bf:bd:af:2e:38:56:97:e6:33:cb:89:0b:50:4f: 14:49:08:b7:cd:b6:41:2d:84:d2:2e:e3:f7:33:f4:c4:f4:0d: 60:2c:f7:05:bd:c6:df:14:e4:f7:e3:0a:4a:0d:5f:c4:e3:3f: 55:d5:c9:c2:7d:3d:c8:e5:cb:43:e0:87:aa:aa:12:b0:b9:2b: 14:9c:d0:77:89:8e:ac:a5:e4:b9:c2:0e:30:88:b3:16:60:4d: 67:1e:55:d3:be:82:c1:4d:4c:a2:b6:dd:35:46:44:0f:a8:4f: cc:ce:5f:1f:50:58:40:d0:c2:b0:b1:80:36:ce:be:91:c9:34: 97:4e:27:33:f7:e2:69:50:67:31:46:b0:17:ac:05:c6:ea:5c: ff:1b:00:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBUbGS9onZnjzFprk7wte47sT9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1 QTI0NUUxNTAeFw0yNTEwMjYxNTM2MDlaFw0yNTEwMjkxODQ3MDlaMDMxMTAvBgNV BAMTKDVCM0FDOTU2RTY5NkQ3OTFGN0U1QkI0MUQ5MUVCRTYyRDBDQTk1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8tG8xjzbe/V4ewDw/Erraf/7 YUEyWS8MhPyK9SrjXrUPptu73K76grMGxAxJXh4K/5GFQV9YVL1iIDba3W1jGkRL tYOYO0Ba5NsWQQF2UqOwtdOZ294YMDfFJ6kp62L9LB7KTgPgATPWAwjB6qsUEJ3K P/Mq8CzSw+0nNq0YJH9b3fv7h8sF0G6T6bUNP1mcXbW+hhrCRcVEXm5bM4T6bwW8 slBIBpa6o78qu3LD8ROleR58p9TFglVvkwt2yGHqF19+ZLe4aYTWyJ94nUHV0xhm hzI3gnXlYMNoj/sNqD7aid1O6r28fS7kp9oOzTYxzwh/c01yYNgbipnLTPJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWzrJVuaW15H35btB2R6+YtDKlQswHwYDVR0j BBgwFoAUJfsD0KLDVHw6OKyuKnUrsVokXhUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMC8yNUZCMDNEMEEy QzM1NDdDM0EzOEFDQUUyQTc1MkJCMTVBMjQ1RTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJCQjE1QTI0 NUUxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4YzY4MzEtOGY0MC00YTIwLTgx M2UtODc4NTU4ZTgwYzI2LzAvMjVGQjAzRDBBMkMzNTQ3QzNBMzhBQ0FFMkE3NTJC QjE1QTI0NUUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtTnuiTipcabOnduwuNM5YRqMYFH8CgHq3r hspv72duRJdCt4GPQ9l2ld7Rt25N6pc3J/9ZWxIwAtAB9eSfT3rEklK8fI34eKVL R1EtOG6rTMuaLidvuGfsWVNN74q3gC7gBneg8X2rgYWwhz+5Pg6/va8uOFaX5jPL iQtQTxRJCLfNtkEthNIu4/cz9MT0DWAs9wW9xt8U5PfjCkoNX8TjP1XVycJ9Pcjl y0Pgh6qqErC5KxSc0HeJjqyl5LnCDjCIsxZgTWceVdO+gsFNTKK23TVGRA+oT8zO Xx9QWEDQwrCxgDbOvpHJNJdOJzP34mlQZzFGsBesBcbqXP8bADc= -----END CERTIFICATE-----Generated at Mon Oct 27 17:11:09 2025 by rpki-client