$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft File: B625426C356E15C795153BAD3E2215D65F219A5E.mft (raw, json) Hash identifier: j9O0v12dz7yqqiNmDQpzN05AdUb0bM6fv6DccJW9BV0= Subject key identifier: D5:DF:FB:6F:F0:6C:04:23:97:35:2F:E0:21:13:C8:07:7B:B3:B4:5D Authority key identifier: B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E Certificate issuer: /CN=B625426C356E15C795153BAD3E2215D65F219A5E Certificate serial: 07FABA00283BBA37284BB3DFFDD88A4D7FE39CA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 20:46:10 +0000 Manifest this update: Thu 24 Sep 2026 20:41:10 +0000 Manifest next update: Fri 25 Sep 2026 23:23:10 +0000 Files and hashes: 1: B625426C356E15C795153BAD3E2215D65F219A5E.crl (hash: pWyVRmphzPxc3KSIbYhS6+TCSXRhEP28d8La03F6N/8=) 2: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: yogWy6TCKxhBmgshrPe2hKjITHvdTQkqQBDI5rFuoa0=) 3: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: qLUNvDfC3gbWxd/hHt1Guse9AQpSMZBZKKbyAr0FqSU=) 4: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: 072PpS8RwhWZ6AW17W786YITh/wBQoWhhmI5PRB/Rfg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 23:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fa:ba:00:28:3b:ba:37:28:4b:b3:df:fd:d8:8a:4d:7f:e3:9c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B625426C356E15C795153BAD3E2215D65F219A5E Validity Not Before: Sep 24 20:41:10 2026 GMT Not After : Sep 25 23:23:10 2026 GMT Subject: CN=D5DFFB6FF06C042397352FE02113C8077BB3B45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:d5:aa:74:f0:d3:bb:d6:5a:f6:d0:d1:2a: 9b:ec:a7:22:9a:e6:ec:96:04:09:26:b1:c4:c1:ee: ae:15:cc:88:bd:fd:7c:66:58:fe:5c:08:48:db:82: ad:fe:f3:dc:df:5a:84:fe:ae:52:5e:ed:61:4f:6a: a9:94:95:88:ef:be:dc:6c:53:07:2f:ee:43:29:82: a5:b4:10:25:af:98:c0:ab:5d:4a:a2:05:5d:68:0e: da:5b:72:53:66:6d:9d:09:4f:43:94:e8:fc:b5:9f: 76:38:4a:5d:ca:b4:e8:3c:b5:e6:0e:89:c5:3e:ae: d0:22:ae:75:0d:88:5c:0a:23:fd:a0:6c:4d:e9:a2: 1c:89:25:cb:83:d1:fe:d1:83:aa:6d:22:56:db:e5: 3e:4b:a2:9b:0d:4a:f0:4f:33:bb:0c:0c:28:61:32: e4:79:a4:ba:a5:9f:40:38:d1:c4:39:1d:96:c7:83: cd:4e:ed:0c:c3:08:61:9f:f5:14:72:6a:4d:31:15: 6f:85:14:84:88:fd:bd:d7:91:af:1e:cc:f9:5c:69: 9a:ff:a8:59:30:7a:23:29:22:08:bd:ac:33:95:36: 20:d0:9b:29:e4:a1:a8:b1:b2:98:8b:54:d9:16:f3: 13:a6:9f:6e:56:c4:de:85:d1:27:ce:54:7c:db:cd: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DF:FB:6F:F0:6C:04:23:97:35:2F:E0:21:13:C8:07:7B:B3:B4:5D X509v3 Authority Key Identifier: keyid:B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6a:f0:14:d8:e4:05:5b:f8:da:fe:ed:a1:2f:97:db:3a:db: 39:53:c2:77:86:6e:fa:1c:ca:3e:ff:c9:68:47:d9:08:47:00: 37:73:28:37:15:90:78:a3:03:70:54:68:e5:6d:aa:8e:3c:b3: 20:58:4f:72:0d:1d:fd:bd:06:ed:c8:ba:03:47:e5:0a:4a:91: 24:c7:36:c0:8f:43:7f:2a:9c:44:6d:7e:5a:32:65:fb:8f:e0: a7:74:43:0b:28:21:2f:76:fa:2b:0b:ce:5d:e9:3b:24:b9:d9: e8:6b:3d:78:8f:b9:a4:2c:9c:5a:67:9f:b9:3e:1b:82:58:75: 4d:5d:d0:d6:5e:a7:eb:d7:0a:c1:b6:c5:13:d9:0a:ca:64:5a: bc:16:48:b7:f9:ee:c5:83:5a:6b:d1:17:33:f3:16:7d:1c:3f: 70:1e:07:17:9f:2f:ff:ec:e3:c5:b3:a8:2a:47:f8:be:84:30: e3:ee:f7:58:5c:9a:f8:81:1d:80:14:8d:2c:93:40:16:b4:fa: 43:36:16:c3:e9:cb:59:50:e8:f0:6c:9f:84:ed:15:c9:12:f8: 20:21:e9:02:d9:b7:63:62:7d:04:0f:46:48:8e:49:5a:11:01: c5:50:ae:15:af:ef:3b:51:d1:42:49:05:c0:cc:f2:5e:3f:b3: 47:41:4c:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/q6ACg7ujcoS7Pf/diKTX/jnKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1 RjIxOUE1RTAeFw0yNjA5MjQyMDQxMTBaFw0yNjA5MjUyMzIzMTBaMDMxMTAvBgNV BAMTKEQ1REZGQjZGRjA2QzA0MjM5NzM1MkZFMDIxMTNDODA3N0JCM0I0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhtWqdPDTu9Za9tDRKpvspyKa 5uyWBAkmscTB7q4VzIi9/XxmWP5cCEjbgq3+89zfWoT+rlJe7WFPaqmUlYjvvtxs Uwcv7kMpgqW0ECWvmMCrXUqiBV1oDtpbclNmbZ0JT0OU6Py1n3Y4Sl3KtOg8teYO icU+rtAirnUNiFwKI/2gbE3pohyJJcuD0f7Rg6ptIlbb5T5LopsNSvBPM7sMDChh MuR5pLqln0A40cQ5HZbHg81O7QzDCGGf9RRyak0xFW+FFISI/b3Xka8ezPlcaZr/ qFkweiMpIgi9rDOVNiDQmynkoaixspiLVNkW8xOmn25WxN6F0SfOVHzbzSKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1d/7b/BsBCOXNS/gIRPIB3uztF0wHwYDVR0j BBgwFoAUtiVCbDVuFceVFTutPiIV1l8hml4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwNDgwNjQtODdkZS00ZGU3LWIwYmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMz NTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1RjIxOUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjI1NDI2QzM1NkUxNUM3OTUxNTNCQUQzRTIyMTVENjVGMjE5 QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1 RDY1RjIxOUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJq8BTY5AVb+Nr+7aEvl9s62zlTwneGbvoc yj7/yWhH2QhHADdzKDcVkHijA3BUaOVtqo48syBYT3INHf29Bu3IugNH5QpKkSTH NsCPQ38qnERtfloyZfuP4Kd0QwsoIS92+isLzl3pOyS52ehrPXiPuaQsnFpnn7k+ G4JYdU1d0NZep+vXCsG2xRPZCspkWrwWSLf57sWDWmvRFzPzFn0cP3AeBxefL//s 48WzqCpH+L6EMOPu91hcmviBHYAUjSyTQBa0+kM2FsPpy1lQ6PBsn4TtFckS+CAh 6QLZt2NifQQPRkiOSVoRAcVQrhWv7ztR0UJJBcDM8l4/s0dBTPU= -----END CERTIFICATE-----Generated at Fri Sep 25 16:35:44 2026 by rpki-client