$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft File: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft (raw, json) Hash identifier: l145LCU4tZ8LShesU1EkWxAm5VXeD0GdGrEugDtLJjQ= Subject key identifier: 7E:F9:5C:73:0C:DB:F6:40:C7:EF:49:86:B1:A7:8C:A5:D3:3B:21:D5 Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Certificate serial: 5BC43B19F025BC397725D08855823543AB5E90DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:57:12 +0000 Manifest this update: Wed 23 Sep 2026 12:52:12 +0000 Manifest next update: Thu 24 Sep 2026 16:10:12 +0000 Files and hashes: 1: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: ohDVM2o2IOUVSNhwh1E7felK+Pc0SKnjsPpIi1yZSaw=) 2: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: p5VGWtHjvpIWNYWejy2oeQf0oISTWP+7YBr4TnXtjDM=) 3: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: HwpDGD2SJ/iUFIW/7Q0l9KkQ0CWL7/v9c6sBLXd1KZY=) 4: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: zEDT0INoIq23WBcFzMUv15oPL7BGutII4EaV+fPSC68=) 5: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl (hash: ofA3FcbreZSYoc5gVHirsTrEFD81QpBqWXtyos4D6Hc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 16:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c4:3b:19:f0:25:bc:39:77:25:d0:88:55:82:35:43:ab:5e:90:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Validity Not Before: Sep 23 12:52:12 2026 GMT Not After : Sep 24 16:10:12 2026 GMT Subject: CN=7EF95C730CDBF640C7EF4986B1A78CA5D33B21D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:c6:68:22:b8:0e:8a:80:b1:c5:6f:f8:b0: 01:73:98:9a:95:40:8a:98:d6:7d:2a:3a:a0:0d:e3: 50:de:a5:a6:72:5c:a7:4f:27:b1:29:9a:4a:f1:2a: 15:8a:61:77:62:3b:cd:ae:5a:58:55:98:29:e4:c3: 64:65:61:8d:01:d0:92:44:28:8c:58:b2:4d:4e:4d: 39:05:75:00:60:38:f2:fb:20:d5:06:1d:b6:14:bf: c6:22:60:f6:b0:52:bb:7c:f9:05:8a:32:d0:7c:41: 30:83:ce:a6:af:7d:1b:2c:89:0c:18:26:40:5f:e6: b9:6b:99:a6:ed:4b:61:a5:78:93:1d:f1:9c:95:6e: cf:05:e0:c8:40:fe:bf:42:b6:0c:b0:ce:44:ba:64: 68:ae:53:f0:d2:eb:54:ad:c2:99:98:b2:66:33:f9: d3:2c:b2:5d:f5:ce:a9:00:32:dc:d3:8e:e0:03:4f: 72:6c:d3:4e:8f:70:c8:a1:88:d1:58:4f:66:a9:6b: 1f:d0:f8:1b:ad:23:18:ea:10:e0:f2:1c:5f:fd:77: bf:10:fc:3f:e5:37:23:1e:29:80:25:5c:97:83:a9: 07:77:55:e2:f8:da:ac:57:bb:8e:c6:b1:02:b7:fe: 3c:84:d5:95:a6:89:6e:70:d6:b7:5f:07:b2:8c:9d: 24:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F9:5C:73:0C:DB:F6:40:C7:EF:49:86:B1:A7:8C:A5:D3:3B:21:D5 X509v3 Authority Key Identifier: keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ce:5c:a9:1b:33:94:37:5f:0d:02:ae:46:94:f9:14:25:73: 26:a2:e6:fd:56:c3:b7:d9:ee:4e:21:5d:c1:6e:3d:99:97:ca: df:f5:6f:e2:94:6c:99:8a:18:1a:69:26:aa:7c:4e:ba:a1:28: 6b:1f:52:c2:1b:f2:2b:49:23:05:52:20:75:4e:d9:eb:34:a2: b2:0e:a0:06:67:15:88:f8:6e:11:c1:c9:36:d8:fe:13:e5:4c: 5d:b3:5b:57:e0:e1:35:1f:0c:0b:d9:66:11:7c:09:85:6c:ae: 38:7b:1b:c2:5e:56:26:b4:a9:b2:0c:70:ff:4a:c2:80:13:d2: 56:a7:a0:86:fa:f4:6e:18:96:64:fc:3c:a3:fd:80:ea:97:90: 22:3e:46:64:91:1a:55:ac:70:33:76:67:a5:39:f7:6a:c4:c1: de:1d:af:0e:ce:df:82:99:46:24:a2:05:5c:6b:a5:4e:c2:50: c8:6a:f2:a0:e2:9b:d3:77:dd:3a:45:59:6c:6c:df:35:aa:b2: 44:99:56:93:d0:e6:d4:71:00:61:92:31:e9:a5:0c:6b:9d:e1: 0d:13:f6:ac:60:f9:f1:e3:9e:b3:fe:28:b9:32:a9:d5:58:44: fb:ec:0c:96:ad:0e:b0:a3:40:4f:9a:16:1c:e0:7c:2f:29:7b: 68:8a:7b:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8Q7GfAlvDl3JdCIVYI1Q6tekN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2 Q0Q4NDExNjAeFw0yNjA5MjMxMjUyMTJaFw0yNjA5MjQxNjEwMTJaMDMxMTAvBgNV BAMTKDdFRjk1QzczMENEQkY2NDBDN0VGNDk4NkIxQTc4Q0E1RDMzQjIxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MMZoIrgOioCxxW/4sAFzmJqV QIqY1n0qOqAN41DepaZyXKdPJ7EpmkrxKhWKYXdiO82uWlhVmCnkw2RlYY0B0JJE KIxYsk1OTTkFdQBgOPL7INUGHbYUv8YiYPawUrt8+QWKMtB8QTCDzqavfRssiQwY JkBf5rlrmabtS2GleJMd8ZyVbs8F4MhA/r9CtgywzkS6ZGiuU/DS61StwpmYsmYz +dMssl31zqkAMtzTjuADT3Js006PcMihiNFYT2apax/Q+ButIxjqEODyHF/9d78Q /D/lNyMeKYAlXJeDqQd3VeL42qxXu47GsQK3/jyE1ZWmiW5w1rdfB7KMnSRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfvlccwzb9kDH70mGsaeMpdM7IdUwHwYDVR0j BBgwFoAUJcKs/7g2GWVmo7zONCHbuWzYQRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzNzc3MTEtMWUzZC00ZTVhLWE0YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZC ODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2Q0Q4NDExNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUMyQUNGRkI4MzYxOTY1NjZBM0JDQ0UzNDIxREJCOTZDRDg0 MTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURC Qjk2Q0Q4NDExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPOXKkbM5Q3Xw0CrkaU+RQlcyai5v1Ww7fZ 7k4hXcFuPZmXyt/1b+KUbJmKGBppJqp8TrqhKGsfUsIb8itJIwVSIHVO2es0orIO oAZnFYj4bhHByTbY/hPlTF2zW1fg4TUfDAvZZhF8CYVsrjh7G8JeVia0qbIMcP9K woAT0lanoIb69G4YlmT8PKP9gOqXkCI+RmSRGlWscDN2Z6U592rEwd4drw7O34KZ RiSiBVxrpU7CUMhq8qDim9N33TpFWWxs3zWqskSZVpPQ5tRxAGGSMemlDGud4Q0T 9qxg+fHjnrP+KLkyqdVYRPvsDJatDrCjQE+aFhzgfC8pe2iKe4o= -----END CERTIFICATE-----Generated at Wed Sep 23 19:38:27 2026 by rpki-client