$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft File: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft (raw, json) Hash identifier: eFQa5o3S5JwFYE+rnAf5Xy+7aGd0ZcWv7WVrb9xizt4= Subject key identifier: 76:3E:0C:A6:BF:58:7F:AD:7E:C4:95:9E:6F:2E:A2:B2:1F:5F:C1:EC Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Certificate serial: 7B04326A287C220CB9D11119D2739D647709FD3E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft Manifest number: 0E Signing time: Tue 12 May 2026 01:39:12 +0000 Manifest this update: Tue 12 May 2026 01:34:12 +0000 Manifest next update: Wed 13 May 2026 05:20:12 +0000 Files and hashes: 1: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: HwpDGD2SJ/iUFIW/7Q0l9KkQ0CWL7/v9c6sBLXd1KZY=) 2: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl (hash: 3odE7uKGR6S5oCPM7vgrHvfqnUTq7LPynkaAK/1luIM=) 3: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: zEDT0INoIq23WBcFzMUv15oPL7BGutII4EaV+fPSC68=) 4: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: p5VGWtHjvpIWNYWejy2oeQf0oISTWP+7YBr4TnXtjDM=) 5: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: ohDVM2o2IOUVSNhwh1E7felK+Pc0SKnjsPpIi1yZSaw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 05:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:04:32:6a:28:7c:22:0c:b9:d1:11:19:d2:73:9d:64:77:09:fd:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Validity Not Before: May 12 01:34:12 2026 GMT Not After : May 13 05:20:12 2026 GMT Subject: CN=763E0CA6BF587FAD7EC4959E6F2EA2B21F5FC1EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:05:18:9e:02:70:e1:b7:31:39:d0:9d:29: 58:69:a4:1a:7e:39:d4:2f:44:c5:7e:e9:43:85:b3: ac:1d:1e:e6:82:4e:71:b2:85:67:94:e2:b7:68:9b: ee:5d:74:f4:69:da:48:21:6e:7b:12:73:2d:8b:bb: cf:01:ec:e1:4e:e5:8f:fa:39:95:89:06:26:ca:9f: 2e:38:5a:0e:e0:59:1d:5c:e7:84:38:0d:8e:81:fe: d9:79:27:82:93:12:15:80:35:05:4f:e7:d1:f8:2c: 2b:60:5c:ba:61:15:3a:f8:eb:fe:e6:69:10:13:e9: 93:53:a0:13:e5:29:a8:64:df:ad:34:f9:29:87:e3: 74:86:34:df:47:a9:db:d3:fd:c1:51:bc:f1:d5:fb: 59:fb:1a:ef:cb:bc:41:13:70:fa:30:ec:27:79:0e: 65:da:68:8f:57:ee:38:3d:7d:eb:83:c6:b6:11:b7: 37:29:3f:22:48:a0:a5:6b:ed:22:af:36:59:4b:16: b8:d6:85:b2:6b:99:d1:85:36:2a:b8:2b:b2:89:85: 18:e2:26:ae:f1:41:c1:74:d8:da:2c:79:35:29:c0: 03:fb:9a:84:52:10:3d:87:6a:3c:45:1f:09:87:f1: ef:17:b7:6f:4c:bf:17:3f:9c:de:9e:20:e0:70:54: 56:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3E:0C:A6:BF:58:7F:AD:7E:C4:95:9E:6F:2E:A2:B2:1F:5F:C1:EC X509v3 Authority Key Identifier: keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4a:4f:7e:ed:c2:71:07:d0:2f:93:fe:4d:ec:1e:aa:38:09: 3b:90:71:d7:e9:77:50:17:82:96:99:8e:ee:62:0e:df:aa:b1: af:e6:1d:4c:71:d7:4a:02:09:d6:f8:36:42:06:cd:6a:b7:12: 6a:77:82:2f:1e:92:de:d2:02:5e:33:db:63:89:f6:b9:19:20: 4e:7e:39:5f:06:9f:59:73:bb:c3:6b:93:31:bf:0f:d0:81:c1: ec:8e:9c:c1:b0:b8:fd:eb:dc:dd:bc:e9:77:ac:f5:e9:72:53: 46:46:5d:cc:91:c6:d6:b9:e2:55:ae:56:4a:09:13:95:7e:b8: f9:a3:b8:ba:09:07:8f:ed:a4:3f:48:31:b3:45:4e:aa:8c:0c: 31:51:52:43:9b:24:31:ea:2d:89:c7:e7:12:29:ef:7a:22:8b: b2:1e:a8:07:16:ac:17:85:16:c9:a7:ae:28:9e:fe:a9:1b:92: f2:fb:64:3c:57:85:bd:24:02:64:d6:23:e9:14:1f:76:c8:ff: fa:5b:4c:6b:e5:8a:d3:e8:bf:d9:9f:d5:d0:19:81:db:4b:f5: a3:7f:23:e2:6c:dd:e7:ad:4a:7e:30:3b:d4:50:55:a9:52:43: 04:6d:80:d6:21:ba:bb:8e:68:be:3d:27:24:80:92:17:fe:af: 91:8f:d7:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewQyaih8Igy50REZ0nOdZHcJ/T4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2 Q0Q4NDExNjAeFw0yNjA1MTIwMTM0MTJaFw0yNjA1MTMwNTIwMTJaMDMxMTAvBgNV BAMTKDc2M0UwQ0E2QkY1ODdGQUQ3RUM0OTU5RTZGMkVBMkIyMUY1RkMxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDpgUYngJw4bcxOdCdKVhppBp+ OdQvRMV+6UOFs6wdHuaCTnGyhWeU4rdom+5ddPRp2kghbnsScy2Lu88B7OFO5Y/6 OZWJBibKny44Wg7gWR1c54Q4DY6B/tl5J4KTEhWANQVP59H4LCtgXLphFTr46/7m aRAT6ZNToBPlKahk3600+SmH43SGNN9HqdvT/cFRvPHV+1n7Gu/LvEETcPow7Cd5 DmXaaI9X7jg9feuDxrYRtzcpPyJIoKVr7SKvNllLFrjWhbJrmdGFNiq4K7KJhRji Jq7xQcF02NoseTUpwAP7moRSED2HajxFHwmH8e8Xt29Mvxc/nN6eIOBwVFZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdj4Mpr9Yf61+xJWeby6ish9fwewwHwYDVR0j BBgwFoAUJcKs/7g2GWVmo7zONCHbuWzYQRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzNzc3MTEtMWUzZC00ZTVhLWE0YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZC ODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2Q0Q4NDExNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUMyQUNGRkI4MzYxOTY1NjZBM0JDQ0UzNDIxREJCOTZDRDg0 MTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURC Qjk2Q0Q4NDExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRKT37twnEH0C+T/k3sHqo4CTuQcdfpd1AX gpaZju5iDt+qsa/mHUxx10oCCdb4NkIGzWq3Emp3gi8ekt7SAl4z22OJ9rkZIE5+ OV8Gn1lzu8NrkzG/D9CBweyOnMGwuP3r3N286Xes9elyU0ZGXcyRxta54lWuVkoJ E5V+uPmjuLoJB4/tpD9IMbNFTqqMDDFRUkObJDHqLYnH5xIp73oii7IeqAcWrBeF Fsmnriie/qkbkvL7ZDxXhb0kAmTWI+kUH3bI//pbTGvlitPov9mf1dAZgdtL9aN/ I+Js3eetSn4wO9RQValSQwRtgNYhuruOaL49JySAkhf+r5GP1yg= -----END CERTIFICATE-----Generated at Tue May 12 22:46:47 2026 by rpki-client