$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft File: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft (raw, json) Hash identifier: RcIca5Vqi2Tuo9YQNuotxC1zyMSKORixW6uHGygXnaY= Subject key identifier: B6:9E:D3:A7:4A:5A:47:7D:C8:6F:7D:23:4B:6A:7D:29:51:A6:F2:A6 Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Certificate serial: 50581EA1C6B78653CB9CEB244571C9094740838E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 23:18:19 +0000 Manifest this update: Thu 23 Jul 2026 23:13:19 +0000 Manifest next update: Sat 25 Jul 2026 01:37:19 +0000 Files and hashes: 1: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: p5VGWtHjvpIWNYWejy2oeQf0oISTWP+7YBr4TnXtjDM=) 2: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: HwpDGD2SJ/iUFIW/7Q0l9KkQ0CWL7/v9c6sBLXd1KZY=) 3: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: zEDT0INoIq23WBcFzMUv15oPL7BGutII4EaV+fPSC68=) 4: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: ohDVM2o2IOUVSNhwh1E7felK+Pc0SKnjsPpIi1yZSaw=) 5: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl (hash: lmH7+lywMFj2uQxYv7CO7OlqnH0xd781yWEBdo8fEF0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:58:1e:a1:c6:b7:86:53:cb:9c:eb:24:45:71:c9:09:47:40:83:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Validity Not Before: Jul 23 23:13:19 2026 GMT Not After : Jul 25 01:37:19 2026 GMT Subject: CN=B69ED3A74A5A477DC86F7D234B6A7D2951A6F2A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:0b:c4:98:a1:30:45:e1:46:08:3b:02:18: 32:7e:50:e3:ce:90:f4:5f:9c:1a:d8:ed:23:c5:d6: d2:af:8e:4e:ff:d0:5a:74:a2:7f:ec:40:3b:4b:f1: 69:70:43:04:4f:f7:30:fd:14:ed:00:c7:f0:9c:22: 1a:63:00:08:a7:09:c2:a3:c2:2c:bb:34:ec:d0:6c: b5:56:64:c3:91:48:75:b6:5d:1f:04:63:c8:54:25: c0:25:18:e5:47:4e:ff:69:71:13:ad:7c:23:dc:0b: 42:5f:61:c6:c2:22:26:37:78:cd:e8:18:09:17:9c: 64:32:7d:a3:c9:26:19:07:14:93:91:b1:34:e6:ad: 0b:f1:d2:9d:d8:26:35:9c:11:dc:b1:cc:ab:52:5d: 4d:bd:e5:86:d9:c2:b4:00:8f:af:fb:a0:c4:86:4d: cb:86:c8:78:da:77:1f:50:d3:59:28:79:2b:b1:12: 50:80:65:66:fa:7b:81:37:f1:eb:ab:ca:1a:f7:0c: 3d:73:a9:79:45:74:a4:fb:86:fd:56:61:9b:70:56: 4a:a6:8f:85:17:7e:7c:1d:ab:76:dc:7f:bf:83:73: 8c:38:d1:15:df:da:ed:c6:e1:85:e5:d7:3f:18:fb: a4:39:c4:c3:7f:12:af:2f:2f:44:94:f3:c2:40:f4: 22:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9E:D3:A7:4A:5A:47:7D:C8:6F:7D:23:4B:6A:7D:29:51:A6:F2:A6 X509v3 Authority Key Identifier: keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:38:f9:82:eb:44:bb:0e:69:b2:17:91:1f:b9:71:d9:c6:f9: 93:6a:f1:16:71:ee:41:2e:4b:b8:9e:a2:fa:a8:b6:4f:47:44: 71:89:af:7d:86:12:31:aa:33:c4:96:00:58:8e:42:b1:58:ee: 54:71:04:98:00:bd:c1:00:f4:7f:d6:50:03:52:68:10:c0:7b: 65:a4:d1:4d:04:c0:90:cf:05:1b:4f:b9:3b:c1:9a:1b:72:0a: f5:e1:eb:bd:34:b4:24:19:03:2c:7f:39:81:01:03:bb:28:e5: d1:be:5a:99:58:a8:cf:15:f2:b1:1e:ee:31:f8:c6:a5:9b:38: d3:87:a3:26:01:f3:61:cd:b3:5b:54:52:16:c1:0c:cb:71:eb: 55:47:1e:77:c5:10:14:76:df:7d:7f:8c:0d:b2:67:f9:c1:ed: 0e:ca:13:d1:d0:3c:02:01:7e:58:da:ba:ed:2c:15:1e:78:85: 5b:74:9c:32:fe:76:00:d8:a8:f3:5f:9b:e9:3e:a6:7f:86:b1: 4b:e2:e7:b1:ab:15:01:ec:66:d1:54:c2:d8:91:80:17:78:b2: b4:5f:a0:5c:1c:86:81:5a:64:59:9b:b7:3f:ff:a9:4a:35:14: 71:07:70:40:36:21:c0:f3:07:55:9b:b4:01:21:9c:4c:0b:4c: 86:ad:1c:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFgeoca3hlPLnOskRXHJCUdAg44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2 Q0Q4NDExNjAeFw0yNjA3MjMyMzEzMTlaFw0yNjA3MjUwMTM3MTlaMDMxMTAvBgNV BAMTKEI2OUVEM0E3NEE1QTQ3N0RDODZGN0QyMzRCNkE3RDI5NTFBNkYyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3lwvEmKEwReFGCDsCGDJ+UOPO kPRfnBrY7SPF1tKvjk7/0Fp0on/sQDtL8WlwQwRP9zD9FO0Ax/CcIhpjAAinCcKj wiy7NOzQbLVWZMORSHW2XR8EY8hUJcAlGOVHTv9pcROtfCPcC0JfYcbCIiY3eM3o GAkXnGQyfaPJJhkHFJORsTTmrQvx0p3YJjWcEdyxzKtSXU295YbZwrQAj6/7oMSG TcuGyHjadx9Q01koeSuxElCAZWb6e4E38euryhr3DD1zqXlFdKT7hv1WYZtwVkqm j4UXfnwdq3bcf7+Dc4w40RXf2u3G4YXl1z8Y+6Q5xMN/Eq8vL0SU88JA9CIXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtp7Tp0paR33Ib30jS2p9KVGm8qYwHwYDVR0j BBgwFoAUJcKs/7g2GWVmo7zONCHbuWzYQRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzNzc3MTEtMWUzZC00ZTVhLWE0YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZC ODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2Q0Q4NDExNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUMyQUNGRkI4MzYxOTY1NjZBM0JDQ0UzNDIxREJCOTZDRDg0 MTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURC Qjk2Q0Q4NDExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQ4+YLrRLsOabIXkR+5cdnG+ZNq8RZx7kEu S7ieovqotk9HRHGJr32GEjGqM8SWAFiOQrFY7lRxBJgAvcEA9H/WUANSaBDAe2Wk 0U0EwJDPBRtPuTvBmhtyCvXh6700tCQZAyx/OYEBA7so5dG+WplYqM8V8rEe7jH4 xqWbONOHoyYB82HNs1tUUhbBDMtx61VHHnfFEBR2331/jA2yZ/nB7Q7KE9HQPAIB fljauu0sFR54hVt0nDL+dgDYqPNfm+k+pn+GsUvi57GrFQHsZtFUwtiRgBd4srRf oFwchoFaZFmbtz//qUo1FHEHcEA2IcDzB1WbtAEhnEwLTIatHH8= -----END CERTIFICATE-----Generated at Fri Jul 24 02:58:55 2026 by rpki-client