$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft File: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft (raw, json) Hash identifier: 4pWyKlCsRdcI7IIMYbWqAw17zsWHZehUUL8Izpc/fCM= Subject key identifier: CC:5C:ED:13:B1:86:1C:53:88:03:70:55:4C:11:4D:0D:53:67:6E:79 Authority key identifier: 02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 Certificate issuer: /CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Certificate serial: 547B9C866EDD5AE0CE0D2059C40C1910F1A73A46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 07:15:04 +0000 Manifest this update: Wed 23 Sep 2026 07:10:04 +0000 Manifest next update: Thu 24 Sep 2026 09:22:04 +0000 Files and hashes: 1: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl (hash: EPfU/gKnKQxtS2KSw35llIm0/PbLuaS79MD6IIi0n1w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 09:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7b:9c:86:6e:dd:5a:e0:ce:0d:20:59:c4:0c:19:10:f1:a7:3a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Validity Not Before: Sep 23 07:10:04 2026 GMT Not After : Sep 24 09:22:04 2026 GMT Subject: CN=CC5CED13B1861C53880370554C114D0D53676E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a8:54:79:e6:24:f6:45:db:3f:2e:7c:86:df: 4f:58:27:da:dd:dc:c0:f4:50:2e:8e:e7:2d:81:01: bb:7c:e8:40:a5:b9:4e:5d:96:d5:0d:19:33:74:a5: 69:81:82:e9:72:07:7b:8c:07:89:1d:8b:f1:60:d0: b2:fb:62:2d:ea:7f:bd:4a:c1:12:04:57:4b:a3:9d: 41:25:82:34:58:94:c7:20:ab:48:e9:de:91:4a:41: 58:4e:a1:d0:eb:33:dd:34:3c:b0:b7:19:99:e6:d3: 78:94:e5:6a:0d:31:ac:cc:da:5b:04:65:6d:33:6e: 5f:4f:19:7f:4b:55:bf:5f:e8:38:4c:36:f7:fd:ac: 9b:4a:b6:9b:29:21:1c:32:25:a0:f6:21:0e:95:e0: 04:0d:12:7e:1a:e4:0c:20:7b:28:73:5a:d1:bb:0f: 1e:ff:87:dd:57:ed:46:91:2c:82:64:30:04:51:90: b0:ba:70:4a:7d:97:0a:c6:e6:d9:1a:ea:b9:a3:e6: 11:08:76:2d:cd:ed:7d:4e:a6:3b:e4:75:56:e2:a3: 2a:56:9e:47:d4:04:18:94:12:81:35:1d:24:97:48: a0:cb:21:00:4d:b6:ba:b6:9b:94:bf:d8:ff:48:2d: 69:8b:c1:95:f2:73:7a:a2:86:6c:f7:71:af:2c:22: 8d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5C:ED:13:B1:86:1C:53:88:03:70:55:4C:11:4D:0D:53:67:6E:79 X509v3 Authority Key Identifier: keyid:02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:0e:8c:83:87:27:4b:33:c5:d4:7d:c5:08:87:42:fc:ba:ac: ee:ce:14:c7:f6:1f:2c:09:65:32:b4:8a:1b:3f:c3:0c:fd:be: e4:fc:ec:d1:1d:3c:05:69:ee:42:f8:ed:4f:a1:c7:b3:f9:22: 02:01:92:45:6d:5a:f1:e8:f5:1d:f1:a6:7a:40:2c:3e:7f:e0: ac:3a:48:77:67:1c:b8:3a:a3:d9:92:7f:5e:57:b8:65:14:30: 0b:d8:83:f5:95:00:9d:2e:27:3b:8b:45:31:ca:4a:65:fe:34: 27:18:fe:3f:6f:50:fd:02:00:72:86:92:3c:2e:35:40:10:23: 82:3c:50:f3:05:8f:55:0a:ee:cc:bd:25:2a:97:e2:78:71:a7: d7:4f:c6:c2:35:e9:91:36:b1:c2:fb:1c:5c:0c:84:e2:4b:3a: a9:40:61:7d:1e:18:09:dd:57:40:41:d4:fe:67:3f:e3:03:ad: 02:63:b7:57:13:3a:45:c4:fa:9c:e9:7a:04:fc:c0:d3:69:3b: 8f:6c:ea:b4:75:73:be:0e:08:a7:ff:f4:29:38:5c:cb:c5:67: fb:1a:cf:08:aa:de:43:1f:09:58:26:97:4c:9e:5a:6a:0c:e4: b8:ab:70:3c:9a:e1:16:d8:4f:0d:f4:3b:59:bd:2f:8f:77:ce: 9d:e1:a1:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVHuchm7dWuDODSBZxAwZEPGnOkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAy NDY4QzAzMDAeFw0yNjA5MjMwNzEwMDRaFw0yNjA5MjQwOTIyMDRaMDMxMTAvBgNV BAMTKENDNUNFRDEzQjE4NjFDNTM4ODAzNzA1NTRDMTE0RDBENTM2NzZFNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqFR55iT2Rds/LnyG309YJ9rd 3MD0UC6O5y2BAbt86ECluU5dltUNGTN0pWmBgulyB3uMB4kdi/Fg0LL7Yi3qf71K wRIEV0ujnUElgjRYlMcgq0jp3pFKQVhOodDrM900PLC3GZnm03iU5WoNMazM2lsE ZW0zbl9PGX9LVb9f6DhMNvf9rJtKtpspIRwyJaD2IQ6V4AQNEn4a5AwgeyhzWtG7 Dx7/h91X7UaRLIJkMARRkLC6cEp9lwrG5tka6rmj5hEIdi3N7X1OpjvkdVbioypW nkfUBBiUEoE1HSSXSKDLIQBNtrq2m5S/2P9ILWmLwZXyc3qihmz3ca8sIo1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzFztE7GGHFOIA3BVTBFNDVNnbnkwHwYDVR0j BBgwFoAUAlzja/gs0ffF/3zaVtl7kCRowDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhMzdhZWMtNjNjMi00NWQxLTk2YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJG ODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAyNDY4QzAzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjVDRTM2QkY4MkNEMUY3QzVGRjdDREE1NkQ5N0I5MDI0NjhD MDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdC OTAyNDY4QzAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAOjIOHJ0szxdR9xQiHQvy6rO7OFMf2HywJ ZTK0ihs/wwz9vuT87NEdPAVp7kL47U+hx7P5IgIBkkVtWvHo9R3xpnpALD5/4Kw6 SHdnHLg6o9mSf15XuGUUMAvYg/WVAJ0uJzuLRTHKSmX+NCcY/j9vUP0CAHKGkjwu NUAQI4I8UPMFj1UK7sy9JSqX4nhxp9dPxsI16ZE2scL7HFwMhOJLOqlAYX0eGAnd V0BB1P5nP+MDrQJjt1cTOkXE+pzpegT8wNNpO49s6rR1c74OCKf/9Ck4XMvFZ/sa zwiq3kMfCVgml0yeWmoM5LircDya4RbYTw30O1m9L493zp3hoS8= -----END CERTIFICATE-----Generated at Thu Sep 24 01:59:15 2026 by rpki-client