$ rpki-client -vvf rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft File: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft (raw, json) Hash identifier: lUV3vtrcUmKtTZqFWoq3uwmUVCzY76oD+RTO33eKghQ= Subject key identifier: DD:E6:2A:5D:09:29:52:D4:24:B3:36:EA:FA:31:1E:3E:F2:1D:0D:E0 Authority key identifier: 02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 Certificate issuer: /CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Certificate serial: 74773D6A9C5C436A3AF0D723275CA2319A5C2745 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:18:53 +0000 Manifest this update: Thu 23 Jul 2026 11:13:53 +0000 Manifest next update: Fri 24 Jul 2026 12:11:53 +0000 Files and hashes: 1: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl (hash: q+Kqvm9W45qdcblssQjQ8UyVKNfH0qQdhnLvqMZwFjQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:77:3d:6a:9c:5c:43:6a:3a:f0:d7:23:27:5c:a2:31:9a:5c:27:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Validity Not Before: Jul 23 11:13:53 2026 GMT Not After : Jul 24 12:11:53 2026 GMT Subject: CN=DDE62A5D092952D424B336EAFA311E3EF21D0DE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:2a:89:94:36:e3:1e:19:c5:08:0f:22:b3: 5b:b1:35:44:47:d6:7c:a6:7d:54:25:14:c4:2e:39: 4d:ac:a3:8b:af:96:50:ea:2c:c1:6a:6c:f7:f1:10: 99:df:dd:cf:6f:1e:c7:07:d9:9b:e3:1c:e8:1b:1f: 5f:89:ed:77:f8:60:7a:b5:a4:c7:3c:0a:d4:e3:16: d0:d2:79:5b:4b:e4:79:2c:8a:ab:c7:79:d0:a5:2f: 6b:9b:cd:d7:f1:11:a0:bd:c4:d6:9b:3f:2b:02:fc: 9f:ef:55:3b:17:3b:4e:e5:a2:98:a9:aa:39:c6:2b: b4:4e:9c:05:59:09:18:01:42:bc:31:6c:03:37:ea: 0c:80:86:0f:9b:eb:4e:d5:4b:fa:ab:03:15:33:bd: 67:61:b7:50:d0:b1:48:47:40:80:99:62:00:b3:78: 72:fc:5d:dd:79:46:54:42:bb:e4:be:02:10:79:25: dc:90:ad:56:ca:2b:1f:86:2b:05:2d:71:11:e2:1e: 35:71:27:37:0c:a0:93:94:a9:e2:9c:6f:28:dc:83: e9:3e:b1:4b:c2:3f:06:a4:b4:8c:1a:1d:d0:01:5a: a1:f4:08:89:51:5e:95:c2:7a:b2:96:40:a1:10:b4: f3:de:1d:b0:3e:a3:35:38:04:fc:78:08:69:99:13: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E6:2A:5D:09:29:52:D4:24:B3:36:EA:FA:31:1E:3E:F2:1D:0D:E0 X509v3 Authority Key Identifier: keyid:02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:92:25:1e:c6:43:53:26:95:77:35:47:aa:12:3c:d3:3c:33: 84:69:10:f7:09:1f:99:46:1f:8f:c9:37:f7:93:d3:55:9f:bd: 12:d8:f5:08:3c:70:0b:6a:34:1f:98:eb:1c:2c:40:f2:d9:04: 00:82:ae:3d:43:af:30:80:57:21:dd:a9:bc:08:0a:f7:0f:c6: 7d:bc:d0:31:b2:ce:75:aa:36:b9:09:7f:44:80:74:6f:36:ac: 12:b2:94:d5:fe:a2:8e:1c:68:7e:16:13:50:30:60:11:57:11: 25:e0:a4:8e:3a:84:58:99:56:6a:73:dd:0e:f0:c8:3e:99:bc: 9b:b3:d8:3a:b4:0a:d2:98:12:f4:91:70:22:5c:03:78:42:e2: a5:84:18:59:58:c0:e7:14:bf:73:06:78:6e:f5:d6:28:6b:eb: ea:06:fa:8a:86:7e:b9:ef:f6:3c:20:06:af:07:25:8c:30:cd: 6e:31:85:cc:d7:16:c9:20:d0:a0:2e:c8:b4:a8:7a:71:b8:cc: 5a:bf:e5:1c:b0:7e:75:94:5f:f1:13:e6:ea:90:5c:f9:cf:af: 32:78:c9:15:31:bb:a2:45:a2:0a:ad:74:ee:4c:62:6f:51:1d: 64:50:d8:0f:6f:44:4c:75:7c:94:01:20:70:fb:83:50:d1:1a: c4:50:f0:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHc9apxcQ2o68NcjJ1yiMZpcJ0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAy NDY4QzAzMDAeFw0yNjA3MjMxMTEzNTNaFw0yNjA3MjQxMjExNTNaMDMxMTAvBgNV BAMTKERERTYyQTVEMDkyOTUyRDQyNEIzMzZFQUZBMzExRTNFRjIxRDBERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1yqJlDbjHhnFCA8is1uxNURH 1nymfVQlFMQuOU2so4uvllDqLMFqbPfxEJnf3c9vHscH2ZvjHOgbH1+J7Xf4YHq1 pMc8CtTjFtDSeVtL5HksiqvHedClL2ubzdfxEaC9xNabPysC/J/vVTsXO07lopip qjnGK7ROnAVZCRgBQrwxbAM36gyAhg+b607VS/qrAxUzvWdht1DQsUhHQICZYgCz eHL8Xd15RlRCu+S+AhB5JdyQrVbKKx+GKwUtcRHiHjVxJzcMoJOUqeKcbyjcg+k+ sUvCPwaktIwaHdABWqH0CIlRXpXCerKWQKEQtPPeHbA+ozU4BPx4CGmZE08jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3eYqXQkpUtQkszbq+jEePvIdDeAwHwYDVR0j BBgwFoAUAlzja/gs0ffF/3zaVtl7kCRowDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhMzdhZWMtNjNjMi00NWQxLTk2YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJG ODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAyNDY4QzAzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjVDRTM2QkY4MkNEMUY3QzVGRjdDREE1NkQ5N0I5MDI0NjhD MDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdC OTAyNDY4QzAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKSJR7GQ1MmlXc1R6oSPNM8M4RpEPcJH5lG H4/JN/eT01WfvRLY9Qg8cAtqNB+Y6xwsQPLZBACCrj1DrzCAVyHdqbwICvcPxn28 0DGyznWqNrkJf0SAdG82rBKylNX+oo4caH4WE1AwYBFXESXgpI46hFiZVmpz3Q7w yD6ZvJuz2Dq0CtKYEvSRcCJcA3hC4qWEGFlYwOcUv3MGeG711ihr6+oG+oqGfrnv 9jwgBq8HJYwwzW4xhczXFskg0KAuyLSoenG4zFq/5RywfnWUX/ET5uqQXPnPrzJ4 yRUxu6JFogqtdO5MYm9RHWRQ2A9vREx1fJQBIHD7g1DRGsRQ8Dw= -----END CERTIFICATE-----Generated at Fri Jul 24 01:19:41 2026 by rpki-client