$ rpki-client -vvf rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft File: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft (raw, json) Hash identifier: t6nl5zsHphzMu97Pe2FBuhf7ox0hcpvcow2C6ZDW2So= Subject key identifier: 4A:65:D7:51:2D:AE:73:DC:23:E0:36:80:81:06:D1:3B:BB:50:12:25 Authority key identifier: 02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 Certificate issuer: /CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Certificate serial: 58EE0BF8DD801B5F8D815C2DAF417CB0E5670500 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft Manifest number: 0D Signing time: Tue 12 May 2026 05:36:04 +0000 Manifest this update: Tue 12 May 2026 05:31:04 +0000 Manifest next update: Wed 13 May 2026 06:12:04 +0000 Files and hashes: 1: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl (hash: 96/N1VgSpiSEVcxV/q2dC5V+HL68i5BW3VNaUssCfOs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 06:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ee:0b:f8:dd:80:1b:5f:8d:81:5c:2d:af:41:7c:b0:e5:67:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Validity Not Before: May 12 05:31:04 2026 GMT Not After : May 13 06:12:04 2026 GMT Subject: CN=4A65D7512DAE73DC23E036808106D13BBB501225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:71:51:7f:e5:fe:f4:7b:ee:11:5e:41:32: a8:c3:fd:bc:56:00:06:03:64:40:44:87:40:0d:19: ec:e3:63:a1:85:ae:52:a3:9c:11:2c:ec:9a:c5:a1: 2f:5e:e6:3a:ad:2c:6c:55:07:70:1c:9b:2d:00:20: 55:62:eb:dd:12:5e:22:43:91:c1:b8:81:ee:f0:a3: 67:b9:a9:0f:26:bb:a6:d2:23:09:77:f8:2b:be:c8: 06:9b:8c:4f:0a:47:ec:82:45:29:9b:0a:5b:42:b1: 20:b9:1b:94:27:74:ca:cb:04:ee:4e:a5:0e:89:40: da:4d:31:e2:36:07:6f:cb:b6:ad:0f:1d:63:3b:30: 64:e1:f4:15:08:dc:ca:2a:85:92:64:48:74:9b:ae: ad:08:a0:8f:b4:40:7f:6d:aa:71:7f:e3:5b:13:8f: 11:65:4a:7d:45:36:c3:87:ba:21:39:91:a9:0c:0b: a7:d9:db:b8:95:59:52:eb:7a:6f:be:11:2a:f4:8a: 66:20:c3:72:10:14:f9:c3:67:49:55:c0:d9:d3:2a: 79:0a:10:0d:a6:8e:32:fb:24:65:d3:27:76:73:76: 09:a3:5e:08:2a:e5:e9:6b:60:fe:97:8d:c0:a2:04: 5e:27:d6:b1:c4:a6:cb:51:ed:cc:88:45:36:be:5c: 6e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:65:D7:51:2D:AE:73:DC:23:E0:36:80:81:06:D1:3B:BB:50:12:25 X509v3 Authority Key Identifier: keyid:02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:6b:51:71:4a:2d:f9:d1:58:76:c5:b2:e3:7a:55:91:53:b0: 9c:b7:55:da:c1:56:f9:41:be:8f:8c:37:b4:96:c0:e4:42:e3: 42:a3:31:da:37:f7:55:07:18:76:43:b9:fd:6a:74:af:86:d0: 58:78:cb:82:9a:18:db:78:32:23:83:d3:03:d7:d1:f4:d5:a5: 11:d0:ec:d6:4e:c7:eb:de:03:68:fa:92:74:50:0c:b2:e4:45: 21:5c:ac:e9:a3:88:86:87:c9:e0:da:46:27:e0:8a:4a:b7:28: d9:1e:f7:a2:1e:09:71:ea:62:81:f7:a7:0b:78:9e:c6:67:7d: 43:64:2a:34:ec:30:2d:62:2e:0f:2a:09:ef:05:75:38:35:cb: ac:d3:da:a9:ad:f8:43:53:83:05:a7:e0:e3:9b:d6:31:d9:4d: 23:1a:89:66:7b:02:8a:70:4c:08:96:9b:df:f8:15:ae:3d:41: d8:6b:86:ba:37:2b:82:47:22:e3:c0:09:68:0c:07:87:df:fe: 5d:ac:fb:d6:45:97:17:99:06:b2:8d:cf:b1:b4:22:4e:88:93: a0:a2:b2:fc:8a:e3:ba:02:4f:69:b4:f9:37:e3:50:1c:d4:5d: 91:6b:a4:72:c0:ac:39:7d:f8:4f:77:7f:59:89:46:e2:6e:60: 84:ea:95:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWO4L+N2AG1+NgVwtr0F8sOVnBQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAy NDY4QzAzMDAeFw0yNjA1MTIwNTMxMDRaFw0yNjA1MTMwNjEyMDRaMDMxMTAvBgNV BAMTKDRBNjVENzUxMkRBRTczREMyM0UwMzY4MDgxMDZEMTNCQkI1MDEyMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdnFRf+X+9HvuEV5BMqjD/bxW AAYDZEBEh0ANGezjY6GFrlKjnBEs7JrFoS9e5jqtLGxVB3Acmy0AIFVi690SXiJD kcG4ge7wo2e5qQ8mu6bSIwl3+Cu+yAabjE8KR+yCRSmbCltCsSC5G5QndMrLBO5O pQ6JQNpNMeI2B2/Ltq0PHWM7MGTh9BUI3MoqhZJkSHSbrq0IoI+0QH9tqnF/41sT jxFlSn1FNsOHuiE5kakMC6fZ27iVWVLrem++ESr0imYgw3IQFPnDZ0lVwNnTKnkK EA2mjjL7JGXTJ3ZzdgmjXggq5elrYP6XjcCiBF4n1rHEpstR7cyIRTa+XG6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSmXXUS2uc9wj4DaAgQbRO7tQEiUwHwYDVR0j BBgwFoAUAlzja/gs0ffF/3zaVtl7kCRowDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhMzdhZWMtNjNjMi00NWQxLTk2YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJG ODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAyNDY4QzAzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjVDRTM2QkY4MkNEMUY3QzVGRjdDREE1NkQ5N0I5MDI0NjhD MDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdC OTAyNDY4QzAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1rUXFKLfnRWHbFsuN6VZFTsJy3VdrBVvlB vo+MN7SWwORC40KjMdo391UHGHZDuf1qdK+G0Fh4y4KaGNt4MiOD0wPX0fTVpRHQ 7NZOx+veA2j6knRQDLLkRSFcrOmjiIaHyeDaRifgikq3KNke96IeCXHqYoH3pwt4 nsZnfUNkKjTsMC1iLg8qCe8FdTg1y6zT2qmt+ENTgwWn4OOb1jHZTSMaiWZ7Aopw TAiWm9/4Fa49Qdhrhro3K4JHIuPACWgMB4ff/l2s+9ZFlxeZBrKNz7G0Ik6Ik6Ci svyK47oCT2m0+TfjUBzUXZFrpHLArDl9+E93f1mJRuJuYITqlVg= -----END CERTIFICATE-----Generated at Tue May 12 22:47:00 2026 by rpki-client