$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft File: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft (raw, json) Hash identifier: D2+rpLQyUrc8bsmzOUOR4rm0hoU2beWY8oN/9i/wGxI= Subject key identifier: 89:00:B5:04:74:D2:C1:A1:C0:7B:C7:2C:3A:92:A9:93:A4:E7:D0:2A Authority key identifier: 92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E Certificate issuer: /CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Certificate serial: 36354D91DACD79ECD90017597E66340C1AD35DE9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:06:49 +0000 Manifest this update: Tue 12 May 2026 17:01:49 +0000 Manifest next update: Wed 13 May 2026 17:32:49 +0000 Files and hashes: 1: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl (hash: 2KEVvu/0RGWDKdlDOcSgUgUKSXG0xYZcHSu07xj5Myk=) 2: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: Zs3u840j4ZP200LFP4fVZsCLeA3oRYjdoZn2EIvaoNc=) 3: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: BNboAAgQmC0h9hwiHyJC3I+uxxLLhTzB3aQYZsJOubE=) 4: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: iMHNOPCq/4qZI+6rd3tZI59AkfaQtxW6wPdAhh/rGGs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:35:4d:91:da:cd:79:ec:d9:00:17:59:7e:66:34:0c:1a:d3:5d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Validity Not Before: May 12 17:01:49 2026 GMT Not After : May 13 17:32:49 2026 GMT Subject: CN=8900B50474D2C1A1C07BC72C3A92A993A4E7D02A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:2e:ea:b2:95:ed:d6:45:c6:e9:4d:bb:9f: 6c:e3:df:93:bb:66:f2:92:51:1a:5f:14:05:3d:d4: 31:53:3d:e0:36:08:5e:2f:2b:10:1e:d7:2f:7f:9a: 9c:6f:d8:b9:0e:d0:b5:28:3a:ad:79:f8:15:11:86: 0d:8a:1b:32:2a:ab:56:59:47:0e:83:68:29:35:d5: a9:2e:35:67:85:58:fd:b4:16:eb:b8:8f:32:88:8b: 1b:f0:b5:84:b6:ee:6e:80:f9:d9:7c:bb:29:35:de: ea:47:a7:fd:e2:28:73:64:9b:0e:7b:71:5d:c1:61: 4a:21:36:f0:3a:8a:e0:55:11:2d:58:1a:c7:30:f5: 2f:7d:f8:38:cb:2f:55:9b:7e:ca:8a:66:2c:ff:b0: 19:c0:39:4f:f7:67:f8:d1:62:62:0e:45:6b:3e:e7: 57:9a:0f:c1:40:cd:f7:1c:ed:a4:a8:81:57:82:98: 8f:12:8c:5f:21:7f:ea:91:20:79:36:fb:77:e7:6e: c1:23:06:4e:93:4c:19:41:e0:e7:45:1d:2b:a6:2c: 61:10:53:dc:59:8c:12:fb:57:35:b1:38:cf:6d:8b: 27:fe:aa:2c:77:8f:03:27:4c:57:40:14:8b:80:81: 04:28:13:e8:c3:bb:cd:71:5b:11:86:39:a7:19:b7: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:B5:04:74:D2:C1:A1:C0:7B:C7:2C:3A:92:A9:93:A4:E7:D0:2A X509v3 Authority Key Identifier: keyid:92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:cc:6b:69:04:7f:93:21:e2:ba:0e:1d:95:17:a9:64:d0:4f: 32:f9:c5:b3:ae:59:9f:ea:96:c6:71:84:ee:5e:f2:7d:01:3e: d9:2c:b2:0d:c7:d9:5f:6a:44:db:2b:68:5a:6d:5f:55:5b:4d: 39:a4:89:37:64:53:07:ef:4b:d1:23:ec:db:0d:d5:ee:33:6d: 10:b5:a5:f9:1f:df:76:a5:16:5b:c9:a5:bf:dc:74:ab:14:9c: db:f4:22:9f:e2:d1:67:f1:89:79:bf:5c:64:f8:0c:47:5e:9a: 6d:8f:93:50:33:44:64:b9:96:3e:41:b6:5e:cf:a2:61:a6:8e: b2:5d:94:6c:c7:84:f5:85:60:08:bf:e1:5e:87:37:71:c9:aa: 1c:90:15:cf:1f:21:73:73:3a:c8:a0:cd:4b:26:d6:44:35:dd: 61:67:94:e8:50:f2:ee:15:a2:92:6d:e9:a0:48:db:45:93:2b: 62:7e:89:48:c5:b7:83:3f:ea:d0:34:8d:81:43:dc:03:93:d8: cf:87:b2:71:f4:0b:3d:b3:04:e6:aa:c4:4d:c2:5b:67:2d:1e: 69:b9:57:53:ae:04:aa:ad:eb:41:58:6a:6b:fe:e0:d2:a5:c3: 79:6f:60:ab:65:a5:27:d9:cf:ab:4b:3f:67:89:d9:63:a3:97: f5:68:99:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjVNkdrNeezZABdZfmY0DBrTXekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdC RjUyQ0Y3RTAeFw0yNjA1MTIxNzAxNDlaFw0yNjA1MTMxNzMyNDlaMDMxMTAvBgNV BAMTKDg5MDBCNTA0NzREMkMxQTFDMDdCQzcyQzNBOTJBOTkzQTRFN0QwMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuqy7qspXt1kXG6U27n2zj35O7 ZvKSURpfFAU91DFTPeA2CF4vKxAe1y9/mpxv2LkO0LUoOq15+BURhg2KGzIqq1ZZ Rw6DaCk11akuNWeFWP20Fuu4jzKIixvwtYS27m6A+dl8uyk13upHp/3iKHNkmw57 cV3BYUohNvA6iuBVES1YGscw9S99+DjLL1WbfsqKZiz/sBnAOU/3Z/jRYmIORWs+ 51eaD8FAzfcc7aSogVeCmI8SjF8hf+qRIHk2+3fnbsEjBk6TTBlB4OdFHSumLGEQ U9xZjBL7VzWxOM9tiyf+qix3jwMnTFdAFIuAgQQoE+jDu81xWxGGOacZt1PlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiQC1BHTSwaHAe8csOpKpk6Tn0CowHwYDVR0j BBgwFoAUklq0P2JE0vAfAegGj6EKJ79Sz34wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMzNGRjM2YtMzA4Zi00ZGUxLWEzNjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2 MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdCRjUyQ0Y3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEyN0JGNTJD RjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBB MjdCRjUyQ0Y3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7Ma2kEf5Mh4roOHZUXqWTQTzL5xbOuWZ/q lsZxhO5e8n0BPtkssg3H2V9qRNsraFptX1VbTTmkiTdkUwfvS9Ej7NsN1e4zbRC1 pfkf33alFlvJpb/cdKsUnNv0Ip/i0WfxiXm/XGT4DEdemm2Pk1AzRGS5lj5Btl7P omGmjrJdlGzHhPWFYAi/4V6HN3HJqhyQFc8fIXNzOsigzUsm1kQ13WFnlOhQ8u4V opJt6aBI20WTK2J+iUjFt4M/6tA0jYFD3AOT2M+HsnH0Cz2zBOaqxE3CW2ctHmm5 V1OuBKqt60FYamv+4NKlw3lvYKtlpSfZz6tLP2eJ2WOjl/VomfE= -----END CERTIFICATE-----Generated at Wed May 13 02:37:36 2026 by rpki-client