$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft File: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft (raw, json) Hash identifier: k7nb+6mBvtgh90BwFlfR+3iUpjpd9Xs6iriJTaa6LvY= Subject key identifier: BD:C3:71:0B:72:0B:F6:3F:F8:45:8A:BE:C9:21:96:9A:EF:30:9F:DE Authority key identifier: 92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E Certificate issuer: /CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Certificate serial: 0984CE29A61931968105E2C6A8116BE326EA3095 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:03:00 +0000 Manifest this update: Fri 24 Jul 2026 02:58:00 +0000 Manifest next update: Sat 25 Jul 2026 04:53:00 +0000 Files and hashes: 1: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: Zs3u840j4ZP200LFP4fVZsCLeA3oRYjdoZn2EIvaoNc=) 2: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: iMHNOPCq/4qZI+6rd3tZI59AkfaQtxW6wPdAhh/rGGs=) 3: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl (hash: 4oYYG3lTLn1f9bIMfs+3Kqrob8OVXU/Nzad0Gm8tgZQ=) 4: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: BNboAAgQmC0h9hwiHyJC3I+uxxLLhTzB3aQYZsJOubE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:84:ce:29:a6:19:31:96:81:05:e2:c6:a8:11:6b:e3:26:ea:30:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Validity Not Before: Jul 24 02:58:00 2026 GMT Not After : Jul 25 04:53:00 2026 GMT Subject: CN=BDC3710B720BF63FF8458ABEC921969AEF309FDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1e:8f:57:df:70:8a:26:d2:c5:71:b4:c5:62: 57:22:09:56:af:e3:1d:16:7b:e9:95:96:cf:a7:8a: 93:ea:29:24:1e:8f:2c:22:71:f8:23:23:51:be:44: 6c:a8:c7:a5:f2:a2:f1:bb:dd:c2:0b:5e:a1:b5:62: 02:de:af:c3:a9:f6:92:a6:5f:bf:cb:24:57:1a:f9: a5:a4:63:25:70:91:c1:20:f2:4c:19:94:d4:98:00: ad:5e:ef:fd:63:ed:1b:a8:69:3b:bd:70:86:02:1f: ce:d2:c4:63:d4:71:08:50:70:28:e2:0c:5f:88:d6: f6:65:07:28:9a:ad:a9:44:ff:cb:2b:d6:04:b7:20: 8d:c6:95:7d:60:d8:7e:87:1b:16:cc:8c:6f:0d:54: 91:a9:b8:b7:26:57:49:9a:25:66:84:96:83:93:a6: 3a:5b:61:91:b1:1b:75:4a:c6:45:06:80:ca:35:9b: 07:98:ab:6f:f5:5a:24:4b:ac:18:e2:9d:f3:c7:12: ed:f4:9e:84:b0:fd:95:a1:86:84:b7:f5:64:b2:35: a3:c1:18:aa:e5:9c:2f:d8:18:b2:1b:6e:74:dd:47: ef:c6:e6:9e:3a:d6:25:ba:2e:ff:6b:30:9b:ab:f2: 70:05:98:76:6d:ac:83:8c:d1:ea:b2:a6:cd:ce:1a: 4b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C3:71:0B:72:0B:F6:3F:F8:45:8A:BE:C9:21:96:9A:EF:30:9F:DE X509v3 Authority Key Identifier: keyid:92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ca:2f:f7:f8:1c:7f:f2:91:5a:61:88:b7:a0:12:d9:24:61: 02:8c:67:18:7c:47:ff:f2:33:c7:a3:16:f6:66:3c:d2:e3:3f: fd:9c:c3:03:f1:71:40:2d:4b:61:9e:5c:0e:81:30:14:e0:4e: d5:23:08:eb:7a:d1:54:fa:8d:8a:02:d0:91:ca:6f:ab:77:20: 50:29:7c:94:f7:64:a5:a1:85:57:3a:87:c7:4c:3c:1f:42:2c: 56:4b:47:c3:28:15:5b:8b:33:f9:86:b4:55:ea:d4:b4:f8:e8: 20:d7:d9:80:53:b5:c8:f1:16:f2:e5:ab:44:fa:b0:f6:51:6c: 23:30:67:f6:e2:2f:46:6d:d0:7e:b7:8d:b6:27:61:ac:6e:ab: 45:d8:07:23:3d:df:dd:ed:9d:ea:00:5a:c7:dd:d7:c0:fe:4f: 45:56:df:41:90:24:ae:a4:13:b3:85:56:d3:55:f0:7b:b6:ee: b7:02:b5:ad:cf:52:50:05:b0:c3:c2:d6:30:3e:6a:95:2b:79: 28:b1:e5:1d:f7:68:f6:d8:4a:ae:d9:18:6f:85:d4:a1:e1:30: b5:dd:07:df:d2:d0:22:8c:df:98:c0:67:60:60:ea:79:9e:a1: 01:e0:18:87:b1:57:1d:3b:80:99:6b:a4:63:d3:a3:dc:31:6d: 2e:ff:20:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCYTOKaYZMZaBBeLGqBFr4ybqMJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdC RjUyQ0Y3RTAeFw0yNjA3MjQwMjU4MDBaFw0yNjA3MjUwNDUzMDBaMDMxMTAvBgNV BAMTKEJEQzM3MTBCNzIwQkY2M0ZGODQ1OEFCRUM5MjE5NjlBRUYzMDlGREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHo9X33CKJtLFcbTFYlciCVav 4x0We+mVls+nipPqKSQejywicfgjI1G+RGyox6XyovG73cILXqG1YgLer8Op9pKm X7/LJFca+aWkYyVwkcEg8kwZlNSYAK1e7/1j7RuoaTu9cIYCH87SxGPUcQhQcCji DF+I1vZlByiaralE/8sr1gS3II3GlX1g2H6HGxbMjG8NVJGpuLcmV0maJWaEloOT pjpbYZGxG3VKxkUGgMo1mweYq2/1WiRLrBjinfPHEu30noSw/ZWhhoS39WSyNaPB GKrlnC/YGLIbbnTdR+/G5p461iW6Lv9rMJur8nAFmHZtrIOM0eqyps3OGktjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvcNxC3IL9j/4RYq+ySGWmu8wn94wHwYDVR0j BBgwFoAUklq0P2JE0vAfAegGj6EKJ79Sz34wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMzNGRjM2YtMzA4Zi00ZGUxLWEzNjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2 MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdCRjUyQ0Y3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEyN0JGNTJD RjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBB MjdCRjUyQ0Y3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvKL/f4HH/ykVphiLegEtkkYQKMZxh8R//y M8ejFvZmPNLjP/2cwwPxcUAtS2GeXA6BMBTgTtUjCOt60VT6jYoC0JHKb6t3IFAp fJT3ZKWhhVc6h8dMPB9CLFZLR8MoFVuLM/mGtFXq1LT46CDX2YBTtcjxFvLlq0T6 sPZRbCMwZ/biL0Zt0H63jbYnYaxuq0XYByM9393tneoAWsfd18D+T0VW30GQJK6k E7OFVtNV8Hu27rcCta3PUlAFsMPC1jA+apUreSix5R33aPbYSq7ZGG+F1KHhMLXd B9/S0CKM35jAZ2Bg6nmeoQHgGIexVx07gJlrpGPTo9wxbS7/ICc= -----END CERTIFICATE-----Generated at Fri Jul 24 06:24:34 2026 by rpki-client