$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft File: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft (raw, json) Hash identifier: ViOO72t83zS1YGwP2ci7hORBynAAru+c7AkjVi94604= Subject key identifier: AC:E1:B9:52:32:96:10:32:1E:A8:0B:EE:55:42:70:C4:40:0B:7A:F6 Authority key identifier: 92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E Certificate issuer: /CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Certificate serial: 4C65512782C83A4621F76E49BC15F2F0EC35FC69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 05:12:08 +0000 Manifest this update: Thu 24 Sep 2026 05:07:08 +0000 Manifest next update: Fri 25 Sep 2026 07:47:08 +0000 Files and hashes: 1: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: Zs3u840j4ZP200LFP4fVZsCLeA3oRYjdoZn2EIvaoNc=) 2: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: BNboAAgQmC0h9hwiHyJC3I+uxxLLhTzB3aQYZsJOubE=) 3: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: iMHNOPCq/4qZI+6rd3tZI59AkfaQtxW6wPdAhh/rGGs=) 4: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl (hash: TDu/kqUldAEmIPoctwrNQHv0XZAckBlcKwwMiKvuL4A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:65:51:27:82:c8:3a:46:21:f7:6e:49:bc:15:f2:f0:ec:35:fc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Validity Not Before: Sep 24 05:07:08 2026 GMT Not After : Sep 25 07:47:08 2026 GMT Subject: CN=ACE1B952329610321EA80BEE554270C4400B7AF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:af:51:20:5a:57:7a:24:86:4e:30:45:5c:37: c5:b2:9f:fa:24:fe:c9:bd:91:54:fa:ad:4b:ad:22: 93:80:f6:a0:f0:9f:55:bb:06:4a:18:4f:36:f7:d3: 7e:99:e1:a9:e3:39:8b:dd:36:63:7a:66:de:5e:08: 42:a6:be:7d:15:76:f8:8e:df:7c:3c:e3:19:cb:0f: bf:7d:12:dd:81:85:89:fc:b0:fe:75:b3:05:60:2c: c3:0f:aa:f1:b8:a9:50:eb:e5:0d:19:e6:b2:5e:cb: 8c:88:b5:f9:2d:26:1e:0d:bc:23:43:c0:31:6b:69: 91:99:4c:eb:a7:ec:42:e9:0b:98:9e:30:a7:31:98: 1e:0b:cb:4a:1e:68:08:a6:ee:8b:a9:61:e2:62:fa: 92:e7:32:f0:4d:fe:ab:98:a3:5c:09:df:b5:1d:42: aa:00:0e:01:b2:17:2f:63:5f:d4:32:ac:03:c1:71: 7a:d5:37:ba:5d:4f:73:95:f5:09:bd:e9:ac:b4:e3: 74:13:68:f3:e6:23:ab:c1:2a:3b:19:ea:1c:22:de: 85:c2:69:74:61:9e:01:1c:24:e7:19:f8:8a:26:eb: b5:3b:b3:b1:8d:8a:1a:8a:33:75:1a:80:bf:3c:3e: 9b:17:d3:4d:91:76:6b:ef:3a:0a:fd:5f:04:c2:47: 00:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E1:B9:52:32:96:10:32:1E:A8:0B:EE:55:42:70:C4:40:0B:7A:F6 X509v3 Authority Key Identifier: keyid:92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:c6:49:08:00:b3:06:32:48:32:9e:0e:c3:7e:bc:ea:4c:1f: 10:27:4b:bb:98:35:1e:1e:b6:b2:8a:92:6b:bb:23:10:42:38: a9:88:ec:7a:c2:72:eb:4a:55:a9:e3:c1:69:9f:ee:90:e2:20: 11:c2:21:42:98:b9:d2:6b:b8:e0:9f:8e:43:e2:68:13:ff:68: 88:c3:d2:c1:f6:58:cc:52:89:22:e6:8e:b9:70:e9:bc:f0:dd: 4d:51:a6:84:78:6b:8d:89:1d:1e:01:7f:aa:1f:65:1a:ca:31: 5f:78:9c:8a:d8:61:65:58:0e:15:d4:43:45:61:6b:9b:15:7b: a0:71:ca:2f:5a:72:82:a6:4c:4e:28:3c:85:bf:c0:6d:93:5e: f3:20:25:eb:b3:19:d3:0c:5b:64:28:96:79:7c:f1:15:66:52: a6:21:9f:e3:b0:21:a7:82:76:6a:aa:0e:b5:17:82:1e:18:9b: 65:22:ad:52:c4:b3:33:43:59:3d:77:86:c5:cb:c4:13:8a:88: 96:3a:1c:95:e7:c2:92:07:0c:12:15:37:6a:11:46:8c:0e:0f: df:46:cd:08:01:b7:91:ae:70:07:72:dc:2b:84:30:84:7b:23: df:0c:56:f3:b8:a3:71:27:d2:14:ed:48:4a:08:d6:9f:c7:74: b7:22:d0:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGVRJ4LIOkYh925JvBXy8Ow1/GkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdC RjUyQ0Y3RTAeFw0yNjA5MjQwNTA3MDhaFw0yNjA5MjUwNzQ3MDhaMDMxMTAvBgNV BAMTKEFDRTFCOTUyMzI5NjEwMzIxRUE4MEJFRTU1NDI3MEM0NDAwQjdBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmr1EgWld6JIZOMEVcN8Wyn/ok /sm9kVT6rUutIpOA9qDwn1W7BkoYTzb3036Z4anjOYvdNmN6Zt5eCEKmvn0VdviO 33w84xnLD799Et2BhYn8sP51swVgLMMPqvG4qVDr5Q0Z5rJey4yItfktJh4NvCND wDFraZGZTOun7ELpC5ieMKcxmB4Ly0oeaAim7oupYeJi+pLnMvBN/quYo1wJ37Ud QqoADgGyFy9jX9QyrAPBcXrVN7pdT3OV9Qm96ay043QTaPPmI6vBKjsZ6hwi3oXC aXRhngEcJOcZ+Iom67U7s7GNihqKM3UagL88PpsX002RdmvvOgr9XwTCRwA3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrOG5UjKWEDIeqAvuVUJwxEALevYwHwYDVR0j BBgwFoAUklq0P2JE0vAfAegGj6EKJ79Sz34wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMzNGRjM2YtMzA4Zi00ZGUxLWEzNjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2 MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdCRjUyQ0Y3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEyN0JGNTJD RjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBB MjdCRjUyQ0Y3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXGSQgAswYySDKeDsN+vOpMHxAnS7uYNR4e trKKkmu7IxBCOKmI7HrCcutKVanjwWmf7pDiIBHCIUKYudJruOCfjkPiaBP/aIjD 0sH2WMxSiSLmjrlw6bzw3U1RpoR4a42JHR4Bf6ofZRrKMV94nIrYYWVYDhXUQ0Vh a5sVe6Bxyi9acoKmTE4oPIW/wG2TXvMgJeuzGdMMW2Qolnl88RVmUqYhn+OwIaeC dmqqDrUXgh4Ym2UirVLEszNDWT13hsXLxBOKiJY6HJXnwpIHDBIVN2oRRowOD99G zQgBt5GucAdy3CuEMIR7I98MVvO4o3En0hTtSEoI1p/HdLci0BY= -----END CERTIFICATE-----Generated at Thu Sep 24 14:19:00 2026 by rpki-client