$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft File: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft (raw, json) Hash identifier: LMuqsJPR2nAt0zIXIgWEFI442AuIK6Ph4DY0KOUmomM= Subject key identifier: FA:54:3C:B0:71:19:74:44:C7:21:D1:E5:E1:6E:3E:A0:FA:86:BA:E3 Authority key identifier: 92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E Certificate issuer: /CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Certificate serial: 1BB01DE3F1E512DEBC5738F2E2F79ADDB9A7D1AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 09:48:16 +0000 Manifest this update: Wed 23 Sep 2026 09:43:16 +0000 Manifest next update: Thu 24 Sep 2026 13:11:16 +0000 Files and hashes: 1: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: Zs3u840j4ZP200LFP4fVZsCLeA3oRYjdoZn2EIvaoNc=) 2: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: iMHNOPCq/4qZI+6rd3tZI59AkfaQtxW6wPdAhh/rGGs=) 3: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: BNboAAgQmC0h9hwiHyJC3I+uxxLLhTzB3aQYZsJOubE=) 4: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl (hash: wj2QatN6IUWxbSkr9JxrqFaIPOIhuzfOVhn6FBFFgKI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b0:1d:e3:f1:e5:12:de:bc:57:38:f2:e2:f7:9a:dd:b9:a7:d1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Validity Not Before: Sep 23 09:43:16 2026 GMT Not After : Sep 24 13:11:16 2026 GMT Subject: CN=FA543CB071197444C721D1E5E16E3EA0FA86BAE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e1:0e:d1:65:5f:73:35:a8:97:83:d1:c7:f1: c1:12:aa:71:4a:07:77:07:f7:ea:a2:cf:a9:a1:22: 05:e4:ac:64:dc:88:4e:18:ca:49:aa:c0:a1:86:89: e1:c1:23:5c:48:dc:57:23:77:d3:67:de:9a:24:6c: 52:a6:4e:53:6b:e2:de:c3:c1:62:46:d7:23:b5:04: e5:e2:a5:09:89:e7:bb:ce:3c:d1:4a:8b:37:89:54: 20:58:92:f0:76:68:85:1a:bb:50:cc:69:9a:51:4a: 28:43:43:49:e6:d3:2b:84:95:92:0f:74:8c:22:94: c8:1f:2e:10:db:cf:f9:d5:ca:54:43:08:65:39:6f: d7:f3:8a:35:d6:c1:38:46:a1:69:ea:dd:ad:79:c5: e7:fd:2e:38:da:65:3b:96:e4:96:ee:cd:d7:17:6d: 34:6d:85:aa:0a:73:fc:bd:32:0b:15:12:25:e1:bb: eb:6e:34:95:5b:a5:61:e0:51:3e:2f:d2:2a:e1:57: fa:10:e2:0a:f3:66:20:ee:4f:71:12:6a:c9:c7:37: 5b:d6:ba:77:2a:30:58:ea:be:5c:aa:29:40:f1:3a: 5f:e7:01:4a:78:54:99:bc:f0:8d:1f:b0:15:1e:63: 38:70:b8:03:40:3f:64:d9:35:1a:30:0c:c7:64:f9: 26:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:54:3C:B0:71:19:74:44:C7:21:D1:E5:E1:6E:3E:A0:FA:86:BA:E3 X509v3 Authority Key Identifier: keyid:92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:46:3d:f3:a7:77:cc:21:61:50:f4:86:93:e6:4e:5e:27:4d: a1:0d:8c:0d:43:07:2a:22:d3:20:57:0a:70:bf:c1:a5:50:c4: 9a:07:cf:d2:2b:5d:41:eb:18:eb:19:47:16:16:61:af:e8:f9: 4f:34:b6:b2:86:a8:68:9b:4d:3c:80:1f:1b:1e:00:80:cd:71: 6e:7e:7b:35:d2:e0:0c:95:c7:11:e1:38:1e:fc:07:36:c1:5c: 37:26:20:5e:35:d6:80:2f:3c:9f:5c:a3:47:92:ba:e8:db:d8: 15:d8:b5:9a:39:c8:bc:53:7d:ce:50:ce:f4:09:77:56:75:73: 5a:f3:11:cd:da:06:7e:f2:9b:42:49:f8:0d:8e:3f:af:ce:96: e4:d6:ae:6b:08:51:41:ed:26:69:e7:51:9d:df:a3:67:73:5e: 5f:37:b6:ed:25:45:6f:93:11:a0:b4:fe:c6:08:2b:98:3b:d3: e9:42:e2:01:4e:67:89:99:dd:5f:f8:d3:a1:98:5b:6e:91:68: 5c:3b:87:9c:4a:0b:1f:43:6c:17:b9:47:a6:c3:7c:34:47:de: 71:7a:87:61:3d:2f:cc:02:4c:af:24:d8:34:48:e8:89:e4:33: 3a:0f:85:ea:40:14:03:f2:37:21:08:2f:fc:12:14:12:d6:89: f1:ae:72:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7Ad4/HlEt68Vzjy4vea3bmn0awwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdC RjUyQ0Y3RTAeFw0yNjA5MjMwOTQzMTZaFw0yNjA5MjQxMzExMTZaMDMxMTAvBgNV BAMTKEZBNTQzQ0IwNzExOTc0NDRDNzIxRDFFNUUxNkUzRUEwRkE4NkJBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc4Q7RZV9zNaiXg9HH8cESqnFK B3cH9+qiz6mhIgXkrGTciE4YykmqwKGGieHBI1xI3Fcjd9Nn3pokbFKmTlNr4t7D wWJG1yO1BOXipQmJ57vOPNFKizeJVCBYkvB2aIUau1DMaZpRSihDQ0nm0yuElZIP dIwilMgfLhDbz/nVylRDCGU5b9fzijXWwThGoWnq3a15xef9LjjaZTuW5JbuzdcX bTRthaoKc/y9MgsVEiXhu+tuNJVbpWHgUT4v0irhV/oQ4grzZiDuT3ESasnHN1vW uncqMFjqvlyqKUDxOl/nAUp4VJm88I0fsBUeYzhwuANAP2TZNRowDMdk+SZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lQ8sHEZdETHIdHl4W4+oPqGuuMwHwYDVR0j BBgwFoAUklq0P2JE0vAfAegGj6EKJ79Sz34wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMzNGRjM2YtMzA4Zi00ZGUxLWEzNjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2 MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdCRjUyQ0Y3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEyN0JGNTJD RjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBB MjdCRjUyQ0Y3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACpGPfOnd8whYVD0hpPmTl4nTaENjA1DByoi 0yBXCnC/waVQxJoHz9IrXUHrGOsZRxYWYa/o+U80trKGqGibTTyAHxseAIDNcW5+ ezXS4AyVxxHhOB78BzbBXDcmIF411oAvPJ9co0eSuujb2BXYtZo5yLxTfc5QzvQJ d1Z1c1rzEc3aBn7ym0JJ+A2OP6/OluTWrmsIUUHtJmnnUZ3fo2dzXl83tu0lRW+T EaC0/sYIK5g70+lC4gFOZ4mZ3V/406GYW26RaFw7h5xKCx9DbBe5R6bDfDRH3nF6 h2E9L8wCTK8k2DRI6InkMzoPhepAFAPyNyEIL/wSFBLWifGuctk= -----END CERTIFICATE-----Generated at Wed Sep 23 23:19:12 2026 by rpki-client