$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft File: 25F44906F292384CC9F1BE632798B911BD52EB7E.mft (raw, json) Hash identifier: ZwH3daQlvQB8I5pl4umTRizWTuQojTMuDZR6OJfUfaU= Subject key identifier: E1:45:CF:6D:6A:03:F7:CE:3D:FB:7D:28:B3:FC:44:01:00:B4:CE:8E Authority key identifier: 25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E Certificate issuer: /CN=25F44906F292384CC9F1BE632798B911BD52EB7E Certificate serial: 040EDB933A8C393770519422D15F51EF55855732 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 14:34:06 +0000 Manifest this update: Wed 23 Sep 2026 14:29:06 +0000 Manifest next update: Thu 24 Sep 2026 15:08:06 +0000 Files and hashes: 1: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: K3q/Ez2ylWAHvKZbfEY9nE0ATvil8bcfxJnHQI/5nNA=) 2: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: OzJuT5ZCAhL2UGbM7eynbgVHZM3ndO0ync8Ih0A1zcQ=) 3: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: rJYDDAtDFH2sxeGVm+q7lH6NoJu3MNVWQxNtL3BpElI=) 4: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: GGZKA5imIJIaP+Schkic8gBw6IQQgIqOJecWWJTB5T4=) 5: 25F44906F292384CC9F1BE632798B911BD52EB7E.crl (hash: N1xGxVv4Klo33cu0gar36Vl6giZUnom/HUIu2LyW99w=) 6: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: h0iqFz1JhYFaft+/rI1iyNCYNmEHURL6TWuWP9vtRec=) 7: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: OF+X7RZ12YwYbIl142vAny0I0e6fiCnAZ2BWIAMpqJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 15:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0e:db:93:3a:8c:39:37:70:51:94:22:d1:5f:51:ef:55:85:57:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F44906F292384CC9F1BE632798B911BD52EB7E Validity Not Before: Sep 23 14:29:06 2026 GMT Not After : Sep 24 15:08:06 2026 GMT Subject: CN=E145CF6D6A03F7CE3DFB7D28B3FC440100B4CE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a1:f9:26:ea:73:53:6c:06:ae:cb:26:12:24: 0e:f7:bd:a0:c5:0b:a7:df:cb:32:c2:11:0c:d3:e8: c0:5a:80:35:3d:e8:74:ae:c9:07:17:2d:fe:88:e8: a1:09:5a:40:6c:24:4c:d1:43:ad:dd:65:29:30:8c: 24:f8:f0:0e:b8:72:71:82:31:a9:3e:20:c7:b7:ec: 95:02:35:70:39:1a:8f:31:0f:9c:3c:43:97:50:b0: 86:b2:b8:73:f3:06:44:c9:33:19:9d:6b:07:f3:86: 40:43:48:1f:45:8e:3a:06:17:90:d6:0c:14:f7:42: 9f:f8:39:c6:ef:92:3f:a1:2a:44:58:8b:4e:67:e9: 7c:19:ad:56:5c:e2:ca:60:c7:90:2c:c1:cb:0a:07: b5:2d:2b:49:c4:7b:67:57:74:7c:e9:5d:08:65:c8: 00:8f:9f:6a:2c:51:66:53:ea:e1:04:b6:fc:08:f6: e8:ba:35:35:f6:e9:85:02:50:10:c2:1b:3f:15:b1: f0:79:3a:5f:75:34:03:84:c7:c8:69:3a:1d:b6:f9: 1d:c3:8a:27:fb:9a:e1:c2:c9:a6:fe:95:53:b6:b5: 21:a6:2b:38:22:16:07:52:af:e1:dc:70:ad:2d:69: 76:df:5d:07:4f:38:86:ae:a8:e6:ac:ed:d5:fb:e2: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:45:CF:6D:6A:03:F7:CE:3D:FB:7D:28:B3:FC:44:01:00:B4:CE:8E X509v3 Authority Key Identifier: keyid:25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9c:da:8b:d0:85:6b:44:95:90:1d:53:8d:36:36:60:a6:55: 25:cc:a6:c1:1b:61:da:de:22:98:7c:ee:63:f3:e3:bf:36:a2: a6:b3:97:6b:25:af:4e:94:6d:23:c9:5e:6d:eb:2d:d4:e0:46: db:0b:83:12:d6:38:5d:92:ad:28:b5:71:f5:12:60:be:ce:ef: a9:f8:ed:16:77:11:45:79:d0:6b:8f:f0:37:a5:76:1a:2d:13: 3a:23:85:c6:b6:57:8f:91:2c:c3:e9:e1:2d:71:7a:9e:12:41: a0:bf:36:0b:56:c3:97:ed:88:c2:f4:5c:f3:31:37:45:cc:82: e0:8d:f6:f9:f7:38:45:61:3c:72:1a:b6:2b:7c:95:85:70:89: 8f:8d:83:72:09:eb:6e:2e:cd:7f:35:7d:c4:b8:ba:9d:da:98: be:a6:72:d9:ec:dd:62:3a:07:46:1d:3b:23:8d:96:59:f3:47: c0:09:99:0a:45:9e:01:e3:37:e7:cb:8a:1e:b9:7b:3e:bf:a0: 5e:91:b1:a0:5b:35:25:41:e2:22:9a:d4:be:d7:22:a9:bb:fb: 5b:aa:72:a6:ec:30:a5:bb:80:ad:32:d7:ac:1b:3a:f9:d2:44: 82:12:72:26:da:ce:a7:af:4f:52:6a:4b:b6:03:50:44:f1:f5: bc:84:19:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBA7bkzqMOTdwUZQi0V9R71WFVzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFC RDUyRUI3RTAeFw0yNjA5MjMxNDI5MDZaFw0yNjA5MjQxNTA4MDZaMDMxMTAvBgNV BAMTKEUxNDVDRjZENkEwM0Y3Q0UzREZCN0QyOEIzRkM0NDAxMDBCNENFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQofkm6nNTbAauyyYSJA73vaDF C6ffyzLCEQzT6MBagDU96HSuyQcXLf6I6KEJWkBsJEzRQ63dZSkwjCT48A64cnGC Mak+IMe37JUCNXA5Go8xD5w8Q5dQsIayuHPzBkTJMxmdawfzhkBDSB9FjjoGF5DW DBT3Qp/4Ocbvkj+hKkRYi05n6XwZrVZc4spgx5AswcsKB7UtK0nEe2dXdHzpXQhl yACPn2osUWZT6uEEtvwI9ui6NTX26YUCUBDCGz8VsfB5Ol91NAOEx8hpOh22+R3D iif7muHCyab+lVO2tSGmKzgiFgdSr+HccK0taXbfXQdPOIauqOas7dX74p57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4UXPbWoD9849+30os/xEAQC0zo4wHwYDVR0j BBgwFoAUJfRJBvKSOEzJ8b5jJ5i5Eb1S634wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhNDI3NDItODlkMi00OWJiLThhM2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZG MjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFCRDUyRUI3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUY0NDkwNkYyOTIzODRDQzlGMUJFNjMyNzk4QjkxMUJENTJF QjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5 MTFCRDUyRUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGc2ovQhWtElZAdU402NmCmVSXMpsEbYdre Iph87mPz4782oqazl2slr06UbSPJXm3rLdTgRtsLgxLWOF2SrSi1cfUSYL7O76n4 7RZ3EUV50GuP8DeldhotEzojhca2V4+RLMPp4S1xep4SQaC/NgtWw5ftiML0XPMx N0XMguCN9vn3OEVhPHIatit8lYVwiY+Ng3IJ624uzX81fcS4up3amL6mctns3WI6 B0YdOyONllnzR8AJmQpFngHjN+fLih65ez6/oF6RsaBbNSVB4iKa1L7XIqm7+1uq cqbsMKW7gK0y16wbOvnSRIIScibazqevT1JqS7YDUETx9byEGeM= -----END CERTIFICATE-----Generated at Thu Sep 24 03:45:47 2026 by rpki-client