$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft File: 25F44906F292384CC9F1BE632798B911BD52EB7E.mft (raw, json) Hash identifier: +cdGYbcovszpNxkXf2BrMfoS8JTfFBpJJGOtEaWwZxw= Subject key identifier: 87:11:6B:D7:AF:08:72:EA:82:8C:BE:B4:09:C3:76:B1:62:EA:F3:9F Authority key identifier: 25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E Certificate issuer: /CN=25F44906F292384CC9F1BE632798B911BD52EB7E Certificate serial: 74DA300C38D3C4AD66538E8086EBD70EEEEFBA7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 18:12:16 +0000 Manifest this update: Thu 23 Jul 2026 18:07:16 +0000 Manifest next update: Fri 24 Jul 2026 18:18:16 +0000 Files and hashes: 1: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: GGZKA5imIJIaP+Schkic8gBw6IQQgIqOJecWWJTB5T4=) 2: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: h0iqFz1JhYFaft+/rI1iyNCYNmEHURL6TWuWP9vtRec=) 3: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: rJYDDAtDFH2sxeGVm+q7lH6NoJu3MNVWQxNtL3BpElI=) 4: 25F44906F292384CC9F1BE632798B911BD52EB7E.crl (hash: VL61JtRYa4j2ZMOgwlnurG+8g97Sl8IccCVFoxnhLlE=) 5: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: OzJuT5ZCAhL2UGbM7eynbgVHZM3ndO0ync8Ih0A1zcQ=) 6: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: K3q/Ez2ylWAHvKZbfEY9nE0ATvil8bcfxJnHQI/5nNA=) 7: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: OF+X7RZ12YwYbIl142vAny0I0e6fiCnAZ2BWIAMpqJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:da:30:0c:38:d3:c4:ad:66:53:8e:80:86:eb:d7:0e:ee:ef:ba:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F44906F292384CC9F1BE632798B911BD52EB7E Validity Not Before: Jul 23 18:07:16 2026 GMT Not After : Jul 24 18:18:16 2026 GMT Subject: CN=87116BD7AF0872EA828CBEB409C376B162EAF39F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:50:44:67:a3:70:5d:29:5b:43:e2:f9:b2: a7:29:1d:b6:9f:89:26:c6:12:83:96:14:8c:23:f7: fa:e0:d1:27:39:17:41:ed:b5:9e:36:43:ea:0f:29: b1:0f:16:68:76:aa:bc:19:6f:fc:c5:b6:78:29:38: fe:db:2d:d4:4a:b5:d5:2f:1c:b1:0e:db:18:d4:32: 81:e2:f3:82:ac:52:8b:80:03:e0:b7:bc:29:5c:84: 10:b6:18:3d:46:64:91:71:ec:44:3f:d5:aa:dc:34: f4:2d:19:c2:f7:8b:09:03:16:96:27:ba:4e:e7:d1: 4c:6c:5b:27:66:95:43:b2:fb:5e:1d:31:e0:8b:e4: 78:95:3d:ff:ed:75:f8:2e:88:cb:45:a2:2f:4a:7d: 3b:cb:10:fe:43:88:f2:4f:9a:5a:d1:16:6f:0f:a7: 40:78:d0:a7:55:7a:4f:5d:9d:9b:f8:07:d6:ca:6a: 0b:12:54:86:0d:3b:dc:92:a1:ed:c4:21:6c:5f:1c: 6d:7f:36:34:4d:42:f4:8f:f6:ce:3a:2b:3e:93:02: 83:23:b1:6c:4e:13:d4:2a:35:87:30:c3:e0:f6:e3: c3:a2:be:5a:38:6c:1a:a7:5d:41:9a:27:b0:1c:71: a0:09:35:46:10:6d:fa:90:94:12:62:08:d5:a3:f0: 94:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:11:6B:D7:AF:08:72:EA:82:8C:BE:B4:09:C3:76:B1:62:EA:F3:9F X509v3 Authority Key Identifier: keyid:25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:bf:54:65:e1:3f:a9:e1:d1:b5:cc:08:58:1b:27:c9:98:c1: 00:e5:12:9a:66:77:fd:d8:a1:68:09:f6:5e:9d:2c:80:45:d4: 4a:e8:8d:ba:36:29:78:c1:52:5f:bd:42:a8:91:d5:11:08:0c: 56:5d:ee:63:82:8d:8c:68:36:36:74:58:dd:e6:dd:a7:c9:20: d6:73:47:f6:ee:c6:ff:40:1a:af:f5:83:91:5f:4c:c5:ae:08: 77:1a:b1:be:90:fb:d9:9c:77:4f:d7:99:0f:bc:51:83:02:58: d3:c3:e6:e3:93:70:24:06:39:82:56:04:d4:c8:63:9e:36:57: 24:57:0c:6f:8f:2e:a5:1f:c0:50:3f:f5:d5:3d:fa:7c:32:bd: 65:38:8c:80:9a:51:fc:98:ab:98:e5:d8:19:e1:89:81:a8:8f: 81:0f:3f:1d:76:c0:aa:55:98:20:2a:3c:ea:41:1e:11:25:fc: 73:3e:4f:fc:6c:e9:9c:8a:53:1c:11:cc:0e:62:55:09:ae:38: ec:a7:0f:24:ec:dc:09:c5:4d:60:c4:aa:ed:21:22:bf:a1:0f: 57:5b:92:43:4b:30:bd:3e:de:c5:84:29:b4:4b:b5:29:46:7f: 29:47:56:a2:38:18:b7:57:04:3a:d7:13:c8:fd:6e:c4:16:cc: 61:cd:bb:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdNowDDjTxK1mU46AhuvXDu7vun0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFC RDUyRUI3RTAeFw0yNjA3MjMxODA3MTZaFw0yNjA3MjQxODE4MTZaMDMxMTAvBgNV BAMTKDg3MTE2QkQ3QUYwODcyRUE4MjhDQkVCNDA5QzM3NkIxNjJFQUYzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW6FBEZ6NwXSlbQ+L5sqcpHbaf iSbGEoOWFIwj9/rg0Sc5F0HttZ42Q+oPKbEPFmh2qrwZb/zFtngpOP7bLdRKtdUv HLEO2xjUMoHi84KsUouAA+C3vClchBC2GD1GZJFx7EQ/1arcNPQtGcL3iwkDFpYn uk7n0UxsWydmlUOy+14dMeCL5HiVPf/tdfguiMtFoi9KfTvLEP5DiPJPmlrRFm8P p0B40KdVek9dnZv4B9bKagsSVIYNO9ySoe3EIWxfHG1/NjRNQvSP9s46Kz6TAoMj sWxOE9QqNYcww+D248Oivlo4bBqnXUGaJ7AccaAJNUYQbfqQlBJiCNWj8JT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhxFr168IcuqCjL60CcN2sWLq858wHwYDVR0j BBgwFoAUJfRJBvKSOEzJ8b5jJ5i5Eb1S634wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhNDI3NDItODlkMi00OWJiLThhM2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZG MjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFCRDUyRUI3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUY0NDkwNkYyOTIzODRDQzlGMUJFNjMyNzk4QjkxMUJENTJF QjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5 MTFCRDUyRUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKO/VGXhP6nh0bXMCFgbJ8mYwQDlEppmd/3Y oWgJ9l6dLIBF1Erojbo2KXjBUl+9QqiR1REIDFZd7mOCjYxoNjZ0WN3m3afJINZz R/buxv9AGq/1g5FfTMWuCHcasb6Q+9mcd0/XmQ+8UYMCWNPD5uOTcCQGOYJWBNTI Y542VyRXDG+PLqUfwFA/9dU9+nwyvWU4jICaUfyYq5jl2BnhiYGoj4EPPx12wKpV mCAqPOpBHhEl/HM+T/xs6ZyKUxwRzA5iVQmuOOynDyTs3AnFTWDEqu0hIr+hD1db kkNLML0+3sWEKbRLtSlGfylHVqI4GLdXBDrXE8j9bsQWzGHNu1s= -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:07 2026 by rpki-client