$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft File: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft (raw, json) Hash identifier: rMAQ4RSMYzF9/hFE8UwWi97AhZzKnYXgw3MnQQMO2CU= Subject key identifier: 50:8B:92:5D:4A:0A:65:3C:29:D0:9C:23:C2:7D:AD:FB:91:D2:33:EF Authority key identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B Certificate issuer: /CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Certificate serial: C22264A61AD41977E503CD90EB8DE495CEC074 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 22:23:44 +0000 Manifest this update: Wed 23 Sep 2026 22:18:44 +0000 Manifest next update: Thu 24 Sep 2026 23:40:44 +0000 Files and hashes: 1: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl (hash: OZU5+WDszVX5Lznz7V1md58MbovuWtBlRkt2CLHxMRA=) 2: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: 0P5qBTgfllLlHCA3nz89Ltdzy1jcnaNNEY3SQXv/0II=) 3: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: OEqKbqVoV+spRdzW+aE4+2tFsdczawhoz6Mphx/Zguc=) 4: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: thKA0k3SKd9ZuPgdjH+VF43W5Rz/i9a2JTXNPTXM6a0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c2:22:64:a6:1a:d4:19:77:e5:03:cd:90:eb:8d:e4:95:ce:c0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Validity Not Before: Sep 23 22:18:44 2026 GMT Not After : Sep 24 23:40:44 2026 GMT Subject: CN=508B925D4A0A653C29D09C23C27DADFB91D233EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:c5:b8:55:bd:a3:39:3d:3f:e9:56:17:55: 13:cc:de:c1:d2:2a:ed:ef:5b:d7:6a:9d:7a:c5:41: 1d:f1:52:f5:75:5c:f1:e1:38:eb:c4:12:ba:7d:15: 4f:9b:0d:80:e9:4f:53:b5:76:39:41:d5:28:bf:a9: e0:00:d0:ee:f4:a2:60:d5:52:f3:1b:78:77:78:37: 16:83:97:71:af:b6:86:6f:dc:db:79:4f:70:ae:6f: d7:80:0d:7f:40:b1:69:f0:2f:50:dc:9c:9b:cd:eb: 75:52:b6:de:63:5e:2d:6f:6a:5b:5c:97:6d:c4:ac: c4:1c:07:60:c4:2f:f6:6f:fb:cc:81:81:55:5e:f5: ed:e7:54:80:c6:07:ea:72:2f:e9:63:ca:87:a9:7b: 4c:11:90:aa:ae:f9:29:94:a0:13:f1:11:d6:3e:ed: 6d:d4:fa:67:e2:e0:e4:41:7c:88:c9:1c:6e:62:f4: f0:69:b1:d6:56:5a:a4:51:15:d6:65:91:26:68:0b: 72:34:f1:c5:55:a2:5c:67:2b:81:22:99:c1:30:ff: ee:45:1f:c6:17:b1:d1:8c:70:89:3b:99:62:62:d5: ae:bd:78:d0:a8:15:b4:99:f4:8b:e5:ec:17:bb:ec: 08:b9:c0:93:78:80:30:8f:c2:d0:1e:76:07:21:5f: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8B:92:5D:4A:0A:65:3C:29:D0:9C:23:C2:7D:AD:FB:91:D2:33:EF X509v3 Authority Key Identifier: keyid:25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ba:c4:d8:a1:46:29:ac:92:41:49:a1:c3:5f:81:48:56:4f: 63:8c:b7:ee:00:43:0b:88:f2:07:37:71:6d:14:2a:1c:b5:96: 4c:2a:13:96:ba:fc:92:aa:c9:9c:51:82:9e:2e:a5:5b:1c:47: 56:02:b4:37:2e:ff:06:1a:69:e5:f1:88:c1:99:f7:0b:76:f1: 89:ae:18:4c:79:f1:53:c6:82:13:1f:48:5c:04:67:f8:6a:74: 40:43:cc:ee:67:cb:40:ae:11:a1:a5:78:77:4d:29:e4:9c:76: 84:dd:3a:ff:8c:f8:32:1c:ae:29:c3:f4:ab:cb:d7:81:67:5d: 85:b1:9a:8a:96:36:b7:8c:62:2b:2d:a0:e8:80:05:ef:42:28: b2:f2:a5:18:4b:63:0c:c9:5c:fa:31:f2:02:93:3d:d1:f7:9a: d3:8f:13:b5:ca:5e:aa:51:95:4d:34:e9:0d:2e:81:5d:75:c0: e4:19:3a:b0:dc:4b:be:53:23:a9:40:e3:b7:09:db:54:19:1b: c1:f1:d5:3d:85:97:62:27:26:a8:ee:bf:10:2b:7f:eb:53:24: 36:ec:d1:be:38:26:30:80:bd:a2:3c:ee:01:6b:a9:52:bd:24: 4a:ae:94:52:73:d4:7c:1a:37:15:c5:e8:f2:b9:cf:ff:1f:0c: ef:af:23:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAMIiZKYa1Bl35QPNkOuN5JXOwHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NE MEZGM0Y1QjAeFw0yNjA5MjMyMjE4NDRaFw0yNjA5MjQyMzQwNDRaMDMxMTAvBgNV BAMTKDUwOEI5MjVENEEwQTY1M0MyOUQwOUMyM0MyN0RBREZCOTFEMjMzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhcW4Vb2jOT0/6VYXVRPM3sHS Ku3vW9dqnXrFQR3xUvV1XPHhOOvEErp9FU+bDYDpT1O1djlB1Si/qeAA0O70omDV UvMbeHd4NxaDl3GvtoZv3Nt5T3Cub9eADX9AsWnwL1DcnJvN63VStt5jXi1valtc l23ErMQcB2DEL/Zv+8yBgVVe9e3nVIDGB+pyL+ljyoepe0wRkKqu+SmUoBPxEdY+ 7W3U+mfi4ORBfIjJHG5i9PBpsdZWWqRRFdZlkSZoC3I08cVVolxnK4EimcEw/+5F H8YXsdGMcIk7mWJi1a69eNCoFbSZ9Ivl7Be77Ai5wJN4gDCPwtAedgchX7gRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUIuSXUoKZTwp0Jwjwn2t+5HSM+8wHwYDVR0j BBgwFoAUJd/M6FOTZzBr/pjsvCVLPND/P1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThjMDY4ZGEtZjljNS00MDM2LTg1NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1 MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NEMEZGM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNURGQ0NFODUzOTM2NzMwNkJGRTk4RUNCQzI1NEIzQ0QwRkYz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThjMDY4ZGEtZjljNS00MDM2LTg1 NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRC M0NEMEZGM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+6xNihRimskkFJocNfgUhWT2OMt+4AQwuI 8gc3cW0UKhy1lkwqE5a6/JKqyZxRgp4upVscR1YCtDcu/wYaaeXxiMGZ9wt28Ymu GEx58VPGghMfSFwEZ/hqdEBDzO5ny0CuEaGleHdNKeScdoTdOv+M+DIcrinD9KvL 14FnXYWxmoqWNreMYistoOiABe9CKLLypRhLYwzJXPox8gKTPdH3mtOPE7XKXqpR lU006Q0ugV11wOQZOrDcS75TI6lA47cJ21QZG8Hx1T2Fl2InJqjuvxArf+tTJDbs 0b44JjCAvaI87gFrqVK9JEqulFJz1HwaNxXF6PK5z/8fDO+vI64= -----END CERTIFICATE-----Generated at Thu Sep 24 08:41:06 2026 by rpki-client