$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft File: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft (raw, json) Hash identifier: oQunzLKLxfJp0CTU+IgqR+k68tt84J63dLcAeLA70h0= Subject key identifier: A4:6E:9F:2B:DC:EE:AE:6E:BD:3F:CD:3D:60:BB:26:D9:66:43:73:AC Authority key identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B Certificate issuer: /CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Certificate serial: 0486419891CE4EAE5D2BE6C57028F52B908BC7C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 21:00:41 +0000 Manifest this update: Thu 23 Jul 2026 20:55:41 +0000 Manifest next update: Fri 24 Jul 2026 23:41:41 +0000 Files and hashes: 1: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: 0P5qBTgfllLlHCA3nz89Ltdzy1jcnaNNEY3SQXv/0II=) 2: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: thKA0k3SKd9ZuPgdjH+VF43W5Rz/i9a2JTXNPTXM6a0=) 3: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: OEqKbqVoV+spRdzW+aE4+2tFsdczawhoz6Mphx/Zguc=) 4: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl (hash: qhtyaoQsbOVVCCvuzGUdvz7jjYimIZUBizPJ2vatoUs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:86:41:98:91:ce:4e:ae:5d:2b:e6:c5:70:28:f5:2b:90:8b:c7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Validity Not Before: Jul 23 20:55:41 2026 GMT Not After : Jul 24 23:41:41 2026 GMT Subject: CN=A46E9F2BDCEEAE6EBD3FCD3D60BB26D9664373AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:00:ac:4e:fe:bc:1d:02:96:d6:ce:9d:f2: 00:e6:3a:c8:f3:58:dd:91:87:42:13:bd:a7:96:67: dc:56:f5:1d:2b:88:a7:a1:ce:de:96:54:19:a9:eb: 86:87:19:30:22:b7:e6:cd:97:31:ab:be:85:c7:1d: 7f:44:3a:7f:99:dc:bd:65:c6:c1:ba:b0:c4:42:de: 93:c7:3b:38:d3:2d:f8:0d:3d:b1:51:05:4d:31:a1: a2:ba:bf:e5:87:8b:c3:7c:9f:dd:45:36:8a:07:83: 43:3a:fe:9d:15:a1:ce:fd:3a:bc:64:c3:9f:71:66: 7a:87:b0:f8:a9:1f:13:3c:17:d5:af:4b:c5:a1:12: c2:14:0d:98:86:52:ab:98:c9:46:f8:8c:86:bb:62: 67:9b:5c:bb:4a:6f:4d:b9:00:6f:e6:49:62:be:a7: d0:17:4f:ec:06:f6:39:c4:0d:35:09:c4:b3:eb:90: b2:c1:53:f4:6c:56:31:31:d0:85:4b:7a:ca:3e:72: 6e:c8:8c:fb:5c:7a:b7:a6:a0:5e:63:6f:6c:53:91: db:a5:ba:92:a3:d5:a3:96:64:b9:09:17:0e:ea:ce: b2:03:71:92:71:36:ea:b5:de:ec:32:62:30:90:f4: 28:69:aa:17:f0:d8:9e:20:56:1e:cf:40:b5:7e:c3: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6E:9F:2B:DC:EE:AE:6E:BD:3F:CD:3D:60:BB:26:D9:66:43:73:AC X509v3 Authority Key Identifier: keyid:25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:52:2a:96:f1:13:14:fd:ab:29:b9:32:c6:9f:37:4e:3b:91: 93:ee:42:e8:bf:8d:31:c8:3e:79:da:eb:eb:9d:0e:99:9e:ec: 91:8f:ed:1b:8e:ef:8c:35:93:c2:a0:5e:1d:29:db:c2:19:17: 16:67:30:2d:59:b9:82:9e:40:17:e4:cf:21:ff:f2:7a:4a:c5: 45:7a:7e:5a:01:49:b4:34:4d:c3:81:47:ce:12:f7:9d:50:d0: 5d:3a:f7:55:d9:da:2c:d1:11:20:d1:1d:e7:f3:03:e6:c8:d8: 03:2e:75:5e:01:05:00:47:81:ca:8e:cf:61:aa:8c:a1:fa:b8: 33:ef:90:d6:e1:9c:fa:b4:dd:1e:79:38:af:e4:1f:f0:f1:82: f4:44:63:46:94:5e:b7:f0:c7:1d:6b:36:7d:fd:d5:83:65:12: 89:2f:f2:4d:bf:b3:57:a9:eb:6f:ff:56:8c:99:16:69:16:45: b6:17:b2:a1:f4:96:22:b4:75:cd:10:cf:61:df:33:62:e5:2a: 4d:2e:e5:1b:46:d8:bf:2c:fb:c0:da:7a:94:12:52:62:83:88: 17:63:1e:cc:f5:41:68:ce:15:68:35:12:68:df:12:bf:97:80: f4:8a:06:b6:f1:af:52:d4:bf:af:7c:6e:24:45:4d:81:df:90: db:8a:d4:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBIZBmJHOTq5dK+bFcCj1K5CLx8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NE MEZGM0Y1QjAeFw0yNjA3MjMyMDU1NDFaFw0yNjA3MjQyMzQxNDFaMDMxMTAvBgNV BAMTKEE0NkU5RjJCRENFRUFFNkVCRDNGQ0QzRDYwQkIyNkQ5NjY0MzczQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUDACsTv68HQKW1s6d8gDmOsjz WN2Rh0ITvaeWZ9xW9R0riKehzt6WVBmp64aHGTAit+bNlzGrvoXHHX9EOn+Z3L1l xsG6sMRC3pPHOzjTLfgNPbFRBU0xoaK6v+WHi8N8n91FNooHg0M6/p0Voc79Orxk w59xZnqHsPipHxM8F9WvS8WhEsIUDZiGUquYyUb4jIa7YmebXLtKb025AG/mSWK+ p9AXT+wG9jnEDTUJxLPrkLLBU/RsVjEx0IVLeso+cm7IjPtceremoF5jb2xTkdul upKj1aOWZLkJFw7qzrIDcZJxNuq13uwyYjCQ9Chpqhfw2J4gVh7PQLV+w2NTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpG6fK9zurm69P809YLsm2WZDc6wwHwYDVR0j BBgwFoAUJd/M6FOTZzBr/pjsvCVLPND/P1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThjMDY4ZGEtZjljNS00MDM2LTg1NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1 MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NEMEZGM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNURGQ0NFODUzOTM2NzMwNkJGRTk4RUNCQzI1NEIzQ0QwRkYz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThjMDY4ZGEtZjljNS00MDM2LTg1 NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRC M0NEMEZGM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOhSKpbxExT9qym5MsafN047kZPuQui/jTHI Pnna6+udDpme7JGP7RuO74w1k8KgXh0p28IZFxZnMC1ZuYKeQBfkzyH/8npKxUV6 floBSbQ0TcOBR84S951Q0F0691XZ2izRESDRHefzA+bI2AMudV4BBQBHgcqOz2Gq jKH6uDPvkNbhnPq03R55OK/kH/DxgvREY0aUXrfwxx1rNn391YNlEokv8k2/s1ep 62//VoyZFmkWRbYXsqH0liK0dc0Qz2HfM2LlKk0u5RtG2L8s+8DaepQSUmKDiBdj Hsz1QWjOFWg1EmjfEr+XgPSKBrbxr1LUv698biRFTYHfkNuK1CA= -----END CERTIFICATE-----Generated at Fri Jul 24 03:46:55 2026 by rpki-client