$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft File: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft (raw, json) Hash identifier: 62HvpDY4dUCn3P01he1XGYVIJ+16jE4syTPl5IbBcuw= Subject key identifier: 45:E3:29:B3:46:7C:4B:83:5F:7F:3D:67:7C:A3:F8:20:E9:E2:79:27 Authority key identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B Certificate issuer: /CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Certificate serial: 7623D2280DFB0223CAF607982DD3502A50D14054 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:30 +0000 Manifest this update: Tue 12 May 2026 18:13:30 +0000 Manifest next update: Wed 13 May 2026 18:43:30 +0000 Files and hashes: 1: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl (hash: eOqFHTED0cPNoJ25vmjmvh1EHBZLJM3f5vs1IrwL/rE=) 2: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: OEqKbqVoV+spRdzW+aE4+2tFsdczawhoz6Mphx/Zguc=) 3: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: 0P5qBTgfllLlHCA3nz89Ltdzy1jcnaNNEY3SQXv/0II=) 4: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: thKA0k3SKd9ZuPgdjH+VF43W5Rz/i9a2JTXNPTXM6a0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:23:d2:28:0d:fb:02:23:ca:f6:07:98:2d:d3:50:2a:50:d1:40:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Validity Not Before: May 12 18:13:30 2026 GMT Not After : May 13 18:43:30 2026 GMT Subject: CN=45E329B3467C4B835F7F3D677CA3F820E9E27927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:ff:48:a3:fc:9c:75:2c:e9:92:53:50:23: 06:19:40:7a:e4:62:77:79:e3:56:07:1d:2e:fe:b2: 8c:8d:8c:41:b5:37:f1:7f:55:07:65:b8:0f:e3:0d: fb:b5:0b:6e:42:a3:fa:00:16:cc:41:12:5b:78:04: 6a:57:3b:33:15:68:92:79:cd:2a:ee:46:55:3b:d5: 7f:ba:94:90:a2:3c:d5:be:44:6a:18:3a:c4:c9:97: 63:f6:f4:8b:c7:f2:0e:3f:a8:91:fe:9c:c2:8e:b4: 64:f8:27:f6:ee:26:bf:91:8b:d5:71:a0:21:91:9e: 8e:cf:06:d6:96:32:68:c4:aa:2a:24:f8:b3:46:24: e1:ba:18:4a:87:27:97:71:0c:e2:c2:3d:2b:fd:5b: 35:47:0e:0b:ce:67:7e:cb:6a:f8:9c:2c:7f:77:0e: 03:f0:4c:c2:81:4b:62:64:a6:6d:3e:18:be:f0:c2: d7:a0:00:d6:db:bb:98:c2:ad:58:8c:94:c4:22:99: 1d:f0:98:4b:68:ae:dd:8e:98:71:90:3c:78:79:06: 44:c3:8e:55:3e:46:dd:ef:5b:29:0a:9c:1a:80:7a: 17:03:fb:c5:01:e7:0f:c8:8d:fb:bf:b7:52:68:d6: 3a:c0:1a:5d:fa:fd:b8:63:2a:82:5f:4d:27:06:c5: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E3:29:B3:46:7C:4B:83:5F:7F:3D:67:7C:A3:F8:20:E9:E2:79:27 X509v3 Authority Key Identifier: keyid:25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d4:23:c7:95:04:54:36:ea:b5:38:94:8f:6a:51:fb:7e:06: 06:a7:90:f3:f1:17:02:f5:34:42:96:2c:bd:34:c6:0a:d1:16: c0:e8:3e:5d:b4:00:c4:e0:92:7a:a4:da:cd:3a:36:50:df:28: 4b:3c:19:df:71:e0:e7:7b:3c:6c:62:ff:6c:37:66:3c:f3:81: 76:14:36:39:a4:9d:95:84:39:5f:e6:3e:78:ff:0b:ad:3f:49: ae:29:71:79:2a:a0:da:70:06:95:37:0a:6b:fa:b1:da:88:b8: 2d:ea:bb:9a:e7:9c:07:e2:41:fd:06:b2:ac:46:f1:bc:b0:58: 8b:c7:db:15:83:85:85:e1:73:e0:5b:32:3a:a1:c9:e6:f4:36: 33:a7:37:55:0e:92:e6:d4:b7:e3:52:d2:4a:c1:6b:35:2c:9d: 27:7c:83:3b:4e:fa:99:e2:5c:70:3a:ab:71:03:30:f4:c7:1c: 7c:53:35:d8:83:33:c7:e3:56:64:6a:98:33:41:3c:db:d9:25: a0:01:ba:9c:a0:f0:16:89:4c:4c:44:30:52:00:08:96:fd:94: e2:5d:db:d6:52:c7:97:eb:c6:56:15:74:40:1a:1a:e7:88:03: a7:3c:1d:24:ba:68:9b:7e:cf:71:e7:91:d4:51:e8:77:df:b7: 53:84:d9:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiPSKA37AiPK9geYLdNQKlDRQFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NE MEZGM0Y1QjAeFw0yNjA1MTIxODEzMzBaFw0yNjA1MTMxODQzMzBaMDMxMTAvBgNV BAMTKDQ1RTMyOUIzNDY3QzRCODM1RjdGM0Q2NzdDQTNGODIwRTlFMjc5MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhv9Io/ycdSzpklNQIwYZQHrk Ynd541YHHS7+soyNjEG1N/F/VQdluA/jDfu1C25Co/oAFsxBElt4BGpXOzMVaJJ5 zSruRlU71X+6lJCiPNW+RGoYOsTJl2P29IvH8g4/qJH+nMKOtGT4J/buJr+Ri9Vx oCGRno7PBtaWMmjEqiok+LNGJOG6GEqHJ5dxDOLCPSv9WzVHDgvOZ37LavicLH93 DgPwTMKBS2Jkpm0+GL7wwtegANbbu5jCrViMlMQimR3wmEtort2OmHGQPHh5BkTD jlU+Rt3vWykKnBqAehcD+8UB5w/Ijfu/t1Jo1jrAGl36/bhjKoJfTScGxRGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUReMps0Z8S4Nffz1nfKP4IOnieScwHwYDVR0j BBgwFoAUJd/M6FOTZzBr/pjsvCVLPND/P1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThjMDY4ZGEtZjljNS00MDM2LTg1NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1 MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NEMEZGM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNURGQ0NFODUzOTM2NzMwNkJGRTk4RUNCQzI1NEIzQ0QwRkYz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThjMDY4ZGEtZjljNS00MDM2LTg1 NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRC M0NEMEZGM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvUI8eVBFQ26rU4lI9qUft+BgankPPxFwL1 NEKWLL00xgrRFsDoPl20AMTgknqk2s06NlDfKEs8Gd9x4Od7PGxi/2w3ZjzzgXYU NjmknZWEOV/mPnj/C60/Sa4pcXkqoNpwBpU3Cmv6sdqIuC3qu5rnnAfiQf0GsqxG 8bywWIvH2xWDhYXhc+BbMjqhyeb0NjOnN1UOkubUt+NS0krBazUsnSd8gztO+pni XHA6q3EDMPTHHHxTNdiDM8fjVmRqmDNBPNvZJaABupyg8BaJTExEMFIACJb9lOJd 29ZSx5frxlYVdEAaGueIA6c8HSS6aJt+z3HnkdRR6Hfft1OE2Sw= -----END CERTIFICATE-----Generated at Tue May 12 22:20:10 2026 by rpki-client