$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft File: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft (raw, json) Hash identifier: urtbKjosmFEM/0OU94Uz5RgllnflyqKn8g/PPSgsmIk= Subject key identifier: 70:1C:8B:ED:E6:0B:50:1C:2D:65:00:9A:9A:75:1D:CC:EB:C6:A4:4F Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Certificate serial: 4DCFED6464F3B1E341049BE9E453EF2D98D57D99 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 13:12:23 +0000 Manifest this update: Wed 23 Sep 2026 13:07:23 +0000 Manifest next update: Thu 24 Sep 2026 17:09:23 +0000 Files and hashes: 1: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl (hash: BQG8IbfpLlZuE/Glj/pXdjGViQdqqMHYUrhNa4NO/Y4=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: jvWEOsR7PfzKTUwNJSaNZgDIPP0tbvEXbSdlcBqgCio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:cf:ed:64:64:f3:b1:e3:41:04:9b:e9:e4:53:ef:2d:98:d5:7d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Validity Not Before: Sep 23 13:07:23 2026 GMT Not After : Sep 24 17:09:23 2026 GMT Subject: CN=701C8BEDE60B501C2D65009A9A751DCCEBC6A44F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:ab:d7:b8:69:09:7c:75:73:78:a1:45:44: a9:2f:a0:8d:7e:52:db:05:a0:9c:50:34:55:aa:a0: c6:fe:2a:f8:a2:0b:b6:da:9c:06:a5:8f:b1:f2:60: ab:df:fc:87:2e:94:26:ff:9f:43:f5:17:7e:7a:a6: 99:3b:88:f3:a4:f3:77:d0:93:e5:fb:ac:a0:a0:d7: 3b:7e:fd:87:2a:f4:fd:ba:8a:06:61:ec:b9:f0:02: d8:b5:1c:aa:94:29:3d:e1:39:e3:ad:a5:66:23:6e: 22:44:76:f6:bc:d7:bd:13:86:f4:e7:af:ce:18:25: 34:c0:4d:eb:14:a3:06:08:06:a7:7f:fb:fe:c5:f8: b9:3c:c8:9d:c8:33:b3:f8:ac:99:d2:ae:43:b1:b0: 82:01:f3:b8:07:c6:41:65:0c:8e:c8:dc:fd:d0:a1: 8c:47:c3:2f:9e:ec:08:ac:47:f0:64:e1:1b:95:e9: 4e:9b:78:ec:c2:f9:f2:fc:82:4d:fe:9b:7c:3e:a0: a0:46:e6:d0:38:2e:ca:9e:af:40:df:9b:d3:a4:b9: 69:a9:8d:68:b3:fb:da:04:47:f6:b4:9c:60:0f:fc: 72:fd:bc:28:3c:28:c2:fd:d7:de:32:b5:b9:95:c7: df:5e:bf:a6:95:2f:1a:3a:62:9c:ad:53:cb:48:67: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1C:8B:ED:E6:0B:50:1C:2D:65:00:9A:9A:75:1D:CC:EB:C6:A4:4F X509v3 Authority Key Identifier: keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f4:72:22:13:9e:ce:1c:c3:b6:af:51:05:db:58:0c:34:cc: 5a:5d:78:07:1c:1f:1c:89:c7:86:59:70:a6:2c:f0:3d:db:1f: c1:6d:7b:fb:ba:4e:5c:44:dd:97:ac:c3:8f:2c:41:53:fe:83: 2a:3e:c8:ec:96:8a:49:9d:d4:25:ae:cd:e8:da:25:ba:b5:2e: d4:28:df:0a:98:1b:0e:e4:ac:71:ea:24:f1:e7:5e:0e:19:9c: c0:24:0e:2c:09:01:ae:d5:42:8b:55:12:95:1f:0c:95:c4:9e: 6c:6e:1e:b2:ad:63:8e:f3:95:48:38:b5:44:02:fa:c9:6d:8d: 34:21:b3:fd:72:0b:b5:94:c8:1b:94:8e:d3:49:20:71:2e:d0: 2a:45:27:c9:8c:12:28:16:1b:c5:bb:d9:7f:79:5f:59:73:36: 3c:2f:20:e0:8d:fc:db:4d:b5:9b:ba:66:90:12:07:80:59:94: 96:05:2a:b6:f5:5c:f3:9d:44:91:12:62:6e:2f:40:a6:16:30: 61:c9:42:4b:65:b1:bd:da:2e:87:d3:f0:dd:fb:a8:57:7a:8a: 4c:7f:3e:90:49:ca:00:2b:2c:01:b3:c6:19:16:1a:83:f1:82: 40:29:aa:77:ae:5f:58:b4:fb:42:d3:80:5b:2b:6b:f4:c9:9f: ce:47:76:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTc/tZGTzseNBBJvp5FPvLZjVfZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx MzMzQjEyODAeFw0yNjA5MjMxMzA3MjNaFw0yNjA5MjQxNzA5MjNaMDMxMTAvBgNV BAMTKDcwMUM4QkVERTYwQjUwMUMyRDY1MDA5QTlBNzUxRENDRUJDNkE0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZKvXuGkJfHVzeKFFRKkvoI1+ UtsFoJxQNFWqoMb+KviiC7banAalj7HyYKvf/IculCb/n0P1F356ppk7iPOk83fQ k+X7rKCg1zt+/Ycq9P26igZh7LnwAti1HKqUKT3hOeOtpWYjbiJEdva8170ThvTn r84YJTTATesUowYIBqd/+/7F+Lk8yJ3IM7P4rJnSrkOxsIIB87gHxkFlDI7I3P3Q oYxHwy+e7AisR/Bk4RuV6U6beOzC+fL8gk3+m3w+oKBG5tA4Lsqer0Dfm9OkuWmp jWiz+9oER/a0nGAP/HL9vCg8KML9194ytbmVx99ev6aVLxo6YpytU8tIZ4ltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcByL7eYLUBwtZQCamnUdzOvGpE8wHwYDVR0j BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0 Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJB M0MxMzMzQjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHb0ciITns4cw7avUQXbWAw0zFpdeAccHxyJ x4ZZcKYs8D3bH8Fte/u6TlxE3Zesw48sQVP+gyo+yOyWikmd1CWuzejaJbq1LtQo 3wqYGw7krHHqJPHnXg4ZnMAkDiwJAa7VQotVEpUfDJXEnmxuHrKtY47zlUg4tUQC +sltjTQhs/1yC7WUyBuUjtNJIHEu0CpFJ8mMEigWG8W72X95X1lzNjwvIOCN/NtN tZu6ZpASB4BZlJYFKrb1XPOdRJESYm4vQKYWMGHJQktlsb3aLofT8N37qFd6ikx/ PpBJygArLAGzxhkWGoPxgkApqneuX1i0+0LTgFsra/TJn85Hdo8= -----END CERTIFICATE-----Generated at Wed Sep 23 21:17:56 2026 by rpki-client