$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft File: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft (raw, json) Hash identifier: Vt5dcD9XmrSZD2zS7Zh6YJ7CA8OnLJ67ZrDL5N8/PwI= Subject key identifier: DA:2A:81:00:A8:31:19:08:21:BE:F5:FC:8C:3B:AE:A6:8A:D7:3D:A5 Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Certificate serial: 6630AF92F932873B2DEFDED1CD6C4F1B80D7D77E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:49:42 +0000 Manifest this update: Tue 12 May 2026 21:44:42 +0000 Manifest next update: Wed 13 May 2026 22:40:42 +0000 Files and hashes: 1: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: NA2vG2Q1kDJqOsypeMdeccP+qZk1Bv6cVc2oTP2Tmkw=) 2: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=) 3: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl (hash: p7fhTPr8uvMWX5elYGK6EDL4oKBcWkCkavd3mi2Px4w=) 4: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: Ndn10HkuTSjLbjizNWK1QWx6xtlpc6JAMMmVzvO86rw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:30:af:92:f9:32:87:3b:2d:ef:de:d1:cd:6c:4f:1b:80:d7:d7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Validity Not Before: May 12 21:44:42 2026 GMT Not After : May 13 22:40:42 2026 GMT Subject: CN=DA2A8100A831190821BEF5FC8C3BAEA68AD73DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:61:ee:25:98:58:1d:d6:98:ca:b0:9a:8a: cc:92:35:65:5d:14:ac:20:84:b0:cc:f0:a4:bb:f9: f1:1b:74:d5:b7:53:61:b8:b3:e8:72:29:45:3a:a3: 89:38:70:d7:65:7c:ae:c2:da:0a:53:1f:53:ac:0c: 0b:4a:6e:fc:cf:96:3a:e6:ca:f9:9e:aa:0b:39:67: fa:c2:e4:da:a7:95:d8:a7:50:0a:42:6b:b9:43:d3: f0:ef:01:43:0c:55:d4:65:ea:e6:f8:f7:d9:f5:db: 1b:82:f6:47:c6:dd:4e:26:dc:7c:e0:85:b6:46:1a: b2:d7:e5:d5:5c:e4:32:8c:31:36:00:ce:c3:18:e4: f4:46:1e:8c:5d:a0:6a:38:12:e1:cb:2b:1c:e9:0b: 79:12:bf:6a:7e:08:86:04:e3:99:5b:0a:bd:df:e5: c3:f7:c3:bb:0e:b9:59:a0:e2:26:1c:a3:3b:e1:a2: e6:60:6d:62:49:20:be:ef:bf:7d:cb:c1:42:7d:e2: 69:63:16:d1:1b:4b:60:d8:85:a9:04:11:c1:ee:ee: 60:de:6b:77:7d:f8:92:70:0e:d1:70:a0:b2:78:2a: b4:45:0c:ee:0d:c5:df:36:d9:ab:13:79:e0:b2:c5: 1d:9c:c2:b0:05:e0:e3:bb:d5:93:a3:78:13:aa:06: 25:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2A:81:00:A8:31:19:08:21:BE:F5:FC:8C:3B:AE:A6:8A:D7:3D:A5 X509v3 Authority Key Identifier: keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d7:18:1b:df:79:c9:95:f2:fb:48:e2:90:77:c9:6b:50:78: af:8c:ca:14:f2:49:88:b7:2e:82:83:a5:8c:d8:79:9c:b8:dc: 7c:72:d9:ed:07:22:49:43:fb:05:cc:c9:e3:58:08:f3:fe:41: 97:bf:4f:2c:a1:96:b7:cd:f3:89:23:30:6c:1a:4e:16:43:86: 96:78:45:6b:da:c7:8f:a9:d5:75:0d:8d:cc:b0:32:ab:ea:67: ff:83:cf:09:f6:ab:49:b5:7b:45:e7:03:85:7c:7a:8c:4b:dc: 3a:8d:9e:69:d9:56:c7:e3:ae:a7:20:04:86:8a:6e:80:b6:3d: 24:57:b5:96:cd:a9:f2:1e:7a:c7:19:aa:a7:b1:6b:3e:16:ef: 8d:e0:13:ec:ad:b0:bd:48:2b:14:3b:8e:84:14:8e:9e:81:81: 7c:20:31:59:ca:30:73:e3:5e:1e:0f:0e:3a:f7:77:0f:00:2e: 7a:99:32:1e:37:da:00:8c:ea:13:60:64:50:79:54:22:68:8c: 88:cc:69:91:4b:99:2c:6f:86:72:8e:de:79:69:77:8b:91:f7: 7f:f4:53:5e:36:42:b1:ac:fd:74:6c:7a:9b:ce:1c:98:f8:a9: 92:09:14:fe:dd:15:af:4a:c7:25:ca:a8:fa:2e:4f:a2:b2:dc: 89:0c:78:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjCvkvkyhzst797RzWxPG4DX134wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VBQzNE NTVDM0Q3QTAeFw0yNjA1MTIyMTQ0NDJaFw0yNjA1MTMyMjQwNDJaMDMxMTAvBgNV BAMTKERBMkE4MTAwQTgzMTE5MDgyMUJFRjVGQzhDM0JBRUE2OEFENzNEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsWHuJZhYHdaYyrCaisySNWVd FKwghLDM8KS7+fEbdNW3U2G4s+hyKUU6o4k4cNdlfK7C2gpTH1OsDAtKbvzPljrm yvmeqgs5Z/rC5NqnldinUApCa7lD0/DvAUMMVdRl6ub499n12xuC9kfG3U4m3Hzg hbZGGrLX5dVc5DKMMTYAzsMY5PRGHoxdoGo4EuHLKxzpC3kSv2p+CIYE45lbCr3f 5cP3w7sOuVmg4iYcozvhouZgbWJJIL7vv33LwUJ94mljFtEbS2DYhakEEcHu7mDe a3d9+JJwDtFwoLJ4KrRFDO4Nxd822asTeeCyxR2cwrAF4OO71ZOjeBOqBiVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2iqBAKgxGQghvvX8jDuuporXPaUwHwYDVR0j BBgwFoAUslqomZHfgZY9uVrLgCPqw9VcPXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjUzNTVjNWEtZWZjOC00OGY3LTkwMmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5 MURGODE5NjNEQjk1QUNCODAyM0VBQzNENTVDM0Q3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjVBQTg5OTkxREY4MTk2M0RCOTVBQ0I4MDIzRUFDM0Q1NUMz RDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VB QzNENTVDM0Q3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPXGBvfecmV8vtI4pB3yWtQeK+MyhTySYi3 LoKDpYzYeZy43Hxy2e0HIklD+wXMyeNYCPP+QZe/TyyhlrfN84kjMGwaThZDhpZ4 RWvax4+p1XUNjcywMqvqZ/+Dzwn2q0m1e0XnA4V8eoxL3DqNnmnZVsfjrqcgBIaK boC2PSRXtZbNqfIeescZqqexaz4W743gE+ytsL1IKxQ7joQUjp6BgXwgMVnKMHPj Xh4PDjr3dw8ALnqZMh432gCM6hNgZFB5VCJojIjMaZFLmSxvhnKO3nlpd4uR93/0 U142QrGs/XRsepvOHJj4qZIJFP7dFa9KxyXKqPouT6Ky3IkMeJ0= -----END CERTIFICATE-----Generated at Wed May 13 01:41:07 2026 by rpki-client