$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft File: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft (raw, json) Hash identifier: zRIcc92a64vre5CAQnE5DJLeWMoEkLIVm9G/N2293ak= Subject key identifier: 8F:28:06:47:7E:DF:1E:FD:D7:6F:54:EC:AE:53:D5:47:59:81:0E:D2 Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Certificate serial: 23CD8A0BF67AE798B4EBA362351EB15D82F3B9A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 01:10:29 +0000 Manifest this update: Fri 24 Jul 2026 01:05:29 +0000 Manifest next update: Sat 25 Jul 2026 04:36:29 +0000 Files and hashes: 1: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl (hash: JBjM931CYoS1UofY7GY6PxNnq3W8Whaqu+JRB2alRyE=) 2: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=) 3: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: NA2vG2Q1kDJqOsypeMdeccP+qZk1Bv6cVc2oTP2Tmkw=) 4: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: Ndn10HkuTSjLbjizNWK1QWx6xtlpc6JAMMmVzvO86rw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:cd:8a:0b:f6:7a:e7:98:b4:eb:a3:62:35:1e:b1:5d:82:f3:b9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Validity Not Before: Jul 24 01:05:29 2026 GMT Not After : Jul 25 04:36:29 2026 GMT Subject: CN=8F2806477EDF1EFDD76F54ECAE53D54759810ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:a7:b8:68:70:9f:b4:66:39:c8:3a:31:8e: 00:d3:4d:34:0b:4c:f9:c8:56:33:2c:d3:cb:c6:78: 6e:8d:1d:2f:42:e5:22:39:a2:1e:9e:fb:03:fa:a1: 52:4e:2b:c3:49:5f:3d:7a:d6:2e:d7:0f:95:da:b4: 2c:49:b3:dd:12:87:f4:e2:b9:4c:de:bf:0e:93:af: 1b:cb:0e:d1:57:89:57:3e:34:f2:1c:1c:0a:e8:34: 85:46:a4:e1:2a:2d:1c:e9:43:46:45:b4:75:1b:29: 87:7b:01:4d:7c:5a:a9:60:11:d8:cd:ef:e1:82:2c: 14:63:d6:a8:0c:a9:9d:a9:e4:ae:b5:c5:8a:43:93: 64:51:91:6c:11:84:9b:6d:cc:ef:be:ca:88:46:7d: ab:0d:f4:09:cc:62:5a:68:f1:53:92:7a:26:cc:7b: 09:b7:73:a9:a5:64:1a:0b:5e:80:7a:b3:91:91:3c: 6f:0d:15:f8:ec:ba:9a:bf:cd:8c:58:45:d6:34:12: 1d:7f:1a:20:86:20:9f:05:91:9d:cb:70:79:81:3a: 61:fc:32:92:40:8c:e6:6f:1f:c0:68:b0:c4:18:d7: e2:78:77:f9:22:8d:98:73:03:34:39:be:93:ab:3b: b0:c5:95:67:c9:b4:6e:95:46:15:fd:94:5f:7d:cd: ac:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:28:06:47:7E:DF:1E:FD:D7:6F:54:EC:AE:53:D5:47:59:81:0E:D2 X509v3 Authority Key Identifier: keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:03:5c:a0:73:e3:cd:1f:c5:ab:ee:6a:99:de:bf:9a:f8:7d: ce:4f:e7:fb:53:86:e8:a6:f4:9c:f8:ed:7a:f8:6e:21:1d:5b: 35:97:cc:62:6e:d2:2a:8a:1b:4b:c4:60:9c:c3:91:c8:6c:0d: d4:dd:ec:61:d2:eb:b3:6b:6a:77:2b:01:73:e8:01:da:38:a4: 30:94:7f:62:25:e5:32:58:2e:48:4a:27:e7:02:fc:53:61:0c: 0e:33:d3:60:ba:a3:60:cb:35:dd:18:47:3f:23:c7:f3:b2:b8: 9a:ab:b6:d7:e4:11:4c:4b:f1:34:1b:2c:b9:b7:50:72:fa:f5: e1:58:34:3c:8d:c5:da:35:cd:9b:f6:8f:ae:f0:fd:52:e9:17: fa:8b:00:fc:41:ff:5c:4b:8b:33:2f:df:1a:ca:7b:5e:ae:20: 19:f4:28:1d:cf:95:29:38:98:09:bf:cc:69:fb:34:4c:0c:e9: d3:c1:11:96:a7:53:a0:f0:82:f7:54:9c:ad:e5:1d:76:08:f4: 07:6c:c8:f9:38:b9:46:eb:c3:fe:a0:b5:a8:3b:77:6e:f6:80: 88:8f:25:65:a2:96:b9:5a:1a:07:97:8e:59:2e:c4:c6:cd:88: 06:f9:08:86:6a:7c:96:16:7e:27:1c:a9:fd:a8:84:fa:5b:f5: 01:21:dc:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI82KC/Z655i066NiNR6xXYLzuakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VBQzNE NTVDM0Q3QTAeFw0yNjA3MjQwMTA1MjlaFw0yNjA3MjUwNDM2MjlaMDMxMTAvBgNV BAMTKDhGMjgwNjQ3N0VERjFFRkRENzZGNTRFQ0FFNTNENTQ3NTk4MTBFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNuqe4aHCftGY5yDoxjgDTTTQL TPnIVjMs08vGeG6NHS9C5SI5oh6e+wP6oVJOK8NJXz161i7XD5XatCxJs90Sh/Ti uUzevw6TrxvLDtFXiVc+NPIcHAroNIVGpOEqLRzpQ0ZFtHUbKYd7AU18WqlgEdjN 7+GCLBRj1qgMqZ2p5K61xYpDk2RRkWwRhJttzO++yohGfasN9AnMYlpo8VOSeibM ewm3c6mlZBoLXoB6s5GRPG8NFfjsupq/zYxYRdY0Eh1/GiCGIJ8FkZ3LcHmBOmH8 MpJAjOZvH8BosMQY1+J4d/kijZhzAzQ5vpOrO7DFlWfJtG6VRhX9lF99zaxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjygGR37fHv3Xb1TsrlPVR1mBDtIwHwYDVR0j BBgwFoAUslqomZHfgZY9uVrLgCPqw9VcPXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjUzNTVjNWEtZWZjOC00OGY3LTkwMmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5 MURGODE5NjNEQjk1QUNCODAyM0VBQzNENTVDM0Q3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjVBQTg5OTkxREY4MTk2M0RCOTVBQ0I4MDIzRUFDM0Q1NUMz RDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VB QzNENTVDM0Q3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoDXKBz480fxavuapnev5r4fc5P5/tThuim 9Jz47Xr4biEdWzWXzGJu0iqKG0vEYJzDkchsDdTd7GHS67NrancrAXPoAdo4pDCU f2Il5TJYLkhKJ+cC/FNhDA4z02C6o2DLNd0YRz8jx/OyuJqrttfkEUxL8TQbLLm3 UHL69eFYNDyNxdo1zZv2j67w/VLpF/qLAPxB/1xLizMv3xrKe16uIBn0KB3PlSk4 mAm/zGn7NEwM6dPBEZanU6DwgvdUnK3lHXYI9AdsyPk4uUbrw/6gtag7d272gIiP JWWilrlaGgeXjlkuxMbNiAb5CIZqfJYWficcqf2ohPpb9QEh3Ng= -----END CERTIFICATE-----Generated at Fri Jul 24 07:40:00 2026 by rpki-client