$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft File: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft (raw, json) Hash identifier: ySurrU9hlgOQ55jApusuJ8zFAyN2FAuiQFfyrs8wKcA= Subject key identifier: 6C:D5:0D:24:76:70:9F:6E:D7:0E:08:CC:62:00:EE:66:42:60:02:79 Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Certificate serial: 4742B03999A5E761581DDA80495E8C6B83758DD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 02:13:22 +0000 Manifest this update: Thu 24 Sep 2026 02:08:22 +0000 Manifest next update: Fri 25 Sep 2026 02:57:22 +0000 Files and hashes: 1: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl (hash: LXFVWJRt9cuAaFDg5L2wz7+AZpPhY7yC08UoXzPmdww=) 2: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=) 3: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: NA2vG2Q1kDJqOsypeMdeccP+qZk1Bv6cVc2oTP2Tmkw=) 4: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: Ndn10HkuTSjLbjizNWK1QWx6xtlpc6JAMMmVzvO86rw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:42:b0:39:99:a5:e7:61:58:1d:da:80:49:5e:8c:6b:83:75:8d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Validity Not Before: Sep 24 02:08:22 2026 GMT Not After : Sep 25 02:57:22 2026 GMT Subject: CN=6CD50D2476709F6ED70E08CC6200EE6642600279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:a1:dc:16:4f:93:73:18:19:6c:56:d6:2c:69: ba:b1:c1:b9:3f:01:19:9c:e3:64:2b:aa:6c:e7:2f: 89:cf:11:af:a5:49:3d:52:01:8f:2d:82:4c:15:11: b0:19:9b:7f:2b:d0:b8:92:70:08:df:18:c0:73:e1: ac:ef:8d:07:9d:e9:88:f9:9e:f3:af:c2:77:9d:f5: 29:18:56:54:d5:bb:06:68:81:b0:cb:6f:a6:90:15: 18:a5:36:eb:ae:0e:d8:72:c4:48:9a:96:22:75:45: 04:dd:b1:a4:36:20:64:e8:cd:b2:a6:9f:4c:9e:cc: 01:b7:30:eb:4e:28:2a:cb:dc:b9:b1:d6:96:7d:79: 4d:5e:da:15:b0:17:3f:05:d8:77:8d:eb:4d:bc:35: 87:05:4a:99:41:cc:6b:b1:3a:36:32:00:48:44:bd: 84:d9:fb:46:2f:0b:d2:21:0c:5a:68:7a:37:45:3d: c8:a6:d9:f5:46:68:a5:d8:da:03:1a:dc:77:b6:e7: bb:19:c8:50:9a:ac:e5:af:97:1d:e6:38:80:e2:07: 08:a5:06:6d:a5:fb:72:68:a1:07:a7:8a:ea:a8:04: 9a:86:26:ac:69:fa:bc:d9:c6:41:cc:8f:67:aa:84: 5c:27:f5:d6:48:73:2a:1e:dd:1c:df:6a:d0:10:61: fd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D5:0D:24:76:70:9F:6E:D7:0E:08:CC:62:00:EE:66:42:60:02:79 X509v3 Authority Key Identifier: keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:15:64:1f:3b:a6:33:f4:cf:68:bf:9b:13:52:d8:1c:a7:14: 16:7b:72:b4:e1:15:23:ba:dd:d5:b8:5c:7b:82:d1:a8:09:e7: 15:56:6c:c6:53:29:d8:b9:df:9b:b3:63:ee:40:14:6d:7a:eb: 89:77:9c:5d:fe:f0:0d:cd:c3:b9:8f:3b:6b:b4:28:3a:16:11: 3c:f6:a8:b5:bc:ff:d9:4d:9b:e2:44:52:9c:53:bd:0a:34:1a: 64:4d:15:59:93:15:1e:5f:4b:6f:b3:5d:50:8b:f0:12:38:8a: 39:09:a4:a7:45:fc:6b:51:ca:6c:83:32:7c:7d:a0:1c:63:0c: e0:d3:79:bc:e7:bd:70:fd:eb:09:41:9b:22:98:89:17:43:62: 0f:85:f4:8d:01:94:06:d3:5e:43:5e:19:6a:f6:9c:b7:89:6f: 86:88:f9:e4:89:89:08:9e:c3:3a:4e:c3:cd:92:17:22:72:22: 82:c1:d2:a5:e8:e5:f1:9e:d7:53:f2:b6:8f:6d:83:ce:50:e2: d4:a3:19:70:af:0a:ae:12:cf:27:ca:d6:9d:37:24:9b:c5:30: ca:a7:ba:72:d9:0e:35:9c:51:9f:09:73:5c:8d:ef:0d:88:f9: 2c:4f:7a:ae:39:80:05:84:01:04:1a:2f:84:bb:87:b1:ca:56: 95:de:3c:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR0KwOZml52FYHdqASV6Ma4N1jdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VBQzNE NTVDM0Q3QTAeFw0yNjA5MjQwMjA4MjJaFw0yNjA5MjUwMjU3MjJaMDMxMTAvBgNV BAMTKDZDRDUwRDI0NzY3MDlGNkVENzBFMDhDQzYyMDBFRTY2NDI2MDAyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9odwWT5NzGBlsVtYsabqxwbk/ ARmc42QrqmznL4nPEa+lST1SAY8tgkwVEbAZm38r0LiScAjfGMBz4azvjQed6Yj5 nvOvwned9SkYVlTVuwZogbDLb6aQFRilNuuuDthyxEialiJ1RQTdsaQ2IGTozbKm n0yezAG3MOtOKCrL3Lmx1pZ9eU1e2hWwFz8F2HeN6028NYcFSplBzGuxOjYyAEhE vYTZ+0YvC9IhDFpoejdFPcim2fVGaKXY2gMa3He257sZyFCarOWvlx3mOIDiBwil Bm2l+3JooQeniuqoBJqGJqxp+rzZxkHMj2eqhFwn9dZIcyoe3RzfatAQYf0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNUNJHZwn27XDgjMYgDuZkJgAnkwHwYDVR0j BBgwFoAUslqomZHfgZY9uVrLgCPqw9VcPXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjUzNTVjNWEtZWZjOC00OGY3LTkwMmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5 MURGODE5NjNEQjk1QUNCODAyM0VBQzNENTVDM0Q3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjVBQTg5OTkxREY4MTk2M0RCOTVBQ0I4MDIzRUFDM0Q1NUMz RDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VB QzNENTVDM0Q3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQVZB87pjP0z2i/mxNS2BynFBZ7crThFSO6 3dW4XHuC0agJ5xVWbMZTKdi535uzY+5AFG1664l3nF3+8A3Nw7mPO2u0KDoWETz2 qLW8/9lNm+JEUpxTvQo0GmRNFVmTFR5fS2+zXVCL8BI4ijkJpKdF/GtRymyDMnx9 oBxjDODTebznvXD96wlBmyKYiRdDYg+F9I0BlAbTXkNeGWr2nLeJb4aI+eSJiQie wzpOw82SFyJyIoLB0qXo5fGe11Pyto9tg85Q4tSjGXCvCq4SzyfK1p03JJvFMMqn unLZDjWcUZ8Jc1yN7w2I+SxPeq45gAWEAQQaL4S7h7HKVpXePIc= -----END CERTIFICATE-----Generated at Thu Sep 24 10:22:37 2026 by rpki-client