$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft File: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft (raw, json) Hash identifier: bhk2CpTfbjV7DFbGTDvqa+LZFS6d9MaQ/iOI7PnN/BQ= Subject key identifier: 86:1D:58:A9:71:99:0A:AA:52:96:AE:10:ED:26:4B:64:2C:56:45:8E Authority key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 Certificate issuer: /CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Certificate serial: 5941A2BCDF196831D10B71202067358B598EB831 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:41:35 +0000 Manifest this update: Wed 23 Sep 2026 20:36:35 +0000 Manifest next update: Thu 24 Sep 2026 22:36:35 +0000 Files and hashes: 1: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl (hash: c4hCbL0WiFWFZn1Kwi9wNxTlTH1ckLzCZJ2gJitcg+8=) 2: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: Fn5PKzmC7YA1TbvzOZXs3Jzaa7OB0gZmLLWwdOBo6Sk=) 3: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: 2ZgfJvyLTSbmKyjhb50szLtpeLkF+krwXndUc1mrD0c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:41:a2:bc:df:19:68:31:d1:0b:71:20:20:67:35:8b:59:8e:b8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Validity Not Before: Sep 23 20:36:35 2026 GMT Not After : Sep 24 22:36:35 2026 GMT Subject: CN=861D58A971990AAA5296AE10ED264B642C56458E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:ec:55:74:d7:25:f7:c8:9e:68:f2:31:b5: a6:b9:31:8c:9d:77:d7:1a:0a:47:e7:f0:92:c0:ad: ef:3a:36:a8:ff:cd:da:2a:d4:80:0d:41:c0:0e:9e: 53:79:ef:9e:6d:c2:a2:79:d4:5b:fc:8f:d9:f6:c9: 8a:1b:b9:71:83:92:d9:a3:3b:a7:e6:b3:eb:f1:73: 43:1a:59:e3:d8:72:41:02:47:29:30:85:2b:a2:1f: b1:fb:6b:0d:61:72:f9:05:2f:06:f8:3b:e5:bc:b2: 6d:2f:d3:6a:2e:5e:6e:2e:09:f0:e8:86:e1:ea:a1: bf:82:c1:c9:ae:2a:01:ee:21:a7:be:16:8b:bc:2a: 49:9b:a8:4d:f3:d6:22:3e:da:28:b7:4e:12:4a:48: 26:18:40:51:7d:a2:ed:4a:6e:1b:29:91:c5:d0:cf: 83:2f:70:d4:cb:99:8d:d9:cf:01:eb:47:7e:e8:3d: 86:95:a2:32:ea:a6:70:b7:db:f0:51:3c:3f:e6:f4: e2:b4:50:d3:e2:29:aa:68:84:56:35:26:a8:9c:c3: 43:02:4b:1d:9b:04:ab:a0:fd:2c:b2:c5:b4:37:0c: 96:2c:8c:bb:1b:2d:a1:de:2b:4b:05:b2:9d:ba:73: 11:61:37:e1:64:ac:25:dd:85:47:aa:54:96:82:b2: 55:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1D:58:A9:71:99:0A:AA:52:96:AE:10:ED:26:4B:64:2C:56:45:8E X509v3 Authority Key Identifier: keyid:72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4c:ca:db:eb:f7:9f:fd:83:d4:f9:75:68:db:48:32:84:3c: f5:11:93:af:01:3c:eb:06:e2:c1:fb:0b:ab:b7:b6:d5:cb:a7: c1:97:71:c3:ff:bf:ea:b8:8e:33:1d:8c:68:cd:12:5f:9c:4e: ad:2f:5a:5f:2f:40:84:b8:5b:09:61:63:29:ab:bb:9c:39:55: 86:57:96:a8:80:c6:25:a5:5a:4e:ce:61:36:5a:77:24:92:ba: 2a:5f:05:8c:ce:2e:69:24:7b:92:86:33:bb:ec:11:69:f2:59: aa:a5:ea:85:5e:f9:ce:ee:4e:4e:cb:59:f9:1b:ea:7e:8b:15: f8:88:21:e9:15:99:5b:a7:22:ee:9e:29:27:4b:60:8c:51:bf: c5:ba:0e:48:42:3c:c1:e4:cf:94:69:3b:69:e1:d7:fb:2f:cb: 83:cc:d3:16:d2:18:d5:41:09:01:d2:d6:13:9f:1f:89:c2:0e: 94:79:3a:54:f3:51:ac:81:e7:b0:d8:23:dc:a8:b2:71:27:a8: ae:8f:09:ad:aa:62:65:21:ba:aa:3a:17:8e:66:c6:d0:b7:5d: f4:11:5f:35:36:d5:fe:23:e9:ea:2b:31:37:19:a6:77:d5:bf: 5b:b7:db:3f:95:80:fc:4c:83:53:b6:c8:59:1f:c8:ef:cf:87: 42:9f:ec:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUGivN8ZaDHRC3EgIGc1i1mOuDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1 QzQ2MEE5NzAeFw0yNjA5MjMyMDM2MzVaFw0yNjA5MjQyMjM2MzVaMDMxMTAvBgNV BAMTKDg2MUQ1OEE5NzE5OTBBQUE1Mjk2QUUxMEVEMjY0QjY0MkM1NjQ1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr7+xVdNcl98ieaPIxtaa5MYyd d9caCkfn8JLAre86Nqj/zdoq1IANQcAOnlN5755twqJ51Fv8j9n2yYobuXGDktmj O6fms+vxc0MaWePYckECRykwhSuiH7H7aw1hcvkFLwb4O+W8sm0v02ouXm4uCfDo huHqob+CwcmuKgHuIae+Fou8KkmbqE3z1iI+2ii3ThJKSCYYQFF9ou1KbhspkcXQ z4MvcNTLmY3ZzwHrR37oPYaVojLqpnC32/BRPD/m9OK0UNPiKapohFY1Jqicw0MC Sx2bBKug/SyyxbQ3DJYsjLsbLaHeK0sFsp26cxFhN+FkrCXdhUeqVJaCslUxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhh1YqXGZCqpSlq4Q7SZLZCxWRY4wHwYDVR0j BBgwFoAUclGJ2+fZZENqhfrB/DPlv1xGCpcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1NGI0ZTItMmU1OC00NjViLWFmYWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJF N0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1QzQ2MEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUxODlEQkU3RDk2NDQzNkE4NUZBQzFGQzMzRTVCRjVDNDYw QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1 QkY1QzQ2MEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1Mytvr95/9g9T5dWjbSDKEPPURk68BPOsG 4sH7C6u3ttXLp8GXccP/v+q4jjMdjGjNEl+cTq0vWl8vQIS4WwlhYymru5w5VYZX lqiAxiWlWk7OYTZadySSuipfBYzOLmkke5KGM7vsEWnyWaql6oVe+c7uTk7LWfkb 6n6LFfiIIekVmVunIu6eKSdLYIxRv8W6DkhCPMHkz5RpO2nh1/svy4PM0xbSGNVB CQHS1hOfH4nCDpR5OlTzUayB57DYI9yosnEnqK6PCa2qYmUhuqo6F45mxtC3XfQR XzU21f4j6eorMTcZpnfVv1u32z+VgPxMg1O2yFkfyO/Ph0Kf7Do= -----END CERTIFICATE-----Generated at Thu Sep 24 08:29:30 2026 by rpki-client