$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft File: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft (raw, json) Hash identifier: GxIhZf2Qxvc8tLVQOxoCocZ+6k3QACHGw04Ya4zsjPk= Subject key identifier: 5B:CC:96:0D:EA:9B:BE:F0:E7:E3:F7:9D:C6:DF:3D:40:21:FF:28:FC Authority key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 Certificate issuer: /CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Certificate serial: 06484EE56F8BD88EBE1E89D9E540942C3AF599F2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:03:59 +0000 Manifest this update: Tue 12 May 2026 13:58:59 +0000 Manifest next update: Wed 13 May 2026 16:45:59 +0000 Files and hashes: 1: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: Fn5PKzmC7YA1TbvzOZXs3Jzaa7OB0gZmLLWwdOBo6Sk=) 2: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl (hash: Dz8RktmnWu6DJJXppKUlzRJsxUCDMIzb6Ul/xOxUfks=) 3: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: 2ZgfJvyLTSbmKyjhb50szLtpeLkF+krwXndUc1mrD0c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:48:4e:e5:6f:8b:d8:8e:be:1e:89:d9:e5:40:94:2c:3a:f5:99:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Validity Not Before: May 12 13:58:59 2026 GMT Not After : May 13 16:45:59 2026 GMT Subject: CN=5BCC960DEA9BBEF0E7E3F79DC6DF3D4021FF28FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:af:ab:2c:63:01:9b:84:6e:88:4f:ca:f1: 4b:1f:b7:54:17:8d:cb:52:d2:df:d8:74:b1:7d:a4: e9:0a:4d:ba:90:26:8b:58:1f:57:2d:b8:ec:83:e1: cf:28:0e:48:d2:8f:c6:f4:54:12:77:d9:45:91:0a: a1:2b:4e:f8:7b:97:ff:38:6b:74:31:13:4a:ff:ab: b1:61:6d:1f:36:a7:72:1a:da:7e:aa:15:af:69:11: 67:32:16:66:2c:05:a6:40:a4:b0:2b:88:4d:ee:85: 16:42:6f:d9:e3:6f:50:72:10:5a:2b:df:ba:2b:4a: 9c:a4:bd:6e:11:58:6e:38:0c:d8:e4:b5:af:7e:21: ec:73:e9:88:07:e1:88:54:70:74:59:17:52:60:93: 1b:06:86:8e:7e:6c:44:b1:2e:e2:cd:19:0f:bc:38: ac:b8:d8:7b:d9:2d:25:b9:18:f0:23:a4:2b:43:99: 2d:46:df:d7:52:8a:91:1b:cd:53:3b:83:ed:c6:77: 10:47:3a:78:17:4c:47:30:82:a6:d7:89:5c:6e:bd: 13:dd:8b:c7:c8:28:9f:0a:99:de:72:57:b9:d3:97: c2:c1:b8:83:80:9d:aa:db:23:37:2a:d1:d5:40:6b: fb:ed:e6:5d:4e:76:90:68:be:bb:43:da:bd:c3:91: 21:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CC:96:0D:EA:9B:BE:F0:E7:E3:F7:9D:C6:DF:3D:40:21:FF:28:FC X509v3 Authority Key Identifier: keyid:72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:c3:8c:3f:c8:0b:9f:59:69:a2:f3:95:c2:40:f4:4c:5c:be: 33:4a:7c:4a:4c:a7:f5:df:dc:64:23:70:05:55:c6:98:f9:c7: 2c:2b:3e:bf:8d:9c:23:e5:c0:de:92:0b:99:a0:f1:14:7d:dc: 4c:9a:28:96:f1:8c:3b:80:85:df:7e:b6:88:5a:b3:ad:1c:69: f8:73:8f:72:45:7a:01:ce:66:4e:68:40:4d:93:30:61:71:ea: 24:cd:1b:b8:08:9e:99:6b:28:66:68:cb:e4:28:05:6a:0b:e5: e3:0f:5d:a0:3c:d4:56:2f:fb:87:2b:3d:a2:56:00:64:83:56: 97:c6:4c:e6:f0:04:99:47:c8:a7:1c:b2:4e:86:99:92:3e:2e: 5c:b2:1a:d8:93:70:71:2d:45:1b:72:60:ea:c4:8b:0c:b3:e1: 17:5e:bc:72:9f:21:53:7b:84:9b:e8:88:78:7c:06:d8:ba:c3: d0:cd:48:a0:4d:90:3e:ba:bf:57:eb:a8:b3:0d:a1:b4:0d:d2: 06:9e:77:07:3f:eb:91:28:1e:bf:0c:a5:30:5b:3e:56:a5:3d: 95:f6:f2:6f:5a:92:c0:49:18:11:82:f4:b1:dc:2f:fe:89:79: b9:6e:19:d3:63:df:22:6f:4c:53:ad:c3:81:e0:9d:6a:45:0d: 86:c2:99:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBkhO5W+L2I6+HonZ5UCULDr1mfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1 QzQ2MEE5NzAeFw0yNjA1MTIxMzU4NTlaFw0yNjA1MTMxNjQ1NTlaMDMxMTAvBgNV BAMTKDVCQ0M5NjBERUE5QkJFRjBFN0UzRjc5REM2REYzRDQwMjFGRjI4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Xa+rLGMBm4RuiE/K8Usft1QX jctS0t/YdLF9pOkKTbqQJotYH1ctuOyD4c8oDkjSj8b0VBJ32UWRCqErTvh7l/84 a3QxE0r/q7FhbR82p3Ia2n6qFa9pEWcyFmYsBaZApLAriE3uhRZCb9njb1ByEFor 37orSpykvW4RWG44DNjkta9+Iexz6YgH4YhUcHRZF1JgkxsGho5+bESxLuLNGQ+8 OKy42HvZLSW5GPAjpCtDmS1G39dSipEbzVM7g+3GdxBHOngXTEcwgqbXiVxuvRPd i8fIKJ8Kmd5yV7nTl8LBuIOAnarbIzcq0dVAa/vt5l1OdpBovrtD2r3DkSFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW8yWDeqbvvDn4/edxt89QCH/KPwwHwYDVR0j BBgwFoAUclGJ2+fZZENqhfrB/DPlv1xGCpcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1NGI0ZTItMmU1OC00NjViLWFmYWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJF N0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1QzQ2MEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUxODlEQkU3RDk2NDQzNkE4NUZBQzFGQzMzRTVCRjVDNDYw QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1 QkY1QzQ2MEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXDjD/IC59ZaaLzlcJA9ExcvjNKfEpMp/Xf 3GQjcAVVxpj5xywrPr+NnCPlwN6SC5mg8RR93EyaKJbxjDuAhd9+tohas60cafhz j3JFegHOZk5oQE2TMGFx6iTNG7gInplrKGZoy+QoBWoL5eMPXaA81FYv+4crPaJW AGSDVpfGTObwBJlHyKccsk6GmZI+LlyyGtiTcHEtRRtyYOrEiwyz4RdevHKfIVN7 hJvoiHh8Bti6w9DNSKBNkD66v1frqLMNobQN0gaedwc/65EoHr8MpTBbPlalPZX2 8m9aksBJGBGC9LHcL/6JebluGdNj3yJvTFOtw4HgnWpFDYbCmYA= -----END CERTIFICATE-----Generated at Tue May 12 22:13:19 2026 by rpki-client