$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft File: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft (raw, json) Hash identifier: w5/xnmU9RU5S42fSF9vwLwVt8TGSsm9smVa/jlkN0C4= Subject key identifier: 59:3F:A4:EF:D6:0A:8C:0A:DA:91:21:E4:8E:40:F7:E0:FE:D8:CA:A6 Authority key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 Certificate issuer: /CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Certificate serial: 05DE6AC4D7F9B1388C398BF41A96A85837F7E41E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:27:14 +0000 Manifest this update: Thu 23 Jul 2026 22:22:14 +0000 Manifest next update: Fri 24 Jul 2026 23:12:14 +0000 Files and hashes: 1: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: 2ZgfJvyLTSbmKyjhb50szLtpeLkF+krwXndUc1mrD0c=) 2: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: Fn5PKzmC7YA1TbvzOZXs3Jzaa7OB0gZmLLWwdOBo6Sk=) 3: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl (hash: MQSCusMh1HVXpCSupeZ4V6o8jhOEGdSq5apz0h9xhD4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:de:6a:c4:d7:f9:b1:38:8c:39:8b:f4:1a:96:a8:58:37:f7:e4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Validity Not Before: Jul 23 22:22:14 2026 GMT Not After : Jul 24 23:12:14 2026 GMT Subject: CN=593FA4EFD60A8C0ADA9121E48E40F7E0FED8CAA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bb:0b:4d:03:eb:eb:e3:9f:78:d8:8b:7c:25: f4:32:cd:61:94:ab:06:35:e4:7f:12:27:aa:72:80: cb:ab:21:35:20:d2:2b:78:65:7a:91:a1:40:2a:36: 68:02:3d:a6:ba:02:ad:2f:17:1a:7b:b7:64:82:e3: b8:a3:4d:a9:59:e8:64:d1:a5:b6:a1:e3:be:3a:6c: a4:cd:cd:76:22:39:c2:cb:d7:91:62:d0:73:4d:71: 15:33:fe:07:a6:9d:83:9c:f5:28:df:68:98:74:56: 6d:82:f8:d3:43:02:04:26:04:c6:e3:43:54:4e:f5: 8a:96:10:97:6e:62:be:1f:31:68:ca:1c:f4:24:a2: 7d:d6:11:a6:8d:30:76:1a:49:b0:e8:b5:ce:9f:56: 1b:a3:41:cc:45:f5:a6:86:1d:7d:ee:ce:17:59:b1: c6:8c:42:92:85:7b:73:c1:e4:c9:fd:92:85:57:2f: 3d:da:dd:94:85:dd:c0:2a:4d:b1:9a:8b:80:70:9f: 82:97:22:8d:46:92:7a:77:b9:94:5a:73:97:3e:10: 0b:bb:e4:e2:5c:6b:a4:5e:29:57:3c:93:27:f8:57: e0:f1:4f:a0:7c:51:db:bb:bc:77:3b:02:56:c7:b6: c1:f5:35:2d:a9:16:93:3a:e8:63:1c:18:b8:1a:c7: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3F:A4:EF:D6:0A:8C:0A:DA:91:21:E4:8E:40:F7:E0:FE:D8:CA:A6 X509v3 Authority Key Identifier: keyid:72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:95:42:dd:4b:2c:8d:30:58:30:3b:69:81:96:00:02:62:c0: f2:54:37:31:9d:e3:ef:ea:7f:11:ec:ea:5d:d1:83:34:4a:25: 20:09:18:16:30:32:9e:dd:9f:5b:4a:65:eb:dc:6d:cb:65:9e: 16:f0:cf:a7:82:ba:bb:e6:ea:0b:a7:45:0a:09:06:17:91:03: 65:cd:db:28:3e:7a:e5:ef:6c:c6:da:a4:b6:08:a8:3e:7d:1e: 57:db:43:ff:5b:78:d1:0b:67:5d:83:bf:ac:59:2d:3c:d6:38: fc:4e:49:e9:75:fa:6c:0f:99:49:48:24:1f:56:e3:ef:c6:b4: f2:37:89:5d:8b:90:d0:f1:7f:f2:81:8e:97:aa:cc:9e:49:4e: 98:2d:3b:2d:3f:45:de:3a:98:4f:f6:76:f7:86:09:42:92:b1: 03:b2:b1:c8:eb:65:ac:ca:fa:f1:8f:75:a6:c2:f9:e5:63:96: 41:35:ca:4c:bb:e1:05:11:70:54:aa:77:e2:74:d3:7e:01:bf: b6:3e:f2:be:1b:66:d2:c2:1e:11:c8:67:01:2d:87:49:1a:39: 29:a1:18:45:30:de:55:7b:62:61:51:ec:8e:a3:02:41:0d:af: 16:d9:71:97:4a:9d:71:a8:04:e4:6b:61:be:69:c4:8e:50:28: ea:0b:13:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBd5qxNf5sTiMOYv0GpaoWDf35B4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1 QzQ2MEE5NzAeFw0yNjA3MjMyMjIyMTRaFw0yNjA3MjQyMzEyMTRaMDMxMTAvBgNV BAMTKDU5M0ZBNEVGRDYwQThDMEFEQTkxMjFFNDhFNDBGN0UwRkVEOENBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDluwtNA+vr45942It8JfQyzWGU qwY15H8SJ6pygMurITUg0it4ZXqRoUAqNmgCPaa6Aq0vFxp7t2SC47ijTalZ6GTR pbah4746bKTNzXYiOcLL15Fi0HNNcRUz/gemnYOc9SjfaJh0Vm2C+NNDAgQmBMbj Q1RO9YqWEJduYr4fMWjKHPQkon3WEaaNMHYaSbDotc6fVhujQcxF9aaGHX3uzhdZ scaMQpKFe3PB5Mn9koVXLz3a3ZSF3cAqTbGai4Bwn4KXIo1Gknp3uZRac5c+EAu7 5OJca6ReKVc8kyf4V+DxT6B8Udu7vHc7AlbHtsH1NS2pFpM66GMcGLgaxwwPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWT+k79YKjArakSHkjkD34P7YyqYwHwYDVR0j BBgwFoAUclGJ2+fZZENqhfrB/DPlv1xGCpcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1NGI0ZTItMmU1OC00NjViLWFmYWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJF N0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1QzQ2MEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUxODlEQkU3RDk2NDQzNkE4NUZBQzFGQzMzRTVCRjVDNDYw QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1 QkY1QzQ2MEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANCVQt1LLI0wWDA7aYGWAAJiwPJUNzGd4+/q fxHs6l3RgzRKJSAJGBYwMp7dn1tKZevcbctlnhbwz6eCurvm6gunRQoJBheRA2XN 2yg+euXvbMbapLYIqD59HlfbQ/9beNELZ12Dv6xZLTzWOPxOSel1+mwPmUlIJB9W 4+/GtPI3iV2LkNDxf/KBjpeqzJ5JTpgtOy0/Rd46mE/2dveGCUKSsQOyscjrZazK +vGPdabC+eVjlkE1yky74QURcFSqd+J0034Bv7Y+8r4bZtLCHhHIZwEth0kaOSmh GEUw3lV7YmFR7I6jAkENrxbZcZdKnXGoBORrYb5pxI5QKOoLE8Y= -----END CERTIFICATE-----Generated at Fri Jul 24 02:38:29 2026 by rpki-client