$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft File: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft (raw, json) Hash identifier: ISTCL7ezTdBpyeL0EZ3Pbs9J3hkBSHZ608WD/rdsaTk= Subject key identifier: 5A:94:80:54:62:FC:60:51:55:37:7C:B7:A9:29:A4:47:15:6F:FA:3C Authority key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 Certificate issuer: /CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Certificate serial: 7FFC6DB512476D0095C87B224E121A0767084D01 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 22:13:02 +0000 Manifest this update: Fri 25 Sep 2026 22:08:02 +0000 Manifest next update: Sat 26 Sep 2026 23:47:02 +0000 Files and hashes: 1: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: RZQJpTRRgue7IYV2PEsoGXrZll3cpomqzvFUOIs6rno=) 2: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: gPZAQ+bxPkBJwcTxVnEcsmMlAofGkUTs2Mpi2Ou9ROM=) 3: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl (hash: 6YsScnANbkwxrxpZOKxorrjy/T5Oy2NZlIvoyoIMZmI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:fc:6d:b5:12:47:6d:00:95:c8:7b:22:4e:12:1a:07:67:08:4d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Validity Not Before: Sep 25 22:08:02 2026 GMT Not After : Sep 26 23:47:02 2026 GMT Subject: CN=5A94805462FC605155377CB7A929A447156FFA3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:94:16:e3:65:ff:72:16:23:36:b0:ed:4c: d6:2e:51:f6:5d:73:9b:ee:0c:14:9a:fd:37:17:7b: e4:79:ce:49:19:b9:55:70:73:cb:6b:c8:80:1c:68: 03:64:f7:34:c4:59:5d:87:f5:7d:0d:98:cd:b5:42: 46:b8:af:f1:81:90:75:cb:37:27:97:1a:2b:6b:50: 3f:6e:20:34:6d:ca:10:0e:9a:4f:86:25:57:e2:89: 6b:dc:d3:65:3c:3a:5e:15:92:0f:07:67:62:1b:a0: 5e:63:96:35:24:a3:9e:ab:4f:79:5b:71:24:7b:67: 5c:a2:be:c7:20:f8:a1:99:a0:66:92:e4:3a:26:a0: 97:6f:bb:bb:d8:6d:bb:80:51:ee:20:1f:64:19:68: 79:56:b3:9a:48:5b:45:1e:ae:23:0d:60:0c:0c:b7: b3:74:64:51:5f:4a:fb:79:52:14:98:44:d9:08:bb: ad:3f:8e:8e:54:48:22:5c:ae:53:8a:8f:89:25:99: f1:e5:b3:cd:3f:2d:67:d6:03:d2:42:e8:b3:8c:dc: 2e:ba:23:fa:5f:9a:aa:ff:fb:a8:38:b4:ee:4f:d6: c3:cf:9e:8f:33:b3:e4:83:a8:86:7e:07:94:b1:da: 69:5d:94:52:44:aa:74:7e:1b:3b:d9:96:2b:f1:51: 44:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:94:80:54:62:FC:60:51:55:37:7C:B7:A9:29:A4:47:15:6F:FA:3C X509v3 Authority Key Identifier: keyid:25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:72:fb:c4:a4:23:c7:f4:9d:ae:91:93:f5:96:e1:cc:fb:25: c0:2d:54:dc:72:ab:fe:79:33:4f:b3:45:4b:8c:83:5a:a0:ee: 92:96:3e:51:42:57:01:0d:8e:c5:fd:04:7c:b3:b9:d4:10:9c: 81:f2:dc:33:b0:3c:db:81:01:01:ed:f0:ae:df:37:ae:77:d6: 3f:d3:f5:fc:6d:2f:54:63:df:24:5f:c9:30:c1:47:11:6c:35: db:9f:56:2d:1d:d9:a4:19:f4:24:ac:28:f2:f7:d3:45:e1:6c: 95:a6:09:83:b9:dc:e2:26:0a:1b:b9:bf:2b:37:54:db:ba:47: 6a:84:2d:96:70:37:9f:ea:73:bb:6d:cf:4f:be:63:4f:01:8a: c9:f0:99:e6:56:31:11:90:49:83:d4:d5:72:aa:73:ce:2c:71: c1:99:a3:ce:92:0e:6e:4e:bb:7b:93:8a:a6:c0:91:d8:b8:b1: 4f:53:2c:09:5d:be:d6:37:bb:b8:53:f7:15:dc:b9:ff:2f:ef: 14:3b:69:b2:89:35:ce:71:93:ec:ec:06:da:d2:0f:ff:fc:63: 04:51:1b:a6:aa:69:24:fa:5a:d5:e8:e1:ec:62:17:9e:a7:58: 08:e1:dd:ea:db:8e:c1:de:50:3a:bb:af:e4:88:37:ae:93:d1: be:42:f2:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf/xttRJHbQCVyHsiThIaB2cITQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdG QzFFNkY5MzAeFw0yNjA5MjUyMjA4MDJaFw0yNjA5MjYyMzQ3MDJaMDMxMTAvBgNV BAMTKDVBOTQ4MDU0NjJGQzYwNTE1NTM3N0NCN0E5MjlBNDQ3MTU2RkZBM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAJQW42X/chYjNrDtTNYuUfZd c5vuDBSa/TcXe+R5zkkZuVVwc8tryIAcaANk9zTEWV2H9X0NmM21Qka4r/GBkHXL NyeXGitrUD9uIDRtyhAOmk+GJVfiiWvc02U8Ol4Vkg8HZ2IboF5jljUko56rT3lb cSR7Z1yivscg+KGZoGaS5DomoJdvu7vYbbuAUe4gH2QZaHlWs5pIW0UeriMNYAwM t7N0ZFFfSvt5UhSYRNkIu60/jo5USCJcrlOKj4klmfHls80/LWfWA9JC6LOM3C66 I/pfmqr/+6g4tO5P1sPPno8zs+SDqIZ+B5Sx2mldlFJEqnR+GzvZlivxUUTNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWpSAVGL8YFFVN3y3qSmkRxVv+jwwHwYDVR0j BBgwFoAUJXr97p+h7WxVq/DAzPFz5/web5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZmNzUwMjEtODM2OC00NDgxLTkyNjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5 RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdGQzFFNkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTdBRkRFRTlGQTFFRDZDNTVBQkYwQzBDQ0YxNzNFN0ZDMUU2 RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTcz RTdGQzFFNkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALly+8SkI8f0na6Rk/WW4cz7JcAtVNxyq/55 M0+zRUuMg1qg7pKWPlFCVwENjsX9BHyzudQQnIHy3DOwPNuBAQHt8K7fN6531j/T 9fxtL1Rj3yRfyTDBRxFsNdufVi0d2aQZ9CSsKPL300XhbJWmCYO53OImChu5vys3 VNu6R2qELZZwN5/qc7ttz0++Y08BisnwmeZWMRGQSYPU1XKqc84sccGZo86SDm5O u3uTiqbAkdi4sU9TLAldvtY3u7hT9xXcuf8v7xQ7abKJNc5xk+zsBtrSD//8YwRR G6aqaST6WtXo4exiF56nWAjh3erbjsHeUDq7r+SIN66T0b5C8tI= -----END CERTIFICATE-----Generated at Sat Sep 26 03:01:18 2026 by rpki-client