$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft File: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft (raw, json) Hash identifier: w4c5A5+8K1ytcnfXoEGPrT+w161kCGZF3Dh1V/ZircA= Subject key identifier: 22:10:01:AB:B9:CC:BA:8F:B3:FA:49:40:86:DA:36:9A:A9:14:35:E0 Authority key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 Certificate issuer: /CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Certificate serial: 74B59D6B87064401FF858C4DC8201A72B3D7B459 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:32:25 +0000 Manifest this update: Thu 23 Jul 2026 22:27:25 +0000 Manifest next update: Fri 24 Jul 2026 23:06:25 +0000 Files and hashes: 1: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl (hash: XGk84jUHOMvykWUZSpGSue7Qp8VFjtBOa0r0T/8fM7w=) 2: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: gPZAQ+bxPkBJwcTxVnEcsmMlAofGkUTs2Mpi2Ou9ROM=) 3: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: RZQJpTRRgue7IYV2PEsoGXrZll3cpomqzvFUOIs6rno=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:b5:9d:6b:87:06:44:01:ff:85:8c:4d:c8:20:1a:72:b3:d7:b4:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Validity Not Before: Jul 23 22:27:25 2026 GMT Not After : Jul 24 23:06:25 2026 GMT Subject: CN=221001ABB9CCBA8FB3FA494086DA369AA91435E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:95:a8:00:24:92:fb:14:ae:d1:c7:6c:e5:e6: 7f:b1:d1:96:9e:b5:c2:04:6d:32:79:81:f1:16:60: 3d:82:4e:47:86:ab:ca:49:29:99:bd:78:b8:d3:32: ad:e5:88:b2:8e:a1:e3:87:64:df:d8:a5:e4:7a:3b: 26:28:de:ff:d4:22:56:45:20:c6:80:2d:e3:4c:11: 13:ae:46:a5:6c:9c:dd:a1:9d:c5:83:b8:83:44:cb: 8e:d9:65:62:d4:1c:e0:01:27:99:96:b5:b2:a5:88: f4:92:a7:f1:91:6d:f2:58:53:d7:7e:f8:5a:99:84: dc:ad:36:c0:93:2c:04:62:47:3e:bd:cc:5d:8a:03: 5b:f9:3c:a9:55:d1:d3:63:aa:16:00:42:8b:88:ad: 8d:3c:06:49:64:6e:57:4b:3b:37:39:ff:af:51:a0: 88:2d:95:70:c2:4c:96:73:2c:2f:07:a7:d0:0d:4b: 15:ab:0a:a0:34:da:6c:d8:df:56:60:b4:b6:da:9a: ac:d1:46:a4:49:f5:14:64:a4:90:74:4a:f8:51:75: 09:e9:42:5c:10:ec:30:e8:01:8e:9b:15:2a:7e:78: 9e:a3:e9:21:5d:ab:d4:89:21:c6:1b:da:71:bc:61: a1:dd:33:ca:52:6f:24:bf:63:8a:bf:f4:0b:02:3c: f3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:10:01:AB:B9:CC:BA:8F:B3:FA:49:40:86:DA:36:9A:A9:14:35:E0 X509v3 Authority Key Identifier: keyid:25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:99:e6:d0:6b:41:01:1b:f1:86:da:a8:64:91:a0:80:b0:6c: 59:59:0a:95:91:3f:5e:6e:12:2a:17:4b:0b:27:4a:d8:c8:f5: 9a:27:be:80:76:de:45:30:fe:cc:88:b4:7f:62:be:f7:86:8b: 3d:de:4e:a9:ef:a4:d7:4e:ac:aa:78:aa:40:f1:a7:bb:3b:88: 22:e1:7d:9e:b9:87:66:cd:ba:d8:74:0a:02:6c:1f:20:8b:1b: 6e:d5:b1:03:60:6e:6b:fc:9d:ca:99:1f:0d:32:4a:37:14:d9: 3e:bc:38:6a:a1:45:87:59:d5:7c:69:b1:6e:54:20:05:cc:d0: 25:21:0a:66:37:8c:21:b6:fb:9e:5a:2a:38:c4:25:11:35:3a: 62:f1:c6:8d:f7:94:d9:14:3b:1a:9e:10:1a:7b:31:1e:30:1a: 64:5f:f7:02:0d:97:e9:f9:b3:7e:3e:e0:7f:d9:31:b5:dc:7a: d9:2c:ce:c4:2a:c6:cc:5f:aa:33:74:19:75:ef:84:fa:aa:94: 0e:6e:8a:0e:82:a6:1a:f9:2c:61:c6:cb:7a:1d:e3:da:ac:95: 03:9e:37:e8:63:e6:3e:77:eb:71:ed:de:f0:bb:91:25:a0:a5: f6:3b:40:68:f2:ee:06:10:f3:1a:c1:04:40:a4:f8:97:44:10: e7:87:17:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdLWda4cGRAH/hYxNyCAacrPXtFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdG QzFFNkY5MzAeFw0yNjA3MjMyMjI3MjVaFw0yNjA3MjQyMzA2MjVaMDMxMTAvBgNV BAMTKDIyMTAwMUFCQjlDQ0JBOEZCM0ZBNDk0MDg2REEzNjlBQTkxNDM1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNlagAJJL7FK7Rx2zl5n+x0Zae tcIEbTJ5gfEWYD2CTkeGq8pJKZm9eLjTMq3liLKOoeOHZN/YpeR6OyYo3v/UIlZF IMaALeNMEROuRqVsnN2hncWDuINEy47ZZWLUHOABJ5mWtbKliPSSp/GRbfJYU9d+ +FqZhNytNsCTLARiRz69zF2KA1v5PKlV0dNjqhYAQouIrY08BklkbldLOzc5/69R oIgtlXDCTJZzLC8Hp9ANSxWrCqA02mzY31ZgtLbamqzRRqRJ9RRkpJB0SvhRdQnp QlwQ7DDoAY6bFSp+eJ6j6SFdq9SJIcYb2nG8YaHdM8pSbyS/Y4q/9AsCPPNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIhABq7nMuo+z+klAhto2mqkUNeAwHwYDVR0j BBgwFoAUJXr97p+h7WxVq/DAzPFz5/web5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZmNzUwMjEtODM2OC00NDgxLTkyNjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5 RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdGQzFFNkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTdBRkRFRTlGQTFFRDZDNTVBQkYwQzBDQ0YxNzNFN0ZDMUU2 RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTcz RTdGQzFFNkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIaZ5tBrQQEb8YbaqGSRoICwbFlZCpWRP15u EioXSwsnStjI9ZonvoB23kUw/syItH9ivveGiz3eTqnvpNdOrKp4qkDxp7s7iCLh fZ65h2bNuth0CgJsHyCLG27VsQNgbmv8ncqZHw0ySjcU2T68OGqhRYdZ1XxpsW5U IAXM0CUhCmY3jCG2+55aKjjEJRE1OmLxxo33lNkUOxqeEBp7MR4wGmRf9wINl+n5 s34+4H/ZMbXcetkszsQqxsxfqjN0GXXvhPqqlA5uig6Cphr5LGHGy3od49qslQOe N+hj5j5363Ht3vC7kSWgpfY7QGjy7gYQ8xrBBECk+JdEEOeHF/Y= -----END CERTIFICATE-----Generated at Fri Jul 24 04:21:42 2026 by rpki-client