$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft File: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft (raw, json) Hash identifier: w7rtyogTiKqEj6ILLfkbBjlu2Fy4ywSBYgjcmCH9kB8= Subject key identifier: F6:C7:FF:1A:93:2A:09:50:B5:40:06:B0:AA:59:F3:6F:E1:15:28:36 Authority key identifier: 12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 Certificate issuer: /CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Certificate serial: 1E53CA9A07384D84268AE417F52C97E5E2EC29BA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft Manifest number: BE Signing time: Mon 21 Sep 2026 10:49:52 +0000 Manifest this update: Mon 21 Sep 2026 10:44:52 +0000 Manifest next update: Tue 22 Sep 2026 14:44:52 +0000 Files and hashes: 1: 3130332e3137352e34322e302f32332d3234203d3e20313331313131.roa (hash: pD8AAJGfek8X+gmcTJvavhY6u1lO1X5RIEZ8T14MLvE=) 2: 125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl (hash: IKHNPrHDT6+Vo2cN/yo2oH9sEafAh9WOfUq/Fr1hb5k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:53:ca:9a:07:38:4d:84:26:8a:e4:17:f5:2c:97:e5:e2:ec:29:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=125331E8E0CD7197C7EE84F50878751DE5EEE1C4 Validity Not Before: Sep 21 10:44:52 2026 GMT Not After : Sep 22 14:44:52 2026 GMT Subject: CN=F6C7FF1A932A0950B54006B0AA59F36FE1152836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:4d:73:54:d5:91:6b:00:2e:58:23:ba:89: 21:7c:59:7d:a6:38:93:36:61:00:57:93:8b:56:a8: e3:a8:42:9e:2e:f8:a1:4f:60:a9:51:27:70:24:b3: 63:43:2f:f1:d0:86:c1:78:4a:52:0d:c6:5e:8d:7a: 07:ca:ba:ec:55:ab:0c:d3:2d:f4:4d:6a:52:11:3e: e9:fb:2d:dd:b9:82:0e:7f:34:df:49:b0:f2:0e:aa: ba:0c:ca:d1:5d:35:f9:f4:27:e3:17:af:51:d7:20: 16:7a:fd:36:50:bb:3f:54:d8:40:20:3a:59:e9:47: 7c:df:ca:f2:76:1a:55:cd:d4:3e:b5:a0:02:d6:45: 8c:f7:c4:40:af:2c:d5:81:2e:58:df:89:dd:68:26: 04:80:f3:f3:0c:9d:de:c3:27:bf:ba:51:ab:97:77: 4f:cd:82:34:1c:2e:43:90:a2:13:17:87:af:e9:f9: de:64:53:8a:4e:73:c7:4f:87:31:97:ae:74:c6:f0: 46:f5:fd:22:96:c4:81:b7:bb:be:ed:90:66:3b:31: c0:c7:1c:8d:15:c3:e1:5a:08:4a:90:c8:f9:50:5a: fb:32:f9:17:dd:be:22:f1:25:52:c0:5e:96:02:f7: 15:34:a8:8b:d4:fe:1c:d6:d9:a4:8a:7b:83:85:87: 5c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C7:FF:1A:93:2A:09:50:B5:40:06:B0:AA:59:F3:6F:E1:15:28:36 X509v3 Authority Key Identifier: keyid:12:53:31:E8:E0:CD:71:97:C7:EE:84:F5:08:78:75:1D:E5:EE:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3258dcea-b383-4432-ad08-e6cffaa52b7d/0/125331E8E0CD7197C7EE84F50878751DE5EEE1C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:fd:56:9f:cd:30:91:ae:49:5c:c6:7a:92:29:32:30:84:0a: 00:12:e7:7d:87:05:bf:c7:5d:35:c1:2f:bd:e2:81:05:2f:39: 8c:38:57:8e:85:75:8b:70:b5:ec:9a:d0:77:e0:8c:ca:fa:bb: 7e:25:16:b2:dd:84:6e:18:c5:f3:04:c4:6a:df:17:af:a2:91: ca:26:0d:09:c8:3c:d1:bf:bd:20:22:55:e8:9e:3f:10:c7:f6: e4:08:98:cc:03:d9:8e:03:85:0d:75:e7:d4:14:42:21:58:62: 02:09:d3:5c:ee:be:19:86:d5:70:a5:59:93:c0:e1:97:3e:dd: b5:56:12:ae:1f:a6:b1:14:b6:48:e6:9d:76:70:74:d3:fc:a8: b6:a0:53:79:b5:45:23:f6:dc:fe:c9:66:31:19:16:70:58:c1: 70:b7:09:ce:fa:8c:ee:52:83:a2:c4:b0:e7:d6:05:d7:57:f3: a7:5c:19:5d:06:93:38:bd:00:80:27:14:8f:ad:1e:4c:f0:5e: 75:b4:91:23:46:e7:ab:e3:fe:cd:b3:a7:d1:ad:04:d2:6f:7d: 54:d1:01:e8:2f:86:3a:89:47:48:9c:6e:fe:49:e9:60:4f:b6: c7:65:b5:bf:57:4c:f8:dc:12:ef:18:69:12:b5:05:8b:c2:3e: ef:d0:4d:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHlPKmgc4TYQmiuQX9SyX5eLsKbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1MURF NUVFRTFDNDAeFw0yNjA5MjExMDQ0NTJaFw0yNjA5MjIxNDQ0NTJaMDMxMTAvBgNV BAMTKEY2QzdGRjFBOTMyQTA5NTBCNTQwMDZCMEFBNTlGMzZGRTExNTI4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQU1zVNWRawAuWCO6iSF8WX2m OJM2YQBXk4tWqOOoQp4u+KFPYKlRJ3Aks2NDL/HQhsF4SlINxl6NegfKuuxVqwzT LfRNalIRPun7Ld25gg5/NN9JsPIOqroMytFdNfn0J+MXr1HXIBZ6/TZQuz9U2EAg OlnpR3zfyvJ2GlXN1D61oALWRYz3xECvLNWBLljfid1oJgSA8/MMnd7DJ7+6UauX d0/NgjQcLkOQohMXh6/p+d5kU4pOc8dPhzGXrnTG8Eb1/SKWxIG3u77tkGY7McDH HI0Vw+FaCEqQyPlQWvsy+RfdviLxJVLAXpYC9xU0qIvU/hzW2aSKe4OFh1yTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9sf/GpMqCVC1QAawqlnzb+EVKDYwHwYDVR0j BBgwFoAUElMx6ODNcZfH7oT1CHh1HeXu4cQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzI1OGRjZWEtYjM4My00NDMyLWFkMDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThF MENENzE5N0M3RUU4NEY1MDg3ODc1MURFNUVFRTFDNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xMjUzMzFFOEUwQ0Q3MTk3QzdFRTg0RjUwODc4NzUxREU1RUVF MUM0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzI1OGRjZWEtYjM4My00NDMyLWFk MDgtZTZjZmZhYTUyYjdkLzAvMTI1MzMxRThFMENENzE5N0M3RUU4NEY1MDg3ODc1 MURFNUVFRTFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIj9Vp/NMJGuSVzGepIpMjCECgAS532HBb/H XTXBL73igQUvOYw4V46FdYtwteya0HfgjMr6u34lFrLdhG4YxfMExGrfF6+ikcom DQnIPNG/vSAiVeiePxDH9uQImMwD2Y4DhQ1159QUQiFYYgIJ01zuvhmG1XClWZPA 4Zc+3bVWEq4fprEUtkjmnXZwdNP8qLagU3m1RSP23P7JZjEZFnBYwXC3Cc76jO5S g6LEsOfWBddX86dcGV0Gkzi9AIAnFI+tHkzwXnW0kSNG56vj/s2zp9GtBNJvfVTR AegvhjqJR0icbv5J6WBPtsdltb9XTPjcEu8YaRK1BYvCPu/QTRA= -----END CERTIFICATE-----Generated at Mon Sep 21 17:29:32 2026 by rpki-client