$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft File: B625426C356E15C795153BAD3E2215D65F219A5E.mft (raw, json) Hash identifier: xj5i9xDgE6NJiVyDUu90qM1LroZZEsPb8A1qd7yXMXs= Subject key identifier: 3F:CA:C8:7E:61:BA:D0:A1:4A:19:84:18:83:20:A9:CC:05:9F:2C:4D Authority key identifier: B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E Certificate issuer: /CN=B625426C356E15C795153BAD3E2215D65F219A5E Certificate serial: 0AC50786D6CFBDFEE83F86D577CC0F6819BBE07D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft Manifest number: BE Signing time: Mon 21 Sep 2026 06:09:14 +0000 Manifest this update: Mon 21 Sep 2026 06:04:14 +0000 Manifest next update: Tue 22 Sep 2026 06:55:14 +0000 Files and hashes: 1: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: qLUNvDfC3gbWxd/hHt1Guse9AQpSMZBZKKbyAr0FqSU=) 2: B625426C356E15C795153BAD3E2215D65F219A5E.crl (hash: m7YNu+X49JxUDX/0kcllu0h8RX0w4Y7bHgAxutHjEf0=) 3: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: 072PpS8RwhWZ6AW17W786YITh/wBQoWhhmI5PRB/Rfg=) 4: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: yogWy6TCKxhBmgshrPe2hKjITHvdTQkqQBDI5rFuoa0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c5:07:86:d6:cf:bd:fe:e8:3f:86:d5:77:cc:0f:68:19:bb:e0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B625426C356E15C795153BAD3E2215D65F219A5E Validity Not Before: Sep 21 06:04:14 2026 GMT Not After : Sep 22 06:55:14 2026 GMT Subject: CN=3FCAC87E61BAD0A14A1984188320A9CC059F2C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:b5:f9:e1:94:ab:9d:90:90:7c:08:24:5d: 9e:e7:ae:ba:ef:ff:e9:de:7a:aa:1c:78:0d:e0:82: b5:0f:66:9c:43:84:a8:24:56:ef:fe:67:6c:0c:8f: 7b:fe:d8:ef:53:7c:46:5c:d4:c6:6a:5c:c8:11:9c: 1b:e3:f2:85:34:dd:33:5f:19:ed:4d:78:76:23:7a: f3:58:56:53:26:50:08:8c:f8:9e:d0:89:da:fc:23: 03:6b:e5:55:dd:7c:f2:f4:45:62:04:31:cd:fa:63: 72:57:6e:96:d3:05:80:3c:0c:84:ad:f6:22:3b:4d: 4a:01:77:0e:83:c7:98:68:a6:1a:9c:f8:fd:ba:a7: 9d:fc:e2:8e:71:58:47:97:6c:86:68:ad:b2:2e:40: 9e:7d:65:b3:f8:92:90:f8:ab:37:e5:18:85:e7:54: 14:ed:d9:78:ee:6c:74:13:49:5a:27:44:e5:32:b7: fa:65:81:95:1d:37:2f:ed:21:f5:64:64:ec:ed:61: ea:f7:b1:27:8c:c8:51:77:55:ac:30:ee:00:65:6c: a7:7d:10:4b:7b:e3:ea:22:07:15:20:99:cb:d7:2c: 1c:ca:51:06:44:d7:48:5d:34:67:05:f8:87:a6:2a: 6c:43:d8:c0:c6:d0:a5:f6:99:c7:32:88:46:6a:b4: 68:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CA:C8:7E:61:BA:D0:A1:4A:19:84:18:83:20:A9:CC:05:9F:2C:4D X509v3 Authority Key Identifier: keyid:B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c9:10:fc:97:9e:e8:de:a2:74:16:1a:df:ab:15:f7:c2:a1: 58:f0:f0:5b:ce:dc:b0:7a:01:bb:34:57:a8:47:31:09:27:6f: c3:8c:6c:c5:b5:b1:b0:c3:d8:92:62:3b:35:6b:1d:11:29:f7: 65:2e:a2:81:f3:cd:cd:5e:bc:8b:58:09:31:a3:05:d5:d4:d3: 8a:9b:54:33:21:26:56:cb:cc:04:6b:5b:54:4f:31:9b:ba:97: ba:b9:69:ae:d7:ff:45:68:6e:70:33:ac:2a:b5:b7:94:52:15: d2:23:6a:56:4c:27:ed:33:f8:8c:8c:55:79:e3:08:b0:13:d0: aa:35:83:d1:55:48:59:b3:25:9f:ad:87:29:38:39:84:2e:f5: a9:73:75:5d:14:38:cc:11:f6:dc:c9:44:6d:65:6e:1a:4a:f0: 3b:e7:fd:f1:23:10:d3:94:43:ae:f6:83:32:3b:fe:45:eb:80: e9:0e:89:2c:3f:ce:45:76:72:8f:2a:81:7c:72:11:fe:7d:7f: 0e:a1:36:ea:c2:4a:38:23:c0:fa:66:18:1f:53:24:64:74:0e: b7:dd:59:e2:a9:7e:8b:f6:f7:8c:65:59:f7:f8:4f:4d:24:14: 8b:9d:0d:99:d6:f3:3c:4d:ce:ed:9f:fb:ef:7f:65:3b:e1:e5: 17:fe:1b:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsUHhtbPvf7oP4bVd8wPaBm74H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1 RjIxOUE1RTAeFw0yNjA5MjEwNjA0MTRaFw0yNjA5MjIwNjU1MTRaMDMxMTAvBgNV BAMTKDNGQ0FDODdFNjFCQUQwQTE0QTE5ODQxODgzMjBBOUNDMDU5RjJDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqbX54ZSrnZCQfAgkXZ7nrrrv /+neeqoceA3ggrUPZpxDhKgkVu/+Z2wMj3v+2O9TfEZc1MZqXMgRnBvj8oU03TNf Ge1NeHYjevNYVlMmUAiM+J7Qidr8IwNr5VXdfPL0RWIEMc36Y3JXbpbTBYA8DISt 9iI7TUoBdw6Dx5hophqc+P26p5384o5xWEeXbIZorbIuQJ59ZbP4kpD4qzflGIXn VBTt2XjubHQTSVonROUyt/plgZUdNy/tIfVkZOztYer3sSeMyFF3Vaww7gBlbKd9 EEt74+oiBxUgmcvXLBzKUQZE10hdNGcF+IemKmxD2MDG0KX2mccyiEZqtGjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP8rIfmG60KFKGYQYgyCpzAWfLE0wHwYDVR0j BBgwFoAUtiVCbDVuFceVFTutPiIV1l8hml4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwNDgwNjQtODdkZS00ZGU3LWIwYmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMz NTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1RjIxOUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjI1NDI2QzM1NkUxNUM3OTUxNTNCQUQzRTIyMTVENjVGMjE5 QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1 RDY1RjIxOUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7JEPyXnujeonQWGt+rFffCoVjw8FvO3LB6 Abs0V6hHMQknb8OMbMW1sbDD2JJiOzVrHREp92UuooHzzc1evItYCTGjBdXU04qb VDMhJlbLzARrW1RPMZu6l7q5aa7X/0VobnAzrCq1t5RSFdIjalZMJ+0z+IyMVXnj CLAT0Ko1g9FVSFmzJZ+thyk4OYQu9alzdV0UOMwR9tzJRG1lbhpK8Dvn/fEjENOU Q672gzI7/kXrgOkOiSw/zkV2co8qgXxyEf59fw6hNurCSjgjwPpmGB9TJGR0Drfd WeKpfov294xlWff4T00kFIudDZnW8zxNzu2f++9/ZTvh5Rf+G4I= -----END CERTIFICATE-----Generated at Mon Sep 21 19:57:41 2026 by rpki-client