$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft File: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft (raw, json) Hash identifier: EduoANQ733K0n0vNXsrT/VmvrMC8JXTSClL2VV0qarY= Subject key identifier: D5:37:67:3A:87:3E:50:97:7A:76:84:B6:DD:F9:A8:F0:25:D2:B5:AA Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Certificate serial: 7821D87A42C08120C4D6569976BCF1522093F817 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 15:39:04 +0000 Manifest this update: Fri 12 Jun 2026 15:34:04 +0000 Manifest next update: Sat 13 Jun 2026 16:59:04 +0000 Files and hashes: 1: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: HwpDGD2SJ/iUFIW/7Q0l9KkQ0CWL7/v9c6sBLXd1KZY=) 2: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl (hash: eoLeZvZpaE3o5uiayz7v5k9V5Cl7AtkOunNUy4IhTTs=) 3: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: zEDT0INoIq23WBcFzMUv15oPL7BGutII4EaV+fPSC68=) 4: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: p5VGWtHjvpIWNYWejy2oeQf0oISTWP+7YBr4TnXtjDM=) 5: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: ohDVM2o2IOUVSNhwh1E7felK+Pc0SKnjsPpIi1yZSaw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 16:59:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:21:d8:7a:42:c0:81:20:c4:d6:56:99:76:bc:f1:52:20:93:f8:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Validity Not Before: Jun 12 15:34:04 2026 GMT Not After : Jun 13 16:59:04 2026 GMT Subject: CN=D537673A873E50977A7684B6DDF9A8F025D2B5AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:a2:3a:33:29:fd:16:68:b4:0c:12:5c:bc: 10:48:46:ac:a7:b3:24:f2:6c:be:9b:77:70:02:60: 48:75:fb:f7:11:ca:4b:1c:f9:5e:63:21:5a:43:77: a1:bf:4c:f0:fa:29:02:ba:41:03:cc:63:6d:7e:44: aa:9a:a4:ad:d5:73:2b:70:26:85:ee:bd:f4:be:e4: cc:37:e0:72:f9:92:cb:8e:3b:63:8c:38:ef:42:7e: d8:0e:b8:39:60:04:77:78:71:3c:05:c3:20:c2:10: 5a:bb:6e:e2:a0:96:21:54:0a:58:63:b5:12:3b:22: 68:2d:06:6c:f4:f5:57:65:e2:c5:cc:36:c2:47:30: f4:11:c5:08:08:c6:b8:e2:26:5e:71:63:9c:38:d0: 68:f8:5b:aa:83:45:dd:35:7c:fb:46:55:34:2f:84: 7a:2c:64:a3:a2:28:3a:c6:a8:29:20:02:ab:a1:27: a0:ed:a1:c2:b6:5e:a8:fc:43:20:4a:76:b4:64:50: 96:08:5b:85:51:a1:bc:a5:c1:c7:6c:d9:1b:99:21: 7f:e8:1a:01:11:f8:2f:ca:04:0d:60:c2:57:3a:13: 44:6e:cc:a4:02:87:ad:6b:3c:bc:96:cb:ba:53:4c: f7:c3:12:94:57:9c:11:70:ae:fb:7c:2a:10:fa:35: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:37:67:3A:87:3E:50:97:7A:76:84:B6:DD:F9:A8:F0:25:D2:B5:AA X509v3 Authority Key Identifier: keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:bb:05:10:9a:8b:cf:7b:6b:18:91:9a:fd:78:65:21:f0:ce: 12:dc:1f:c5:0e:5b:20:bb:c6:dc:93:e1:22:e2:ea:28:67:73: c7:df:ab:92:c1:d8:69:39:69:4c:75:8d:30:1c:32:77:cb:46: e8:45:24:9e:a0:8c:74:bd:78:61:72:18:9f:10:5c:85:f2:97: 3b:4f:df:11:7f:16:a1:2e:9f:09:8f:69:92:8a:01:09:7f:6a: 24:67:96:9d:fe:ab:50:97:ce:4e:cc:4c:a9:c6:6d:24:ee:07: 3e:0d:a8:02:15:1e:3a:83:48:53:0a:21:3b:54:27:ea:74:38: de:3e:ec:9e:23:cf:a9:22:f2:01:64:7e:6b:aa:53:43:6d:9d: 2b:8b:45:c1:f5:c3:48:ca:d5:23:31:1c:98:ec:4a:db:6d:4a: d0:e9:5c:4f:0c:20:4c:88:3e:f2:5f:66:68:6c:7b:2b:5b:4d: f8:5b:05:da:18:97:02:91:37:d6:05:f2:56:d5:0f:e0:a8:29: ee:db:18:62:c6:8a:48:f0:5a:3b:2e:cf:85:32:fe:6a:10:ad: d9:c5:10:d0:ad:a2:eb:10:99:11:a5:14:1b:b6:0d:74:6c:e9: 01:58:1a:29:cf:6b:e2:75:be:af:9c:3d:9f:fc:fe:47:20:06: 12:41:31:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCHYekLAgSDE1laZdrzxUiCT+BcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2 Q0Q4NDExNjAeFw0yNjA2MTIxNTM0MDRaFw0yNjA2MTMxNjU5MDRaMDMxMTAvBgNV BAMTKEQ1Mzc2NzNBODczRTUwOTc3QTc2ODRCNkRERjlBOEYwMjVEMkI1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPBKI6Myn9Fmi0DBJcvBBIRqyn syTybL6bd3ACYEh1+/cRyksc+V5jIVpDd6G/TPD6KQK6QQPMY21+RKqapK3Vcytw JoXuvfS+5Mw34HL5ksuOO2OMOO9CftgOuDlgBHd4cTwFwyDCEFq7buKgliFUClhj tRI7ImgtBmz09Vdl4sXMNsJHMPQRxQgIxrjiJl5xY5w40Gj4W6qDRd01fPtGVTQv hHosZKOiKDrGqCkgAquhJ6DtocK2Xqj8QyBKdrRkUJYIW4VRobylwcds2RuZIX/o GgER+C/KBA1gwlc6E0RuzKQCh61rPLyWy7pTTPfDEpRXnBFwrvt8KhD6NZWrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1TdnOoc+UJd6doS23fmo8CXStaowHwYDVR0j BBgwFoAUJcKs/7g2GWVmo7zONCHbuWzYQRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzNzc3MTEtMWUzZC00ZTVhLWE0YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZC ODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2Q0Q4NDExNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUMyQUNGRkI4MzYxOTY1NjZBM0JDQ0UzNDIxREJCOTZDRDg0 MTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURC Qjk2Q0Q4NDExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHq7BRCai897axiRmv14ZSHwzhLcH8UOWyC7 xtyT4SLi6ihnc8ffq5LB2Gk5aUx1jTAcMnfLRuhFJJ6gjHS9eGFyGJ8QXIXylztP 3xF/FqEunwmPaZKKAQl/aiRnlp3+q1CXzk7MTKnGbSTuBz4NqAIVHjqDSFMKITtU J+p0ON4+7J4jz6ki8gFkfmuqU0NtnSuLRcH1w0jK1SMxHJjsStttStDpXE8MIEyI PvJfZmhseytbTfhbBdoYlwKRN9YF8lbVD+CoKe7bGGLGikjwWjsuz4Uy/moQrdnF ENCtousQmRGlFBu2DXRs6QFYGinPa+J1vq+cPZ/8/kcgBhJBMU0= -----END CERTIFICATE-----Generated at Sat Jun 13 10:17:42 2026 by rpki-client