$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft File: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft (raw, json) Hash identifier: mdy+AusLo90e13Erj/t64TDZyRAI+dvhwaHxElO0kh4= Subject key identifier: 6E:BF:B3:35:CF:D6:5C:7C:B4:AE:B6:D5:8C:40:D8:97:C3:D3:12:FD Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Certificate serial: 3B842E7580BAF3942C1FFFD0F9781A17CF3E5CED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 13:33:15 +0000 Manifest this update: Tue 28 Jul 2026 13:28:15 +0000 Manifest next update: Wed 29 Jul 2026 15:27:15 +0000 Files and hashes: 1: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl (hash: eCfNhXvi1a2VmD/fgl+Pdiwye0K0tJ6F24PqERpCTMY=) 2: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: ohDVM2o2IOUVSNhwh1E7felK+Pc0SKnjsPpIi1yZSaw=) 3: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: HwpDGD2SJ/iUFIW/7Q0l9KkQ0CWL7/v9c6sBLXd1KZY=) 4: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: p5VGWtHjvpIWNYWejy2oeQf0oISTWP+7YBr4TnXtjDM=) 5: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: zEDT0INoIq23WBcFzMUv15oPL7BGutII4EaV+fPSC68=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:84:2e:75:80:ba:f3:94:2c:1f:ff:d0:f9:78:1a:17:cf:3e:5c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Validity Not Before: Jul 28 13:28:15 2026 GMT Not After : Jul 29 15:27:15 2026 GMT Subject: CN=6EBFB335CFD65C7CB4AEB6D58C40D897C3D312FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:84:bd:82:7a:39:0b:c3:97:3b:22:12:a0: fa:00:bc:b1:1e:86:50:c7:02:94:55:a7:0c:ca:9f: 0e:b8:9e:f2:c1:cb:c8:fb:22:26:da:35:dc:05:e2: 42:f5:7d:af:7e:f3:55:53:70:01:b3:67:2f:9d:eb: 60:3c:a6:4d:f3:c7:3f:a9:af:61:a8:6a:a8:cf:0f: 57:0b:13:aa:1f:12:6f:6a:99:c9:75:e5:25:96:8e: d7:75:fb:f9:1d:d5:ff:d1:5e:dc:35:7b:91:65:31: 0b:c5:44:2a:ff:f2:25:30:fb:a1:0a:c2:c8:34:0a: 81:f7:8d:20:37:14:a2:7a:d4:4a:9f:7d:a6:ef:a0: d2:b5:7e:6e:18:2e:c6:95:80:d6:0d:24:e4:1b:0f: 2b:ff:6f:e7:51:9e:d3:e6:2e:04:1e:95:ca:9b:d4: e3:66:2b:ff:d0:bb:eb:74:51:de:1a:08:ac:31:ba: 57:46:49:37:35:bd:fb:d2:38:14:79:b4:11:73:7a: 5c:9d:09:ff:35:be:59:23:2f:ad:e7:e0:08:0e:6a: f4:3a:22:b5:cf:f0:2f:e9:3e:a4:5d:77:94:4a:f1: 0d:a7:2c:55:f5:69:27:01:d4:5a:31:af:c6:c2:26: 08:11:fd:53:33:7b:bd:63:00:5f:fb:3c:d0:3b:92: 42:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BF:B3:35:CF:D6:5C:7C:B4:AE:B6:D5:8C:40:D8:97:C3:D3:12:FD X509v3 Authority Key Identifier: keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fb:c9:80:76:48:01:31:ca:80:42:1e:7d:66:e4:4b:d7:77: aa:f4:a6:41:73:b2:dc:a4:dc:3d:19:96:48:d4:c2:dd:e7:c1: 1b:24:0b:24:b7:97:fb:ff:55:17:de:2e:e7:11:9c:2b:c7:ee: 63:d0:f9:54:f2:36:e6:07:7d:5a:0a:02:86:a4:27:ff:45:2b: e3:c6:cc:a5:cb:11:58:9e:e7:eb:e0:73:1b:91:13:26:a3:32: 79:b9:17:12:9f:15:56:ca:16:f5:ea:34:c3:eb:b0:36:28:e9: 5b:29:38:15:59:58:0e:99:67:ab:7e:2a:e5:bb:1d:57:d4:c5: 51:3b:f6:c8:b1:f3:96:64:7f:f6:14:06:bb:5c:c8:c7:e3:9c: 1c:4d:42:0a:c0:10:08:69:ed:a3:e2:d8:98:f4:15:cd:d7:fe: d5:a6:95:57:2e:ce:45:42:4f:fc:18:b2:6e:99:7e:a9:9d:ca: c4:7a:f0:ee:f1:db:62:58:c0:72:34:dc:e3:07:28:cf:ae:be: c5:a7:e3:86:92:4c:4f:28:2b:0d:53:9e:05:a7:92:a1:f6:9d: fc:18:93:2a:17:5c:d2:3c:73:46:84:2d:04:18:35:f1:55:84: d1:ee:6a:38:3e:38:88:31:b6:06:cc:26:cb:28:1d:84:88:b9: 29:52:c9:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4QudYC685QsH//Q+XgaF88+XO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2 Q0Q4NDExNjAeFw0yNjA3MjgxMzI4MTVaFw0yNjA3MjkxNTI3MTVaMDMxMTAvBgNV BAMTKDZFQkZCMzM1Q0ZENjVDN0NCNEFFQjZENThDNDBEODk3QzNEMzEyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKYS9gno5C8OXOyISoPoAvLEe hlDHApRVpwzKnw64nvLBy8j7IibaNdwF4kL1fa9+81VTcAGzZy+d62A8pk3zxz+p r2GoaqjPD1cLE6ofEm9qmcl15SWWjtd1+/kd1f/RXtw1e5FlMQvFRCr/8iUw+6EK wsg0CoH3jSA3FKJ61EqffabvoNK1fm4YLsaVgNYNJOQbDyv/b+dRntPmLgQelcqb 1ONmK//Qu+t0Ud4aCKwxuldGSTc1vfvSOBR5tBFzelydCf81vlkjL63n4AgOavQ6 IrXP8C/pPqRdd5RK8Q2nLFX1aScB1Foxr8bCJggR/VMze71jAF/7PNA7kkJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbr+zNc/WXHy0rrbVjEDYl8PTEv0wHwYDVR0j BBgwFoAUJcKs/7g2GWVmo7zONCHbuWzYQRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzNzc3MTEtMWUzZC00ZTVhLWE0YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZC ODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2Q0Q4NDExNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUMyQUNGRkI4MzYxOTY1NjZBM0JDQ0UzNDIxREJCOTZDRDg0 MTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURC Qjk2Q0Q4NDExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHP7yYB2SAExyoBCHn1m5EvXd6r0pkFzstyk 3D0ZlkjUwt3nwRskCyS3l/v/VRfeLucRnCvH7mPQ+VTyNuYHfVoKAoakJ/9FK+PG zKXLEVie5+vgcxuREyajMnm5FxKfFVbKFvXqNMPrsDYo6VspOBVZWA6ZZ6t+KuW7 HVfUxVE79six85Zkf/YUBrtcyMfjnBxNQgrAEAhp7aPi2Jj0Fc3X/tWmlVcuzkVC T/wYsm6ZfqmdysR68O7x22JYwHI03OMHKM+uvsWn44aSTE8oKw1TngWnkqH2nfwY kyoXXNI8c0aELQQYNfFVhNHuajg+OIgxtgbMJssoHYSIuSlSyX0= -----END CERTIFICATE-----Generated at Tue Jul 28 20:36:26 2026 by rpki-client