$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft File: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft (raw, json) Hash identifier: jQ+H3L6MYKeF5pgKe8XzTyx2T6bIEhUhPJTyn8g0ge0= Subject key identifier: 4C:95:0C:E3:60:D4:27:D0:34:E6:67:9A:8B:D6:73:75:F2:9C:DC:A3 Authority key identifier: 02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 Certificate issuer: /CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Certificate serial: 427DFFE2344726373FCEADAD61299036576E1CA5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:06:39 +0000 Manifest this update: Mon 21 Sep 2026 00:01:39 +0000 Manifest next update: Tue 22 Sep 2026 03:33:39 +0000 Files and hashes: 1: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl (hash: k/kZFuQ8Eg6VHN1FuhxVqGfhB6Pk+IeWSLKefXa2fXs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7d:ff:e2:34:47:26:37:3f:ce:ad:ad:61:29:90:36:57:6e:1c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Validity Not Before: Sep 21 00:01:39 2026 GMT Not After : Sep 22 03:33:39 2026 GMT Subject: CN=4C950CE360D427D034E6679A8BD67375F29CDCA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a2:e6:ac:d5:ef:25:e0:57:b6:6e:3d:a9:ac: d3:f4:88:ed:a1:ad:2f:a4:3a:db:ae:1a:7b:8a:67: 4f:8f:7e:14:e6:0f:5e:ac:d1:3c:7a:a2:89:4b:4b: 14:e3:26:fc:8a:69:f7:fc:d9:10:f1:6d:dc:9f:13: 35:56:f7:13:8b:21:75:7f:7a:0d:d5:e0:a8:c2:52: b6:eb:69:df:05:3b:b0:1a:08:19:27:dd:ee:ea:c1: 8a:1c:a5:de:80:b9:a0:5b:79:df:48:14:fe:1f:65: c8:12:a8:30:4a:a0:11:52:92:a2:ec:bb:06:e0:0e: 19:45:21:e2:79:07:f1:27:4f:b6:60:d5:10:f8:6f: 8b:c5:6e:b1:69:9d:a4:46:04:fd:bf:4c:18:08:99: 9a:96:9b:69:81:ef:54:7a:26:e8:57:01:99:52:84: ba:e4:2b:0c:4f:57:6e:ad:01:c4:55:9e:50:03:ef: f1:d4:fc:d8:32:78:c8:73:08:41:c5:64:bd:8a:60: 07:a1:4c:57:ef:20:f5:51:97:aa:06:0d:de:1e:3d: 54:c4:d3:30:1f:95:b5:75:7c:a5:53:ad:78:5e:1a: 27:e2:7f:ca:c5:46:f4:15:4e:b7:c2:56:64:f3:95: f1:38:a2:5b:28:de:b0:68:a9:17:39:b8:03:2a:71: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:95:0C:E3:60:D4:27:D0:34:E6:67:9A:8B:D6:73:75:F2:9C:DC:A3 X509v3 Authority Key Identifier: keyid:02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b5:ff:ac:21:96:99:a9:a6:23:0d:17:c3:01:3b:a9:60:4c: 70:5f:09:26:2c:21:26:57:80:12:88:38:74:10:6b:dd:b1:12: fc:9d:4e:14:3c:c6:42:31:cb:16:ba:aa:1f:e3:dd:a1:ad:d1: 04:d8:44:de:f6:da:5f:30:7b:05:92:56:2c:e1:4c:84:e1:08: 33:52:79:70:dd:ec:ea:e1:28:10:f4:50:b4:38:f2:0c:7b:91: d4:53:5c:4d:7f:e1:8b:c6:c1:a7:ca:64:14:35:71:ee:e1:da: 40:07:57:40:28:ed:f6:2b:f4:5e:85:d4:bf:a2:94:18:53:e9: 06:08:0f:7c:57:4b:ec:04:d9:fc:9b:06:bc:a3:15:ac:4b:f4: d3:67:7f:a1:c6:c8:f7:d3:1f:8e:61:07:79:c5:34:e6:9e:bd: a9:d6:64:9a:da:81:e7:2c:0a:59:5b:56:92:70:1f:c5:8d:50: 6d:73:b3:a0:9b:30:4a:b2:67:54:22:88:a5:ab:4a:1a:2f:87: 17:1c:38:30:85:23:88:1e:ea:f9:59:8c:29:6b:0c:19:9e:fe: 2c:b8:83:1c:f3:a2:57:32:1c:9a:0c:a3:74:52:1d:20:d4:f0: 16:d3:ff:a6:ee:ed:23:e1:3e:d2:9d:33:ca:66:77:1e:48:af: 27:35:ac:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQn3/4jRHJjc/zq2tYSmQNlduHKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAy NDY4QzAzMDAeFw0yNjA5MjEwMDAxMzlaFw0yNjA5MjIwMzMzMzlaMDMxMTAvBgNV BAMTKDRDOTUwQ0UzNjBENDI3RDAzNEU2Njc5QThCRDY3Mzc1RjI5Q0RDQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOouas1e8l4Fe2bj2prNP0iO2h rS+kOtuuGnuKZ0+PfhTmD16s0Tx6oolLSxTjJvyKaff82RDxbdyfEzVW9xOLIXV/ eg3V4KjCUrbrad8FO7AaCBkn3e7qwYocpd6AuaBbed9IFP4fZcgSqDBKoBFSkqLs uwbgDhlFIeJ5B/EnT7Zg1RD4b4vFbrFpnaRGBP2/TBgImZqWm2mB71R6JuhXAZlS hLrkKwxPV26tAcRVnlAD7/HU/NgyeMhzCEHFZL2KYAehTFfvIPVRl6oGDd4ePVTE 0zAflbV1fKVTrXheGifif8rFRvQVTrfCVmTzlfE4olso3rBoqRc5uAMqccllAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTJUM42DUJ9A05meai9ZzdfKc3KMwHwYDVR0j BBgwFoAUAlzja/gs0ffF/3zaVtl7kCRowDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhMzdhZWMtNjNjMi00NWQxLTk2YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJG ODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAyNDY4QzAzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjVDRTM2QkY4MkNEMUY3QzVGRjdDREE1NkQ5N0I5MDI0NjhD MDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdC OTAyNDY4QzAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFq1/6whlpmppiMNF8MBO6lgTHBfCSYsISZX gBKIOHQQa92xEvydThQ8xkIxyxa6qh/j3aGt0QTYRN722l8wewWSVizhTIThCDNS eXDd7OrhKBD0ULQ48gx7kdRTXE1/4YvGwafKZBQ1ce7h2kAHV0Ao7fYr9F6F1L+i lBhT6QYID3xXS+wE2fybBryjFaxL9NNnf6HGyPfTH45hB3nFNOaevanWZJragecs CllbVpJwH8WNUG1zs6CbMEqyZ1QiiKWrShovhxccODCFI4ge6vlZjClrDBme/iy4 gxzzolcyHJoMo3RSHSDU8BbT/6bu7SPhPtKdM8pmdx5Iryc1rOs= -----END CERTIFICATE-----Generated at Mon Sep 21 05:22:03 2026 by rpki-client