$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft File: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft (raw, json) Hash identifier: 6pWEjt8cWki45EBmK7hBLfw7oQYcR8e16eBdv12WARs= Subject key identifier: AA:29:FB:DB:42:4E:F9:70:0A:A9:A5:2E:F8:BC:E9:9B:5D:51:F0:13 Authority key identifier: 02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 Certificate issuer: /CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Certificate serial: 775D5E5C7169521D948B9674A17B4114AFC4720E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft Manifest number: 0102 Signing time: Tue 10 Nov 2026 15:40:52 +0000 Manifest this update: Tue 10 Nov 2026 15:35:52 +0000 Manifest next update: Wed 11 Nov 2026 16:50:52 +0000 Files and hashes: 1: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl (hash: Ztw3qfygsH3C2+9oXSlI+bze/v5hG7hxW15olHrHznY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5d:5e:5c:71:69:52:1d:94:8b:96:74:a1:7b:41:14:af:c4:72:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Validity Not Before: Nov 10 15:35:52 2026 GMT Not After : Nov 11 16:50:52 2026 GMT Subject: CN=AA29FBDB424EF9700AA9A52EF8BCE99B5D51F013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9e:a6:25:74:db:31:ee:f0:f8:65:86:a9:c6: 8a:45:4f:e5:29:cc:66:1a:5a:ae:9e:c6:c0:5a:53: a0:f9:ee:8f:fc:55:10:55:36:4d:13:9f:9d:3a:ec: 20:07:5c:88:ad:a5:04:8c:a9:2d:67:40:b6:25:c0: 7c:bd:e8:7c:9b:88:43:68:75:b0:8f:78:3c:e8:22: a7:04:be:12:a3:35:c9:16:b7:c8:08:67:98:68:7c: cb:d0:24:30:43:e6:67:b3:3b:6f:8f:09:c5:a3:58: 2c:2c:22:9b:f6:31:99:8f:fa:d2:c5:30:19:31:a9: a6:5f:13:78:e9:86:eb:98:32:0e:db:cc:e3:29:ce: 91:9c:6e:c0:38:9d:8d:2e:b9:c3:2d:3f:6a:12:26: c5:b0:2a:29:6c:78:87:4c:67:27:9e:32:3d:32:5b: 35:10:5a:68:5b:8c:19:2c:fe:28:ed:80:fd:42:c0: 76:d7:3b:6f:63:97:5d:40:8a:13:d3:b8:c9:67:04: c6:47:ca:f5:72:ff:f8:e5:a0:73:34:61:98:47:d3: 9b:d6:b9:7b:c8:ef:8b:a6:85:ac:c9:72:d2:bb:8b: f8:8e:ed:8e:ab:a2:18:7f:9c:7c:4a:02:46:a3:9c: fa:e2:71:04:0f:d0:2f:20:5f:eb:e0:a5:d6:de:22: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:FB:DB:42:4E:F9:70:0A:A9:A5:2E:F8:BC:E9:9B:5D:51:F0:13 X509v3 Authority Key Identifier: keyid:02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:68:ee:2d:17:74:e9:0b:a6:fb:de:6e:a5:83:01:c5:c5:0e: 9d:74:d7:dd:f3:2f:c7:76:6a:bf:4e:ee:28:aa:6e:17:5e:63: 7c:04:4c:e1:b4:da:00:82:62:80:a5:30:be:88:12:f8:e6:1f: 82:6e:a8:ba:e8:d1:84:73:c5:5d:f2:de:87:bd:4b:7d:ad:50: 68:d4:7f:66:12:95:51:b4:0b:b1:fe:39:15:5b:47:1f:8d:df: 1c:0b:b4:a1:c5:7d:f4:ac:37:6b:3e:ce:53:18:ea:2c:27:42: a7:2e:cd:a7:9a:b6:8a:6e:08:17:ec:cd:37:e8:3d:5d:a3:57: da:f3:10:bc:c0:cd:58:96:b2:f1:42:b3:54:f3:09:5b:5b:3d: 8e:86:de:2e:4e:18:65:52:f9:49:48:b2:54:c1:b3:06:2d:b4: d3:f6:fd:88:17:a8:ea:cc:4f:38:9f:90:75:e8:e5:22:37:cc: 2c:16:be:7e:76:21:96:7e:92:75:88:49:18:42:62:41:f9:f5: c1:cf:74:12:72:ae:7e:0f:33:8b:73:fc:db:a9:4e:d8:c6:fd: 39:a9:fe:22:13:76:04:15:b5:c8:80:a9:a5:cb:6c:91:22:a0: 5d:6a:38:7e:9e:ad:1a:18:29:89:35:a6:e0:d9:65:e0:35:c6: cb:d0:52:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd11eXHFpUh2Ui5Z0oXtBFK/Ecg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAy NDY4QzAzMDAeFw0yNjExMTAxNTM1NTJaFw0yNjExMTExNjUwNTJaMDMxMTAvBgNV BAMTKEFBMjlGQkRCNDI0RUY5NzAwQUE5QTUyRUY4QkNFOTlCNUQ1MUYwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCinqYldNsx7vD4ZYapxopFT+Up zGYaWq6exsBaU6D57o/8VRBVNk0Tn5067CAHXIitpQSMqS1nQLYlwHy96HybiENo dbCPeDzoIqcEvhKjNckWt8gIZ5hofMvQJDBD5mezO2+PCcWjWCwsIpv2MZmP+tLF MBkxqaZfE3jphuuYMg7bzOMpzpGcbsA4nY0uucMtP2oSJsWwKilseIdMZyeeMj0y WzUQWmhbjBks/ijtgP1CwHbXO29jl11AihPTuMlnBMZHyvVy//jloHM0YZhH05vW uXvI74umhazJctK7i/iO7Y6rohh/nHxKAkajnPricQQP0C8gX+vgpdbeIh+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqin720JO+XAKqaUu+Lzpm11R8BMwHwYDVR0j BBgwFoAUAlzja/gs0ffF/3zaVtl7kCRowDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhMzdhZWMtNjNjMi00NWQxLTk2YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJG ODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAyNDY4QzAzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjVDRTM2QkY4MkNEMUY3QzVGRjdDREE1NkQ5N0I5MDI0NjhD MDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdC OTAyNDY4QzAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFo7i0XdOkLpvvebqWDAcXFDp10193zL8d2 ar9O7iiqbhdeY3wETOG02gCCYoClML6IEvjmH4JuqLro0YRzxV3y3oe9S32tUGjU f2YSlVG0C7H+ORVbRx+N3xwLtKHFffSsN2s+zlMY6iwnQqcuzaeatopuCBfszTfo PV2jV9rzELzAzViWsvFCs1TzCVtbPY6G3i5OGGVS+UlIslTBswYttNP2/YgXqOrM TzifkHXo5SI3zCwWvn52IZZ+knWISRhCYkH59cHPdBJyrn4PM4tz/NupTtjG/Tmp /iITdgQVtciAqaXLbJEioF1qOH6erRoYKYk1puDZZeA1xsvQUhA= -----END CERTIFICATE-----Generated at Tue Nov 10 19:48:42 2026 by rpki-client