$ rpki-client -vvf rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft File: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft (raw, json) Hash identifier: 4VN23LZ5z2ebZm1TWAkqZCuJr1nOjVJdLjF9TRfbvbw= Subject key identifier: 0A:3A:9A:DD:72:D2:C8:58:65:A2:9E:AD:13:C3:BA:35:5B:8A:4C:1E Authority key identifier: 02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 Certificate issuer: /CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Certificate serial: 24D0FB28A2F873F2923A1C1CC57D693EC9EDAF1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 00:48:56 +0000 Manifest this update: Wed 17 Jun 2026 00:43:56 +0000 Manifest next update: Thu 18 Jun 2026 02:43:56 +0000 Files and hashes: 1: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl (hash: NZzJH3kAYuD/a96Fqv6DogvAxq7dJM+eoKCrbis2Rpk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:d0:fb:28:a2:f8:73:f2:92:3a:1c:1c:c5:7d:69:3e:c9:ed:af:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Validity Not Before: Jun 17 00:43:56 2026 GMT Not After : Jun 18 02:43:56 2026 GMT Subject: CN=0A3A9ADD72D2C85865A29EAD13C3BA355B8A4C1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:44:4c:fe:cd:73:35:44:49:8a:59:14:90:4f: 0a:84:f3:54:38:f8:91:74:f0:dd:95:e0:3e:5a:5d: cf:11:c5:69:b7:8a:1c:64:c8:ea:37:83:46:15:6f: c2:42:04:78:23:91:02:08:3d:d4:7c:b2:05:2a:99: cc:5a:36:cc:02:89:91:27:8a:f8:1f:2a:d1:81:a6: 5a:7d:50:55:b7:3d:fa:bf:26:ad:67:9e:e6:06:2f: 1a:99:fb:7a:84:a0:a9:13:82:86:85:b5:62:18:5e: 7a:fe:b7:7c:dd:5b:1f:13:43:e6:08:9e:cf:51:55: d0:40:ac:c5:5e:23:61:22:2d:63:f2:03:fd:ac:d3: d4:bb:c9:56:99:ca:6c:7d:f1:58:62:78:7e:20:55: d4:d3:d4:c7:67:6b:83:e8:ce:aa:37:21:ba:07:7c: 66:c8:c0:fe:c1:21:2e:2a:2c:83:ea:f6:00:5b:e8: 50:95:2a:ef:93:f6:9e:b9:bd:0b:b4:d3:56:06:d9: ca:80:4b:79:cd:7c:67:14:f6:9a:b9:93:b5:50:0e: 0e:12:74:e1:48:26:f7:9e:3b:dd:7a:4b:53:32:8a: 98:4e:f8:35:2f:08:f9:23:fc:3b:9a:c3:53:5a:d7: 7b:49:ef:d6:ca:64:f1:6e:78:d3:11:67:95:d8:8e: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3A:9A:DD:72:D2:C8:58:65:A2:9E:AD:13:C3:BA:35:5B:8A:4C:1E X509v3 Authority Key Identifier: keyid:02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a5:16:0e:fa:49:6b:cb:f7:63:87:1c:bc:8e:5c:0c:e5:bf: b6:14:10:31:f6:cd:e8:fc:8e:d8:a7:28:44:85:ba:c1:a2:e1: 6a:cf:42:b1:bb:45:d3:b1:c9:d5:f7:c7:ee:f4:2e:6b:60:a1: 56:c4:e3:87:88:5c:d7:53:df:05:2a:06:31:a6:89:2c:81:a3: 72:1d:f1:a4:a2:7d:97:b2:32:e8:32:47:18:15:11:a3:c2:6b: af:07:cd:a0:6e:f4:e5:10:4a:89:23:a8:6c:92:58:f5:65:dd: 1c:dd:39:09:92:2d:0f:a7:7d:3b:78:61:2b:d1:66:bd:65:06: 6b:c6:f9:a6:48:34:33:d5:9e:d8:ba:97:47:33:02:27:14:38: 0f:c7:30:46:70:5a:c6:ef:d2:c3:aa:20:14:49:9d:1e:21:ba: b8:22:49:86:52:90:eb:42:a4:67:bc:fd:75:4d:db:eb:52:6e: 82:2e:e3:d9:63:7d:59:95:2e:44:76:26:2f:9d:91:ee:b6:a8: 0b:00:97:61:4e:97:b2:a2:ef:c4:b5:2b:6b:a9:f7:d0:01:57: f8:b8:67:2e:d3:02:c5:b4:e8:8e:1f:f8:c3:9a:e7:c3:45:58: 67:b0:98:79:c2:f7:1e:95:71:eb:03:93:7e:f3:5a:bd:d5:45: a4:6d:0b:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJND7KKL4c/KSOhwcxX1pPsntrx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAy NDY4QzAzMDAeFw0yNjA2MTcwMDQzNTZaFw0yNjA2MTgwMjQzNTZaMDMxMTAvBgNV BAMTKDBBM0E5QURENzJEMkM4NTg2NUEyOUVBRDEzQzNCQTM1NUI4QTRDMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUREz+zXM1REmKWRSQTwqE81Q4 +JF08N2V4D5aXc8RxWm3ihxkyOo3g0YVb8JCBHgjkQIIPdR8sgUqmcxaNswCiZEn ivgfKtGBplp9UFW3Pfq/Jq1nnuYGLxqZ+3qEoKkTgoaFtWIYXnr+t3zdWx8TQ+YI ns9RVdBArMVeI2EiLWPyA/2s09S7yVaZymx98VhieH4gVdTT1Mdna4Pozqo3IboH fGbIwP7BIS4qLIPq9gBb6FCVKu+T9p65vQu001YG2cqAS3nNfGcU9pq5k7VQDg4S dOFIJveeO916S1MyiphO+DUvCPkj/Duaw1Na13tJ79bKZPFueNMRZ5XYjrZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCjqa3XLSyFhlop6tE8O6NVuKTB4wHwYDVR0j BBgwFoAUAlzja/gs0ffF/3zaVtl7kCRowDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhMzdhZWMtNjNjMi00NWQxLTk2YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJG ODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAyNDY4QzAzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjVDRTM2QkY4MkNEMUY3QzVGRjdDREE1NkQ5N0I5MDI0NjhD MDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdC OTAyNDY4QzAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWlFg76SWvL92OHHLyOXAzlv7YUEDH2zej8 jtinKESFusGi4WrPQrG7RdOxydX3x+70LmtgoVbE44eIXNdT3wUqBjGmiSyBo3Id 8aSifZeyMugyRxgVEaPCa68HzaBu9OUQSokjqGySWPVl3RzdOQmSLQ+nfTt4YSvR Zr1lBmvG+aZINDPVnti6l0czAicUOA/HMEZwWsbv0sOqIBRJnR4hurgiSYZSkOtC pGe8/XVN2+tSboIu49ljfVmVLkR2Ji+dke62qAsAl2FOl7Ki78S1K2up99ABV/i4 Zy7TAsW06I4f+MOa58NFWGewmHnC9x6VcesDk37zWr3VRaRtC8M= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:54 2026 by rpki-client