$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft File: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft (raw, json) Hash identifier: wj8K0+D6s+tHGjDqCmFAcgbwjmoBOYvosICxlPzoWZ8= Subject key identifier: 47:E3:63:50:FA:94:A8:84:8D:26:E4:E5:77:41:63:64:32:94:63:45 Authority key identifier: 92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E Certificate issuer: /CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Certificate serial: 5A40142244C8B953DA572FABFAA6F1B08BCD04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 09:14:11 +0000 Manifest this update: Wed 17 Jun 2026 09:09:11 +0000 Manifest next update: Thu 18 Jun 2026 10:21:11 +0000 Files and hashes: 1: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: iMHNOPCq/4qZI+6rd3tZI59AkfaQtxW6wPdAhh/rGGs=) 2: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: Zs3u840j4ZP200LFP4fVZsCLeA3oRYjdoZn2EIvaoNc=) 3: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl (hash: DvctqTvdpsFB9SPIsvSrCVEWkivAm/YOQtaRJn5rgvo=) 4: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: BNboAAgQmC0h9hwiHyJC3I+uxxLLhTzB3aQYZsJOubE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:40:14:22:44:c8:b9:53:da:57:2f:ab:fa:a6:f1:b0:8b:cd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Validity Not Before: Jun 17 09:09:11 2026 GMT Not After : Jun 18 10:21:11 2026 GMT Subject: CN=47E36350FA94A8848D26E4E57741636432946345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a8:84:3a:52:66:7a:aa:e7:83:ef:cd:eb:82: e6:3e:60:97:ee:78:7e:ea:c6:b5:59:2e:fa:a7:bd: 74:22:5f:ae:8c:e1:d8:2b:f5:69:31:a3:e7:1a:ec: 07:75:8b:68:22:4b:c3:76:31:f3:4f:a1:a3:d1:02: 7d:48:4c:36:fd:67:d3:fc:bd:75:29:ff:22:e6:62: 33:bb:d8:49:e5:2e:9f:5a:cb:0c:67:44:30:e9:b7: 77:54:b8:84:47:a5:b0:56:3a:34:78:66:9e:d8:b6: 98:2c:64:9b:64:58:f8:be:1d:94:29:96:db:b2:83: 7a:3b:2d:9c:49:81:71:9e:e3:08:5a:ef:7e:61:c7: b7:00:f5:26:a6:b4:5b:24:7c:ef:8d:79:62:69:b6: 96:88:44:ca:5a:48:a2:24:a2:99:d4:b3:62:34:81: 25:92:45:ac:27:d0:4b:fc:4c:3a:c2:ae:d6:db:d2: 9f:4f:13:60:32:37:ba:f0:39:8a:1d:30:96:8d:72: 23:cd:11:3a:2a:b7:1e:fc:2f:25:21:fa:8e:4c:6c: 05:e1:24:4e:fc:e6:3b:4b:b2:99:33:b2:52:fb:b4: b7:a1:7e:c9:06:f4:ed:29:9b:83:e3:fc:d3:f4:ac: 7a:8e:40:43:40:ce:a3:fb:b1:78:42:ed:fb:c1:97: f0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E3:63:50:FA:94:A8:84:8D:26:E4:E5:77:41:63:64:32:94:63:45 X509v3 Authority Key Identifier: keyid:92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c8:86:6c:e2:61:eb:93:0e:bd:b9:37:8a:37:f4:a9:f7:79: 6c:dd:7f:2f:97:78:b7:4b:d5:01:69:68:5d:6d:cd:b6:64:5f: 7c:d7:9b:72:68:04:cf:4a:a7:f9:63:5e:a1:ee:cc:7e:c4:79: 6b:fd:df:01:48:b0:2f:81:e9:18:6d:c4:bd:19:58:69:18:84: 9d:52:f1:25:04:78:b4:e2:35:11:d6:4d:2e:52:d6:ed:e0:e9: 61:ad:b8:03:9b:b9:8b:bd:24:bf:51:5f:1d:d8:17:36:93:33: f6:30:fa:ef:fa:2c:c3:45:bb:62:38:e2:31:ae:2f:34:26:d8: 92:13:47:95:60:36:f0:c6:57:e7:75:fe:91:1c:b7:fc:53:fd: 0f:54:60:a7:05:69:56:28:be:d2:6c:5f:39:39:13:a1:92:43: 45:4f:a8:69:47:65:ff:ad:a2:c7:bb:ce:1a:a2:c5:c3:c9:08: 96:12:65:26:b1:96:de:ed:08:23:46:f8:d6:b9:f0:48:33:eb: 95:86:2f:92:ee:2c:98:1a:0f:be:5d:38:a0:45:7d:3a:d5:4b: 5b:c3:42:85:4b:d5:d8:bb:a4:5c:d2:cb:bc:6a:85:d6:2d:f0: 9d:ac:a6:a5:02:07:08:0d:1d:22:e1:ee:f9:9e:df:e6:4a:a7: f3:3d:f5:e4 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITWkAUIkTIuVPaVy+r+qbxsIvNBDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEyN0JG NTJDRjdFMB4XDTI2MDYxNzA5MDkxMVoXDTI2MDYxODEwMjExMVowMzExMC8GA1UE AxMoNDdFMzYzNTBGQTk0QTg4NDhEMjZFNEU1Nzc0MTYzNjQzMjk0NjM0NTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMCohDpSZnqq54PvzeuC5j5gl+54 furGtVku+qe9dCJfrozh2Cv1aTGj5xrsB3WLaCJLw3Yx80+ho9ECfUhMNv1n0/y9 dSn/IuZiM7vYSeUun1rLDGdEMOm3d1S4hEelsFY6NHhmnti2mCxkm2RY+L4dlCmW 27KDejstnEmBcZ7jCFrvfmHHtwD1Jqa0WyR87415Ymm2lohEylpIoiSimdSzYjSB JZJFrCfQS/xMOsKu1tvSn08TYDI3uvA5ih0wlo1yI80ROiq3HvwvJSH6jkxsBeEk TvzmO0uymTOyUvu0t6F+yQb07Smbg+P80/Sseo5AQ0DOo/uxeELt+8GX8J8CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBRH42NQ+pSohI0m5OV3QWNkMpRjRTAfBgNVHSME GDAWgBSSWrQ/YkTS8B8B6AaPoQonv1LPfjAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81 YzM0ZGMzZi0zMDhmLTRkZTEtYTM2NS03MDFiZDljZjEwMDQvMC85MjVBQjQzRjYy NDREMkYwMUYwMUU4MDY4RkExMEEyN0JGNTJDRjdFLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzkyNUFCNDNGNjI0NEQyRjAxRjAxRTgwNjhGQTEwQTI3QkY1MkNG N0UuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby81YzM0ZGMzZi0zMDhmLTRkZTEtYTM2 NS03MDFiZDljZjEwMDQvMC85MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEy N0JGNTJDRjdFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAeciGbOJh65MOvbk3ijf0qfd5bN1/L5d4t0vV AWloXW3NtmRffNebcmgEz0qn+WNeoe7MfsR5a/3fAUiwL4HpGG3EvRlYaRiEnVLx JQR4tOI1EdZNLlLW7eDpYa24A5u5i70kv1FfHdgXNpMz9jD67/osw0W7YjjiMa4v NCbYkhNHlWA28MZX53X+kRy3/FP9D1RgpwVpVii+0mxfOTkToZJDRU+oaUdl/62i x7vOGqLFw8kIlhJlJrGW3u0II0b41rnwSDPrlYYvku4smBoPvl04oEV9OtVLW8NC hUvV2LukXNLLvGqF1i3wnaympQIHCA0dIuHu+Z7f5kqn8z315A== -----END CERTIFICATE-----Generated at Wed Jun 17 13:16:29 2026 by rpki-client