$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft File: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft (raw, json) Hash identifier: jlbXWRTAg/vImZQHa3+RtMFNpdhbiNxYEvtBZgaAfyE= Subject key identifier: 0C:86:60:43:BF:90:73:DA:AA:7A:D3:F0:AD:98:D4:99:68:2B:52:5E Authority key identifier: 92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E Certificate issuer: /CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Certificate serial: 3A4C6C3621794A7A9F897FF470E37284F3E70180 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 01:12:57 +0000 Manifest this update: Tue 22 Sep 2026 01:07:57 +0000 Manifest next update: Wed 23 Sep 2026 01:27:57 +0000 Files and hashes: 1: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl (hash: I/FGL52hIsYLheOBLqVLwZjBMoA/FYQjMMlpo5I/lps=) 2: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: Zs3u840j4ZP200LFP4fVZsCLeA3oRYjdoZn2EIvaoNc=) 3: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: BNboAAgQmC0h9hwiHyJC3I+uxxLLhTzB3aQYZsJOubE=) 4: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: iMHNOPCq/4qZI+6rd3tZI59AkfaQtxW6wPdAhh/rGGs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:27:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4c:6c:36:21:79:4a:7a:9f:89:7f:f4:70:e3:72:84:f3:e7:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Validity Not Before: Sep 22 01:07:57 2026 GMT Not After : Sep 23 01:27:57 2026 GMT Subject: CN=0C866043BF9073DAAA7AD3F0AD98D499682B525E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:be:aa:b7:39:5e:f3:2f:6f:99:a6:bd:a2:9e: 07:f7:fd:f9:14:0d:72:e5:ba:c7:98:bf:79:5c:9c: e0:c1:5a:0e:04:97:94:ff:cf:6e:88:3f:0d:73:de: 32:58:ab:fe:d4:42:df:81:d6:3a:7f:a2:5e:8d:f9: 8b:14:29:89:f2:25:03:61:87:2b:c8:23:54:4d:6e: 7b:9b:06:16:48:b6:a4:60:27:5b:ec:93:01:99:c5: 59:bf:89:7b:7e:3a:e9:ce:35:7c:be:66:1a:d8:95: 9b:15:ef:c2:87:ac:c2:2d:12:73:7a:d4:bd:91:a7: d7:79:ae:63:63:ea:97:37:a4:6a:06:e2:91:45:c5: 52:86:05:16:00:23:98:e1:64:38:2a:8a:f6:14:c9: 48:75:44:8f:8c:7a:9d:1c:78:fe:16:97:50:eb:e3: f3:35:d1:cf:f9:3a:3f:f8:3f:b3:42:5f:b2:a1:f9: d0:02:69:cd:ce:a7:de:44:66:e5:c7:d0:ac:98:e9: 2d:30:39:f0:b9:98:8a:ec:22:67:9d:59:26:ab:0e: f5:71:e9:1c:6e:0d:c6:6e:4a:99:b9:e1:84:cf:ba: 08:dd:87:5b:ea:02:90:9b:d5:3c:03:70:2d:f1:d8: 6e:2e:a9:12:7b:fa:93:75:0c:ec:15:55:af:ec:9a: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:86:60:43:BF:90:73:DA:AA:7A:D3:F0:AD:98:D4:99:68:2B:52:5E X509v3 Authority Key Identifier: keyid:92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7b:e4:ad:a3:46:a1:7a:db:c8:f4:fe:c4:61:b3:6a:6f:8c: 26:79:7f:f6:30:c0:e6:3a:c4:fe:b5:3f:2d:bb:8c:f5:24:3a: 64:d9:37:86:1e:fb:ba:37:ba:14:d5:24:f9:04:8c:8a:71:81: b3:2c:f3:77:09:70:08:d5:5d:66:cc:e9:14:b2:ac:63:78:d4: 44:49:ee:e3:7a:97:cd:db:63:0c:f5:70:da:c0:01:4b:d7:bf: 2b:03:b8:28:db:38:c9:d3:57:75:5a:ec:a3:27:91:58:a6:f5: 11:d5:ed:5f:ca:7e:65:71:0c:89:93:de:6c:6b:cd:61:b7:af: 18:d1:a0:c1:d6:15:09:39:4b:82:80:0a:ab:37:32:fd:b9:56: ca:a9:1e:85:9e:95:88:0f:41:82:71:3d:71:ce:24:2e:76:8a: ee:ac:33:fc:12:85:16:52:b6:9c:26:40:cd:6f:f0:bb:e5:62: 5c:43:21:46:3e:2e:f2:f5:fe:6d:b8:02:66:15:39:14:5e:8f: f6:3e:08:72:2e:d4:e2:25:46:01:4a:8d:d1:0c:07:36:f7:62: 58:76:d3:c2:c1:18:a5:6c:c3:6e:9e:e3:bc:87:c2:6b:0e:7c: 59:d0:64:79:56:32:c3:c7:63:2f:a3:45:7e:c7:00:25:34:2c: 45:b7:6b:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkxsNiF5SnqfiX/0cONyhPPnAYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdC RjUyQ0Y3RTAeFw0yNjA5MjIwMTA3NTdaFw0yNjA5MjMwMTI3NTdaMDMxMTAvBgNV BAMTKDBDODY2MDQzQkY5MDczREFBQTdBRDNGMEFEOThENDk5NjgyQjUyNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZvqq3OV7zL2+Zpr2ingf3/fkU DXLluseYv3lcnODBWg4El5T/z26IPw1z3jJYq/7UQt+B1jp/ol6N+YsUKYnyJQNh hyvII1RNbnubBhZItqRgJ1vskwGZxVm/iXt+OunONXy+ZhrYlZsV78KHrMItEnN6 1L2Rp9d5rmNj6pc3pGoG4pFFxVKGBRYAI5jhZDgqivYUyUh1RI+Mep0ceP4Wl1Dr 4/M10c/5Oj/4P7NCX7Kh+dACac3Op95EZuXH0KyY6S0wOfC5mIrsImedWSarDvVx 6RxuDcZuSpm54YTPugjdh1vqApCb1TwDcC3x2G4uqRJ7+pN1DOwVVa/smni3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDIZgQ7+Qc9qqetPwrZjUmWgrUl4wHwYDVR0j BBgwFoAUklq0P2JE0vAfAegGj6EKJ79Sz34wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMzNGRjM2YtMzA4Zi00ZGUxLWEzNjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2 MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdCRjUyQ0Y3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEyN0JGNTJD RjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBB MjdCRjUyQ0Y3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJF75K2jRqF628j0/sRhs2pvjCZ5f/YwwOY6 xP61Py27jPUkOmTZN4Ye+7o3uhTVJPkEjIpxgbMs83cJcAjVXWbM6RSyrGN41ERJ 7uN6l83bYwz1cNrAAUvXvysDuCjbOMnTV3Va7KMnkVim9RHV7V/KfmVxDImT3mxr zWG3rxjRoMHWFQk5S4KACqs3Mv25VsqpHoWelYgPQYJxPXHOJC52iu6sM/wShRZS tpwmQM1v8LvlYlxDIUY+LvL1/m24AmYVORRej/Y+CHIu1OIlRgFKjdEMBzb3Ylh2 08LBGKVsw26e47yHwmsOfFnQZHlWMsPHYy+jRX7HACU0LEW3a3o= -----END CERTIFICATE-----Generated at Tue Sep 22 16:15:50 2026 by rpki-client