$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft File: 25F44906F292384CC9F1BE632798B911BD52EB7E.mft (raw, json) Hash identifier: TBKfc/IXoe+pt9cxBod0kE4QpHfuwJcjLOSbLMOJE4o= Subject key identifier: C7:4F:B3:0E:BC:EC:E3:D0:6B:B6:4D:75:E3:7B:04:50:10:69:3F:C7 Authority key identifier: 25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E Certificate issuer: /CN=25F44906F292384CC9F1BE632798B911BD52EB7E Certificate serial: 2F0B574AE871D6EC6EF0A125C869BD2B409E44F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 04:26:55 +0000 Manifest this update: Tue 22 Sep 2026 04:21:55 +0000 Manifest next update: Wed 23 Sep 2026 05:10:55 +0000 Files and hashes: 1: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: K3q/Ez2ylWAHvKZbfEY9nE0ATvil8bcfxJnHQI/5nNA=) 2: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: GGZKA5imIJIaP+Schkic8gBw6IQQgIqOJecWWJTB5T4=) 3: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: h0iqFz1JhYFaft+/rI1iyNCYNmEHURL6TWuWP9vtRec=) 4: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: OzJuT5ZCAhL2UGbM7eynbgVHZM3ndO0ync8Ih0A1zcQ=) 5: 25F44906F292384CC9F1BE632798B911BD52EB7E.crl (hash: tzQXp7mcGRVDEmqlQ4g8u4O+BKvK1TN9BcZ3S6C6APU=) 6: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: rJYDDAtDFH2sxeGVm+q7lH6NoJu3MNVWQxNtL3BpElI=) 7: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: OF+X7RZ12YwYbIl142vAny0I0e6fiCnAZ2BWIAMpqJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0b:57:4a:e8:71:d6:ec:6e:f0:a1:25:c8:69:bd:2b:40:9e:44:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F44906F292384CC9F1BE632798B911BD52EB7E Validity Not Before: Sep 22 04:21:55 2026 GMT Not After : Sep 23 05:10:55 2026 GMT Subject: CN=C74FB30EBCECE3D06BB64D75E37B045010693FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:cc:58:ec:63:60:35:29:27:92:48:c2:3e: bb:80:f6:48:ae:6f:14:f4:f2:56:8b:a0:f5:9b:2f: 3e:29:54:52:bb:fe:7d:e3:0b:de:e6:a0:f4:67:4d: cd:6f:2b:a3:75:e4:a5:db:e4:8b:4a:92:91:2f:14: 40:b4:e4:72:1c:13:f6:de:c0:93:5a:0e:12:ed:3f: af:16:0a:bd:13:d4:20:ea:2d:bb:b7:eb:f7:1d:fb: 21:93:b0:36:dd:0d:23:31:3d:e2:3e:ad:93:f6:5a: 91:2e:b6:a7:ec:5a:f9:c0:83:36:70:52:5c:3e:da: 5f:a6:b7:dd:46:d8:08:53:de:a3:e2:38:02:16:7b: 06:7b:b2:3e:98:3c:8d:18:da:8c:cd:54:21:de:72: 08:58:3e:8b:dd:5b:f1:75:05:59:b3:34:9b:b8:8b: 9f:24:d8:e3:b9:48:d8:68:b9:12:86:71:4c:06:8f: 87:44:50:fe:9e:8c:50:38:78:bb:6d:e4:f3:03:47: 41:6f:b2:1b:53:c3:02:94:1e:cb:39:16:66:5f:77: bd:78:1b:c3:b4:2a:21:0e:30:e3:5d:9d:99:11:da: 48:eb:1f:86:36:e6:6a:11:1d:1a:03:cc:3d:71:63: ff:a6:96:af:7c:8d:33:82:8d:12:b6:78:74:ed:c0: 34:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4F:B3:0E:BC:EC:E3:D0:6B:B6:4D:75:E3:7B:04:50:10:69:3F:C7 X509v3 Authority Key Identifier: keyid:25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:67:b1:5c:65:91:f6:31:18:a8:b6:91:93:1e:02:56:39:eb: 43:42:f4:3c:aa:9a:3a:c1:d0:71:bb:9d:17:a8:56:52:a6:42: d6:44:02:ef:d9:6f:66:f0:16:72:ce:de:46:04:76:96:69:05: f9:6d:22:ef:7f:0e:0b:5c:c1:30:13:d7:6b:c6:37:08:e7:b5: 67:d4:6b:87:c9:ce:0c:5f:53:12:dc:c5:e2:2a:af:97:f1:6d: 01:fc:d1:30:bd:7d:a6:e8:59:09:35:d3:dd:71:2c:5a:63:fd: 4f:14:e9:dc:e0:01:b8:bb:fd:3b:92:c3:b8:16:fc:5a:f1:ff: d2:34:54:67:68:48:2b:bb:0a:e9:a3:30:f6:04:b5:ab:9c:70: e4:15:e9:cb:a4:ec:3f:07:cc:2f:29:bf:38:8e:ae:73:66:40: 1a:55:36:29:c5:64:12:ee:fb:59:32:99:4d:df:fa:52:f0:a1: e0:b3:fc:aa:e3:44:c8:f0:76:69:25:8e:ed:15:10:04:5f:0b: e3:03:e8:25:c2:25:50:ba:72:65:2c:81:a4:9e:e1:63:b2:f8: 22:af:14:a0:f5:c6:f7:92:6e:66:76:b1:fe:0d:39:bb:be:18: 4c:91:53:fa:6f:14:9e:c6:b1:57:2b:db:9c:b2:93:4e:eb:ea: 91:6f:16:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULwtXSuhx1uxu8KElyGm9K0CeRPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFC RDUyRUI3RTAeFw0yNjA5MjIwNDIxNTVaFw0yNjA5MjMwNTEwNTVaMDMxMTAvBgNV BAMTKEM3NEZCMzBFQkNFQ0UzRDA2QkI2NEQ3NUUzN0IwNDUwMTA2OTNGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hMxY7GNgNSknkkjCPruA9kiu bxT08laLoPWbLz4pVFK7/n3jC97moPRnTc1vK6N15KXb5ItKkpEvFEC05HIcE/be wJNaDhLtP68WCr0T1CDqLbu36/cd+yGTsDbdDSMxPeI+rZP2WpEutqfsWvnAgzZw Ulw+2l+mt91G2AhT3qPiOAIWewZ7sj6YPI0Y2ozNVCHecghYPovdW/F1BVmzNJu4 i58k2OO5SNhouRKGcUwGj4dEUP6ejFA4eLtt5PMDR0FvshtTwwKUHss5FmZfd714 G8O0KiEOMONdnZkR2kjrH4Y25moRHRoDzD1xY/+mlq98jTOCjRK2eHTtwDR1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx0+zDrzs49Brtk1143sEUBBpP8cwHwYDVR0j BBgwFoAUJfRJBvKSOEzJ8b5jJ5i5Eb1S634wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhNDI3NDItODlkMi00OWJiLThhM2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZG MjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFCRDUyRUI3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUY0NDkwNkYyOTIzODRDQzlGMUJFNjMyNzk4QjkxMUJENTJF QjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5 MTFCRDUyRUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNnsVxlkfYxGKi2kZMeAlY560NC9DyqmjrB 0HG7nReoVlKmQtZEAu/Zb2bwFnLO3kYEdpZpBfltIu9/DgtcwTAT12vGNwjntWfU a4fJzgxfUxLcxeIqr5fxbQH80TC9faboWQk1091xLFpj/U8U6dzgAbi7/TuSw7gW /Frx/9I0VGdoSCu7CumjMPYEtauccOQV6cuk7D8HzC8pvziOrnNmQBpVNinFZBLu +1kymU3f+lLwoeCz/KrjRMjwdmklju0VEARfC+MD6CXCJVC6cmUsgaSe4WOy+CKv FKD1xveSbmZ2sf4NObu+GEyRU/pvFJ7GsVcr25yyk07r6pFvFhE= -----END CERTIFICATE-----Generated at Tue Sep 22 08:46:24 2026 by rpki-client