$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft File: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft (raw, json) Hash identifier: uXdWK85+SLeZ8VBBohnr7C//UAkIAyfwZPiTT0Vyhow= Subject key identifier: 6A:E8:29:06:8C:54:4D:B8:86:C8:99:49:A8:CF:6D:ED:4F:A8:3A:D1 Authority key identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B Certificate issuer: /CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Certificate serial: 55130974BF8D877CA59F40C97F1ED05D75B5E4C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft Manifest number: 0109 Signing time: Sun 15 Nov 2026 12:24:32 +0000 Manifest this update: Sun 15 Nov 2026 12:19:32 +0000 Manifest next update: Mon 16 Nov 2026 15:59:32 +0000 Files and hashes: 1: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: 0P5qBTgfllLlHCA3nz89Ltdzy1jcnaNNEY3SQXv/0II=) 2: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl (hash: k3WnCZjBJRxJ+sBP7jdHPw7+86GOKhl4pxp70LLBSfw=) 3: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: OEqKbqVoV+spRdzW+aE4+2tFsdczawhoz6Mphx/Zguc=) 4: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: thKA0k3SKd9ZuPgdjH+VF43W5Rz/i9a2JTXNPTXM6a0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:13:09:74:bf:8d:87:7c:a5:9f:40:c9:7f:1e:d0:5d:75:b5:e4:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Validity Not Before: Nov 15 12:19:32 2026 GMT Not After : Nov 16 15:59:32 2026 GMT Subject: CN=6AE829068C544DB886C89949A8CF6DED4FA83AD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:79:a4:51:7e:a0:5f:3e:9b:26:48:8e:b7:0d: c3:fc:7a:d3:88:2b:38:3e:0d:19:4c:41:65:72:51: 90:df:30:61:e1:20:fa:ab:06:59:0d:ca:9c:9d:65: a7:a4:1a:dd:a9:f7:0c:21:12:2b:99:c4:ca:f9:4b: d4:04:34:01:7a:37:42:90:9f:aa:54:64:83:b5:df: 71:7b:9c:89:d4:4c:56:12:7b:f8:04:a7:a9:7f:75: 20:49:b1:4a:3b:84:c4:69:41:53:f3:4f:8f:63:ae: 07:92:71:8c:53:3c:17:1d:bc:6f:44:c0:47:62:a8: ce:e0:84:f7:4c:f4:f6:9e:7a:36:bc:e2:ed:1b:25: 90:33:0e:ea:ca:60:e1:f4:aa:37:85:85:10:d8:af: d2:71:63:fa:65:9e:58:17:4e:d2:6e:22:0e:c5:a1: c8:38:98:ad:30:3e:db:bc:8c:2f:7c:1d:f6:6f:4c: ba:d3:01:cf:91:2f:8e:ea:82:0e:ba:2f:9c:63:88: 12:d2:bd:2c:d9:4b:1f:b2:b0:e2:30:c1:33:6f:72: b0:b0:8d:3a:fa:09:21:e5:3c:fd:44:bd:0a:19:ce: 7f:8b:ae:f4:9d:83:da:80:7b:13:a5:75:a4:34:31: f5:ea:31:ff:e2:ff:5a:c4:21:c0:b0:b6:47:ec:11: 7c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E8:29:06:8C:54:4D:B8:86:C8:99:49:A8:CF:6D:ED:4F:A8:3A:D1 X509v3 Authority Key Identifier: keyid:25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:a9:02:56:4d:a7:38:90:23:6e:f0:1b:8d:65:e2:00:d4:73: ea:e1:78:94:4b:52:55:8e:59:09:97:e4:34:6d:f5:53:61:7c: bf:4f:64:b4:66:c9:62:9d:8f:20:59:8c:98:ff:f8:97:4b:90: 0a:8d:da:8d:f7:16:66:80:4c:2e:1c:ae:96:95:ae:db:e8:c2: 30:6d:db:77:30:05:76:9a:15:97:02:41:9c:da:5b:db:45:3a: 74:56:d0:8f:09:95:3f:f2:1c:3a:e6:e0:28:43:5c:45:c7:ac: 12:9c:de:66:3d:fc:da:72:e5:e2:42:7f:93:8b:68:fe:b6:21: d2:3e:73:74:69:3b:8b:7d:b6:17:4e:32:77:2e:08:b4:f1:2f: a9:93:aa:41:a4:83:4f:90:f6:11:f6:22:f3:0e:19:6f:74:b0: c2:4c:63:1b:de:14:b7:09:70:a6:37:d9:b1:90:ae:53:9b:a6: ed:26:3c:11:6f:eb:0f:b2:97:75:33:20:2d:20:11:87:ba:16: fb:97:b7:14:40:df:c6:ff:53:b8:dc:31:64:4a:f7:26:ab:6d: 75:68:17:98:d0:17:4a:3b:9b:5d:68:41:4f:b6:fc:a9:f7:e9: 59:58:a1:ca:6a:6e:db:8e:0d:53:4a:62:63:64:28:4b:dd:68: 8c:b0:d9:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVRMJdL+Nh3yln0DJfx7QXXW15McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NE MEZGM0Y1QjAeFw0yNjExMTUxMjE5MzJaFw0yNjExMTYxNTU5MzJaMDMxMTAvBgNV BAMTKDZBRTgyOTA2OEM1NDREQjg4NkM4OTk0OUE4Q0Y2REVENEZBODNBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoeaRRfqBfPpsmSI63DcP8etOI Kzg+DRlMQWVyUZDfMGHhIPqrBlkNypydZaekGt2p9wwhEiuZxMr5S9QENAF6N0KQ n6pUZIO133F7nInUTFYSe/gEp6l/dSBJsUo7hMRpQVPzT49jrgeScYxTPBcdvG9E wEdiqM7ghPdM9Paeeja84u0bJZAzDurKYOH0qjeFhRDYr9JxY/plnlgXTtJuIg7F ocg4mK0wPtu8jC98HfZvTLrTAc+RL47qgg66L5xjiBLSvSzZSx+ysOIwwTNvcrCw jTr6CSHlPP1EvQoZzn+LrvSdg9qAexOldaQ0MfXqMf/i/1rEIcCwtkfsEXzVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaugpBoxUTbiGyJlJqM9t7U+oOtEwHwYDVR0j BBgwFoAUJd/M6FOTZzBr/pjsvCVLPND/P1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThjMDY4ZGEtZjljNS00MDM2LTg1NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1 MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NEMEZGM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNURGQ0NFODUzOTM2NzMwNkJGRTk4RUNCQzI1NEIzQ0QwRkYz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThjMDY4ZGEtZjljNS00MDM2LTg1 NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRC M0NEMEZGM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSpAlZNpziQI27wG41l4gDUc+rheJRLUlWO WQmX5DRt9VNhfL9PZLRmyWKdjyBZjJj/+JdLkAqN2o33FmaATC4crpaVrtvowjBt 23cwBXaaFZcCQZzaW9tFOnRW0I8JlT/yHDrm4ChDXEXHrBKc3mY9/Npy5eJCf5OL aP62IdI+c3RpO4t9thdOMncuCLTxL6mTqkGkg0+Q9hH2IvMOGW90sMJMYxveFLcJ cKY32bGQrlObpu0mPBFv6w+yl3UzIC0gEYe6FvuXtxRA38b/U7jcMWRK9yarbXVo F5jQF0o7m11oQU+2/Kn36VlYocpqbtuODVNKYmNkKEvdaIyw2ak= -----END CERTIFICATE-----Generated at Sun Nov 15 15:01:01 2026 by rpki-client