$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft File: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft (raw, json) Hash identifier: i7w23FUf6bNFKwQNQnqeYCt8P/YySzw7AkrF2odsti4= Subject key identifier: 67:81:BD:DE:6A:8F:DF:C1:4F:CF:FF:AC:A1:F3:80:1F:38:2E:A3:65 Authority key identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B Certificate issuer: /CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Certificate serial: 14EA2C0853374DB36E97F83ABCE002F030BEDFA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft Manifest number: BE Signing time: Sun 20 Sep 2026 22:29:41 +0000 Manifest this update: Sun 20 Sep 2026 22:24:41 +0000 Manifest next update: Mon 21 Sep 2026 23:46:41 +0000 Files and hashes: 1: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl (hash: KIU2IiTWRaLDprK+wp35ghV5aBVRXRuNkMr/6m9/Qto=) 2: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: thKA0k3SKd9ZuPgdjH+VF43W5Rz/i9a2JTXNPTXM6a0=) 3: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: OEqKbqVoV+spRdzW+aE4+2tFsdczawhoz6Mphx/Zguc=) 4: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: 0P5qBTgfllLlHCA3nz89Ltdzy1jcnaNNEY3SQXv/0II=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 23:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ea:2c:08:53:37:4d:b3:6e:97:f8:3a:bc:e0:02:f0:30:be:df:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Validity Not Before: Sep 20 22:24:41 2026 GMT Not After : Sep 21 23:46:41 2026 GMT Subject: CN=6781BDDE6A8FDFC14FCFFFACA1F3801F382EA365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:27:e7:9b:af:14:c5:90:c1:ea:2d:88:c8: 03:2b:d9:af:73:0f:a7:af:10:5a:61:5a:7e:0e:2a: 61:04:52:73:ff:18:da:93:2e:c7:5b:29:3d:d1:d9: 39:d8:e4:24:7c:84:68:3b:cf:35:7b:50:f6:7b:54: 3d:b0:ca:3d:4e:fd:d7:33:aa:78:27:f2:11:fe:07: 8d:f8:6b:6f:1d:0b:88:39:84:3d:e8:ad:87:8e:fe: d8:fa:29:e9:d0:12:7e:0f:1e:22:3f:1d:46:52:c2: 72:a1:b1:b7:5a:79:5c:15:22:99:8c:d6:ce:f4:73: 90:33:27:2c:68:9e:84:bb:b6:c4:c9:87:26:5d:a8: f8:ea:60:ac:d7:cf:ed:22:4c:78:1d:9f:9f:de:c3: 47:41:e9:15:11:77:13:c4:64:4f:f7:53:2e:58:ab: 7b:a0:68:ed:68:3e:78:7c:ec:b3:a1:42:18:64:e8: 8f:e8:c0:69:11:42:a3:05:a1:a2:57:e9:70:fa:fd: 7e:f8:3d:05:3d:34:63:06:63:37:4f:26:68:9f:f1: 8e:88:a5:3e:1a:fa:02:5d:96:a7:26:44:d5:65:9b: 6f:bb:65:97:36:9b:0e:bd:02:5b:11:00:f2:1c:fd: 1c:49:da:b0:b8:05:5b:6c:65:df:e4:2e:d2:3e:49: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:81:BD:DE:6A:8F:DF:C1:4F:CF:FF:AC:A1:F3:80:1F:38:2E:A3:65 X509v3 Authority Key Identifier: keyid:25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:16:fd:f0:a7:95:e9:9e:05:19:17:b3:f6:ef:17:ab:9d:42: f0:da:21:e5:72:0d:7b:f6:71:c3:e6:0f:20:3c:2c:df:af:bb: 00:c9:15:6f:cb:ee:d1:f2:bf:52:17:66:86:95:0e:73:07:d3: 0b:d7:75:b9:fa:7d:02:9d:9e:93:8a:77:6e:36:9c:31:99:8e: 35:93:93:60:f7:20:db:35:6c:2a:2c:f2:b3:a1:48:58:83:c8: 90:e2:52:81:bc:50:27:50:24:33:40:02:29:7b:38:34:60:65: 75:52:e3:6d:3c:ee:d8:be:14:68:21:66:5c:26:a8:0c:19:ec: 42:e4:a9:a3:08:f2:07:50:98:81:e5:93:6a:ee:50:4e:3e:ab: a2:e8:83:f1:56:db:ec:ca:ab:cc:61:1c:64:58:d0:d0:93:70: c8:ce:2a:e7:6b:94:5f:8b:d9:69:7e:fc:b3:80:99:e2:34:ce: 4b:77:6d:b2:47:fb:f9:fd:e6:36:80:c8:38:62:d0:37:e3:1a: 77:03:d2:19:41:8b:29:8e:d7:50:a3:aa:0a:f8:4e:bd:63:46: ba:4d:53:82:a0:bf:fd:3a:1a:14:b3:ac:78:fd:b1:ce:ba:cc: 09:ba:dc:52:f0:14:81:58:dc:c5:3b:6f:2a:4e:0b:cf:ae:0e: 98:be:07:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOosCFM3TbNul/g6vOAC8DC+36YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NE MEZGM0Y1QjAeFw0yNjA5MjAyMjI0NDFaFw0yNjA5MjEyMzQ2NDFaMDMxMTAvBgNV BAMTKDY3ODFCRERFNkE4RkRGQzE0RkNGRkZBQ0ExRjM4MDFGMzgyRUEzNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDifnm68UxZDB6i2IyAMr2a9z D6evEFphWn4OKmEEUnP/GNqTLsdbKT3R2TnY5CR8hGg7zzV7UPZ7VD2wyj1O/dcz qngn8hH+B434a28dC4g5hD3orYeO/tj6KenQEn4PHiI/HUZSwnKhsbdaeVwVIpmM 1s70c5AzJyxonoS7tsTJhyZdqPjqYKzXz+0iTHgdn5/ew0dB6RURdxPEZE/3Uy5Y q3ugaO1oPnh87LOhQhhk6I/owGkRQqMFoaJX6XD6/X74PQU9NGMGYzdPJmif8Y6I pT4a+gJdlqcmRNVlm2+7ZZc2mw69AlsRAPIc/RxJ2rC4BVtsZd/kLtI+ST03AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ4G93mqP38FPz/+sofOAHzguo2UwHwYDVR0j BBgwFoAUJd/M6FOTZzBr/pjsvCVLPND/P1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThjMDY4ZGEtZjljNS00MDM2LTg1NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1 MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NEMEZGM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNURGQ0NFODUzOTM2NzMwNkJGRTk4RUNCQzI1NEIzQ0QwRkYz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThjMDY4ZGEtZjljNS00MDM2LTg1 NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRC M0NEMEZGM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAW/fCnlemeBRkXs/bvF6udQvDaIeVyDXv2 ccPmDyA8LN+vuwDJFW/L7tHyv1IXZoaVDnMH0wvXdbn6fQKdnpOKd242nDGZjjWT k2D3INs1bCos8rOhSFiDyJDiUoG8UCdQJDNAAil7ODRgZXVS42087ti+FGghZlwm qAwZ7ELkqaMI8gdQmIHlk2ruUE4+q6Log/FW2+zKq8xhHGRY0NCTcMjOKudrlF+L 2Wl+/LOAmeI0zkt3bbJH+/n95jaAyDhi0DfjGncD0hlBiymO11Cjqgr4Tr1jRrpN U4Kgv/06GhSzrHj9sc66zAm63FLwFIFY3MU7bypOC8+uDpi+B/A= -----END CERTIFICATE-----Generated at Mon Sep 21 18:28:20 2026 by rpki-client