$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft File: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft (raw, json) Hash identifier: Ldge2nVRJhxeYDb0/8Cn1mBtQyMwleTUhsdLehXw4VU= Subject key identifier: 91:87:57:9B:E4:BD:8D:53:F6:C5:85:3E:8E:67:C2:60:31:EE:6A:FB Authority key identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B Certificate issuer: /CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Certificate serial: 348CA7D0B1A1E26AFF780AA80D746B3249538D23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:16:12 +0000 Manifest this update: Tue 16 Jun 2026 22:11:12 +0000 Manifest next update: Wed 17 Jun 2026 22:52:12 +0000 Files and hashes: 1: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: 0P5qBTgfllLlHCA3nz89Ltdzy1jcnaNNEY3SQXv/0II=) 2: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: OEqKbqVoV+spRdzW+aE4+2tFsdczawhoz6Mphx/Zguc=) 3: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: thKA0k3SKd9ZuPgdjH+VF43W5Rz/i9a2JTXNPTXM6a0=) 4: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl (hash: LLagWKy+tii3HBljaI2Nfifo7ja2falPwIV54G07u30=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 22:52:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:8c:a7:d0:b1:a1:e2:6a:ff:78:0a:a8:0d:74:6b:32:49:53:8d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Validity Not Before: Jun 16 22:11:12 2026 GMT Not After : Jun 17 22:52:12 2026 GMT Subject: CN=9187579BE4BD8D53F6C5853E8E67C26031EE6AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:91:54:4e:01:c4:94:95:b0:65:9e:5f:de:52: d9:c7:ad:ae:b3:c8:ee:6c:59:88:ab:ec:08:a7:fe: 7c:01:08:f3:d2:27:11:b8:6c:d5:82:6d:fd:b9:a2: c5:7a:bb:40:5e:a1:5f:97:60:60:f4:6d:f9:c9:50: 45:e7:fa:c8:92:bc:f2:7f:d4:56:d0:a3:7d:10:f0: ba:5a:59:7c:86:78:56:e7:0d:50:63:e6:ae:fc:ff: aa:9e:24:72:52:17:7c:cb:8b:af:d9:fa:a4:12:c9: 5e:33:3a:1b:f1:0f:50:8b:45:75:12:7a:69:10:01: 10:ee:cc:bd:fa:e1:6c:a8:00:42:bf:74:ad:d0:a4: b5:ef:a3:91:4f:c3:ef:07:eb:35:3b:d5:38:97:53: c4:5f:e5:a0:e8:a6:ac:ce:e4:16:a3:14:86:cc:b5: be:5c:ca:f2:b0:46:8b:34:fc:0f:3a:87:61:0a:3f: 45:e9:7b:12:a8:55:dd:e3:5f:ed:b7:48:8b:97:3c: ff:ab:41:47:68:af:b8:f1:05:6a:55:b7:0a:d6:d5: c5:c7:b7:f7:02:33:d7:28:ec:8a:23:1d:f3:cf:29: 41:b0:fa:56:7d:aa:cd:1c:bf:e1:39:90:2c:13:d3: df:c3:10:77:b5:5f:43:d5:c7:de:ba:8b:40:e1:08: 4f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:87:57:9B:E4:BD:8D:53:F6:C5:85:3E:8E:67:C2:60:31:EE:6A:FB X509v3 Authority Key Identifier: keyid:25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:ee:cd:bb:95:ae:b4:18:21:69:60:7b:b0:8d:a7:96:45:f6: 90:19:67:54:c9:31:ce:36:56:1d:11:97:4c:57:9e:3a:30:19: f1:31:fb:06:ed:5f:66:0b:b1:54:16:f6:f7:e8:df:42:f1:c0: 6c:4c:c3:83:e8:41:c0:e9:65:c3:fc:30:44:8b:76:a2:16:91: 38:99:20:a0:cc:fa:ae:eb:06:e9:c6:b0:27:e1:34:71:6d:1e: 72:65:9e:9c:e6:e3:e7:94:d6:e7:eb:27:12:2a:b0:0f:07:26: 02:b6:08:f0:7b:00:8d:81:d3:1c:e0:d4:a5:5b:c1:36:22:ca: 7c:0b:66:3e:11:87:09:6d:af:ee:4c:27:4e:34:6e:36:ad:47: 44:8d:8a:a9:be:dd:f1:a5:05:63:ec:85:e3:dc:fa:e1:22:3b: 73:41:90:9f:8c:99:60:96:39:41:cb:f9:49:83:33:63:cb:87: 66:d7:4a:7d:f1:f7:ff:3c:b5:ed:51:44:f3:3e:86:72:49:64: 24:52:d5:7d:c8:bf:6b:fc:45:4e:39:0e:14:2b:c2:13:1b:95: ad:5e:c4:02:e4:74:56:3f:e5:ab:5c:81:57:9f:29:5d:f1:9d: 0e:82:61:66:59:f6:e8:30:de:3d:40:15:d6:fd:88:b5:81:d3: 36:d2:a5:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIyn0LGh4mr/eAqoDXRrMklTjSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NE MEZGM0Y1QjAeFw0yNjA2MTYyMjExMTJaFw0yNjA2MTcyMjUyMTJaMDMxMTAvBgNV BAMTKDkxODc1NzlCRTRCRDhENTNGNkM1ODUzRThFNjdDMjYwMzFFRTZBRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZkVROAcSUlbBlnl/eUtnHra6z yO5sWYir7Ain/nwBCPPSJxG4bNWCbf25osV6u0BeoV+XYGD0bfnJUEXn+siSvPJ/ 1FbQo30Q8LpaWXyGeFbnDVBj5q78/6qeJHJSF3zLi6/Z+qQSyV4zOhvxD1CLRXUS emkQARDuzL364WyoAEK/dK3QpLXvo5FPw+8H6zU71TiXU8Rf5aDopqzO5BajFIbM tb5cyvKwRos0/A86h2EKP0XpexKoVd3jX+23SIuXPP+rQUdor7jxBWpVtwrW1cXH t/cCM9co7IojHfPPKUGw+lZ9qs0cv+E5kCwT09/DEHe1X0PVx966i0DhCE9rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkYdXm+S9jVP2xYU+jmfCYDHuavswHwYDVR0j BBgwFoAUJd/M6FOTZzBr/pjsvCVLPND/P1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThjMDY4ZGEtZjljNS00MDM2LTg1NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1 MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NEMEZGM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNURGQ0NFODUzOTM2NzMwNkJGRTk4RUNCQzI1NEIzQ0QwRkYz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThjMDY4ZGEtZjljNS00MDM2LTg1 NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRC M0NEMEZGM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANzuzbuVrrQYIWlge7CNp5ZF9pAZZ1TJMc42 Vh0Rl0xXnjowGfEx+wbtX2YLsVQW9vfo30LxwGxMw4PoQcDpZcP8MESLdqIWkTiZ IKDM+q7rBunGsCfhNHFtHnJlnpzm4+eU1ufrJxIqsA8HJgK2CPB7AI2B0xzg1KVb wTYiynwLZj4Rhwltr+5MJ040bjatR0SNiqm+3fGlBWPshePc+uEiO3NBkJ+MmWCW OUHL+UmDM2PLh2bXSn3x9/88te1RRPM+hnJJZCRS1X3Iv2v8RU45DhQrwhMbla1e xALkdFY/5atcgVefKV3xnQ6CYWZZ9ugw3j1AFdb9iLWB0zbSpW4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:42:33 2026 by rpki-client