$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft File: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft (raw, json) Hash identifier: nsCQQ+3WVk1nJCLjCBsTJF7Vy0hHpSe7RdzldBCmPqo= Subject key identifier: E8:82:05:7B:5C:34:10:9C:D8:AF:A8:BB:ED:DE:BB:07:A0:D1:49:98 Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Certificate serial: 1517B6A7F053BC982A58BE697558CD48B95ADD0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft Manifest number: BC Signing time: Sun 20 Sep 2026 15:56:39 +0000 Manifest this update: Sun 20 Sep 2026 15:51:39 +0000 Manifest next update: Mon 21 Sep 2026 17:20:39 +0000 Files and hashes: 1: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: jvWEOsR7PfzKTUwNJSaNZgDIPP0tbvEXbSdlcBqgCio=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=) 3: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl (hash: FkgQt7FOfopoXDTlTGzZmDXInYTAzKj0LKTTuQtgJ/w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:17:b6:a7:f0:53:bc:98:2a:58:be:69:75:58:cd:48:b9:5a:dd:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Validity Not Before: Sep 20 15:51:39 2026 GMT Not After : Sep 21 17:20:39 2026 GMT Subject: CN=E882057B5C34109CD8AFA8BBEDDEBB07A0D14998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0d:58:60:2f:0a:c3:d2:82:20:66:d1:d8:dc: e2:e9:55:ad:09:7a:be:be:b8:f8:db:92:f6:1e:e6: ae:35:4c:a2:7b:92:1c:9d:e8:57:b3:39:63:b8:04: 2f:6a:05:34:d9:c1:fb:90:a6:7b:a9:eb:04:e3:cf: 40:85:f8:2c:a2:46:6b:93:8d:3b:1b:52:2d:01:3a: aa:41:dd:c6:18:75:98:2e:13:23:bc:c0:98:c1:6a: 50:ce:26:56:cb:93:7b:81:10:7e:a1:96:5c:05:dd: 9b:ed:7c:f2:5e:63:93:ba:a7:3b:58:02:84:ae:e5: c1:e6:a0:2d:7e:7a:47:2b:f1:bc:3c:a7:6e:23:c5: ea:2f:70:1f:36:d6:a6:f0:ad:00:7a:5b:c0:25:38: 0a:83:c2:5d:3e:c7:e4:40:6e:93:1e:1a:b2:2b:fd: 40:6b:b8:3a:3d:63:c9:bf:a2:26:0d:78:c8:e3:5c: 81:1d:c8:e7:3a:2d:71:78:b2:49:fa:49:7d:f8:da: 33:d7:98:98:80:7f:05:81:f0:1c:c1:60:be:53:43: 6e:37:e1:a8:c7:9b:0e:24:15:2a:5f:64:b7:98:e7: 27:57:43:7b:7f:40:90:a8:20:84:5d:c7:db:06:ed: 37:51:7e:5f:a5:11:42:8d:8f:14:a8:bd:5e:f4:84: 40:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:82:05:7B:5C:34:10:9C:D8:AF:A8:BB:ED:DE:BB:07:A0:D1:49:98 X509v3 Authority Key Identifier: keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:da:7f:77:22:7a:f1:d6:8e:c0:72:ad:45:97:a8:11:ef:83: 77:32:65:f2:92:31:f0:2b:48:d5:b9:87:57:93:8a:77:52:84: 15:19:ce:16:cf:9f:ae:a7:88:76:86:71:25:05:91:72:88:38: 1b:c3:5e:07:8c:8f:fe:00:95:82:10:ca:14:0f:f3:ad:d7:6c: dc:36:d7:12:c5:46:bf:5d:d5:c5:ee:03:bf:4d:e8:2c:cd:1b: 50:41:e2:4f:a4:e8:75:67:6f:d2:81:fa:27:9e:4d:89:84:0e: 1a:a4:95:a3:8d:e0:c0:01:4f:c5:7b:39:e5:3e:fe:2b:6f:62: f3:96:20:42:f0:ed:50:15:06:db:15:73:2e:c6:82:77:57:35: 49:33:80:e3:90:fe:1c:b5:a6:ca:71:2c:2a:2a:9e:db:57:91: 71:2a:06:b6:a4:70:da:41:6d:39:70:2c:11:d6:a6:ee:e1:8f: 66:f0:53:31:3e:30:83:77:08:cb:cc:bb:8f:90:8c:50:d3:ec: 7c:28:00:5d:ca:b5:30:3e:f6:7e:4c:54:95:aa:02:82:f2:40: 34:6e:b2:c5:29:98:c3:47:a6:e7:c9:ab:36:c0:dd:49:9d:0a: 66:ba:e7:eb:c0:8b:09:60:5c:a3:49:43:0e:10:a4:7d:32:0f: 2b:a3:3b:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFRe2p/BTvJgqWL5pdVjNSLla3QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx MzMzQjEyODAeFw0yNjA5MjAxNTUxMzlaFw0yNjA5MjExNzIwMzlaMDMxMTAvBgNV BAMTKEU4ODIwNTdCNUMzNDEwOUNEOEFGQThCQkVEREVCQjA3QTBEMTQ5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEDVhgLwrD0oIgZtHY3OLpVa0J er6+uPjbkvYe5q41TKJ7khyd6FezOWO4BC9qBTTZwfuQpnup6wTjz0CF+CyiRmuT jTsbUi0BOqpB3cYYdZguEyO8wJjBalDOJlbLk3uBEH6hllwF3ZvtfPJeY5O6pztY AoSu5cHmoC1+ekcr8bw8p24jxeovcB821qbwrQB6W8AlOAqDwl0+x+RAbpMeGrIr /UBruDo9Y8m/oiYNeMjjXIEdyOc6LXF4skn6SX342jPXmJiAfwWB8BzBYL5TQ243 4ajHmw4kFSpfZLeY5ydXQ3t/QJCoIIRdx9sG7TdRfl+lEUKNjxSovV70hED9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6IIFe1w0EJzYr6i77d67B6DRSZgwHwYDVR0j BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0 Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJB M0MxMzMzQjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACraf3cievHWjsByrUWXqBHvg3cyZfKSMfAr SNW5h1eTindShBUZzhbPn66niHaGcSUFkXKIOBvDXgeMj/4AlYIQyhQP863XbNw2 1xLFRr9d1cXuA79N6CzNG1BB4k+k6HVnb9KB+ieeTYmEDhqklaON4MABT8V7OeU+ /itvYvOWIELw7VAVBtsVcy7GgndXNUkzgOOQ/hy1pspxLCoqnttXkXEqBrakcNpB bTlwLBHWpu7hj2bwUzE+MIN3CMvMu4+QjFDT7HwoAF3KtTA+9n5MVJWqAoLyQDRu ssUpmMNHpufJqzbA3UmdCma65+vAiwlgXKNJQw4QpH0yDyujO9Q= -----END CERTIFICATE-----Generated at Mon Sep 21 10:17:58 2026 by rpki-client