$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft File: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft (raw, json) Hash identifier: JMtBNYfxQEyH09XPv1c1NCLxThpPhkEUKq/YEauKdZo= Subject key identifier: 50:B8:79:FB:4E:37:40:17:F1:A2:50:F0:25:8B:3D:8A:81:84:4E:94 Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Certificate serial: 62C32C3A83505A980A31276DBA74D24A8DF4D5CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft Manifest number: BD Signing time: Mon 21 Sep 2026 09:23:03 +0000 Manifest this update: Mon 21 Sep 2026 09:18:03 +0000 Manifest next update: Tue 22 Sep 2026 09:56:03 +0000 Files and hashes: 1: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: jvWEOsR7PfzKTUwNJSaNZgDIPP0tbvEXbSdlcBqgCio=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=) 3: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl (hash: Tw53x1GTdkV3fcqWkqWyV1s6oBPzEWfC1d5YO4C2hKw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:c3:2c:3a:83:50:5a:98:0a:31:27:6d:ba:74:d2:4a:8d:f4:d5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Validity Not Before: Sep 21 09:18:03 2026 GMT Not After : Sep 22 09:56:03 2026 GMT Subject: CN=50B879FB4E374017F1A250F0258B3D8A81844E94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:c7:93:d5:65:e5:e6:6f:6f:46:c6:d7:7a: dd:36:e9:19:b2:73:02:c4:3e:77:13:7e:1b:ed:d6: 8a:27:6c:43:cf:c4:89:30:92:05:2e:29:fd:2d:98: a2:43:f5:b9:43:2b:53:17:4a:16:0d:2e:96:c5:04: a6:87:11:54:44:1c:62:52:55:0b:f9:ef:c0:ea:e8: 0a:8c:c3:5f:4b:36:58:e2:bf:fb:15:68:c2:23:f3: 88:5c:a7:36:9d:66:83:ff:5c:9c:a3:54:4b:88:a9: 99:87:b0:28:10:16:fa:0e:f3:43:2b:fb:b1:a7:1c: 02:5d:b1:a7:ab:71:68:4d:22:f7:50:a1:9f:82:b2: a4:b9:b2:35:ec:92:17:56:ad:47:04:ab:df:0b:a1: 61:5d:50:ef:0a:e9:b6:cd:c1:2f:a7:7c:36:f2:d4: 99:98:79:f8:33:31:f0:5c:5b:07:f1:91:dc:1e:d3: f1:01:0d:28:18:48:97:ce:b3:88:5f:23:00:8b:62: 0d:51:43:14:f2:82:89:bf:0e:d9:a1:fe:ee:cd:5b: 31:6a:ab:b0:81:64:98:95:9f:1c:a7:c8:c3:21:83: 89:f9:3b:30:cf:d5:08:dc:a5:a5:c0:33:7e:2e:9a: 7c:a7:39:78:0b:11:0f:ca:14:24:ee:43:ef:6c:36: b4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B8:79:FB:4E:37:40:17:F1:A2:50:F0:25:8B:3D:8A:81:84:4E:94 X509v3 Authority Key Identifier: keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2a:30:0a:23:1c:35:d7:8e:47:28:34:6c:9c:f4:a8:77:d8: 45:2d:c7:b0:95:67:ee:46:30:c9:af:0a:c1:a9:43:04:aa:72: 5c:2a:11:09:34:b7:60:b7:05:f5:9c:7b:09:6d:73:13:b5:e8: 5d:c6:cc:b8:1e:75:4c:5e:f6:40:b5:c7:96:9c:2c:b6:2e:dd: 34:c5:9c:f5:f4:a8:38:40:fa:ff:52:e5:e7:9f:e0:cc:a3:8c: 64:a8:54:5d:26:b2:73:4b:d3:29:83:17:28:b7:e1:59:fe:0e: ee:e8:9c:84:89:5b:59:b1:0e:bd:9c:85:19:e9:5c:b4:1f:18: 49:05:e3:3a:a5:2a:a9:9d:c5:47:b3:a1:1f:84:7c:a7:96:e8: a6:f0:e6:13:a3:99:df:8a:c3:e6:bd:b4:b2:92:28:84:3a:ef: 2a:15:28:f3:1f:a1:0f:c2:08:39:19:a1:37:96:89:a0:c7:8f: 41:bf:d0:f0:f9:4f:9c:da:d6:8f:08:c5:51:61:d2:a2:d6:41: 9a:f1:ce:97:b9:8d:d5:6c:9f:bb:15:e1:ff:1f:bd:e3:17:46: 45:c2:90:97:c3:e8:c2:e0:23:15:90:1d:46:40:59:11:14:15: 97:f5:44:7e:3f:c9:70:ca:93:8d:8a:92:e6:00:83:49:da:4e: d1:48:52:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYsMsOoNQWpgKMSdtunTSSo301c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx MzMzQjEyODAeFw0yNjA5MjEwOTE4MDNaFw0yNjA5MjIwOTU2MDNaMDMxMTAvBgNV BAMTKDUwQjg3OUZCNEUzNzQwMTdGMUEyNTBGMDI1OEIzRDhBODE4NDRFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWseT1WXl5m9vRsbXet026Rmy cwLEPncTfhvt1oonbEPPxIkwkgUuKf0tmKJD9blDK1MXShYNLpbFBKaHEVREHGJS VQv578Dq6AqMw19LNljiv/sVaMIj84hcpzadZoP/XJyjVEuIqZmHsCgQFvoO80Mr +7GnHAJdsaercWhNIvdQoZ+CsqS5sjXskhdWrUcEq98LoWFdUO8K6bbNwS+nfDby 1JmYefgzMfBcWwfxkdwe0/EBDSgYSJfOs4hfIwCLYg1RQxTygom/Dtmh/u7NWzFq q7CBZJiVnxynyMMhg4n5OzDP1QjcpaXAM34umnynOXgLEQ/KFCTuQ+9sNrQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUULh5+043QBfxolDwJYs9ioGETpQwHwYDVR0j BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0 Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJB M0MxMzMzQjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIqMAojHDXXjkcoNGyc9Kh32EUtx7CVZ+5G MMmvCsGpQwSqclwqEQk0t2C3BfWcewltcxO16F3GzLgedUxe9kC1x5acLLYu3TTF nPX0qDhA+v9S5eef4MyjjGSoVF0msnNL0ymDFyi34Vn+Du7onISJW1mxDr2chRnp XLQfGEkF4zqlKqmdxUezoR+EfKeW6Kbw5hOjmd+Kw+a9tLKSKIQ67yoVKPMfoQ/C CDkZoTeWiaDHj0G/0PD5T5za1o8IxVFh0qLWQZrxzpe5jdVsn7sV4f8fveMXRkXC kJfD6MLgIxWQHUZAWREUFZf1RH4/yXDKk42KkuYAg0naTtFIUiY= -----END CERTIFICATE-----Generated at Mon Sep 21 12:16:34 2026 by rpki-client