$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft File: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft (raw, json) Hash identifier: xHXqQFHv/MyILTn52T94+2AIbMQ6lml5m96QofDbUgM= Subject key identifier: 9E:0D:D9:BF:20:84:FB:C2:2C:11:F5:3E:E5:01:DA:CB:3E:70:A9:7B Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Certificate serial: 3C20D5E348D09FB0E0088EF76DB1A17C7CB195D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 17:30:50 +0000 Manifest this update: Sun 15 Nov 2026 17:25:50 +0000 Manifest next update: Mon 16 Nov 2026 21:03:50 +0000 Files and hashes: 1: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: NA2vG2Q1kDJqOsypeMdeccP+qZk1Bv6cVc2oTP2Tmkw=) 2: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl (hash: 63EBex+MZkppV5N9lsT4VGoRlKyiigp0hKJosS+srHI=) 3: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: Ndn10HkuTSjLbjizNWK1QWx6xtlpc6JAMMmVzvO86rw=) 4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:20:d5:e3:48:d0:9f:b0:e0:08:8e:f7:6d:b1:a1:7c:7c:b1:95:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Validity Not Before: Nov 15 17:25:50 2026 GMT Not After : Nov 16 21:03:50 2026 GMT Subject: CN=9E0DD9BF2084FBC22C11F53EE501DACB3E70A97B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3a:4c:0e:06:3f:21:c6:93:f9:62:a8:fc:c7: fe:03:ba:92:3c:81:70:67:ab:63:6e:85:8b:23:a8: 9b:2d:68:7d:59:16:c8:14:83:28:96:30:97:3a:2b: cd:44:e6:87:34:74:23:6b:11:e3:4f:b8:c6:38:7a: 06:89:d3:6c:fe:da:f3:7f:05:4a:3f:c7:cd:d2:96: e8:39:89:33:1a:3e:02:47:2a:08:11:31:e0:20:2d: b5:07:69:8a:dd:72:a1:8b:32:2c:21:00:21:5f:87: be:f6:83:4d:13:4b:b4:da:6a:32:1a:f4:f9:01:c5: 11:06:10:9d:8b:d1:80:a3:97:3a:a2:7c:a6:67:5e: 23:44:b7:25:57:d1:d8:c0:de:e0:98:94:4b:0f:56: a6:ae:2f:5f:ba:80:f6:1f:24:98:2d:0d:07:04:df: 54:3e:88:0c:86:48:52:0b:95:3c:31:84:5a:93:16: 23:96:08:cc:1c:47:cb:39:4b:79:83:5f:68:f3:6f: c1:e3:18:e1:a1:50:43:2f:23:3f:c4:a9:63:e0:4f: 13:13:bc:2b:22:12:10:07:47:86:e7:8c:0d:2a:06: 26:c8:bb:f3:47:5a:aa:5d:8a:07:d7:2e:ca:d1:87: de:10:ec:c3:5f:70:b7:b5:c9:7c:35:7c:36:c6:73: 0b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:0D:D9:BF:20:84:FB:C2:2C:11:F5:3E:E5:01:DA:CB:3E:70:A9:7B X509v3 Authority Key Identifier: keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bb:12:b7:e1:92:e5:95:76:b3:3c:51:87:31:1f:f9:b4:49: b1:50:e2:b3:92:20:ee:22:45:e4:38:9f:11:e2:e2:d6:22:05: 40:f8:48:5d:2a:cf:5b:25:f8:1f:d0:4d:23:81:da:d6:f5:08: 93:5c:e9:a1:25:9a:59:9d:96:a2:fc:e8:45:f5:cb:36:56:0d: 55:78:0f:02:5e:47:83:93:b4:dd:d0:9e:ff:11:21:fe:77:d3: f3:e6:d2:6e:56:30:31:af:94:3f:62:0e:c6:82:95:32:f3:ba: c0:6f:d4:17:62:77:9c:e7:55:4c:69:39:c8:5c:cd:3d:e2:47: c8:37:71:48:49:19:1e:b3:b8:02:3e:4d:fa:e7:b3:02:dd:43: 00:c5:4f:6b:94:5f:b2:12:56:19:71:6c:ca:ea:27:27:14:9a: fc:b2:9d:23:4a:53:7b:95:54:de:9c:cc:3e:33:52:dd:b5:4f: c1:c1:cc:5d:fc:dd:a1:e5:bc:ed:0b:34:5f:f4:8b:7d:d7:45: 70:75:d9:3b:7b:0f:b2:66:4e:e0:6b:d6:7a:06:66:3b:d8:df: 7f:c0:e7:46:21:f7:ae:82:df:fe:41:39:44:71:e3:ad:f1:53: 87:c0:e5:f1:46:3d:59:f2:70:6b:b5:63:3b:c8:f2:d5:10:ea: 44:e8:22:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCDV40jQn7DgCI73bbGhfHyxldUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VBQzNE NTVDM0Q3QTAeFw0yNjExMTUxNzI1NTBaFw0yNjExMTYyMTAzNTBaMDMxMTAvBgNV BAMTKDlFMEREOUJGMjA4NEZCQzIyQzExRjUzRUU1MDFEQUNCM0U3MEE5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OkwOBj8hxpP5Yqj8x/4DupI8 gXBnq2NuhYsjqJstaH1ZFsgUgyiWMJc6K81E5oc0dCNrEeNPuMY4egaJ02z+2vN/ BUo/x83Slug5iTMaPgJHKggRMeAgLbUHaYrdcqGLMiwhACFfh772g00TS7TaajIa 9PkBxREGEJ2L0YCjlzqifKZnXiNEtyVX0djA3uCYlEsPVqauL1+6gPYfJJgtDQcE 31Q+iAyGSFILlTwxhFqTFiOWCMwcR8s5S3mDX2jzb8HjGOGhUEMvIz/EqWPgTxMT vCsiEhAHR4bnjA0qBibIu/NHWqpdigfXLsrRh94Q7MNfcLe1yXw1fDbGcwvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUng3ZvyCE+8IsEfU+5QHayz5wqXswHwYDVR0j BBgwFoAUslqomZHfgZY9uVrLgCPqw9VcPXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjUzNTVjNWEtZWZjOC00OGY3LTkwMmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5 MURGODE5NjNEQjk1QUNCODAyM0VBQzNENTVDM0Q3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjVBQTg5OTkxREY4MTk2M0RCOTVBQ0I4MDIzRUFDM0Q1NUMz RDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VB QzNENTVDM0Q3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy7ErfhkuWVdrM8UYcxH/m0SbFQ4rOSIO4i ReQ4nxHi4tYiBUD4SF0qz1sl+B/QTSOB2tb1CJNc6aElmlmdlqL86EX1yzZWDVV4 DwJeR4OTtN3Qnv8RIf530/Pm0m5WMDGvlD9iDsaClTLzusBv1Bdid5znVUxpOchc zT3iR8g3cUhJGR6zuAI+TfrnswLdQwDFT2uUX7ISVhlxbMrqJycUmvyynSNKU3uV VN6czD4zUt21T8HBzF383aHlvO0LNF/0i33XRXB12Tt7D7JmTuBr1noGZjvY33/A 50Yh966C3/5BOURx463xU4fA5fFGPVnycGu1YzvI8tUQ6kToIho= -----END CERTIFICATE-----Generated at Sun Nov 15 21:24:26 2026 by rpki-client