$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft File: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft (raw, json) Hash identifier: VCA/fHH02dinA4nKZPxVvrcJOPpofNsXXfh3GEl0mbE= Subject key identifier: 41:8A:23:30:1A:13:5C:0B:35:A1:47:14:0C:5C:E3:77:F4:5F:40:BB Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Certificate serial: 4BB778A30109292CCE821244D2A57B3AAE610BF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft Manifest number: BC Signing time: Mon 21 Sep 2026 04:01:24 +0000 Manifest this update: Mon 21 Sep 2026 03:56:24 +0000 Manifest next update: Tue 22 Sep 2026 04:25:24 +0000 Files and hashes: 1: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: NA2vG2Q1kDJqOsypeMdeccP+qZk1Bv6cVc2oTP2Tmkw=) 2: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl (hash: OBhZW+kYbAc7KK2DK8nUNN9mZTbiedkByBgKCjlaWps=) 3: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: Ndn10HkuTSjLbjizNWK1QWx6xtlpc6JAMMmVzvO86rw=) 4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b7:78:a3:01:09:29:2c:ce:82:12:44:d2:a5:7b:3a:ae:61:0b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Validity Not Before: Sep 21 03:56:24 2026 GMT Not After : Sep 22 04:25:24 2026 GMT Subject: CN=418A23301A135C0B35A147140C5CE377F45F40BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:e5:5b:cf:c2:8a:56:72:41:34:0b:ca:ef: db:c0:19:62:50:4a:58:94:b4:dd:38:9f:68:ca:d5: ef:21:64:27:ec:d9:7a:8d:72:5b:f9:46:5d:70:29: 19:6a:62:c0:0d:64:4b:f8:fe:22:c9:97:22:1e:e4: 93:ff:7f:df:06:08:1f:91:05:0e:37:e4:76:fd:fe: 1b:b4:76:3b:3b:36:aa:8e:f8:59:fc:ed:52:53:6d: 13:7d:c6:79:77:28:ce:e5:90:33:6c:bb:67:0c:bf: 01:d5:03:ed:37:11:16:a6:0a:ed:4b:59:79:44:34: 3c:e2:0f:1d:16:65:cd:6b:e2:68:66:9d:57:cf:dd: d9:f2:90:3b:c9:40:1a:57:79:f5:7a:59:1b:19:00: d2:0e:ca:a4:dc:f1:83:34:4c:29:4e:40:15:53:14: 96:a8:ca:81:a4:30:60:13:03:dd:4f:25:cb:3f:dc: cc:0c:e5:95:db:68:f5:12:67:89:85:94:0d:de:d6: 0b:9a:8d:05:04:73:e8:3b:6f:56:9d:04:03:e1:6e: 46:00:5a:5f:ad:7e:45:d9:ea:e3:9e:02:f2:27:ce: a3:6b:0a:6d:07:18:6d:96:a9:b9:4d:16:0d:a8:88: 02:24:80:78:29:f3:92:63:a6:04:0c:30:ed:18:82: cd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8A:23:30:1A:13:5C:0B:35:A1:47:14:0C:5C:E3:77:F4:5F:40:BB X509v3 Authority Key Identifier: keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:fa:6e:76:44:a2:0d:23:85:83:18:f4:d5:0c:b7:aa:4c:2b: e1:4d:37:25:3d:44:3c:b1:90:1b:bb:66:f9:de:2a:6e:fd:ca: 0b:d5:00:52:b6:e9:4b:06:dc:80:c1:58:0b:3a:62:d9:1b:a8: 53:e3:bd:59:4f:df:01:1d:fe:f5:37:26:82:9e:5b:7c:c3:a7: 48:92:b3:4f:56:3f:97:a2:4b:45:3a:79:58:32:47:ed:cb:73: b1:4f:f8:16:bb:49:8f:8e:f4:e1:f2:dd:42:2d:27:e9:ad:63: 8a:a7:4b:20:0b:b1:78:8b:51:03:3d:15:c5:60:98:f8:66:05: ef:e6:6d:96:5c:b4:f0:a5:fc:c4:8d:46:bf:00:0d:ab:77:fc: d5:0d:51:a6:f4:9f:73:93:10:c9:25:5b:bb:d3:53:c9:8e:f9: 09:50:d0:66:9d:19:49:8b:1e:3a:95:8c:a3:bc:3d:49:35:06: 0d:3d:76:bc:ba:dc:76:53:f5:b2:5c:58:a6:16:e2:c4:06:15: 22:4e:cc:2a:7b:41:2d:39:8f:b1:a8:78:6b:68:e9:1b:11:2c: e7:d3:38:66:e8:4b:55:3d:26:72:c1:92:1d:32:35:e5:ba:6f: 6f:b7:d3:74:b5:10:f4:49:55:76:e0:af:81:b0:2d:3b:19:bb: cb:a4:98:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7d4owEJKSzOghJE0qV7Oq5hC/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VBQzNE NTVDM0Q3QTAeFw0yNjA5MjEwMzU2MjRaFw0yNjA5MjIwNDI1MjRaMDMxMTAvBgNV BAMTKDQxOEEyMzMwMUExMzVDMEIzNUExNDcxNDBDNUNFMzc3RjQ1RjQwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4IuVbz8KKVnJBNAvK79vAGWJQ SliUtN04n2jK1e8hZCfs2XqNclv5Rl1wKRlqYsANZEv4/iLJlyIe5JP/f98GCB+R BQ435Hb9/hu0djs7NqqO+Fn87VJTbRN9xnl3KM7lkDNsu2cMvwHVA+03ERamCu1L WXlENDziDx0WZc1r4mhmnVfP3dnykDvJQBpXefV6WRsZANIOyqTc8YM0TClOQBVT FJaoyoGkMGATA91PJcs/3MwM5ZXbaPUSZ4mFlA3e1guajQUEc+g7b1adBAPhbkYA Wl+tfkXZ6uOeAvInzqNrCm0HGG2WqblNFg2oiAIkgHgp85JjpgQMMO0Ygs3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYojMBoTXAs1oUcUDFzjd/RfQLswHwYDVR0j BBgwFoAUslqomZHfgZY9uVrLgCPqw9VcPXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjUzNTVjNWEtZWZjOC00OGY3LTkwMmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5 MURGODE5NjNEQjk1QUNCODAyM0VBQzNENTVDM0Q3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjVBQTg5OTkxREY4MTk2M0RCOTVBQ0I4MDIzRUFDM0Q1NUMz RDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VB QzNENTVDM0Q3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGn6bnZEog0jhYMY9NUMt6pMK+FNNyU9RDyx kBu7ZvneKm79ygvVAFK26UsG3IDBWAs6YtkbqFPjvVlP3wEd/vU3JoKeW3zDp0iS s09WP5eiS0U6eVgyR+3Lc7FP+Ba7SY+O9OHy3UItJ+mtY4qnSyALsXiLUQM9FcVg mPhmBe/mbZZctPCl/MSNRr8ADat3/NUNUab0n3OTEMklW7vTU8mO+QlQ0GadGUmL HjqVjKO8PUk1Bg09dry63HZT9bJcWKYW4sQGFSJOzCp7QS05j7GoeGto6RsRLOfT OGboS1U9JnLBkh0yNeW6b2+303S1EPRJVXbgr4GwLTsZu8ukmHc= -----END CERTIFICATE-----Generated at Mon Sep 21 16:08:06 2026 by rpki-client