$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft File: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft (raw, json) Hash identifier: IA0wNQgoRAZwnsscKXjERVHLbdPivcD78QueM2n7nAI= Subject key identifier: D7:3E:28:76:C8:AB:DC:69:2F:58:A6:AE:19:41:D1:6C:5A:04:7E:F6 Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Certificate serial: ACC7B6F8EE94790FEA416CF0C21CF557053B40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 18:55:01 +0000 Manifest this update: Tue 28 Jul 2026 18:50:01 +0000 Manifest next update: Wed 29 Jul 2026 21:59:01 +0000 Files and hashes: 1: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=) 2: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl (hash: 8CDVj57CmgyO/TEzD9JbrSXLWtcQ0kyyUy+hfQs87ms=) 3: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: NA2vG2Q1kDJqOsypeMdeccP+qZk1Bv6cVc2oTP2Tmkw=) 4: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: Ndn10HkuTSjLbjizNWK1QWx6xtlpc6JAMMmVzvO86rw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ac:c7:b6:f8:ee:94:79:0f:ea:41:6c:f0:c2:1c:f5:57:05:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Validity Not Before: Jul 28 18:50:01 2026 GMT Not After : Jul 29 21:59:01 2026 GMT Subject: CN=D73E2876C8ABDC692F58A6AE1941D16C5A047EF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:4f:4a:7f:a3:67:07:cb:30:3a:0b:e5:0a: 83:88:cb:b3:bd:f5:76:0f:b7:37:79:48:d4:55:7f: ff:01:7b:4d:82:62:91:92:74:24:2a:00:2f:9e:ea: 0e:1b:21:d9:83:93:0e:9e:55:10:51:8f:46:c2:3f: 48:24:ec:14:f9:bd:89:cd:b4:62:d6:60:5f:fd:53: 53:d6:f9:8b:38:40:2c:0b:98:16:56:bc:b2:2e:d4: 2c:d0:85:b5:43:b2:fa:a7:61:d2:db:93:05:81:8e: 53:a2:a6:3d:0f:f1:a2:98:e6:5c:51:a8:e9:44:5f: ee:01:ed:bc:50:79:28:bb:68:0e:04:95:3c:1d:d8: 4c:82:37:0c:01:71:fb:6f:8c:f6:40:48:3d:ad:5e: 2d:c3:8b:40:27:25:a1:a7:1b:7f:30:1c:0b:3b:95: a2:f1:87:0c:d0:7c:c4:a7:66:a2:83:e9:4b:33:1c: ae:0a:dc:74:ca:af:6e:15:b3:cc:19:f5:cf:32:c8: 15:e2:d4:d7:7c:2a:ae:52:6e:2a:9f:38:c6:42:4d: 59:6b:42:4f:4f:99:45:52:62:a8:09:49:a1:1f:bd: 93:05:72:95:8d:ba:8e:a1:f9:40:c9:f1:f3:e9:d9: 90:3d:66:aa:53:08:6f:e5:ac:b9:80:50:2a:ab:4a: 6f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3E:28:76:C8:AB:DC:69:2F:58:A6:AE:19:41:D1:6C:5A:04:7E:F6 X509v3 Authority Key Identifier: keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:57:a0:c7:30:4c:e9:b5:e6:c8:96:ec:a1:4c:0e:c4:57:0d: d7:b4:b4:27:2b:c8:ee:e8:40:36:64:33:b6:79:be:1d:54:a7: 7b:53:5a:1b:07:ed:72:1b:a5:d2:ab:4e:3b:44:e4:f3:10:5b: f7:a4:52:3a:ba:d5:3f:3c:8f:0c:09:01:c0:47:07:25:cd:ed: ad:4f:18:2a:1a:f6:b3:4b:37:87:82:48:2e:a8:fb:b9:77:c6: bd:7b:ef:5a:53:ad:04:12:a3:81:65:6b:bb:0f:2c:21:9f:d7: e3:97:86:a1:c6:dc:0c:15:8f:ca:2b:d6:eb:a6:c0:1e:b4:ac: 52:92:84:39:06:45:91:c4:7f:29:0d:9b:84:b1:39:11:17:c2: 94:c3:71:4f:2e:55:47:b5:61:81:15:4f:68:bb:09:c4:a8:7c: 57:7d:68:98:be:3c:f1:35:84:8c:e2:cc:6a:96:c3:72:a6:d6: 3f:47:72:f5:eb:97:2d:c8:da:71:39:0b:1d:54:5f:64:b6:7a: 99:c6:f4:9e:ae:46:5e:4c:12:d2:2a:63:80:5c:7a:64:03:4f: f1:eb:79:c6:88:97:2e:b5:85:c5:c1:59:aa:19:94:c6:85:a5: 36:73:38:48:3e:cb:92:2e:8d:af:aa:98:05:6d:e3:ce:43:57: f1:10:37:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKzHtvjulHkP6kFs8MIc9VcFO0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VBQzNE NTVDM0Q3QTAeFw0yNjA3MjgxODUwMDFaFw0yNjA3MjkyMTU5MDFaMDMxMTAvBgNV BAMTKEQ3M0UyODc2QzhBQkRDNjkyRjU4QTZBRTE5NDFEMTZDNUEwNDdFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBmE9Kf6NnB8swOgvlCoOIy7O9 9XYPtzd5SNRVf/8Be02CYpGSdCQqAC+e6g4bIdmDkw6eVRBRj0bCP0gk7BT5vYnN tGLWYF/9U1PW+Ys4QCwLmBZWvLIu1CzQhbVDsvqnYdLbkwWBjlOipj0P8aKY5lxR qOlEX+4B7bxQeSi7aA4ElTwd2EyCNwwBcftvjPZASD2tXi3Di0AnJaGnG38wHAs7 laLxhwzQfMSnZqKD6UszHK4K3HTKr24Vs8wZ9c8yyBXi1Nd8Kq5SbiqfOMZCTVlr Qk9PmUVSYqgJSaEfvZMFcpWNuo6h+UDJ8fPp2ZA9ZqpTCG/lrLmAUCqrSm+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1z4odsir3GkvWKauGUHRbFoEfvYwHwYDVR0j BBgwFoAUslqomZHfgZY9uVrLgCPqw9VcPXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjUzNTVjNWEtZWZjOC00OGY3LTkwMmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5 MURGODE5NjNEQjk1QUNCODAyM0VBQzNENTVDM0Q3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjVBQTg5OTkxREY4MTk2M0RCOTVBQ0I4MDIzRUFDM0Q1NUMz RDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VB QzNENTVDM0Q3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADhXoMcwTOm15siW7KFMDsRXDde0tCcryO7o QDZkM7Z5vh1Up3tTWhsH7XIbpdKrTjtE5PMQW/ekUjq61T88jwwJAcBHByXN7a1P GCoa9rNLN4eCSC6o+7l3xr1771pTrQQSo4Fla7sPLCGf1+OXhqHG3AwVj8or1uum wB60rFKShDkGRZHEfykNm4SxOREXwpTDcU8uVUe1YYEVT2i7CcSofFd9aJi+PPE1 hIzizGqWw3Km1j9HcvXrly3I2nE5Cx1UX2S2epnG9J6uRl5MEtIqY4BcemQDT/Hr ecaIly61hcXBWaoZlMaFpTZzOEg+y5Iuja+qmAVt485DV/EQN+Y= -----END CERTIFICATE-----Generated at Wed Jul 29 11:42:54 2026 by rpki-client