$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft File: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft (raw, json) Hash identifier: cLFuAx2obGCPQ9TrYeBzNmaA3PbxqoV8/Nw48mKBP7c= Subject key identifier: 57:DD:CF:FD:70:A0:B2:B4:AE:D8:10:6A:54:B7:FC:F8:64:8A:AC:96 Authority key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 Certificate issuer: /CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Certificate serial: 1C19602521E3AFAC6890A7F77B5173CD96CF4EAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft Manifest number: BE Signing time: Sun 20 Sep 2026 19:30:55 +0000 Manifest this update: Sun 20 Sep 2026 19:25:55 +0000 Manifest next update: Mon 21 Sep 2026 22:19:55 +0000 Files and hashes: 1: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl (hash: kJ3cVQoWwKNY0BttO0trcNt9jGFQR+paj7FDOmIBJgI=) 2: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: Fn5PKzmC7YA1TbvzOZXs3Jzaa7OB0gZmLLWwdOBo6Sk=) 3: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: 2ZgfJvyLTSbmKyjhb50szLtpeLkF+krwXndUc1mrD0c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:19:60:25:21:e3:af:ac:68:90:a7:f7:7b:51:73:cd:96:cf:4e:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Validity Not Before: Sep 20 19:25:55 2026 GMT Not After : Sep 21 22:19:55 2026 GMT Subject: CN=57DDCFFD70A0B2B4AED8106A54B7FCF8648AAC96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:1d:c2:16:cf:e4:0d:b9:39:2f:53:50:2b: 81:f9:0e:e8:27:50:9b:e3:80:75:24:d3:e3:83:29: 34:dc:76:e3:48:12:ba:6c:d5:e0:29:3f:38:e9:80: cc:13:ee:9e:6d:76:4f:0e:b7:21:73:fd:81:e6:07: ef:57:52:3f:fc:64:62:7a:33:9f:a2:6c:cb:ba:08: 59:02:02:09:23:21:a8:44:9e:cd:32:ef:b2:fe:0a: 61:f4:f6:f5:59:a3:75:a7:df:92:6c:ac:b6:b4:09: 02:5e:29:67:92:30:f6:50:55:2d:fa:39:20:55:51: ca:5d:88:5f:02:44:84:af:df:85:59:b3:46:fd:44: 21:83:51:e6:d2:c5:0c:d5:2d:c0:dc:54:6e:4f:d7: 8c:d2:6d:9a:3d:1b:bb:5e:53:c8:dc:18:b4:85:32: d7:58:b4:e3:05:7a:2d:e1:31:04:e8:f0:31:2b:5d: 5c:31:65:09:1d:cd:14:12:9b:8f:50:45:e8:52:3c: 8c:c8:04:db:0d:ca:06:8e:1e:6f:77:a8:ef:b6:8c: 59:4b:72:3d:a4:a4:65:25:a9:d4:b6:8a:a8:26:5c: 89:6e:c1:5f:c0:cc:70:30:88:49:48:b1:02:ee:ad: b0:be:59:3a:0a:c7:f1:4f:6c:d3:be:5e:0f:c2:32: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DD:CF:FD:70:A0:B2:B4:AE:D8:10:6A:54:B7:FC:F8:64:8A:AC:96 X509v3 Authority Key Identifier: keyid:72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:ef:64:a4:89:1d:75:ba:12:ec:b4:da:8f:47:b0:84:30:2b: f0:ca:a6:2d:3c:9d:98:2a:fd:04:da:b5:5e:3f:6f:14:b1:c8: c8:43:96:05:9d:50:11:af:c5:89:40:81:6e:41:48:62:a9:76: 69:2d:8d:f7:46:01:dc:f3:4d:c2:9f:68:a0:68:2b:3a:ac:b2: e9:f5:0a:e2:c3:27:47:cf:8d:8b:79:df:2b:e3:51:f7:53:db: 17:a1:5b:68:e4:6f:44:cb:7d:a5:60:ab:0f:0a:22:ce:f4:58: 03:61:f3:b5:40:6c:f4:5c:24:b2:b7:ee:d3:0b:4d:2b:26:cf: ad:71:49:c2:4a:96:c7:84:6c:ec:71:c8:b3:d8:47:39:98:93: 30:ce:cf:2d:28:7f:59:8d:96:3a:10:65:8a:a9:30:1d:87:5f: b6:dc:a2:88:68:31:2c:21:4e:af:2a:b7:ef:b6:60:69:06:16: 26:ea:96:55:d9:cb:77:13:69:f1:50:a2:4c:ea:c7:d8:f9:65: 71:0c:fb:b5:42:94:7a:54:df:26:18:b0:2f:21:66:c7:f9:aa: 86:f9:39:58:37:ba:e0:7f:d8:a3:2a:04:b4:a7:9d:b2:da:78: d8:b9:7a:31:f6:14:7e:53:06:3d:16:e9:e1:89:e9:75:7c:40: 88:cc:36:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBlgJSHjr6xokKf3e1FzzZbPTqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1 QzQ2MEE5NzAeFw0yNjA5MjAxOTI1NTVaFw0yNjA5MjEyMjE5NTVaMDMxMTAvBgNV BAMTKDU3RERDRkZENzBBMEIyQjRBRUQ4MTA2QTU0QjdGQ0Y4NjQ4QUFDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hR3CFs/kDbk5L1NQK4H5Dugn UJvjgHUk0+ODKTTcduNIErps1eApPzjpgMwT7p5tdk8OtyFz/YHmB+9XUj/8ZGJ6 M5+ibMu6CFkCAgkjIahEns0y77L+CmH09vVZo3Wn35JsrLa0CQJeKWeSMPZQVS36 OSBVUcpdiF8CRISv34VZs0b9RCGDUebSxQzVLcDcVG5P14zSbZo9G7teU8jcGLSF MtdYtOMFei3hMQTo8DErXVwxZQkdzRQSm49QRehSPIzIBNsNygaOHm93qO+2jFlL cj2kpGUlqdS2iqgmXIluwV/AzHAwiElIsQLurbC+WToKx/FPbNO+Xg/CMlLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV93P/XCgsrSu2BBqVLf8+GSKrJYwHwYDVR0j BBgwFoAUclGJ2+fZZENqhfrB/DPlv1xGCpcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1NGI0ZTItMmU1OC00NjViLWFmYWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJF N0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1QzQ2MEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUxODlEQkU3RDk2NDQzNkE4NUZBQzFGQzMzRTVCRjVDNDYw QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1 QkY1QzQ2MEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMvvZKSJHXW6Euy02o9HsIQwK/DKpi08nZgq /QTatV4/bxSxyMhDlgWdUBGvxYlAgW5BSGKpdmktjfdGAdzzTcKfaKBoKzqssun1 CuLDJ0fPjYt53yvjUfdT2xehW2jkb0TLfaVgqw8KIs70WANh87VAbPRcJLK37tML TSsmz61xScJKlseEbOxxyLPYRzmYkzDOzy0of1mNljoQZYqpMB2HX7bcoohoMSwh Tq8qt++2YGkGFibqllXZy3cTafFQokzqx9j5ZXEM+7VClHpU3yYYsC8hZsf5qob5 OVg3uuB/2KMqBLSnnbLaeNi5ejH2FH5TBj0W6eGJ6XV8QIjMNvY= -----END CERTIFICATE-----Generated at Mon Sep 21 09:59:51 2026 by rpki-client