$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft File: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft (raw, json) Hash identifier: 6rvURoTcR3OvkliOG22zNxktmuz266uh1B0sy8KermI= Subject key identifier: 5F:E4:DC:6D:C2:9B:BA:07:1E:EC:4B:97:C9:82:BF:54:37:07:CE:87 Authority key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 Certificate issuer: /CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Certificate serial: 7C1A566018468B36C84A1C314F0B6471158823DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:39:53 +0000 Manifest this update: Sun 20 Sep 2026 18:34:53 +0000 Manifest next update: Mon 21 Sep 2026 20:04:53 +0000 Files and hashes: 1: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: gPZAQ+bxPkBJwcTxVnEcsmMlAofGkUTs2Mpi2Ou9ROM=) 2: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl (hash: XbFn61+33GMQ2jITENNjlO+wMtKEjaWXfcGQnGOG09E=) 3: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: RZQJpTRRgue7IYV2PEsoGXrZll3cpomqzvFUOIs6rno=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 20:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1a:56:60:18:46:8b:36:c8:4a:1c:31:4f:0b:64:71:15:88:23:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Validity Not Before: Sep 20 18:34:53 2026 GMT Not After : Sep 21 20:04:53 2026 GMT Subject: CN=5FE4DC6DC29BBA071EEC4B97C982BF543707CE87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:cf:33:2d:96:21:b8:77:96:c0:00:3a:d2: 30:bd:8e:55:ca:77:5d:01:97:13:55:91:9e:0c:bc: e2:e5:79:dd:c1:a2:b4:c4:22:6d:62:8f:2d:0d:60: e3:6f:65:4e:a3:5e:e2:78:11:5b:e2:be:0b:23:fa: 38:81:60:21:4b:4f:e1:0d:e6:48:b5:74:d5:cf:84: 73:6b:cc:6a:f4:db:35:3e:25:bb:2c:5f:dd:30:b4: 13:54:89:bc:4a:e6:f6:1b:0f:f4:b8:7f:8a:bc:ef: fc:26:c1:7a:c8:84:de:35:06:c3:74:7a:6f:81:ec: 8f:8e:60:ba:bb:6a:45:98:d6:08:60:44:7f:bc:42: 9b:8b:ee:71:40:09:15:c8:a9:47:86:10:37:3e:76: 64:5a:da:ef:14:60:d3:2b:e4:d3:ce:a4:f4:53:89: 2d:4c:76:18:ef:12:c3:15:ef:f0:7b:f5:39:c0:5c: a1:95:bf:dc:ca:e7:56:38:fa:79:5c:42:c0:e5:c9: 6d:4f:33:58:45:f7:41:87:a3:7e:17:93:46:98:02: dd:e7:12:d3:67:28:0f:69:4b:d1:5d:58:1c:7b:09: 7b:39:ac:c2:62:f5:a9:91:0c:fc:72:df:b0:48:27: 1d:77:c7:e2:fe:63:e8:ed:0a:ef:ed:df:33:2d:af: 32:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E4:DC:6D:C2:9B:BA:07:1E:EC:4B:97:C9:82:BF:54:37:07:CE:87 X509v3 Authority Key Identifier: keyid:25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9a:40:3f:6a:fe:fa:37:9a:e0:21:68:38:2b:f2:48:e5:18: 0a:54:4d:85:e3:a9:0b:14:64:95:8a:81:a4:d2:1c:59:ea:49: 9f:38:cf:e0:44:6c:e9:b6:26:55:29:b8:a6:95:94:ff:7d:5f: ec:93:94:1c:91:f4:3e:72:d5:03:b1:40:fd:5c:0d:09:a8:01: 99:0e:1b:12:af:12:e2:25:36:bf:cc:3e:ea:52:b0:53:72:10: ac:df:80:89:3a:71:5f:a0:32:fd:23:ef:1d:72:47:85:7f:66: c0:89:0b:3c:3d:83:33:85:30:02:39:b5:c7:4f:f5:89:56:19: cd:a4:7e:a8:c6:a3:5c:30:8b:a4:cb:e5:ad:ac:6f:26:9f:7f: 75:17:30:69:48:da:6b:97:71:14:df:a0:db:88:82:bd:b9:c0: ab:02:c1:4f:93:66:11:3e:af:6b:c9:4d:16:4a:0e:d8:8f:5f: d7:0f:73:6c:71:cc:61:d1:ea:f2:2a:b9:a1:7c:8d:7e:22:dc: f0:fe:fa:02:08:db:57:a8:47:a9:f8:c1:2c:6c:79:eb:26:65: 5c:a4:c9:e6:3e:17:90:13:0f:2c:96:15:83:db:32:dd:72:c3: 0d:23:fd:17:83:e5:3d:c1:5a:19:f8:b1:b9:72:56:de:d9:11: 09:2f:c0:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfBpWYBhGizbIShwxTwtkcRWII90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdG QzFFNkY5MzAeFw0yNjA5MjAxODM0NTNaFw0yNjA5MjEyMDA0NTNaMDMxMTAvBgNV BAMTKDVGRTREQzZEQzI5QkJBMDcxRUVDNEI5N0M5ODJCRjU0MzcwN0NFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJA88zLZYhuHeWwAA60jC9jlXK d10BlxNVkZ4MvOLled3BorTEIm1ijy0NYONvZU6jXuJ4EVvivgsj+jiBYCFLT+EN 5ki1dNXPhHNrzGr02zU+JbssX90wtBNUibxK5vYbD/S4f4q87/wmwXrIhN41BsN0 em+B7I+OYLq7akWY1ghgRH+8QpuL7nFACRXIqUeGEDc+dmRa2u8UYNMr5NPOpPRT iS1MdhjvEsMV7/B79TnAXKGVv9zK51Y4+nlcQsDlyW1PM1hF90GHo34Xk0aYAt3n EtNnKA9pS9FdWBx7CXs5rMJi9amRDPxy37BIJx13x+L+Y+jtCu/t3zMtrzIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX+TcbcKbugce7EuXyYK/VDcHzocwHwYDVR0j BBgwFoAUJXr97p+h7WxVq/DAzPFz5/web5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZmNzUwMjEtODM2OC00NDgxLTkyNjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5 RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdGQzFFNkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTdBRkRFRTlGQTFFRDZDNTVBQkYwQzBDQ0YxNzNFN0ZDMUU2 RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTcz RTdGQzFFNkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWaQD9q/vo3muAhaDgr8kjlGApUTYXjqQsU ZJWKgaTSHFnqSZ84z+BEbOm2JlUpuKaVlP99X+yTlByR9D5y1QOxQP1cDQmoAZkO GxKvEuIlNr/MPupSsFNyEKzfgIk6cV+gMv0j7x1yR4V/ZsCJCzw9gzOFMAI5tcdP 9YlWGc2kfqjGo1wwi6TL5a2sbyaff3UXMGlI2muXcRTfoNuIgr25wKsCwU+TZhE+ r2vJTRZKDtiPX9cPc2xxzGHR6vIquaF8jX4i3PD++gII21eoR6n4wSxseesmZVyk yeY+F5ATDyyWFYPbMt1yww0j/ReD5T3BWhn4sblyVt7ZEQkvwAw= -----END CERTIFICATE-----Generated at Mon Sep 21 13:37:03 2026 by rpki-client