$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft File: B625426C356E15C795153BAD3E2215D65F219A5E.mft (raw, json) Hash identifier: BrSUs5aLK9AB0YzXJdo7rEciLmXDiqJKBjUG3tU3y+4= Subject key identifier: 04:D0:43:7C:DE:E6:9D:3C:33:63:35:DF:E8:14:D6:57:9F:AE:7C:45 Authority key identifier: B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E Certificate issuer: /CN=B625426C356E15C795153BAD3E2215D65F219A5E Certificate serial: 0B4C7FA4A259B877304074EEB39B6FEBD69B30B4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 23:16:49 +0000 Manifest this update: Wed 02 Sep 2026 23:11:49 +0000 Manifest next update: Fri 04 Sep 2026 01:29:49 +0000 Files and hashes: 1: 3130332e37312e3139312e302f32342d3234203d3e20313335343732.roa (hash: yogWy6TCKxhBmgshrPe2hKjITHvdTQkqQBDI5rFuoa0=) 2: B625426C356E15C795153BAD3E2215D65F219A5E.crl (hash: K1eyuBAnsQ6uUHTCpQO+C1K8D4/ViaMa17Glz+kLau8=) 3: 3130332e37312e3139302e302f32342d3234203d3e20313335343732.roa (hash: qLUNvDfC3gbWxd/hHt1Guse9AQpSMZBZKKbyAr0FqSU=) 4: 3130332e37312e3139302e302f32332d3233203d3e20313335343732.roa (hash: 072PpS8RwhWZ6AW17W786YITh/wBQoWhhmI5PRB/Rfg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4c:7f:a4:a2:59:b8:77:30:40:74:ee:b3:9b:6f:eb:d6:9b:30:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B625426C356E15C795153BAD3E2215D65F219A5E Validity Not Before: Sep 2 23:11:49 2026 GMT Not After : Sep 4 01:29:49 2026 GMT Subject: CN=04D0437CDEE69D3C336335DFE814D6579FAE7C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:1a:b7:03:fb:70:dd:7c:62:61:96:0e:d9: 80:4e:8e:60:61:88:e9:36:97:0c:e2:7a:63:89:ae: a6:2f:f9:29:c0:04:43:33:bb:ef:e3:df:2b:95:d5: 13:c3:e8:c7:0d:d2:02:22:8e:46:2b:2c:81:86:bd: e5:72:6e:52:18:12:55:2a:5f:e7:7b:5c:7b:f3:f2: b3:3d:13:e3:ad:f0:23:67:46:bb:7b:af:7c:f4:3f: 87:a6:ab:bc:3e:11:6f:eb:f9:4d:a0:cf:3b:ba:fa: 97:fd:00:1e:65:2e:5c:7e:00:10:2e:85:dc:e8:d0: 52:39:c2:f2:dd:ed:ef:25:ca:71:6e:02:4b:e6:70: 33:74:c3:e9:a7:04:0a:5e:87:16:d7:66:01:f9:d7: 7e:ca:4c:02:14:c4:72:dc:24:2c:b6:97:7a:db:c8: d1:82:38:f5:b9:1c:dc:cc:9c:c2:f3:5b:00:51:5f: 08:46:85:79:55:4c:99:8e:c4:10:1b:29:79:2e:3d: 29:3f:33:9e:0d:19:d8:06:62:b1:e3:dc:41:e9:51: 2d:bd:11:5e:84:cc:0d:2f:4b:51:0c:21:28:43:e0: d5:f5:ae:fe:61:60:66:71:5d:8f:1a:61:56:7c:a6: 20:28:6e:a6:41:44:47:2a:9e:80:c9:c7:4a:03:b3: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D0:43:7C:DE:E6:9D:3C:33:63:35:DF:E8:14:D6:57:9F:AE:7C:45 X509v3 Authority Key Identifier: keyid:B6:25:42:6C:35:6E:15:C7:95:15:3B:AD:3E:22:15:D6:5F:21:9A:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B625426C356E15C795153BAD3E2215D65F219A5E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/B625426C356E15C795153BAD3E2215D65F219A5E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:41:49:3a:3c:06:9c:03:8a:8b:a3:7f:c6:36:55:98:8f:79: 45:fd:06:50:29:66:a1:1b:df:39:5d:cf:17:99:f8:12:38:32: 0f:31:0d:b1:76:f4:f1:0e:6c:f7:00:1e:7f:73:e0:eb:6e:69: 93:25:55:b0:cb:11:11:14:04:d3:8f:bc:0a:7d:8e:76:70:5f: af:d0:6d:bf:e2:26:8e:f9:0f:80:97:ed:23:3d:3a:6e:7d:9e: dc:fe:59:cc:fc:e0:31:00:5b:b0:f5:d3:2c:68:df:60:8d:c3: 7b:d5:93:8a:e4:5c:b4:18:2a:bd:6f:8b:a4:d8:e6:87:13:f4: 31:52:a0:87:ae:7d:9c:ed:cf:83:c3:85:2b:40:20:e3:ba:1d: b5:32:9b:a8:e7:3a:57:e2:a2:e9:f6:12:55:b0:63:37:06:48: ad:70:e3:22:df:ac:7c:76:f8:7f:ed:33:0c:d4:a5:c1:16:dc: f2:57:a0:70:f7:1a:14:e6:59:32:96:55:1f:7e:22:eb:77:6e: 21:7d:fe:be:cc:70:8d:5b:17:2d:d5:5a:fa:33:2d:cf:bb:08: 4d:6a:f9:dd:bd:66:b8:cd:77:ab:ce:88:61:ca:25:a9:93:e3: 4f:ef:64:99:18:b6:67:6b:91:74:cf:59:70:c7:fe:09:fd:37: 9b:55:75:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC0x/pKJZuHcwQHTus5tv69abMLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1 RjIxOUE1RTAeFw0yNjA5MDIyMzExNDlaFw0yNjA5MDQwMTI5NDlaMDMxMTAvBgNV BAMTKDA0RDA0MzdDREVFNjlEM0MzMzYzMzVERkU4MTRENjU3OUZBRTdDNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7Bq3A/tw3XxiYZYO2YBOjmBh iOk2lwziemOJrqYv+SnABEMzu+/j3yuV1RPD6McN0gIijkYrLIGGveVyblIYElUq X+d7XHvz8rM9E+Ot8CNnRrt7r3z0P4emq7w+EW/r+U2gzzu6+pf9AB5lLlx+ABAu hdzo0FI5wvLd7e8lynFuAkvmcDN0w+mnBApehxbXZgH5137KTAIUxHLcJCy2l3rb yNGCOPW5HNzMnMLzWwBRXwhGhXlVTJmOxBAbKXkuPSk/M54NGdgGYrHj3EHpUS29 EV6EzA0vS1EMIShD4NX1rv5hYGZxXY8aYVZ8piAobqZBREcqnoDJx0oDsykRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBNBDfN7mnTwzYzXf6BTWV5+ufEUwHwYDVR0j BBgwFoAUtiVCbDVuFceVFTutPiIV1l8hml4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGIwNDgwNjQtODdkZS00ZGU3LWIwYmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMz NTZFMTVDNzk1MTUzQkFEM0UyMjE1RDY1RjIxOUE1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNjI1NDI2QzM1NkUxNUM3OTUxNTNCQUQzRTIyMTVENjVGMjE5 QTVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGIwNDgwNjQtODdkZS00ZGU3LWIw YmQtMTJmYTBkZWI4ZTMyLzAvQjYyNTQyNkMzNTZFMTVDNzk1MTUzQkFEM0UyMjE1 RDY1RjIxOUE1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtBSTo8BpwDioujf8Y2VZiPeUX9BlApZqEb 3zldzxeZ+BI4Mg8xDbF29PEObPcAHn9z4OtuaZMlVbDLEREUBNOPvAp9jnZwX6/Q bb/iJo75D4CX7SM9Om59ntz+Wcz84DEAW7D10yxo32CNw3vVk4rkXLQYKr1vi6TY 5ocT9DFSoIeufZztz4PDhStAIOO6HbUym6jnOlfioun2ElWwYzcGSK1w4yLfrHx2 +H/tMwzUpcEW3PJXoHD3GhTmWTKWVR9+Iut3biF9/r7McI1bFy3VWvozLc+7CE1q +d29ZrjNd6vOiGHKJamT40/vZJkYtmdrkXTPWXDH/gn9N5tVdWA= -----END CERTIFICATE-----Generated at Thu Sep 3 05:57:59 2026 by rpki-client