$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft File: 25F44906F292384CC9F1BE632798B911BD52EB7E.mft (raw, json) Hash identifier: niIJFbUjyZUc5aSXlDywo7SlOveGKT+w8JZlKowdTco= Subject key identifier: 22:C8:29:F9:02:30:22:DB:49:98:39:88:AF:8C:8F:C6:51:7E:FA:A2 Authority key identifier: 25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E Certificate issuer: /CN=25F44906F292384CC9F1BE632798B911BD52EB7E Certificate serial: 4FCA1926B2D06DC0A3FA0222BA692A8EF49C9CE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 20:31:37 +0000 Manifest this update: Mon 20 Jul 2026 20:26:37 +0000 Manifest next update: Tue 21 Jul 2026 21:10:37 +0000 Files and hashes: 1: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: GGZKA5imIJIaP+Schkic8gBw6IQQgIqOJecWWJTB5T4=) 2: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: OzJuT5ZCAhL2UGbM7eynbgVHZM3ndO0ync8Ih0A1zcQ=) 3: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: h0iqFz1JhYFaft+/rI1iyNCYNmEHURL6TWuWP9vtRec=) 4: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: rJYDDAtDFH2sxeGVm+q7lH6NoJu3MNVWQxNtL3BpElI=) 5: 25F44906F292384CC9F1BE632798B911BD52EB7E.crl (hash: f+8YsgqqYyojHBxp3Rd3ilqbQSK1/p5mCG0vgoZ23z8=) 6: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: K3q/Ez2ylWAHvKZbfEY9nE0ATvil8bcfxJnHQI/5nNA=) 7: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: OF+X7RZ12YwYbIl142vAny0I0e6fiCnAZ2BWIAMpqJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 21:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ca:19:26:b2:d0:6d:c0:a3:fa:02:22:ba:69:2a:8e:f4:9c:9c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F44906F292384CC9F1BE632798B911BD52EB7E Validity Not Before: Jul 20 20:26:37 2026 GMT Not After : Jul 21 21:10:37 2026 GMT Subject: CN=22C829F9023022DB49983988AF8C8FC6517EFAA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:73:73:f9:a9:d0:fd:72:d5:b9:04:c5:60: 7b:5a:f3:66:36:45:d2:b4:32:fb:21:09:da:bd:27: 56:3b:b0:b0:29:60:83:87:75:87:30:e6:58:eb:4f: be:ad:b5:10:b1:5e:ed:c3:13:73:d5:e2:d2:21:c5: 63:c8:4e:dd:55:b6:fb:94:d7:c5:65:51:87:af:8b: 2a:42:61:fd:e6:23:e0:32:5f:c1:e3:14:ef:b4:e0: 11:c9:23:66:19:17:a4:6f:30:3c:c0:0e:69:a0:3e: be:46:69:eb:ea:cc:c2:33:55:cd:de:c9:ac:dd:12: 71:8a:45:42:4a:5d:eb:1c:2c:e6:ad:0e:e7:0f:d0: b9:df:3d:0d:65:65:90:01:7b:45:dd:dd:86:76:3c: c3:be:f6:ac:9d:3c:8c:40:e8:bf:68:a9:9c:1b:40: d7:62:29:bf:b6:73:63:74:c8:67:d6:19:db:44:e5: 24:f3:1a:cb:7f:33:81:09:03:e0:4e:61:67:9f:29: 6e:85:7e:a0:68:39:05:5f:ae:79:3b:d9:cb:c4:ba: d9:78:a2:8b:6d:ed:2c:ed:77:7f:31:e0:89:ef:6b: 0a:8d:51:08:e7:22:bc:92:04:7f:ca:f9:17:73:a6: 82:84:2d:da:e1:a7:5f:75:2e:db:34:62:f5:b3:3a: ef:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C8:29:F9:02:30:22:DB:49:98:39:88:AF:8C:8F:C6:51:7E:FA:A2 X509v3 Authority Key Identifier: keyid:25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:51:13:89:b0:18:50:5e:7b:98:ea:57:9c:38:9a:d4:55:ee: 48:57:3f:71:cf:db:5b:16:a1:85:81:42:c5:b7:3f:42:16:3e: 0f:20:24:66:a2:a0:a9:43:62:b9:1c:01:48:cb:20:4f:c3:be: c7:ea:9f:e3:62:33:c2:24:83:fc:99:1d:cb:30:6f:b3:35:e8: 42:52:0b:7e:1b:e4:1e:03:53:0d:de:d9:a0:aa:fb:96:70:42: fb:da:ad:d4:87:ff:68:a9:b1:63:8b:d8:aa:4b:60:51:a2:3c: 53:12:d4:77:ec:06:8d:3f:a6:8e:4c:b3:54:1b:f8:6d:82:89: 9b:73:ff:54:60:84:8b:92:ab:9e:e1:b6:11:1c:1a:29:72:5a: 57:8f:8c:d9:38:54:5f:a4:21:0c:d9:07:61:6e:e0:5f:3e:e6: 87:f8:27:12:14:1d:02:71:dc:4a:2c:42:26:cb:99:7e:4f:47: 1b:ae:21:0a:9e:e2:5f:30:cb:ed:ac:46:9b:16:b6:46:0c:d9: 55:65:18:8f:97:69:55:c9:c3:7b:44:6c:e8:55:d5:cd:06:50: 69:7a:f3:0c:6e:57:dc:8d:4e:d6:2b:b7:02:9d:43:be:fe:47: 91:4c:9b:8b:30:02:0e:b5:53:b9:ff:2b:eb:e2:70:da:2f:26: 37:0c:9b:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8oZJrLQbcCj+gIiumkqjvScnOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFC RDUyRUI3RTAeFw0yNjA3MjAyMDI2MzdaFw0yNjA3MjEyMTEwMzdaMDMxMTAvBgNV BAMTKDIyQzgyOUY5MDIzMDIyREI0OTk4Mzk4OEFGOEM4RkM2NTE3RUZBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqXNz+anQ/XLVuQTFYHta82Y2 RdK0MvshCdq9J1Y7sLApYIOHdYcw5ljrT76ttRCxXu3DE3PV4tIhxWPITt1VtvuU 18VlUYeviypCYf3mI+AyX8HjFO+04BHJI2YZF6RvMDzADmmgPr5GaevqzMIzVc3e yazdEnGKRUJKXescLOatDucP0LnfPQ1lZZABe0Xd3YZ2PMO+9qydPIxA6L9oqZwb QNdiKb+2c2N0yGfWGdtE5STzGst/M4EJA+BOYWefKW6FfqBoOQVfrnk72cvEutl4 oott7Sztd38x4InvawqNUQjnIrySBH/K+RdzpoKELdrhp191Lts0YvWzOu8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIsgp+QIwIttJmDmIr4yPxlF++qIwHwYDVR0j BBgwFoAUJfRJBvKSOEzJ8b5jJ5i5Eb1S634wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhNDI3NDItODlkMi00OWJiLThhM2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZG MjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFCRDUyRUI3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUY0NDkwNkYyOTIzODRDQzlGMUJFNjMyNzk4QjkxMUJENTJF QjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5 MTFCRDUyRUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJRE4mwGFBee5jqV5w4mtRV7khXP3HP21sW oYWBQsW3P0IWPg8gJGaioKlDYrkcAUjLIE/Dvsfqn+NiM8Ikg/yZHcswb7M16EJS C34b5B4DUw3e2aCq+5ZwQvvardSH/2ipsWOL2KpLYFGiPFMS1HfsBo0/po5Ms1Qb +G2CiZtz/1RghIuSq57hthEcGilyWlePjNk4VF+kIQzZB2Fu4F8+5of4JxIUHQJx 3EosQibLmX5PRxuuIQqe4l8wy+2sRpsWtkYM2VVlGI+XaVXJw3tEbOhV1c0GUGl6 8wxuV9yNTtYrtwKdQ77+R5FMm4swAg61U7n/K+vicNovJjcMmxE= -----END CERTIFICATE-----Generated at Tue Jul 21 06:04:11 2026 by rpki-client