$ rpki-client -vvf rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft File: 25F44906F292384CC9F1BE632798B911BD52EB7E.mft (raw, json) Hash identifier: +nf6SDZRChmk6mntwi/73UnvgPUQKYDNCFY9DLU7vgs= Subject key identifier: 5E:8D:9D:21:73:78:07:09:50:5B:40:A5:4D:36:DD:CD:5B:B3:9F:7E Authority key identifier: 25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E Certificate issuer: /CN=25F44906F292384CC9F1BE632798B911BD52EB7E Certificate serial: 2F4B23F1FEB25F74B9B1D46A9874FC91B4242631 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:18:21 +0000 Manifest this update: Tue 02 Jun 2026 19:13:21 +0000 Manifest next update: Wed 03 Jun 2026 20:06:21 +0000 Files and hashes: 1: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: OF+X7RZ12YwYbIl142vAny0I0e6fiCnAZ2BWIAMpqJs=) 2: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: h0iqFz1JhYFaft+/rI1iyNCYNmEHURL6TWuWP9vtRec=) 3: 25F44906F292384CC9F1BE632798B911BD52EB7E.crl (hash: Jt9T1Z/JKR73le0pjCfBRYAouGbsWEKW6wQHS5iC4vA=) 4: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: K3q/Ez2ylWAHvKZbfEY9nE0ATvil8bcfxJnHQI/5nNA=) 5: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: OzJuT5ZCAhL2UGbM7eynbgVHZM3ndO0ync8Ih0A1zcQ=) 6: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: GGZKA5imIJIaP+Schkic8gBw6IQQgIqOJecWWJTB5T4=) 7: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: rJYDDAtDFH2sxeGVm+q7lH6NoJu3MNVWQxNtL3BpElI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4b:23:f1:fe:b2:5f:74:b9:b1:d4:6a:98:74:fc:91:b4:24:26:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F44906F292384CC9F1BE632798B911BD52EB7E Validity Not Before: Jun 2 19:13:21 2026 GMT Not After : Jun 3 20:06:21 2026 GMT Subject: CN=5E8D9D2173780709505B40A54D36DDCD5BB39F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:22:76:b5:29:49:8b:26:09:ac:4a:b5:1c: 2f:0a:dc:49:02:8f:0e:5b:29:06:34:b1:00:90:b2: 72:b0:cf:88:50:90:39:c3:05:63:f4:c9:38:51:6f: 41:08:9a:f5:8e:3c:95:87:de:6c:0c:33:3a:8a:da: e6:a9:da:c8:e2:0c:51:f6:b5:19:0a:ab:be:bb:6f: f4:03:e1:1f:46:d3:0c:29:92:93:65:4e:32:0e:88: c3:92:f6:3d:1d:44:58:44:8f:54:52:c5:2d:cd:18: ce:fb:07:ed:66:c8:81:30:0b:72:ab:5c:7d:dc:55: df:39:3d:ed:ab:a0:8e:fa:8b:f0:a9:12:32:77:c2: b6:9a:9f:a6:e3:73:8f:19:ec:99:30:8e:d4:d3:86: b7:b4:b8:7a:50:78:11:e3:dd:3e:48:70:26:ca:6d: 8e:c6:68:17:5b:94:cd:e7:a1:83:68:61:26:47:6c: ff:96:83:76:e6:3c:f2:ce:87:e5:52:6c:ba:8b:61: bb:44:19:3c:91:4b:ab:9a:dc:b4:73:a2:b5:ff:0f: 4f:5a:5a:d7:b0:51:2e:39:e9:c1:b6:20:a4:84:ca: 85:81:bf:24:2b:b5:9e:b3:dd:a7:6c:40:6c:b1:e7: 0b:ac:8d:ab:ea:9f:74:6b:fe:e8:70:c1:bb:9d:ad: 77:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8D:9D:21:73:78:07:09:50:5B:40:A5:4D:36:DD:CD:5B:B3:9F:7E X509v3 Authority Key Identifier: keyid:25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c9:a4:82:5b:cd:1b:9d:a6:86:da:a2:06:47:d6:0b:94:d8: 2b:22:96:b0:57:81:6d:39:71:8b:35:5e:ec:99:0d:36:eb:c7: 48:6d:2b:61:61:ab:57:83:ea:ef:e5:8c:3e:c0:3d:73:ec:a0: 71:c2:87:35:c8:26:d9:dc:84:0c:bd:f0:28:c4:9f:e4:c3:bb: 5f:f1:06:85:be:61:76:d9:1e:f0:ac:f8:9f:61:a6:c9:e6:76: b4:16:4a:04:ad:2f:93:64:2f:a4:6b:ba:3f:39:27:b3:05:81: 32:7b:14:d3:0e:73:81:fd:fc:e9:3b:9b:b1:23:72:10:6e:00: c4:03:7f:32:55:42:1a:90:54:52:da:79:bd:3a:e1:c5:31:76: d1:b8:10:33:10:6b:00:93:c5:aa:e5:64:24:1f:c8:fb:44:c7: 84:77:46:36:61:67:31:fb:20:6b:ba:85:54:25:a2:76:56:04: ca:91:0a:4e:f5:8b:3e:c0:10:a1:0b:cc:f0:16:4c:15:11:81: 4d:b4:5b:7a:cd:e9:2f:01:b2:ba:63:c0:36:62:a7:fd:3b:55: 78:98:78:f6:37:6a:06:a2:a6:f9:02:14:10:27:ea:7e:cd:84: fa:68:44:db:e2:0e:26:f3:aa:4b:28:29:9e:b8:b6:b8:78:df: ff:f2:29:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0sj8f6yX3S5sdRqmHT8kbQkJjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFC RDUyRUI3RTAeFw0yNjA2MDIxOTEzMjFaFw0yNjA2MDMyMDA2MjFaMDMxMTAvBgNV BAMTKDVFOEQ5RDIxNzM3ODA3MDk1MDVCNDBBNTREMzZERENENUJCMzlGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+iJ2tSlJiyYJrEq1HC8K3EkC jw5bKQY0sQCQsnKwz4hQkDnDBWP0yThRb0EImvWOPJWH3mwMMzqK2uap2sjiDFH2 tRkKq767b/QD4R9G0wwpkpNlTjIOiMOS9j0dRFhEj1RSxS3NGM77B+1myIEwC3Kr XH3cVd85Pe2roI76i/CpEjJ3wraan6bjc48Z7JkwjtTThre0uHpQeBHj3T5IcCbK bY7GaBdblM3noYNoYSZHbP+Wg3bmPPLOh+VSbLqLYbtEGTyRS6ua3LRzorX/D09a WtewUS456cG2IKSEyoWBvyQrtZ6z3adsQGyx5wusjavqn3Rr/uhwwbudrXchAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXo2dIXN4BwlQW0ClTTbdzVuzn34wHwYDVR0j BBgwFoAUJfRJBvKSOEzJ8b5jJ5i5Eb1S634wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhNDI3NDItODlkMi00OWJiLThhM2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZG MjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFCRDUyRUI3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUY0NDkwNkYyOTIzODRDQzlGMUJFNjMyNzk4QjkxMUJENTJF QjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5 MTFCRDUyRUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbJpIJbzRudpobaogZH1guU2CsilrBXgW05 cYs1XuyZDTbrx0htK2Fhq1eD6u/ljD7APXPsoHHChzXIJtnchAy98CjEn+TDu1/x BoW+YXbZHvCs+J9hpsnmdrQWSgStL5NkL6Rruj85J7MFgTJ7FNMOc4H9/Ok7m7Ej chBuAMQDfzJVQhqQVFLaeb064cUxdtG4EDMQawCTxarlZCQfyPtEx4R3RjZhZzH7 IGu6hVQlonZWBMqRCk71iz7AEKELzPAWTBURgU20W3rN6S8BsrpjwDZip/07VXiY ePY3agaipvkCFBAn6n7NhPpoRNviDibzqksoKZ64trh43//yKeo= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:36 2026 by rpki-client