$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft File: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft (raw, json) Hash identifier: WZqhj4zE6yU6uLCGdvKZ3h+q7obsQjWVbMRMrEdLhL4= Subject key identifier: 63:8C:8C:6A:35:4F:FB:CC:8C:1F:05:F9:C0:2F:65:83:2B:6F:06:E4 Authority key identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B Certificate issuer: /CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Certificate serial: 095C9855FF6C5E163679C8AA41BBF7C45247F7C4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:23:50 +0000 Manifest this update: Mon 20 Jul 2026 22:18:50 +0000 Manifest next update: Tue 21 Jul 2026 23:03:50 +0000 Files and hashes: 1: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: thKA0k3SKd9ZuPgdjH+VF43W5Rz/i9a2JTXNPTXM6a0=) 2: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: 0P5qBTgfllLlHCA3nz89Ltdzy1jcnaNNEY3SQXv/0II=) 3: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: OEqKbqVoV+spRdzW+aE4+2tFsdczawhoz6Mphx/Zguc=) 4: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl (hash: tUBnK2vzMJLu51iP6fmIU7fHFJUaUtvqVmDWu9YCtgw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5c:98:55:ff:6c:5e:16:36:79:c8:aa:41:bb:f7:c4:52:47:f7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Validity Not Before: Jul 20 22:18:50 2026 GMT Not After : Jul 21 23:03:50 2026 GMT Subject: CN=638C8C6A354FFBCC8C1F05F9C02F65832B6F06E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5e:00:ce:97:0b:01:db:11:a3:6b:33:9a:f2: d1:95:05:38:2b:74:87:79:43:41:7a:88:8f:2e:35: 7d:0b:04:75:9d:6c:9f:b7:21:ce:0a:a4:77:05:2f: be:f6:9e:2e:b9:fe:16:41:47:e9:ca:d6:bf:65:ec: 03:c8:4f:0e:8e:e7:13:67:38:8e:7e:dc:75:f8:b6: 1b:a8:c5:31:e2:90:27:d6:ca:29:e8:63:3f:2a:05: bb:88:57:3a:89:a1:01:8c:5a:04:76:8b:5f:e4:71: 0e:ea:80:8c:39:00:43:59:c4:15:c8:dc:d3:53:ec: d0:a2:8b:43:b2:2f:9c:3f:29:2e:c4:bd:1f:da:fe: 4e:49:b6:b7:57:78:34:a8:c3:8a:cd:05:b1:a8:1a: 84:3a:0d:0f:56:25:55:f5:17:36:99:c6:20:0a:1a: bb:15:18:22:64:56:a6:78:5e:4f:d0:3d:72:b9:2a: b5:25:fb:d0:0f:ac:25:3e:36:e7:d6:c3:65:be:14: 45:bf:67:10:6d:6b:96:c6:19:b4:84:a6:8b:f3:24: a1:15:b6:4d:ef:1f:45:de:c5:eb:e3:f6:b6:2e:b9: 9a:26:33:97:f0:a9:b0:65:3a:92:b5:14:d7:c9:e4: 9c:e8:45:23:83:30:30:bb:3b:6c:87:d9:df:d4:c8: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8C:8C:6A:35:4F:FB:CC:8C:1F:05:F9:C0:2F:65:83:2B:6F:06:E4 X509v3 Authority Key Identifier: keyid:25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:de:60:7c:93:93:36:62:83:a0:d3:e1:be:d9:d0:2c:71:8d: cc:04:f1:0d:d7:66:ba:59:fa:e8:1c:99:49:dd:11:79:3c:32: 55:08:f3:6b:79:cf:4b:ac:e2:0d:ef:73:a4:e0:51:4a:e0:f1: 02:43:57:4f:82:88:f0:03:60:42:17:a5:ec:de:4d:d3:f8:d6: 7d:bc:b0:bc:0f:b7:cd:c7:fb:ac:b3:a9:20:f2:6b:3d:c6:ee: ca:4a:80:28:93:cd:f0:a3:af:b4:0c:b7:b4:6f:dc:d9:dc:a7: d2:a4:37:4d:5b:7e:53:15:f6:66:15:75:a3:2d:7b:69:c9:31: d6:c1:70:c0:7f:f5:36:10:ea:58:d0:51:39:20:54:3c:94:1d: 8f:60:09:52:93:68:03:0c:fc:55:6f:d2:ed:b2:b0:bf:0d:f7: 86:b8:99:f0:3f:68:70:5f:91:fc:6c:41:c3:86:01:0d:4f:dd: 95:66:7d:4e:bc:35:73:a0:08:d1:cb:49:ac:2f:09:e5:94:e8: 3d:ff:e7:c0:cd:fa:f5:99:05:8c:44:e7:d3:5c:1c:35:7b:47: 5b:3c:0f:be:85:aa:73:fd:08:c2:e3:38:b8:a3:03:5c:e8:6e: 48:7d:05:f9:a3:4c:14:91:1d:91:a3:a7:f2:39:e3:a3:c3:85: c6:a7:d3:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCVyYVf9sXhY2eciqQbv3xFJH98QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NE MEZGM0Y1QjAeFw0yNjA3MjAyMjE4NTBaFw0yNjA3MjEyMzAzNTBaMDMxMTAvBgNV BAMTKDYzOEM4QzZBMzU0RkZCQ0M4QzFGMDVGOUMwMkY2NTgzMkI2RjA2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXgDOlwsB2xGjazOa8tGVBTgr dId5Q0F6iI8uNX0LBHWdbJ+3Ic4KpHcFL772ni65/hZBR+nK1r9l7APITw6O5xNn OI5+3HX4thuoxTHikCfWyinoYz8qBbuIVzqJoQGMWgR2i1/kcQ7qgIw5AENZxBXI 3NNT7NCii0OyL5w/KS7EvR/a/k5JtrdXeDSow4rNBbGoGoQ6DQ9WJVX1FzaZxiAK GrsVGCJkVqZ4Xk/QPXK5KrUl+9APrCU+NufWw2W+FEW/ZxBta5bGGbSEpovzJKEV tk3vH0Xexevj9rYuuZomM5fwqbBlOpK1FNfJ5JzoRSODMDC7O2yH2d/UyKS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4yMajVP+8yMHwX5wC9lgytvBuQwHwYDVR0j BBgwFoAUJd/M6FOTZzBr/pjsvCVLPND/P1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThjMDY4ZGEtZjljNS00MDM2LTg1NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1 MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NEMEZGM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNURGQ0NFODUzOTM2NzMwNkJGRTk4RUNCQzI1NEIzQ0QwRkYz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThjMDY4ZGEtZjljNS00MDM2LTg1 NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRC M0NEMEZGM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHeYHyTkzZig6DT4b7Z0CxxjcwE8Q3XZrpZ +ugcmUndEXk8MlUI82t5z0us4g3vc6TgUUrg8QJDV0+CiPADYEIXpezeTdP41n28 sLwPt83H+6yzqSDyaz3G7spKgCiTzfCjr7QMt7Rv3Nncp9KkN01bflMV9mYVdaMt e2nJMdbBcMB/9TYQ6ljQUTkgVDyUHY9gCVKTaAMM/FVv0u2ysL8N94a4mfA/aHBf kfxsQcOGAQ1P3ZVmfU68NXOgCNHLSawvCeWU6D3/58DN+vWZBYxE59NcHDV7R1s8 D76FqnP9CMLjOLijA1zobkh9BfmjTBSRHZGjp/I546PDhcan08A= -----END CERTIFICATE-----Generated at Tue Jul 21 08:30:34 2026 by rpki-client