$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft File: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft (raw, json) Hash identifier: YGIglyWXrgDScS4K2jEHlcYeOo/8ibTJrKUv3FE/++o= Subject key identifier: DC:80:77:2A:FB:4F:A4:CD:D5:88:6E:43:DF:17:7C:6B:42:36:6D:DA Authority key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 Certificate issuer: /CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Certificate serial: 2C33898193D68AA92C28B90AE3C18C1F62E2DCFF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 03:40:23 +0000 Manifest this update: Tue 21 Jul 2026 03:35:23 +0000 Manifest next update: Wed 22 Jul 2026 04:36:23 +0000 Files and hashes: 1: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl (hash: wwZUcv2S4lnTYBPpSbyv+OGmBFwbFExPDHTj/fjXCpQ=) 2: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: Fn5PKzmC7YA1TbvzOZXs3Jzaa7OB0gZmLLWwdOBo6Sk=) 3: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: 2ZgfJvyLTSbmKyjhb50szLtpeLkF+krwXndUc1mrD0c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:33:89:81:93:d6:8a:a9:2c:28:b9:0a:e3:c1:8c:1f:62:e2:dc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Validity Not Before: Jul 21 03:35:23 2026 GMT Not After : Jul 22 04:36:23 2026 GMT Subject: CN=DC80772AFB4FA4CDD5886E43DF177C6B42366DDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:f8:91:5a:9a:06:66:8f:a3:4d:de:5e:b6: 7f:89:cb:89:ed:2d:5b:2c:b6:d6:09:fe:09:8e:c7: 18:56:ef:d9:16:b7:a9:05:c6:9a:f0:03:ea:78:e5: 94:32:8b:e9:9c:9f:76:f3:94:f0:2b:ce:d8:d7:23: d0:55:ff:d5:56:20:6a:5e:59:3d:77:ca:b5:2b:47: 7b:12:7e:e9:5d:9a:75:cf:06:98:63:53:21:99:1b: c9:81:54:14:56:6b:5b:27:42:93:b6:1d:11:80:8e: 76:8b:36:b8:f6:ae:3f:8d:9d:d9:3c:05:4b:ab:18: 04:e8:35:2c:56:72:6e:4c:0c:2c:86:fd:70:31:e6: 8d:46:50:29:d3:9b:be:8e:83:39:1e:f3:8c:c2:9c: 6c:df:0f:06:e6:cb:ea:bb:01:f3:01:5a:1c:d5:b9: 7e:5e:95:88:e4:ba:c0:cc:f7:23:fe:8f:f1:b5:b6: c6:af:09:5f:3b:64:96:c1:e6:f6:fc:24:fb:8f:ec: 01:3d:56:78:fb:8b:f6:57:b2:70:74:a5:07:d1:c1: d0:4a:cb:cb:b6:fc:88:f9:73:b0:b1:0e:3a:d6:99: d4:d9:83:1c:aa:d8:71:89:4d:2b:82:bd:b6:af:00: 04:90:49:f1:4f:01:c1:3b:54:69:aa:f8:a4:38:16: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:80:77:2A:FB:4F:A4:CD:D5:88:6E:43:DF:17:7C:6B:42:36:6D:DA X509v3 Authority Key Identifier: keyid:72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:35:ea:1d:14:6f:18:9e:bc:74:bf:fe:58:a0:3e:fa:29:c3: 05:0c:9d:b0:c2:f3:41:03:09:ca:d3:3c:2c:24:63:a0:b0:d4: 36:85:ba:f3:6c:9f:b6:c9:5a:12:88:18:a2:aa:54:d5:df:5b: 90:72:84:98:b9:8c:18:60:04:c1:f8:9c:45:23:81:3c:96:4e: c2:44:25:15:a8:71:0d:d7:46:ba:35:c2:57:34:dc:a6:53:4d: 76:f3:8b:7b:67:19:79:d5:1d:58:ed:f3:57:f5:3d:74:3c:55: c4:61:2c:dc:17:96:1f:5f:9c:8e:66:be:2b:93:fb:92:af:17: a6:00:65:d9:76:ab:ae:c6:47:1e:8d:ea:32:67:29:d9:72:8d: 04:58:f2:93:3a:76:5d:39:ba:f3:a8:7e:a7:63:9e:14:55:e7: 45:09:5c:7a:68:a9:34:ca:1d:7b:08:b0:a5:99:bc:f8:24:6e: 64:c6:a3:51:f8:c0:82:e2:75:03:51:0f:63:24:d4:4d:66:28: 96:c7:9d:b7:10:5c:9e:f2:be:20:36:a7:ea:d2:56:30:29:f3: b8:4b:2f:56:a3:c2:70:27:78:e5:27:34:05:ba:27:89:4d:45: 23:bb:f0:c1:ad:b8:5b:d7:72:06:27:a6:b5:6d:59:d1:1f:d3: c6:6b:56:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDOJgZPWiqksKLkK48GMH2Li3P8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1 QzQ2MEE5NzAeFw0yNjA3MjEwMzM1MjNaFw0yNjA3MjIwNDM2MjNaMDMxMTAvBgNV BAMTKERDODA3NzJBRkI0RkE0Q0RENTg4NkU0M0RGMTc3QzZCNDIzNjZEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4NviRWpoGZo+jTd5etn+Jy4nt LVssttYJ/gmOxxhW79kWt6kFxprwA+p45ZQyi+mcn3bzlPArztjXI9BV/9VWIGpe WT13yrUrR3sSfuldmnXPBphjUyGZG8mBVBRWa1snQpO2HRGAjnaLNrj2rj+Nndk8 BUurGAToNSxWcm5MDCyG/XAx5o1GUCnTm76Ogzke84zCnGzfDwbmy+q7AfMBWhzV uX5elYjkusDM9yP+j/G1tsavCV87ZJbB5vb8JPuP7AE9Vnj7i/ZXsnB0pQfRwdBK y8u2/Ij5c7CxDjrWmdTZgxyq2HGJTSuCvbavAASQSfFPAcE7VGmq+KQ4FnVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3IB3KvtPpM3ViG5D3xd8a0I2bdowHwYDVR0j BBgwFoAUclGJ2+fZZENqhfrB/DPlv1xGCpcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1NGI0ZTItMmU1OC00NjViLWFmYWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJF N0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1QzQ2MEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUxODlEQkU3RDk2NDQzNkE4NUZBQzFGQzMzRTVCRjVDNDYw QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1 QkY1QzQ2MEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACI16h0UbxievHS//ligPvopwwUMnbDC80ED CcrTPCwkY6Cw1DaFuvNsn7bJWhKIGKKqVNXfW5ByhJi5jBhgBMH4nEUjgTyWTsJE JRWocQ3XRro1wlc03KZTTXbzi3tnGXnVHVjt81f1PXQ8VcRhLNwXlh9fnI5mviuT +5KvF6YAZdl2q67GRx6N6jJnKdlyjQRY8pM6dl05uvOofqdjnhRV50UJXHpoqTTK HXsIsKWZvPgkbmTGo1H4wILidQNRD2Mk1E1mKJbHnbcQXJ7yviA2p+rSVjAp87hL L1ajwnAneOUnNAW6J4lNRSO78MGtuFvXcgYnprVtWdEf08ZrVpo= -----END CERTIFICATE-----Generated at Tue Jul 21 08:23:16 2026 by rpki-client