$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft File: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft (raw, json) Hash identifier: 45JUTc+0DuTYjpRLyL4sLw1Dbx+roLUmHiUYkkrrcyk= Subject key identifier: 80:FB:F1:D8:C5:B9:70:45:5B:0A:F9:F1:BA:F5:4A:83:E6:5F:8C:C3 Authority key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 Certificate issuer: /CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Certificate serial: 515FA4CD9F66290D73E17583FB54DED6D88AA72E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 10:56:45 +0000 Manifest this update: Wed 04 Nov 2026 10:51:45 +0000 Manifest next update: Thu 05 Nov 2026 11:31:45 +0000 Files and hashes: 1: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: 2ZgfJvyLTSbmKyjhb50szLtpeLkF+krwXndUc1mrD0c=) 2: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl (hash: Pw3oEh350yzyGOg/VUgc3t2OPwHga/FqySyGXoNf1Y8=) 3: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: Fn5PKzmC7YA1TbvzOZXs3Jzaa7OB0gZmLLWwdOBo6Sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5f:a4:cd:9f:66:29:0d:73:e1:75:83:fb:54:de:d6:d8:8a:a7:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Validity Not Before: Nov 4 10:51:45 2026 GMT Not After : Nov 5 11:31:45 2026 GMT Subject: CN=80FBF1D8C5B970455B0AF9F1BAF54A83E65F8CC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:52:4f:9c:b7:be:e7:12:bc:de:ab:87:56:de: 07:85:77:39:55:c5:b1:9d:1d:dd:29:7e:6a:47:76: fd:cd:3e:fb:47:97:d4:0b:1a:d3:06:36:3c:6e:ca: 06:f6:55:19:57:c4:27:c5:20:e7:6e:40:0b:cf:13: ef:47:43:3d:a1:dc:72:ff:9a:38:90:d2:be:2b:ad: 00:d7:91:0e:d2:d3:41:fe:8b:86:b0:ef:04:89:3c: 35:a8:b8:fc:ae:96:48:1d:e1:dc:4d:0e:fe:e0:c7: 6c:75:a9:da:3c:95:53:3b:6c:fc:6e:01:64:bb:c1: 6c:18:45:89:e8:5e:22:7c:4c:be:74:58:2b:e0:14: 4b:1f:6d:4d:94:75:90:5d:1c:3b:60:00:a3:ec:fb: aa:56:98:d9:0c:96:27:44:7c:db:f6:59:c0:bc:90: e6:fb:e9:9f:d4:d4:36:04:05:cb:78:69:fa:5b:85: f0:e4:2e:49:29:c3:1a:f2:a1:86:ec:bf:8e:07:fa: 7a:47:67:e2:73:20:a4:0a:ad:7e:6f:69:76:a2:ae: 74:8a:e1:39:97:97:9a:ed:ac:04:45:67:53:1c:35: 23:43:1f:a4:d6:86:4e:d5:68:c4:a8:4d:d2:dd:44: ce:03:8f:2c:e8:51:57:aa:d2:87:22:44:e3:00:31: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FB:F1:D8:C5:B9:70:45:5B:0A:F9:F1:BA:F5:4A:83:E6:5F:8C:C3 X509v3 Authority Key Identifier: keyid:72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d9:c0:41:2d:cd:4f:92:3a:1b:3f:4f:5b:a5:7a:05:24:b5: 48:95:24:64:41:77:ca:dc:72:84:d0:24:74:1b:b1:ff:1b:82: ee:fd:fe:3a:b6:25:b6:b1:7e:44:20:44:3f:6f:e8:3b:26:f5: ce:96:34:5c:46:44:da:88:69:b1:d8:fb:ee:bf:42:d9:fb:f1: 92:0a:9b:45:a1:c5:14:00:9c:73:56:e2:3b:11:0e:d7:ae:f0: e4:b5:53:f7:af:06:6b:c8:ca:13:1d:e9:09:fd:cd:80:09:be: 55:f4:c4:9e:dd:54:70:ab:93:e6:38:f0:b3:cb:20:4c:c7:42: e6:df:98:16:0f:f6:14:ac:6a:8e:d9:35:97:b5:af:a8:4f:53: 9d:71:f2:ba:2f:e2:7d:a3:cd:d5:e0:94:c0:77:72:dd:88:ab: c7:6a:9d:35:21:eb:91:42:1a:a3:98:de:f7:a8:2f:c6:48:b3: ae:70:83:35:83:8c:d8:e3:9e:2f:5e:ea:3a:c6:d8:42:30:41: 23:f1:0c:36:5c:60:14:95:4a:24:a4:ac:00:11:84:5f:c5:3a: 38:6d:2d:e7:77:70:ac:a6:4e:23:47:ee:73:a6:45:17:55:92: 31:42:e0:0f:2e:c9:a5:f6:b7:3d:a1:13:07:5a:ab:1d:6e:0d: 30:14:15:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUV+kzZ9mKQ1z4XWD+1Te1tiKpy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1 QzQ2MEE5NzAeFw0yNjExMDQxMDUxNDVaFw0yNjExMDUxMTMxNDVaMDMxMTAvBgNV BAMTKDgwRkJGMUQ4QzVCOTcwNDU1QjBBRjlGMUJBRjU0QTgzRTY1RjhDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUk+ct77nErzeq4dW3geFdzlV xbGdHd0pfmpHdv3NPvtHl9QLGtMGNjxuygb2VRlXxCfFIOduQAvPE+9HQz2h3HL/ mjiQ0r4rrQDXkQ7S00H+i4aw7wSJPDWouPyulkgd4dxNDv7gx2x1qdo8lVM7bPxu AWS7wWwYRYnoXiJ8TL50WCvgFEsfbU2UdZBdHDtgAKPs+6pWmNkMlidEfNv2WcC8 kOb76Z/U1DYEBct4afpbhfDkLkkpwxryoYbsv44H+npHZ+JzIKQKrX5vaXairnSK 4TmXl5rtrARFZ1McNSNDH6TWhk7VaMSoTdLdRM4DjyzoUVeq0ociROMAMbwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgPvx2MW5cEVbCvnxuvVKg+ZfjMMwHwYDVR0j BBgwFoAUclGJ2+fZZENqhfrB/DPlv1xGCpcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1NGI0ZTItMmU1OC00NjViLWFmYWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJF N0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1QzQ2MEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUxODlEQkU3RDk2NDQzNkE4NUZBQzFGQzMzRTVCRjVDNDYw QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1 QkY1QzQ2MEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/ZwEEtzU+SOhs/T1ulegUktUiVJGRBd8rc coTQJHQbsf8bgu79/jq2JbaxfkQgRD9v6Dsm9c6WNFxGRNqIabHY++6/Qtn78ZIK m0WhxRQAnHNW4jsRDteu8OS1U/evBmvIyhMd6Qn9zYAJvlX0xJ7dVHCrk+Y48LPL IEzHQubfmBYP9hSsao7ZNZe1r6hPU51x8rov4n2jzdXglMB3ct2Iq8dqnTUh65FC GqOY3veoL8ZIs65wgzWDjNjjni9e6jrG2EIwQSPxDDZcYBSVSiSkrAARhF/FOjht Led3cKymTiNH7nOmRRdVkjFC4A8uyaX2tz2hEwdaqx1uDTAUFZw= -----END CERTIFICATE-----Generated at Wed Nov 4 13:08:17 2026 by rpki-client