$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft File: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft (raw, json) Hash identifier: DHzXWrrRYYOEqSSfWDudKZLtyUVsH1qypwvSZUY2w6k= Subject key identifier: 47:7D:EB:63:5C:95:BC:0E:76:FB:3B:95:DB:6B:58:5D:27:48:72:C2 Authority key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 Certificate issuer: /CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Certificate serial: 2B13B432DA325F250E61B2C16FF2E2E271BDCBCF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 16:28:05 +0000 Manifest this update: Wed 02 Sep 2026 16:23:05 +0000 Manifest next update: Thu 03 Sep 2026 19:37:05 +0000 Files and hashes: 1: 3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (hash: RZQJpTRRgue7IYV2PEsoGXrZll3cpomqzvFUOIs6rno=) 2: 257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl (hash: Od7Wv9OVI/RIkclmeZ1O9KviGzZLsajQT1UdSqngNx8=) 3: 3130332e33312e3131392e302f32342d3234203d3e20313530323633.roa (hash: gPZAQ+bxPkBJwcTxVnEcsmMlAofGkUTs2Mpi2Ou9ROM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:13:b4:32:da:32:5f:25:0e:61:b2:c1:6f:f2:e2:e2:71:bd:cb:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93 Validity Not Before: Sep 2 16:23:05 2026 GMT Not After : Sep 3 19:37:05 2026 GMT Subject: CN=477DEB635C95BC0E76FB3B95DB6B585D274872C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:0a:7e:1f:aa:c7:a0:47:b0:97:7b:21:af: f4:c8:3e:9f:d9:c3:fb:be:6b:59:84:e1:b6:54:ed: 85:9d:77:78:89:92:69:c5:88:22:b4:92:cd:86:b4: 19:ff:a8:34:7d:5b:a7:e3:b4:ff:a2:3b:45:96:1e: 58:f2:eb:db:bc:bb:8f:d9:87:27:57:0c:64:e4:3f: e2:7b:c3:2e:ac:a1:e1:1c:d2:c0:e9:d2:82:14:fa: 59:57:c0:95:d7:c5:f3:fc:fb:38:cd:bd:b2:b8:24: 51:01:4d:f3:37:90:e9:4d:6e:97:62:e0:09:18:67: e1:06:1f:44:88:ce:49:1e:b4:10:fa:e1:89:fe:04: ec:14:b9:0a:1f:f8:4a:4b:f0:38:82:5b:81:ca:c2: ea:3a:63:30:4e:56:1f:20:b1:4f:66:e1:13:da:00: 71:a1:a4:ad:22:e4:11:5c:69:2d:41:92:ac:77:09: 54:b3:04:46:73:80:83:46:ad:1f:62:dc:44:d3:47: cc:5b:91:6e:2d:51:70:7d:d5:dd:09:b3:51:fa:9c: 11:24:bf:6c:0c:1c:f6:6a:48:ee:7f:47:93:8e:4b: bb:fb:fd:3f:ea:ae:a4:bc:39:db:9c:12:a3:dc:87: 11:94:1b:51:6e:22:c8:c8:ec:10:95:76:8b:55:7f: 18:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7D:EB:63:5C:95:BC:0E:76:FB:3B:95:DB:6B:58:5D:27:48:72:C2 X509v3 Authority Key Identifier: keyid:25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:6a:73:43:1e:7b:a3:7e:b7:41:93:c8:ff:07:8d:8c:05:03: b2:eb:05:44:b2:94:e5:10:86:63:12:cb:50:41:99:8a:42:ad: e6:c2:fa:19:a2:70:97:c9:f0:38:a9:d7:4b:4d:de:e2:b1:83: f4:31:b7:b5:ec:fe:db:35:01:1f:3b:30:84:02:8f:d5:3b:ac: dd:7a:08:fe:06:68:a1:49:08:56:be:33:f7:2c:05:0e:54:b9: 9c:55:9c:76:ea:dc:45:f4:2f:ff:19:8e:f7:7d:58:4d:c7:a5: 7f:1c:5a:45:75:49:a8:58:46:4a:f3:0b:c7:87:ba:ff:b4:f8: f4:e8:9e:31:01:da:f5:39:b1:31:21:37:2c:bc:b1:03:ed:46: cb:74:99:b5:ec:59:f5:b3:bc:86:00:c0:d5:a7:fd:19:cd:f3: 2f:ae:b7:67:14:7c:73:4d:ff:81:48:5f:ab:4d:d8:1a:c1:40: 9c:07:c0:03:61:11:a0:db:9f:0d:7f:cc:bf:9b:dc:92:4c:d0: aa:57:d3:3b:58:90:89:12:b1:e6:ac:40:b9:9d:46:58:52:ef: a2:73:a0:8e:9e:47:7f:0f:69:80:d0:0c:d1:9b:a8:17:51:f8: 00:cd:ee:3c:7a:b5:b0:5d:b3:9b:41:6f:eb:ba:81:88:45:ac: ba:78:c4:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKxO0MtoyXyUOYbLBb/Li4nG9y88wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdG QzFFNkY5MzAeFw0yNjA5MDIxNjIzMDVaFw0yNjA5MDMxOTM3MDVaMDMxMTAvBgNV BAMTKDQ3N0RFQjYzNUM5NUJDMEU3NkZCM0I5NURCNkI1ODVEMjc0ODcyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uAp+H6rHoEewl3shr/TIPp/Z w/u+a1mE4bZU7YWdd3iJkmnFiCK0ks2GtBn/qDR9W6fjtP+iO0WWHljy69u8u4/Z hydXDGTkP+J7wy6soeEc0sDp0oIU+llXwJXXxfP8+zjNvbK4JFEBTfM3kOlNbpdi 4AkYZ+EGH0SIzkketBD64Yn+BOwUuQof+EpL8DiCW4HKwuo6YzBOVh8gsU9m4RPa AHGhpK0i5BFcaS1Bkqx3CVSzBEZzgINGrR9i3ETTR8xbkW4tUXB91d0Js1H6nBEk v2wMHPZqSO5/R5OOS7v7/T/qrqS8OducEqPchxGUG1FuIsjI7BCVdotVfxh1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR33rY1yVvA52+zuV22tYXSdIcsIwHwYDVR0j BBgwFoAUJXr97p+h7WxVq/DAzPFz5/web5MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTZmNzUwMjEtODM2OC00NDgxLTkyNjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5 RkExRUQ2QzU1QUJGMEMwQ0NGMTczRTdGQzFFNkY5My5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTdBRkRFRTlGQTFFRDZDNTVBQkYwQzBDQ0YxNzNFN0ZDMUU2 RjkzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTZmNzUwMjEtODM2OC00NDgxLTky NjktNTk4MGQ2ZjcyOTVlLzAvMjU3QUZERUU5RkExRUQ2QzU1QUJGMEMwQ0NGMTcz RTdGQzFFNkY5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhqc0Mee6N+t0GTyP8HjYwFA7LrBUSylOUQ hmMSy1BBmYpCrebC+hmicJfJ8Dip10tN3uKxg/Qxt7Xs/ts1AR87MIQCj9U7rN16 CP4GaKFJCFa+M/csBQ5UuZxVnHbq3EX0L/8Zjvd9WE3HpX8cWkV1SahYRkrzC8eH uv+0+PTonjEB2vU5sTEhNyy8sQPtRst0mbXsWfWzvIYAwNWn/RnN8y+ut2cUfHNN /4FIX6tN2BrBQJwHwANhEaDbnw1/zL+b3JJM0KpX0ztYkIkSseasQLmdRlhS76Jz oI6eR38PaYDQDNGbqBdR+ADN7jx6tbBds5tBb+u6gYhFrLp4xBc= -----END CERTIFICATE-----Generated at Thu Sep 3 13:00:35 2026 by rpki-client