$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft File: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft (raw, json) Hash identifier: pfTUXOBTTHZcuLI7nPkBYbaV0gRQ9l3xKWFeUt8C9W0= Subject key identifier: FE:06:F4:DE:EE:8B:A3:D2:C1:95:D3:3E:5A:5D:EC:21:C5:85:91:89 Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Certificate serial: 537153068D754DB7032D20F9DC0564C6408D837D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft Manifest number: EA Signing time: Sat 24 Oct 2026 09:25:49 +0000 Manifest this update: Sat 24 Oct 2026 09:20:49 +0000 Manifest next update: Sun 25 Oct 2026 10:31:49 +0000 Files and hashes: 1: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: zEDT0INoIq23WBcFzMUv15oPL7BGutII4EaV+fPSC68=) 2: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: p5VGWtHjvpIWNYWejy2oeQf0oISTWP+7YBr4TnXtjDM=) 3: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: ohDVM2o2IOUVSNhwh1E7felK+Pc0SKnjsPpIi1yZSaw=) 4: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl (hash: 4+4ZCS2IUGrAXgC0t2xeJel23OOeLcqGU+wIRXVlsyo=) 5: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: HwpDGD2SJ/iUFIW/7Q0l9KkQ0CWL7/v9c6sBLXd1KZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 10:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:71:53:06:8d:75:4d:b7:03:2d:20:f9:dc:05:64:c6:40:8d:83:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Validity Not Before: Oct 24 09:20:49 2026 GMT Not After : Oct 25 10:31:49 2026 GMT Subject: CN=FE06F4DEEE8BA3D2C195D33E5A5DEC21C5859189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c4:e5:1f:72:ed:5b:40:73:c6:b8:50:28:2c: 23:96:87:a1:d2:d1:73:db:13:22:27:8b:6f:1f:bb: 4d:a5:36:70:80:43:be:af:c0:47:ba:95:c0:85:d7: 15:35:80:b1:39:02:1b:46:46:49:0c:c6:c9:b9:4b: f1:68:d0:f8:89:77:aa:82:3f:eb:92:00:6d:56:f9: ba:d9:23:3c:b9:c2:10:27:da:52:9d:02:de:ff:2c: f1:32:46:a3:35:bb:9d:38:ff:c5:4b:eb:51:98:08: e9:38:18:8d:ea:02:83:57:98:df:44:f7:3c:ee:9b: 2c:65:5a:6b:1e:7d:90:cf:07:f3:7c:6a:a0:e8:bf: 02:98:a3:6b:3b:79:64:e0:b8:33:eb:64:8f:7e:f7: bc:f8:7c:73:ad:5c:70:f8:c9:0f:16:8f:80:be:95: b3:91:80:15:f5:ab:8e:c8:3a:8f:b9:af:2b:21:ed: da:1c:32:9d:b6:58:72:8b:03:00:97:99:bb:97:93: 90:13:44:38:b6:08:f2:a4:6c:76:e3:4a:f8:64:20: 73:62:7a:fe:ee:b3:23:14:15:f7:37:44:c5:3b:fd: c4:83:a9:51:5b:a2:ef:63:9d:da:f7:27:ae:44:18: 2a:97:02:75:cb:9d:8b:f7:ee:7e:d8:02:51:2b:2e: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:06:F4:DE:EE:8B:A3:D2:C1:95:D3:3E:5A:5D:EC:21:C5:85:91:89 X509v3 Authority Key Identifier: keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b0:6a:99:f0:65:c3:c3:80:5e:eb:85:a4:ed:0b:9b:a4:1c: a6:81:0c:82:23:06:89:f8:89:68:28:39:c3:fc:db:ed:67:2e: f9:06:e1:89:5c:e4:56:15:9e:8c:30:e7:8a:2e:af:3a:a3:2c: 87:84:41:4d:a0:2e:62:35:60:71:b4:59:43:e4:a6:3b:b1:7f: 92:e7:a8:f3:8f:e0:cc:69:18:52:fa:a3:e3:82:2f:de:d1:2e: 52:07:e8:18:92:a6:5d:df:1a:e3:9a:60:f9:34:e4:32:b1:91: d5:1f:d2:3a:87:2c:69:05:4a:62:02:fa:8b:db:56:a1:31:1f: 24:c0:a0:26:3e:91:0c:b7:43:ed:35:2d:b9:d5:f6:2a:b4:54: df:59:b2:25:c1:f1:b5:b9:a1:80:93:75:43:b3:b2:4d:aa:ab: 6b:05:80:94:ce:b7:a5:40:aa:5e:20:06:3a:74:d3:4e:36:82: 8e:27:3c:65:24:64:ad:5a:d7:17:6c:c8:15:b2:c2:f5:05:c7: 4a:4f:b3:9f:1f:ae:86:85:fa:e9:9d:ed:4e:42:38:04:3e:fb: 39:01:6b:9e:22:93:c3:9e:2f:ed:e1:51:c3:42:d1:47:8a:18: d1:0e:23:61:ef:b2:dc:7b:72:3d:a8:b0:74:19:87:6e:ca:7b: ba:ed:c8:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU3FTBo11TbcDLSD53AVkxkCNg30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2 Q0Q4NDExNjAeFw0yNjEwMjQwOTIwNDlaFw0yNjEwMjUxMDMxNDlaMDMxMTAvBgNV BAMTKEZFMDZGNERFRUU4QkEzRDJDMTk1RDMzRTVBNURFQzIxQzU4NTkxODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhxOUfcu1bQHPGuFAoLCOWh6HS 0XPbEyIni28fu02lNnCAQ76vwEe6lcCF1xU1gLE5AhtGRkkMxsm5S/Fo0PiJd6qC P+uSAG1W+brZIzy5whAn2lKdAt7/LPEyRqM1u504/8VL61GYCOk4GI3qAoNXmN9E 9zzumyxlWmsefZDPB/N8aqDovwKYo2s7eWTguDPrZI9+97z4fHOtXHD4yQ8Wj4C+ lbORgBX1q47IOo+5rysh7docMp22WHKLAwCXmbuXk5ATRDi2CPKkbHbjSvhkIHNi ev7usyMUFfc3RMU7/cSDqVFbou9jndr3J65EGCqXAnXLnYv37n7YAlErLn3jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/gb03u6Lo9LBldM+Wl3sIcWFkYkwHwYDVR0j BBgwFoAUJcKs/7g2GWVmo7zONCHbuWzYQRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzNzc3MTEtMWUzZC00ZTVhLWE0YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZC ODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2Q0Q4NDExNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUMyQUNGRkI4MzYxOTY1NjZBM0JDQ0UzNDIxREJCOTZDRDg0 MTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURC Qjk2Q0Q4NDExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECwapnwZcPDgF7rhaTtC5ukHKaBDIIjBon4 iWgoOcP82+1nLvkG4Ylc5FYVnoww54ourzqjLIeEQU2gLmI1YHG0WUPkpjuxf5Ln qPOP4MxpGFL6o+OCL97RLlIH6BiSpl3fGuOaYPk05DKxkdUf0jqHLGkFSmIC+ovb VqExHyTAoCY+kQy3Q+01LbnV9iq0VN9ZsiXB8bW5oYCTdUOzsk2qq2sFgJTOt6VA ql4gBjp00042go4nPGUkZK1a1xdsyBWywvUFx0pPs58froaF+umd7U5COAQ++zkB a54ik8OeL+3hUcNC0UeKGNEOI2Hvstx7cj2osHQZh27Ke7rtyPg= -----END CERTIFICATE-----Generated at Sun Oct 25 01:28:50 2026 by rpki-client