$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft File: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft (raw, json) Hash identifier: If2e6DrqFDfAGTSdtLTGMsG3z6OcrsJVRYugTOJsBDM= Subject key identifier: 32:19:29:5D:69:91:E3:B2:76:B9:0D:0C:48:E2:FC:C5:84:69:A4:91 Authority key identifier: 25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 Certificate issuer: /CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Certificate serial: 4E702323D5C77DD7F502E00C2FFCDBE250899FB5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft Manifest number: 97 Signing time: Sat 22 Aug 2026 14:37:54 +0000 Manifest this update: Sat 22 Aug 2026 14:32:54 +0000 Manifest next update: Sun 23 Aug 2026 15:12:54 +0000 Files and hashes: 1: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: HwpDGD2SJ/iUFIW/7Q0l9KkQ0CWL7/v9c6sBLXd1KZY=) 2: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: p5VGWtHjvpIWNYWejy2oeQf0oISTWP+7YBr4TnXtjDM=) 3: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: zEDT0INoIq23WBcFzMUv15oPL7BGutII4EaV+fPSC68=) 4: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: ohDVM2o2IOUVSNhwh1E7felK+Pc0SKnjsPpIi1yZSaw=) 5: 25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl (hash: vv7q67fE9L9mQ0ba6qg0O9rJZk5hZzKwE7fcFZzVWnY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Aug 2026 11:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:70:23:23:d5:c7:7d:d7:f5:02:e0:0c:2f:fc:db:e2:50:89:9f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C2ACFFB836196566A3BCCE3421DBB96CD84116 Validity Not Before: Aug 22 14:32:54 2026 GMT Not After : Aug 23 15:12:54 2026 GMT Subject: CN=3219295D6991E3B276B90D0C48E2FCC58469A491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ea:08:2e:c3:13:4b:ae:38:fc:02:98:b6:2b: 69:44:01:d9:0d:f4:86:34:34:bc:a0:f2:be:69:db: 48:bb:57:93:cc:de:c0:ba:41:00:9c:42:75:4d:cf: 15:f8:1e:98:8a:38:3c:41:3e:d0:04:3d:8b:c4:23: ee:15:cf:45:8d:cb:b6:98:95:ab:c4:a5:c0:0f:c6: 47:4a:5c:90:11:4e:d9:03:c2:2a:9b:16:5b:dc:ff: 25:05:35:f4:30:88:80:42:34:82:1b:8a:98:1d:dd: a3:7e:b2:51:59:69:a5:69:27:e8:c9:0f:71:e2:47: c0:ab:08:48:6a:18:60:4b:01:66:bf:db:2a:82:84: d9:14:a3:35:34:fa:d2:fb:dd:77:d2:9f:7f:20:e2: fc:a0:ab:b5:33:0b:ad:e6:cb:1a:9b:33:54:ec:dc: 55:59:de:76:cf:db:e7:25:f8:7a:16:74:82:ac:b0: 46:d1:6b:1a:9e:df:51:c7:a8:07:fd:23:8e:d3:53: f8:1e:17:81:f7:43:6f:22:f0:50:bf:bb:53:03:68: 61:34:8b:b3:d8:54:be:3d:fe:bb:1d:35:33:65:0b: 9c:97:a8:dd:7e:20:e8:24:58:97:de:53:4e:25:0c: 04:88:29:be:37:fe:5a:69:8a:b7:c5:b5:9f:d2:9f: 71:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:19:29:5D:69:91:E3:B2:76:B9:0D:0C:48:E2:FC:C5:84:69:A4:91 X509v3 Authority Key Identifier: keyid:25:C2:AC:FF:B8:36:19:65:66:A3:BC:CE:34:21:DB:B9:6C:D8:41:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25C2ACFFB836196566A3BCCE3421DBB96CD84116.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/25C2ACFFB836196566A3BCCE3421DBB96CD84116.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6e:2b:aa:73:82:5f:3a:88:5d:61:11:c5:7c:3e:9b:94:79: 8a:a5:3b:fe:36:a7:d7:f7:2a:f9:af:50:6a:39:09:47:f0:4a: bb:51:2f:b3:b1:31:6b:73:24:17:60:0c:34:dc:36:c5:ee:02: d0:2b:63:8e:f9:f0:88:b2:37:b4:0b:f4:59:16:e8:dc:45:48: ee:60:9a:64:06:e2:8c:8b:01:7d:dc:30:13:2a:53:bd:7c:cd: 04:4b:4a:e4:e6:ad:11:12:c2:8d:b4:93:82:da:63:3c:b1:5b: 9f:b8:84:90:fa:d3:62:a3:7f:44:43:a4:32:32:52:ca:b5:ba: ac:df:32:ea:dd:5d:17:81:6a:31:df:c7:3f:c5:c8:4f:f2:a3: 9f:d3:41:be:db:dd:d3:1c:4f:de:95:a0:d7:1d:f6:cc:a7:56: 32:59:79:d6:24:e8:f3:f7:26:fd:88:99:b8:71:f0:66:22:6c: 8e:cc:ee:21:d3:29:e2:09:01:0e:47:0a:64:4c:eb:15:a8:a9: 71:01:c0:67:9d:59:40:67:be:88:50:ec:e1:99:86:ed:88:28: 2a:bb:79:13:6b:3f:f0:d2:ef:51:74:69:32:d3:c0:0a:84:22: 30:10:83:ca:0f:f4:1a:53:6e:42:aa:c4:b0:18:f5:fa:39:49: d0:0d:5d:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTnAjI9XHfdf1AuAML/zb4lCJn7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2 Q0Q4NDExNjAeFw0yNjA4MjIxNDMyNTRaFw0yNjA4MjMxNTEyNTRaMDMxMTAvBgNV BAMTKDMyMTkyOTVENjk5MUUzQjI3NkI5MEQwQzQ4RTJGQ0M1ODQ2OUE0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM6gguwxNLrjj8Api2K2lEAdkN 9IY0NLyg8r5p20i7V5PM3sC6QQCcQnVNzxX4HpiKODxBPtAEPYvEI+4Vz0WNy7aY lavEpcAPxkdKXJARTtkDwiqbFlvc/yUFNfQwiIBCNIIbipgd3aN+slFZaaVpJ+jJ D3HiR8CrCEhqGGBLAWa/2yqChNkUozU0+tL73XfSn38g4vygq7UzC63myxqbM1Ts 3FVZ3nbP2+cl+HoWdIKssEbRaxqe31HHqAf9I47TU/geF4H3Q28i8FC/u1MDaGE0 i7PYVL49/rsdNTNlC5yXqN1+IOgkWJfeU04lDASIKb43/lppirfFtZ/Sn3HJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMhkpXWmR47J2uQ0MSOL8xYRppJEwHwYDVR0j BBgwFoAUJcKs/7g2GWVmo7zONCHbuWzYQRYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NGYzNzc3MTEtMWUzZC00ZTVhLWE0YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZC ODM2MTk2NTY2QTNCQ0NFMzQyMURCQjk2Q0Q4NDExNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUMyQUNGRkI4MzYxOTY1NjZBM0JDQ0UzNDIxREJCOTZDRDg0 MTE2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvMjVDMkFDRkZCODM2MTk2NTY2QTNCQ0NFMzQyMURC Qjk2Q0Q4NDExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtuK6pzgl86iF1hEcV8PpuUeYqlO/42p9f3 KvmvUGo5CUfwSrtRL7OxMWtzJBdgDDTcNsXuAtArY4758IiyN7QL9FkW6NxFSO5g mmQG4oyLAX3cMBMqU718zQRLSuTmrRESwo20k4LaYzyxW5+4hJD602Kjf0RDpDIy Usq1uqzfMurdXReBajHfxz/FyE/yo5/TQb7b3dMcT96VoNcd9synVjJZedYk6PP3 Jv2Imbhx8GYibI7M7iHTKeIJAQ5HCmRM6xWoqXEBwGedWUBnvohQ7OGZhu2IKCq7 eRNrP/DS71F0aTLTwAqEIjAQg8oP9BpTbkKqxLAY9fo5SdANXfY= -----END CERTIFICATE-----Generated at Sat Aug 22 20:20:36 2026 by rpki-client