$ rpki-client -vvf rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft File: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft (raw, json) Hash identifier: Wxi8TQUKWYIIuraukV+z/HgQmIqElkRPMMquzjhOfxM= Subject key identifier: 35:78:1E:99:E3:C0:B0:9F:B8:A8:8B:52:DF:82:5B:0A:90:91:D5:5A Authority key identifier: 02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 Certificate issuer: /CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Certificate serial: 0A3E2B6BEA92AB3B11D3E6BC14F4799270F1D958 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 03:59:35 +0000 Manifest this update: Sat 20 Jun 2026 03:54:35 +0000 Manifest next update: Sun 21 Jun 2026 07:52:35 +0000 Files and hashes: 1: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl (hash: uvtKE1ImFbKZdgFoL2XbGw8lOfg4Xoa3TZFuof4Bu9M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 07:52:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3e:2b:6b:ea:92:ab:3b:11:d3:e6:bc:14:f4:79:92:70:f1:d9:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Validity Not Before: Jun 20 03:54:35 2026 GMT Not After : Jun 21 07:52:35 2026 GMT Subject: CN=35781E99E3C0B09FB8A88B52DF825B0A9091D55A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0d:3f:2d:2b:8a:25:52:f6:b5:74:7b:6a:24: 25:0f:9b:33:4c:14:21:7c:51:f7:f4:bb:dc:d0:27: 65:48:16:a9:8b:03:6b:99:bd:19:b8:83:b1:e9:2b: c6:ea:4e:36:f1:c7:03:14:fa:c7:3c:fb:66:5d:c6: 1e:73:50:ef:9c:6f:23:58:1c:e2:78:12:22:37:4b: be:6f:9f:89:86:a3:58:b3:cb:48:46:49:ed:d6:17: f1:8e:f8:d4:05:ad:84:f0:c3:b2:7a:70:d4:ac:36: 48:99:6d:af:b2:c6:2e:2e:99:4a:ce:41:c0:f0:0c: 92:12:9d:aa:3a:68:5f:e2:70:7c:c9:cc:e8:7e:86: 1f:1b:91:48:21:52:86:b4:b2:cb:25:1b:bc:7b:b0: 09:a4:32:7a:79:c7:ef:36:ab:ea:df:ff:0a:dd:b0: d0:d5:e5:87:73:7e:0a:b8:c9:57:34:e9:de:cc:63: f6:3e:4e:41:92:eb:c0:b1:a1:17:bb:ec:e6:c1:57: a2:3e:63:ba:07:5d:e5:69:ec:b0:e4:6e:3a:dc:dc: 13:9e:54:2d:2f:1b:d4:a7:25:48:73:99:e0:fc:d3: 85:e2:c6:17:5c:cf:74:bf:09:43:28:48:c8:e2:8d: 43:ad:48:61:2e:dd:73:4b:ba:b3:42:95:6e:bd:33: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:78:1E:99:E3:C0:B0:9F:B8:A8:8B:52:DF:82:5B:0A:90:91:D5:5A X509v3 Authority Key Identifier: keyid:02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:41:ce:a7:e7:11:fb:d6:56:f7:e9:fa:76:23:08:11:ee:b8: a7:46:e6:95:fc:92:d8:b1:d7:7c:ff:13:88:9c:44:86:a0:ad: 38:4b:ce:d2:30:be:ff:24:e1:05:e0:89:9e:35:3b:68:bc:ff: df:c4:af:af:6b:bc:60:a5:9d:0a:95:19:53:7f:2e:08:64:8d: 8a:c9:d8:36:50:ca:4a:ef:a7:fe:9b:3d:79:95:28:fd:fb:07: 1a:cb:05:80:d4:ff:59:4e:a7:9b:41:9a:e6:12:ff:98:b9:5d: ef:0c:31:c9:0a:27:26:bd:a4:9a:be:56:b0:e8:83:ca:ca:51: be:2a:94:c3:75:ef:8e:d2:b3:ae:06:61:87:a4:32:93:6f:8b: 1a:b1:30:1e:79:84:3e:06:89:f2:52:e2:b9:25:0a:e3:1b:ca: f5:14:b2:3f:54:8b:91:9c:56:39:b4:57:e7:a9:51:f8:15:da: 73:2f:37:88:c3:c7:79:90:54:f0:b0:7e:74:fb:e5:fd:54:e4: 80:64:2b:40:ba:6a:2d:3c:38:26:4e:80:1f:8f:3d:fc:68:16: 5c:ca:62:1f:bc:9b:0f:c6:84:b8:3c:da:7c:28:30:15:2b:e9: a0:50:8d:1d:cd:57:f7:16:ae:75:61:ae:c9:f7:43:ee:74:3c: c2:a5:92:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCj4ra+qSqzsR0+a8FPR5knDx2VgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAy NDY4QzAzMDAeFw0yNjA2MjAwMzU0MzVaFw0yNjA2MjEwNzUyMzVaMDMxMTAvBgNV BAMTKDM1NzgxRTk5RTNDMEIwOUZCOEE4OEI1MkRGODI1QjBBOTA5MUQ1NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZDT8tK4olUva1dHtqJCUPmzNM FCF8Uff0u9zQJ2VIFqmLA2uZvRm4g7HpK8bqTjbxxwMU+sc8+2Zdxh5zUO+cbyNY HOJ4EiI3S75vn4mGo1izy0hGSe3WF/GO+NQFrYTww7J6cNSsNkiZba+yxi4umUrO QcDwDJISnao6aF/icHzJzOh+hh8bkUghUoa0ssslG7x7sAmkMnp5x+82q+rf/wrd sNDV5Ydzfgq4yVc06d7MY/Y+TkGS68CxoRe77ObBV6I+Y7oHXeVp7LDkbjrc3BOe VC0vG9SnJUhzmeD804Xixhdcz3S/CUMoSMjijUOtSGEu3XNLurNClW69M0FRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNXgemePAsJ+4qItS34JbCpCR1VowHwYDVR0j BBgwFoAUAlzja/gs0ffF/3zaVtl7kCRowDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhMzdhZWMtNjNjMi00NWQxLTk2YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJG ODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAyNDY4QzAzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjVDRTM2QkY4MkNEMUY3QzVGRjdDREE1NkQ5N0I5MDI0NjhD MDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdC OTAyNDY4QzAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFBzqfnEfvWVvfp+nYjCBHuuKdG5pX8ktix 13z/E4icRIagrThLztIwvv8k4QXgiZ41O2i8/9/Er69rvGClnQqVGVN/LghkjYrJ 2DZQykrvp/6bPXmVKP37BxrLBYDU/1lOp5tBmuYS/5i5Xe8MMckKJya9pJq+VrDo g8rKUb4qlMN1747Ss64GYYekMpNvixqxMB55hD4GifJS4rklCuMbyvUUsj9Ui5Gc Vjm0V+epUfgV2nMvN4jDx3mQVPCwfnT75f1U5IBkK0C6ai08OCZOgB+PPfxoFlzK Yh+8mw/GhLg82nwoMBUr6aBQjR3NV/cWrnVhrsn3Q+50PMKlkjQ= -----END CERTIFICATE-----Generated at Sat Jun 20 09:15:18 2026 by rpki-client