$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft File: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft (raw, json) Hash identifier: 6PDrpPd31URq1LXa4ZdysQjQeAnC+Nxe5DDkZCexP44= Subject key identifier: 52:3B:5F:5F:DC:41:45:FF:A8:8F:58:BF:C5:3B:CC:CC:DD:02:5E:1A Authority key identifier: 02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 Certificate issuer: /CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Certificate serial: 0C9739A87FE0BE65790CEBD80B7331FAC6D49457 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 08:29:04 +0000 Manifest this update: Thu 17 Sep 2026 08:24:04 +0000 Manifest next update: Fri 18 Sep 2026 09:59:04 +0000 Files and hashes: 1: 025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl (hash: ejEMoxL87t3AcXppDHekzcdp6PA8LQcvVT+DHORwbnA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:97:39:a8:7f:e0:be:65:79:0c:eb:d8:0b:73:31:fa:c6:d4:94:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=025CE36BF82CD1F7C5FF7CDA56D97B902468C030 Validity Not Before: Sep 17 08:24:04 2026 GMT Not After : Sep 18 09:59:04 2026 GMT Subject: CN=523B5F5FDC4145FFA88F58BFC53BCCCCDD025E1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:4e:a2:a0:3d:e1:ad:e8:97:da:ca:4a:99: e5:d5:7f:02:5c:34:2d:d3:a8:cc:b3:c5:4b:48:46: f0:80:13:4f:05:75:6a:9c:a3:0c:f7:e6:bb:4d:54: 3e:27:01:58:fa:9d:6b:52:3d:0c:90:fd:b7:eb:c1: 39:1d:20:ab:c3:a2:c3:f5:af:47:b9:cc:29:b9:78: 3a:a0:1d:68:d1:0f:a4:43:79:9b:cf:4a:3e:be:e2: 9d:39:73:32:73:b6:3b:ab:1b:67:bf:02:84:34:30: a4:8b:ea:fd:1e:d0:39:00:ad:6a:81:6e:f7:fa:3a: d4:27:eb:10:f6:94:5e:5a:3b:f0:3d:66:8c:27:89: 82:6a:aa:e7:d7:6d:81:57:c6:ac:55:be:6f:8a:bb: 5a:b3:69:48:a6:6d:ab:d6:1b:9b:32:06:43:06:19: 2b:f0:9c:59:b9:3c:7c:66:1f:df:12:be:ad:f9:80: 05:4d:43:15:0b:3f:a1:6a:48:72:98:22:d7:05:dd: f7:dd:87:3f:2e:c4:d5:56:2a:87:7b:9d:b6:7c:44: ca:07:b1:ad:78:7b:f2:93:00:92:37:fd:80:4f:5f: 55:6b:b6:5c:9b:d0:d0:2f:1e:38:87:37:95:11:49: 84:f9:30:4d:b8:41:3b:a5:29:cd:d4:92:6c:e2:95: 28:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:3B:5F:5F:DC:41:45:FF:A8:8F:58:BF:C5:3B:CC:CC:DD:02:5E:1A X509v3 Authority Key Identifier: keyid:02:5C:E3:6B:F8:2C:D1:F7:C5:FF:7C:DA:56:D9:7B:90:24:68:C0:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/025CE36BF82CD1F7C5FF7CDA56D97B902468C030.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e4:0f:bd:83:c1:89:2e:e6:82:50:d7:76:4b:44:bb:1c:29: 6c:af:36:23:df:62:ad:91:2b:6f:9d:c1:ad:58:98:f1:12:1f: a3:62:c7:45:87:25:fb:76:73:18:0e:44:ae:2b:c0:63:3e:f9: a6:5e:1b:79:de:d3:37:47:0e:0c:62:77:cd:34:56:d9:27:47: e0:f9:a4:05:a5:5d:0c:93:56:d2:cb:0f:33:f6:11:33:c8:f5: cb:c1:0c:ba:e7:22:f0:da:9d:6b:4c:5a:07:00:c6:1d:f0:5f: 99:01:4d:b9:4d:4b:c4:80:00:db:d7:f0:82:18:12:ba:51:ab: 67:9b:46:1a:76:f6:72:69:73:a9:3b:05:01:86:87:c5:e0:06: 06:1e:cd:bf:df:8e:54:75:c6:0d:f3:08:7a:c5:44:f0:99:36: 1a:c9:07:fb:0a:2a:26:63:a3:ce:4c:b6:ff:27:6c:82:dd:21: 94:c0:ac:8a:0f:43:b1:db:52:15:bc:eb:d0:fe:85:d2:79:1b: 42:c5:6e:b9:6f:fd:66:17:01:6c:ce:a1:8a:bc:b1:24:58:9b: 24:16:5e:25:c6:ac:76:24:a4:8f:a3:3b:95:4e:aa:64:49:42: 8c:ed:b3:aa:96:4f:63:8e:79:f3:ba:d1:f6:2b:a4:23:c5:46: 70:e1:99:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJc5qH/gvmV5DOvYC3Mx+sbUlFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAy NDY4QzAzMDAeFw0yNjA5MTcwODI0MDRaFw0yNjA5MTgwOTU5MDRaMDMxMTAvBgNV BAMTKDUyM0I1RjVGREM0MTQ1RkZBODhGNThCRkM1M0JDQ0NDREQwMjVFMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwE06ioD3hreiX2spKmeXVfwJc NC3TqMyzxUtIRvCAE08FdWqcowz35rtNVD4nAVj6nWtSPQyQ/bfrwTkdIKvDosP1 r0e5zCm5eDqgHWjRD6RDeZvPSj6+4p05czJztjurG2e/AoQ0MKSL6v0e0DkArWqB bvf6OtQn6xD2lF5aO/A9ZowniYJqqufXbYFXxqxVvm+Ku1qzaUimbavWG5syBkMG GSvwnFm5PHxmH98Svq35gAVNQxULP6FqSHKYItcF3ffdhz8uxNVWKod7nbZ8RMoH sa14e/KTAJI3/YBPX1Vrtlyb0NAvHjiHN5URSYT5ME24QTulKc3UkmzilSgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUjtfX9xBRf+oj1i/xTvMzN0CXhowHwYDVR0j BBgwFoAUAlzja/gs0ffF/3zaVtl7kCRowDAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTlhMzdhZWMtNjNjMi00NWQxLTk2YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJG ODJDRDFGN0M1RkY3Q0RBNTZEOTdCOTAyNDY4QzAzMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMjVDRTM2QkY4MkNEMUY3QzVGRjdDREE1NkQ5N0I5MDI0NjhD MDMwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvMDI1Q0UzNkJGODJDRDFGN0M1RkY3Q0RBNTZEOTdC OTAyNDY4QzAzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjkD72DwYku5oJQ13ZLRLscKWyvNiPfYq2R K2+dwa1YmPESH6Nix0WHJft2cxgORK4rwGM++aZeG3ne0zdHDgxid800VtknR+D5 pAWlXQyTVtLLDzP2ETPI9cvBDLrnIvDanWtMWgcAxh3wX5kBTblNS8SAANvX8IIY ErpRq2ebRhp29nJpc6k7BQGGh8XgBgYezb/fjlR1xg3zCHrFRPCZNhrJB/sKKiZj o85Mtv8nbILdIZTArIoPQ7HbUhW869D+hdJ5G0LFbrlv/WYXAWzOoYq8sSRYmyQW XiXGrHYkpI+jO5VOqmRJQozts6qWT2OOefO60fYrpCPFRnDhmeA= -----END CERTIFICATE-----Generated at Thu Sep 17 14:21:53 2026 by rpki-client