$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft File: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft (raw, json) Hash identifier: HmBFm3ohqLb9aqvlW51k0pr53SXiSZRz1DM5O0Z38i0= Subject key identifier: 10:89:79:83:33:0E:08:E8:2A:26:43:3C:9A:82:B3:C3:64:F1:A4:BC Authority key identifier: 92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E Certificate issuer: /CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Certificate serial: 29481A0DA042038E4A43D60D78EA0FCD901B4BF6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 18:32:06 +0000 Manifest this update: Wed 16 Sep 2026 18:27:06 +0000 Manifest next update: Thu 17 Sep 2026 20:29:06 +0000 Files and hashes: 1: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: BNboAAgQmC0h9hwiHyJC3I+uxxLLhTzB3aQYZsJOubE=) 2: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl (hash: uHSw2SM+KnUI/pORRE/8yDa4UjcjazMfNG5SKJR4+d0=) 3: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: Zs3u840j4ZP200LFP4fVZsCLeA3oRYjdoZn2EIvaoNc=) 4: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: iMHNOPCq/4qZI+6rd3tZI59AkfaQtxW6wPdAhh/rGGs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:48:1a:0d:a0:42:03:8e:4a:43:d6:0d:78:ea:0f:cd:90:1b:4b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Validity Not Before: Sep 16 18:27:06 2026 GMT Not After : Sep 17 20:29:06 2026 GMT Subject: CN=10897983330E08E82A26433C9A82B3C364F1A4BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:28:c4:a3:49:cc:3e:51:14:53:c5:cd:82: 5d:00:33:5e:57:3a:46:70:c3:91:19:67:d3:a3:89: cc:48:c2:b4:f9:73:6c:59:20:4f:ce:dd:c9:0b:c5: 05:60:5e:c9:d6:93:33:6a:0f:79:c9:c3:a5:b3:cd: cf:c5:f5:0b:ff:5e:bb:8b:1d:c9:ff:a1:79:6a:db: 5a:4d:99:9c:4e:76:e1:20:17:15:e9:b1:47:8d:e8: 47:a1:ff:30:62:2a:23:b1:53:6f:c5:13:86:4d:e8: 95:3f:61:85:3d:6b:5f:4c:c8:ea:3b:f2:38:2f:81: 05:77:88:86:0f:d0:d2:48:cc:9d:91:b9:3e:8e:00: ae:54:3d:1c:70:c0:d4:87:37:98:ef:a5:9d:fc:1f: 51:bb:a7:aa:67:fd:5c:0f:f1:dc:68:c5:3b:7a:b7: ae:f8:f2:0c:3f:0e:93:d3:78:0c:28:85:42:ec:18: 97:c3:90:61:fb:b4:58:25:36:89:f5:a3:82:9e:67: b4:bf:10:be:40:ac:94:64:8d:f7:13:c8:17:2b:38: 91:5e:bc:32:fb:44:c2:8c:c2:b0:39:60:34:39:eb: f8:92:6b:d5:88:0b:c7:db:ce:00:4c:29:e4:aa:e0: 3f:cb:09:85:03:5c:3f:38:13:dc:a4:15:ad:c3:f4: a3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:89:79:83:33:0E:08:E8:2A:26:43:3C:9A:82:B3:C3:64:F1:A4:BC X509v3 Authority Key Identifier: keyid:92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4d:e6:fe:d9:ff:df:48:43:3c:bf:13:fa:02:3e:d4:da:93: e6:07:c7:34:ef:d0:5b:10:b8:b9:0b:15:44:93:7a:e4:d4:50: 58:62:82:72:a0:d3:de:36:52:06:9f:a8:54:e3:47:0e:a1:7e: 79:72:2f:d1:7c:bd:c7:d5:6d:c9:a8:69:95:49:e9:c4:10:e0: 60:34:10:1f:a2:ff:df:e7:70:7c:d5:85:71:58:73:30:e4:db: f1:24:87:11:84:14:76:9c:aa:ac:62:c4:69:82:93:b1:8d:b9: f5:74:fb:b2:1d:0b:ee:be:a3:b1:1a:25:92:80:33:27:b5:3e: ca:c8:da:a0:03:ae:e4:7d:cf:97:e8:48:47:7b:80:2b:f9:bf: 8d:58:88:78:a4:9f:75:fe:b0:0b:ab:ca:34:cd:45:6e:73:bb: a3:d0:b8:b1:04:d3:9a:a1:82:6b:94:25:63:39:32:97:00:e7: a7:e1:60:59:59:ec:e6:43:94:86:51:99:57:30:70:6b:d8:cf: 63:7c:3f:9b:e4:c2:a6:17:0c:3f:65:f6:93:cc:80:d2:7a:32: 41:13:70:e9:25:62:8f:3f:da:8b:a7:98:fe:eb:67:b4:9b:a0: 33:d5:5e:8d:6b:74:98:fd:f6:65:2b:b1:15:26:6d:fc:64:ca: 5c:9e:be:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUgaDaBCA45KQ9YNeOoPzZAbS/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdC RjUyQ0Y3RTAeFw0yNjA5MTYxODI3MDZaFw0yNjA5MTcyMDI5MDZaMDMxMTAvBgNV BAMTKDEwODk3OTgzMzMwRTA4RTgyQTI2NDMzQzlBODJCM0MzNjRGMUE0QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpKCjEo0nMPlEUU8XNgl0AM15X OkZww5EZZ9OjicxIwrT5c2xZIE/O3ckLxQVgXsnWkzNqD3nJw6Wzzc/F9Qv/XruL Hcn/oXlq21pNmZxOduEgFxXpsUeN6Eeh/zBiKiOxU2/FE4ZN6JU/YYU9a19MyOo7 8jgvgQV3iIYP0NJIzJ2RuT6OAK5UPRxwwNSHN5jvpZ38H1G7p6pn/VwP8dxoxTt6 t6748gw/DpPTeAwohULsGJfDkGH7tFglNon1o4KeZ7S/EL5ArJRkjfcTyBcrOJFe vDL7RMKMwrA5YDQ56/iSa9WIC8fbzgBMKeSq4D/LCYUDXD84E9ykFa3D9KPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEIl5gzMOCOgqJkM8moKzw2TxpLwwHwYDVR0j BBgwFoAUklq0P2JE0vAfAegGj6EKJ79Sz34wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMzNGRjM2YtMzA4Zi00ZGUxLWEzNjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2 MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdCRjUyQ0Y3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEyN0JGNTJD RjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBB MjdCRjUyQ0Y3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVN5v7Z/99IQzy/E/oCPtTak+YHxzTv0FsQ uLkLFUSTeuTUUFhignKg0942UgafqFTjRw6hfnlyL9F8vcfVbcmoaZVJ6cQQ4GA0 EB+i/9/ncHzVhXFYczDk2/EkhxGEFHacqqxixGmCk7GNufV0+7IdC+6+o7EaJZKA Mye1PsrI2qADruR9z5foSEd7gCv5v41YiHikn3X+sAuryjTNRW5zu6PQuLEE05qh gmuUJWM5MpcA56fhYFlZ7OZDlIZRmVcwcGvYz2N8P5vkwqYXDD9l9pPMgNJ6MkET cOklYo8/2ounmP7rZ7SboDPVXo1rdJj99mUrsRUmbfxkylyeviI= -----END CERTIFICATE-----Generated at Thu Sep 17 11:04:49 2026 by rpki-client