$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft File: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft (raw, json) Hash identifier: AA8GSmcAuIrSlJ1zUEsuX/AwMitb3+iBzZlP0+nzzA4= Subject key identifier: 6E:BD:8A:1F:E1:C2:BA:C1:65:F1:B1:EA:01:DF:FE:FC:7B:91:4E:C1 Authority key identifier: 92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E Certificate issuer: /CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Certificate serial: 181F1CA159C7F0A786D0E6F1BA142FDBFBD632F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 13:13:40 +0000 Manifest this update: Sun 02 Aug 2026 13:08:40 +0000 Manifest next update: Mon 03 Aug 2026 14:10:40 +0000 Files and hashes: 1: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: Zs3u840j4ZP200LFP4fVZsCLeA3oRYjdoZn2EIvaoNc=) 2: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: iMHNOPCq/4qZI+6rd3tZI59AkfaQtxW6wPdAhh/rGGs=) 3: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: BNboAAgQmC0h9hwiHyJC3I+uxxLLhTzB3aQYZsJOubE=) 4: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl (hash: 6onhbAm7kk7a9FHi6XiSZmVhJ+3zYuk8bSsW42qqjmM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1f:1c:a1:59:c7:f0:a7:86:d0:e6:f1:ba:14:2f:db:fb:d6:32:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Validity Not Before: Aug 2 13:08:40 2026 GMT Not After : Aug 3 14:10:40 2026 GMT Subject: CN=6EBD8A1FE1C2BAC165F1B1EA01DFFEFC7B914EC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:79:6d:b3:32:4f:e0:00:75:ed:79:0c:a0: 65:2a:9f:bd:f7:e8:18:43:97:04:89:57:33:b5:e0: 5b:89:ef:06:0f:f9:9f:dd:64:54:49:3f:6e:cf:9c: 34:66:44:9c:ad:8f:89:96:d5:19:7b:42:b8:a3:cf: d0:d4:72:11:4a:df:68:49:c2:0f:74:f9:c9:ea:0c: 90:49:ff:c4:4d:77:29:65:45:5c:a1:4e:05:a4:7e: 9f:d6:fa:eb:1d:91:a3:ac:a2:69:80:9d:64:70:60: 00:ed:6d:ac:ee:0e:d4:d3:53:c9:a7:1c:3b:c0:86: 3e:b8:67:b6:6b:08:94:b7:25:31:cd:b6:f6:5c:a6: 00:d9:e1:ab:53:65:23:a3:f2:be:ca:cd:72:95:65: 19:89:c3:90:f8:d2:6a:8a:88:5a:ac:3e:fd:2c:e3: 1f:8f:87:d1:f5:f5:12:84:2c:a7:29:8d:dd:da:2a: 65:35:e3:33:f0:e1:83:8c:f5:18:32:3a:d9:99:ee: dd:8c:91:ff:de:88:bc:d9:a7:03:3e:f4:d8:dd:d9: 26:e8:d0:a3:be:22:93:56:ef:35:43:89:42:98:ba: 77:81:18:87:a2:dc:06:be:8c:22:f3:8a:10:06:50: 1d:c8:cd:52:04:c2:69:ce:80:f2:4d:99:41:b8:fe: 7c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BD:8A:1F:E1:C2:BA:C1:65:F1:B1:EA:01:DF:FE:FC:7B:91:4E:C1 X509v3 Authority Key Identifier: keyid:92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:54:c0:29:33:34:b6:3d:0e:34:fd:73:08:16:9f:e0:35:38: a4:d0:83:66:79:c9:b5:67:ea:95:61:ce:7b:46:bd:7c:56:a2: 2d:d1:ef:e7:f6:fd:0c:60:04:47:66:00:4c:c1:a4:0a:37:85: 87:5c:0c:b5:15:d0:e7:e2:51:ed:c3:84:6f:6f:d3:a7:c4:c1: 75:9b:96:12:0c:0e:f1:bb:ca:f5:a3:9b:59:a1:47:9b:2a:d5: 2b:3f:25:44:24:74:5f:e2:ca:93:19:57:c5:ab:f0:9c:6b:1a: 50:e3:be:bc:45:89:d7:5e:22:4d:e6:e2:0e:25:3a:cb:ef:a8: 94:d9:e1:3e:c2:31:27:55:5c:39:8a:2d:59:65:05:ff:3e:32: f3:0d:ae:05:e9:e8:72:bd:c9:65:03:16:f1:3d:03:a6:dc:d9: f7:b1:e8:7a:af:09:4d:7c:57:ae:91:53:e6:1b:3a:f2:e3:08: fa:04:a4:d6:76:d4:77:dd:2e:d8:33:5a:a9:5e:e0:4e:79:3d: 65:a9:f2:53:92:1e:94:3b:a6:4a:d6:99:a4:21:8e:02:60:1e: 74:de:e0:2f:70:d7:74:e3:dc:6a:d6:b7:f6:7e:bd:91:7a:71: 51:47:0e:e5:19:c6:67:8f:6d:35:93:e1:e5:89:7f:51:9b:eb: 7a:70:10:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGB8coVnH8KeG0ObxuhQv2/vWMvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdC RjUyQ0Y3RTAeFw0yNjA4MDIxMzA4NDBaFw0yNjA4MDMxNDEwNDBaMDMxMTAvBgNV BAMTKDZFQkQ4QTFGRTFDMkJBQzE2NUYxQjFFQTAxREZGRUZDN0I5MTRFQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mXltszJP4AB17XkMoGUqn733 6BhDlwSJVzO14FuJ7wYP+Z/dZFRJP27PnDRmRJytj4mW1Rl7Qrijz9DUchFK32hJ wg90+cnqDJBJ/8RNdyllRVyhTgWkfp/W+usdkaOsommAnWRwYADtbazuDtTTU8mn HDvAhj64Z7ZrCJS3JTHNtvZcpgDZ4atTZSOj8r7KzXKVZRmJw5D40mqKiFqsPv0s 4x+Ph9H19RKELKcpjd3aKmU14zPw4YOM9RgyOtmZ7t2Mkf/eiLzZpwM+9Njd2Sbo 0KO+IpNW7zVDiUKYuneBGIei3Aa+jCLzihAGUB3IzVIEwmnOgPJNmUG4/nyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbr2KH+HCusFl8bHqAd/+/HuRTsEwHwYDVR0j BBgwFoAUklq0P2JE0vAfAegGj6EKJ79Sz34wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMzNGRjM2YtMzA4Zi00ZGUxLWEzNjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2 MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdCRjUyQ0Y3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEyN0JGNTJD RjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBB MjdCRjUyQ0Y3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNUwCkzNLY9DjT9cwgWn+A1OKTQg2Z5ybVn 6pVhzntGvXxWoi3R7+f2/QxgBEdmAEzBpAo3hYdcDLUV0OfiUe3DhG9v06fEwXWb lhIMDvG7yvWjm1mhR5sq1Ss/JUQkdF/iypMZV8Wr8JxrGlDjvrxFiddeIk3m4g4l OsvvqJTZ4T7CMSdVXDmKLVllBf8+MvMNrgXp6HK9yWUDFvE9A6bc2fex6HqvCU18 V66RU+YbOvLjCPoEpNZ21HfdLtgzWqle4E55PWWp8lOSHpQ7pkrWmaQhjgJgHnTe 4C9w13Tj3GrWt/Z+vZF6cVFHDuUZxmePbTWT4eWJf1Gb63pwEDs= -----END CERTIFICATE-----Generated at Sun Aug 2 22:46:19 2026 by rpki-client