$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft File: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft (raw, json) Hash identifier: 16W8xE4dUKN0BmGGRfBprNW5/i/ZhkKIXaaDCG0sSZ4= Subject key identifier: 7D:21:4E:BA:A6:51:EA:37:23:36:F5:F7:A4:36:FC:38:72:93:C3:03 Authority key identifier: 92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E Certificate issuer: /CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Certificate serial: 2EA68509890CEE44CE37FB8FF09588CA02DC3E3A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 02:24:44 +0000 Manifest this update: Thu 18 Jun 2026 02:19:44 +0000 Manifest next update: Fri 19 Jun 2026 03:50:44 +0000 Files and hashes: 1: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: Zs3u840j4ZP200LFP4fVZsCLeA3oRYjdoZn2EIvaoNc=) 2: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: BNboAAgQmC0h9hwiHyJC3I+uxxLLhTzB3aQYZsJOubE=) 3: 925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl (hash: ndzSBssH4WG13tW2D7c3ZONMkDmX6LRYWedyfTzYUlY=) 4: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: iMHNOPCq/4qZI+6rd3tZI59AkfaQtxW6wPdAhh/rGGs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 03:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a6:85:09:89:0c:ee:44:ce:37:fb:8f:f0:95:88:ca:02:dc:3e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=925AB43F6244D2F01F01E8068FA10A27BF52CF7E Validity Not Before: Jun 18 02:19:44 2026 GMT Not After : Jun 19 03:50:44 2026 GMT Subject: CN=7D214EBAA651EA372336F5F7A436FC387293C303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:25:27:47:97:c4:15:cd:1a:a0:33:92:61: b7:92:8d:91:16:a5:29:2d:8f:5a:df:f2:89:30:ea: 46:b9:83:61:98:4d:de:3f:83:fc:1c:a4:63:fe:12: 56:ce:23:87:1e:92:6b:fa:a1:c3:7e:f2:2d:18:6f: 7d:f4:78:06:e0:d6:11:a9:e9:cf:4c:16:d4:b2:4a: 3c:c7:d5:51:86:51:3f:a6:64:be:90:3f:e6:b5:6a: 49:09:b6:db:6a:da:3f:32:36:d0:c1:9f:e1:09:0b: 79:55:a5:4a:0a:d6:61:3e:54:b2:01:7d:dd:90:ef: 51:d0:fd:93:99:69:36:fa:c1:e3:4c:d4:5b:ec:36: 38:bc:e2:38:37:ab:61:37:74:47:c6:63:a1:56:e1: 7f:ae:1f:7f:29:f2:71:7f:96:c2:55:c1:ed:30:65: 44:e9:a2:97:89:a8:14:27:51:24:ff:78:2b:c8:1e: 31:b1:e0:4f:65:40:69:8f:bf:f1:c3:5e:71:5c:37: 71:3f:c2:0d:d4:1e:1d:67:f0:80:71:87:c3:fa:63: 55:b8:ba:65:63:bf:d4:da:b1:db:fe:e0:e9:e4:ac: a6:55:bd:27:c5:f5:33:22:1d:47:28:4d:7e:b3:f7: ab:b3:8e:47:62:24:a0:66:15:c9:33:87:bc:2d:e7: b6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:21:4E:BA:A6:51:EA:37:23:36:F5:F7:A4:36:FC:38:72:93:C3:03 X509v3 Authority Key Identifier: keyid:92:5A:B4:3F:62:44:D2:F0:1F:01:E8:06:8F:A1:0A:27:BF:52:CF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/925AB43F6244D2F01F01E8068FA10A27BF52CF7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:00:83:ae:12:63:cf:81:7b:49:ae:af:ea:70:fa:3c:05:06: c9:ac:05:b7:dc:a3:eb:86:31:d1:d1:c2:1a:e0:3e:58:c8:d2: 23:2f:12:54:2d:92:7f:7a:e7:87:fe:47:18:87:6f:18:b3:92: 02:a7:a3:60:a8:44:74:8f:ef:bd:30:62:4e:d3:bc:4e:33:88: 24:18:95:60:ff:9b:be:8c:7e:0b:14:a7:04:69:0f:4a:45:4a: ca:f0:a7:67:c7:a0:e3:1f:13:f6:af:6a:a0:0c:13:06:7c:2e: 12:4e:c4:ce:fa:7d:8e:af:17:bb:61:31:fe:51:11:fe:6b:7e: 07:62:d8:3d:8c:18:6e:38:3a:d8:c6:7f:93:82:49:f6:82:c3: a9:ce:ce:13:ee:72:64:1d:f1:61:2c:25:21:8b:6d:42:6a:3c: ff:61:dd:06:d1:f1:9e:af:df:47:4e:04:f3:b7:15:d7:40:0f: ee:85:f7:71:26:df:c3:2d:8f:ac:21:c1:f9:10:8e:02:fd:37: 0f:94:94:bc:3b:db:62:75:6c:08:10:e7:e5:d1:63:f0:be:11: f7:21:45:4f:91:9c:a3:3f:01:88:1e:61:7b:05:ec:da:c2:f4: b3:87:2c:6a:ad:31:12:55:67:5e:0a:69:a6:a6:91:d2:2c:75: b2:59:f5:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqaFCYkM7kTON/uP8JWIygLcPjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdC RjUyQ0Y3RTAeFw0yNjA2MTgwMjE5NDRaFw0yNjA2MTkwMzUwNDRaMDMxMTAvBgNV BAMTKDdEMjE0RUJBQTY1MUVBMzcyMzM2RjVGN0E0MzZGQzM4NzI5M0MzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hyUnR5fEFc0aoDOSYbeSjZEW pSktj1rf8okw6ka5g2GYTd4/g/wcpGP+ElbOI4cekmv6ocN+8i0Yb330eAbg1hGp 6c9MFtSySjzH1VGGUT+mZL6QP+a1akkJtttq2j8yNtDBn+EJC3lVpUoK1mE+VLIB fd2Q71HQ/ZOZaTb6weNM1FvsNji84jg3q2E3dEfGY6FW4X+uH38p8nF/lsJVwe0w ZUTpopeJqBQnUST/eCvIHjGx4E9lQGmPv/HDXnFcN3E/wg3UHh1n8IBxh8P6Y1W4 umVjv9Tasdv+4OnkrKZVvSfF9TMiHUcoTX6z96uzjkdiJKBmFckzh7wt57bjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfSFOuqZR6jcjNvX3pDb8OHKTwwMwHwYDVR0j BBgwFoAUklq0P2JE0vAfAegGj6EKJ79Sz34wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWMzNGRjM2YtMzA4Zi00ZGUxLWEzNjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2 MjQ0RDJGMDFGMDFFODA2OEZBMTBBMjdCRjUyQ0Y3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjVBQjQzRjYyNDREMkYwMUYwMUU4MDY4RkExMEEyN0JGNTJD RjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvOTI1QUI0M0Y2MjQ0RDJGMDFGMDFFODA2OEZBMTBB MjdCRjUyQ0Y3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcAg64SY8+Be0mur+pw+jwFBsmsBbfco+uG MdHRwhrgPljI0iMvElQtkn9654f+RxiHbxizkgKno2CoRHSP770wYk7TvE4ziCQY lWD/m76MfgsUpwRpD0pFSsrwp2fHoOMfE/avaqAMEwZ8LhJOxM76fY6vF7thMf5R Ef5rfgdi2D2MGG44OtjGf5OCSfaCw6nOzhPucmQd8WEsJSGLbUJqPP9h3QbR8Z6v 30dOBPO3FddAD+6F93Em38Mtj6whwfkQjgL9Nw+UlLw722J1bAgQ5+XRY/C+Efch RU+RnKM/AYgeYXsF7NrC9LOHLGqtMRJVZ14KaaamkdIsdbJZ9c4= -----END CERTIFICATE-----Generated at Thu Jun 18 19:09:31 2026 by rpki-client