$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft File: 25F44906F292384CC9F1BE632798B911BD52EB7E.mft (raw, json) Hash identifier: grVL5r8wHx0G4JHUmNfg+WIesJ5WZW4F3vR6604iN8w= Subject key identifier: 1C:29:CF:1E:1E:D5:B6:78:5B:18:98:00:96:C8:73:B7:1D:A0:7E:D6 Authority key identifier: 25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E Certificate issuer: /CN=25F44906F292384CC9F1BE632798B911BD52EB7E Certificate serial: 1E4572C8019D017178F3C295D9E9886F1B8E9986 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft Manifest number: BA Signing time: Wed 16 Sep 2026 18:32:07 +0000 Manifest this update: Wed 16 Sep 2026 18:27:07 +0000 Manifest next update: Thu 17 Sep 2026 21:43:07 +0000 Files and hashes: 1: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: OF+X7RZ12YwYbIl142vAny0I0e6fiCnAZ2BWIAMpqJs=) 2: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: h0iqFz1JhYFaft+/rI1iyNCYNmEHURL6TWuWP9vtRec=) 3: 25F44906F292384CC9F1BE632798B911BD52EB7E.crl (hash: 0JXeuHFODnlg+V3wKHMishFlmJroAGhVUDnXbsyRvEw=) 4: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: K3q/Ez2ylWAHvKZbfEY9nE0ATvil8bcfxJnHQI/5nNA=) 5: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: rJYDDAtDFH2sxeGVm+q7lH6NoJu3MNVWQxNtL3BpElI=) 6: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: GGZKA5imIJIaP+Schkic8gBw6IQQgIqOJecWWJTB5T4=) 7: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: OzJuT5ZCAhL2UGbM7eynbgVHZM3ndO0ync8Ih0A1zcQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:45:72:c8:01:9d:01:71:78:f3:c2:95:d9:e9:88:6f:1b:8e:99:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25F44906F292384CC9F1BE632798B911BD52EB7E Validity Not Before: Sep 16 18:27:07 2026 GMT Not After : Sep 17 21:43:07 2026 GMT Subject: CN=1C29CF1E1ED5B6785B18980096C873B71DA07ED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8c:78:4a:06:5f:1e:f2:f7:61:a8:e9:92:5c: 2f:fb:6b:7d:1d:b0:32:2e:56:7f:e5:2b:25:17:85: 7e:39:fa:18:b4:9d:06:37:95:73:31:35:39:27:68: 81:bd:b0:bd:9d:d4:aa:2c:b7:79:70:ff:0c:58:e0: 38:9b:55:03:60:9f:7b:f5:bf:aa:a0:14:e1:3f:c1: 66:1b:67:f0:7c:d2:c9:99:12:66:8c:25:da:32:81: 54:d2:d4:2d:a3:e2:60:1f:7e:ad:98:b8:6d:1c:f7: 31:b2:f1:1c:c7:e6:7b:33:59:67:9b:5d:5b:64:52: df:23:47:f7:bd:1f:dc:14:7c:00:83:f6:d0:fe:43: 6b:e7:96:b5:11:f7:b2:b7:30:1b:4e:07:09:5c:08: 18:66:29:a8:03:f9:6f:82:73:e4:25:43:0b:38:72: 84:f8:bd:92:c5:13:97:ed:d2:48:91:b9:50:62:a7: 93:6f:b0:84:4c:b7:7c:60:50:af:b5:de:3a:0f:91: 86:47:47:30:71:9b:a8:e1:1f:e5:d8:b6:f0:6c:c2: ae:ed:19:25:e9:dc:b4:a7:39:0a:80:81:07:f8:5f: 5b:e3:d0:b2:fc:f0:14:63:c7:97:a5:30:8f:3f:cd: 50:85:01:d0:1a:78:61:25:da:b0:44:df:88:6f:f5: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:29:CF:1E:1E:D5:B6:78:5B:18:98:00:96:C8:73:B7:1D:A0:7E:D6 X509v3 Authority Key Identifier: keyid:25:F4:49:06:F2:92:38:4C:C9:F1:BE:63:27:98:B9:11:BD:52:EB:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25F44906F292384CC9F1BE632798B911BD52EB7E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/25F44906F292384CC9F1BE632798B911BD52EB7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:52:00:9e:17:2f:57:15:82:8b:dd:35:90:64:55:95:92:a1: 70:15:76:11:b3:2c:87:f0:e2:4d:b5:04:62:32:88:3b:a1:a3: 64:16:19:78:86:4c:e3:13:fc:68:73:80:99:72:6c:a6:10:fe: 03:18:43:6a:80:70:ec:c4:ac:ea:4f:50:77:4e:b3:c1:ec:7e: da:62:1e:67:9e:47:bb:2e:fd:8a:ca:5b:56:ff:96:6b:b4:2c: 2f:40:0e:f9:96:ac:de:25:34:44:3e:d9:8b:8b:8c:bf:6a:12: 89:df:d5:2c:46:f1:80:c2:ee:8d:a5:6f:62:d5:91:67:76:9d: 89:f7:38:2e:8b:c8:a6:1b:69:31:dc:54:2b:22:3f:0d:e8:82: c9:00:c7:7f:77:16:98:84:47:41:d7:63:35:d0:ff:36:98:89: b8:64:4d:99:14:dd:ef:12:34:14:d5:e0:ee:ca:14:fe:1a:18: 08:fd:f6:4d:a0:39:14:46:a7:35:59:d1:c1:70:07:2a:e5:b9: 06:71:1e:2f:89:67:b4:08:00:89:81:f7:26:9a:4b:c8:ad:a8: 6c:f4:88:89:a1:1a:17:f6:af:1e:44:97:c0:9b:c2:a4:19:bf: 33:d9:0a:66:9b:62:94:6b:bf:43:86:f7:99:36:8d:0f:77:d4: 02:d1:bf:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHkVyyAGdAXF488KV2emIbxuOmYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFC RDUyRUI3RTAeFw0yNjA5MTYxODI3MDdaFw0yNjA5MTcyMTQzMDdaMDMxMTAvBgNV BAMTKDFDMjlDRjFFMUVENUI2Nzg1QjE4OTgwMDk2Qzg3M0I3MURBMDdFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjHhKBl8e8vdhqOmSXC/7a30d sDIuVn/lKyUXhX45+hi0nQY3lXMxNTknaIG9sL2d1Kost3lw/wxY4DibVQNgn3v1 v6qgFOE/wWYbZ/B80smZEmaMJdoygVTS1C2j4mAffq2YuG0c9zGy8RzH5nszWWeb XVtkUt8jR/e9H9wUfACD9tD+Q2vnlrUR97K3MBtOBwlcCBhmKagD+W+Cc+QlQws4 coT4vZLFE5ft0kiRuVBip5NvsIRMt3xgUK+13joPkYZHRzBxm6jhH+XYtvBswq7t GSXp3LSnOQqAgQf4X1vj0LL88BRjx5elMI8/zVCFAdAaeGEl2rBE34hv9SrHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHCnPHh7VtnhbGJgAlshztx2gftYwHwYDVR0j BBgwFoAUJfRJBvKSOEzJ8b5jJ5i5Eb1S634wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmFhNDI3NDItODlkMi00OWJiLThhM2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZG MjkyMzg0Q0M5RjFCRTYzMjc5OEI5MTFCRDUyRUI3RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNUY0NDkwNkYyOTIzODRDQzlGMUJFNjMyNzk4QjkxMUJENTJF QjdFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvMjVGNDQ5MDZGMjkyMzg0Q0M5RjFCRTYzMjc5OEI5 MTFCRDUyRUI3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdSAJ4XL1cVgovdNZBkVZWSoXAVdhGzLIfw 4k21BGIyiDuho2QWGXiGTOMT/GhzgJlybKYQ/gMYQ2qAcOzErOpPUHdOs8Hsftpi HmeeR7su/YrKW1b/lmu0LC9ADvmWrN4lNEQ+2YuLjL9qEonf1SxG8YDC7o2lb2LV kWd2nYn3OC6LyKYbaTHcVCsiPw3ogskAx393FpiER0HXYzXQ/zaYibhkTZkU3e8S NBTV4O7KFP4aGAj99k2gORRGpzVZ0cFwByrluQZxHi+JZ7QIAImB9yaaS8itqGz0 iImhGhf2rx5El8CbwqQZvzPZCmabYpRrv0OG95k2jQ931ALRv/k= -----END CERTIFICATE-----Generated at Thu Sep 17 15:07:59 2026 by rpki-client