$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft File: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft (raw, json) Hash identifier: vVasm5lzVI9g+pZlrzD3ZH91msBoSV969y6j445Cx8w= Subject key identifier: 1C:7D:76:DC:BE:18:76:DE:71:12:C0:AF:CB:CF:AC:19:39:26:C7:19 Authority key identifier: 25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B Certificate issuer: /CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Certificate serial: 479F575381838CCE47E5636195BA9CF3C02E11D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:45:38 +0000 Manifest this update: Thu 17 Sep 2026 01:40:38 +0000 Manifest next update: Fri 18 Sep 2026 03:30:38 +0000 Files and hashes: 1: 3130332e3134352e3130392e302f32342d3234203d3e20313339343436.roa (hash: 0P5qBTgfllLlHCA3nz89Ltdzy1jcnaNNEY3SQXv/0II=) 2: 3130332e3134352e3130382e302f32332d3233203d3e20313339343436.roa (hash: thKA0k3SKd9ZuPgdjH+VF43W5Rz/i9a2JTXNPTXM6a0=) 3: 3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (hash: OEqKbqVoV+spRdzW+aE4+2tFsdczawhoz6Mphx/Zguc=) 4: 25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl (hash: u02tfJCVbS2zsYvMwkzWpYU/VEoqHttsIa+LvokwkJA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9f:57:53:81:83:8c:ce:47:e5:63:61:95:ba:9c:f3:c0:2e:11:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B Validity Not Before: Sep 17 01:40:38 2026 GMT Not After : Sep 18 03:30:38 2026 GMT Subject: CN=1C7D76DCBE1876DE7112C0AFCBCFAC193926C719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:ad:1a:1d:9c:f5:20:2d:db:85:9b:f8:79: 52:ce:fd:ca:93:52:86:dc:25:ad:fa:db:d4:b6:59: dd:21:08:fb:f9:8f:ef:ae:32:3e:d9:0d:87:f9:7c: d4:62:43:7c:ed:97:38:fa:9b:83:a5:cd:50:c5:71: f4:db:5c:b2:d7:87:38:29:35:b4:7a:a2:e8:01:87: eb:f6:43:72:a6:45:6c:f5:49:b0:dc:63:fb:5f:14: 9c:6f:6e:fc:b2:d7:84:9b:cc:ff:59:0e:5d:29:a2: cc:c4:c6:da:fc:91:0f:a7:5d:3f:23:bf:67:9c:6a: 87:91:bf:c4:d2:7f:c6:f0:93:18:90:ea:d6:ae:cc: d5:56:a9:ea:ca:e2:71:65:8e:62:bc:50:77:df:61: cb:22:08:70:a5:62:ae:2c:a4:a3:c5:4f:67:4a:61: f4:4b:16:a0:9b:9c:c6:53:1a:38:c0:2b:4d:52:a2: dc:43:a4:1c:bd:07:c3:eb:e0:9e:68:a2:44:81:80: 06:42:32:c6:ef:2c:ec:d2:4f:19:e2:cd:3f:eb:a2: de:6c:35:dd:fc:67:fb:09:28:09:08:ac:42:cc:a3: 4a:5a:54:0c:95:bb:17:8a:1f:36:4a:14:26:b4:5e: 19:72:04:a9:5e:a7:28:55:88:fd:aa:e5:35:69:de: c4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7D:76:DC:BE:18:76:DE:71:12:C0:AF:CB:CF:AC:19:39:26:C7:19 X509v3 Authority Key Identifier: keyid:25:DF:CC:E8:53:93:67:30:6B:FE:98:EC:BC:25:4B:3C:D0:FF:3F:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/25DFCCE8539367306BFE98ECBC254B3CD0FF3F5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3b:48:f1:a2:25:78:fb:66:80:f3:a7:34:0f:02:0b:c1:7c: ab:2e:6d:a9:92:6f:97:d5:7e:64:6e:5c:4c:24:f8:de:f2:61: 63:74:56:37:72:26:ed:5a:40:e6:e0:75:2b:ba:b2:01:9c:23: 18:12:d5:a4:df:f1:5e:52:aa:7a:7f:18:fb:62:a9:e1:34:57: 4e:85:09:c6:ef:8a:4e:ec:90:ca:b1:4f:da:c1:65:7c:55:8c: b5:bc:a7:94:ac:0f:e0:48:2d:bf:53:2f:b0:e9:f9:e8:66:33: 96:72:20:17:71:48:56:ce:a2:98:9c:5a:53:9c:02:53:65:c4: d7:f5:35:8e:20:52:06:68:f1:7f:1d:da:8c:6e:7f:1c:59:51: 35:88:73:39:b5:dd:df:87:80:fa:75:91:77:dd:11:04:f8:03: 9e:44:7c:c7:37:99:33:fc:95:a3:44:aa:66:89:9f:b5:e9:09: fb:59:48:7d:ed:8f:09:07:c0:99:b0:6b:43:f2:60:f1:76:1c: da:3e:e3:4f:e2:96:23:c3:5f:60:09:dd:26:be:e7:53:61:84: 16:f8:0d:ce:a9:1d:55:2b:ff:d7:36:8c:84:89:75:a6:44:0e: 75:22:dd:28:96:5f:97:96:10:f2:f6:ba:4b:42:79:89:de:b5: 01:11:c9:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR59XU4GDjM5H5WNhlbqc88AuEdcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NE MEZGM0Y1QjAeFw0yNjA5MTcwMTQwMzhaFw0yNjA5MTgwMzMwMzhaMDMxMTAvBgNV BAMTKDFDN0Q3NkRDQkUxODc2REU3MTEyQzBBRkNCQ0ZBQzE5MzkyNkM3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSp60aHZz1IC3bhZv4eVLO/cqT UobcJa3629S2Wd0hCPv5j++uMj7ZDYf5fNRiQ3ztlzj6m4OlzVDFcfTbXLLXhzgp NbR6ougBh+v2Q3KmRWz1SbDcY/tfFJxvbvyy14SbzP9ZDl0poszExtr8kQ+nXT8j v2ecaoeRv8TSf8bwkxiQ6tauzNVWqerK4nFljmK8UHffYcsiCHClYq4spKPFT2dK YfRLFqCbnMZTGjjAK01SotxDpBy9B8Pr4J5ookSBgAZCMsbvLOzSTxnizT/rot5s Nd38Z/sJKAkIrELMo0paVAyVuxeKHzZKFCa0XhlyBKlepyhViP2q5TVp3sQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHH123L4Ydt5xEsCvy8+sGTkmxxkwHwYDVR0j BBgwFoAUJd/M6FOTZzBr/pjsvCVLPND/P1swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YThjMDY4ZGEtZjljNS00MDM2LTg1NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1 MzkzNjczMDZCRkU5OEVDQkMyNTRCM0NEMEZGM0Y1Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNURGQ0NFODUzOTM2NzMwNkJGRTk4RUNCQzI1NEIzQ0QwRkYz RjVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYThjMDY4ZGEtZjljNS00MDM2LTg1 NGItOTIyY2FhOTNmMzI0LzAvMjVERkNDRTg1MzkzNjczMDZCRkU5OEVDQkMyNTRC M0NEMEZGM0Y1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ07SPGiJXj7ZoDzpzQPAgvBfKsubamSb5fV fmRuXEwk+N7yYWN0VjdyJu1aQObgdSu6sgGcIxgS1aTf8V5Sqnp/GPtiqeE0V06F Ccbvik7skMqxT9rBZXxVjLW8p5SsD+BILb9TL7Dp+ehmM5ZyIBdxSFbOopicWlOc AlNlxNf1NY4gUgZo8X8d2oxufxxZUTWIczm13d+HgPp1kXfdEQT4A55EfMc3mTP8 laNEqmaJn7XpCftZSH3tjwkHwJmwa0PyYPF2HNo+40/iliPDX2AJ3Sa+51NhhBb4 Dc6pHVUr/9c2jISJdaZEDnUi3SiWX5eWEPL2uktCeYnetQERydk= -----END CERTIFICATE-----Generated at Thu Sep 17 11:03:40 2026 by rpki-client