$ rpki-client -vvvf rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft File: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft (raw, json) Hash identifier: FF7c7uoEKetFMESj9CXNOIonJnRk7Auav57EgwLrrlE= Subject key identifier: FC:0E:CD:06:2A:7A:30:91:DE:CF:59:7C:9F:FC:AA:DD:99:FD:67:CE Authority key identifier: 72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 Certificate issuer: /CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Certificate serial: 4F297F41CE2E95EACF94F45C46AF02DBAA475CBE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft Manifest number: EA Signing time: Sat 24 Oct 2026 22:11:47 +0000 Manifest this update: Sat 24 Oct 2026 22:06:47 +0000 Manifest next update: Sun 25 Oct 2026 23:14:47 +0000 Files and hashes: 1: 725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl (hash: pv+zuV+FwL0KeXCAbdeMprOOCsK4Y52fDw6CAhrJ2yQ=) 2: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: oUpYjCZBUJLtFkQG6ecMP2UxGQxIQOGY4XCQZ/Ln3C8=) 3: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: jvWEOsR7PfzKTUwNJSaNZgDIPP0tbvEXbSdlcBqgCio=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:29:7f:41:ce:2e:95:ea:cf:94:f4:5c:46:af:02:db:aa:47:5c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725066A44CCDFAEE44A7C958D40FBA3C1333B128 Validity Not Before: Oct 24 22:06:47 2026 GMT Not After : Oct 25 23:14:47 2026 GMT Subject: CN=FC0ECD062A7A3091DECF597C9FFCAADD99FD67CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:a2:3b:f6:88:65:ea:a7:11:da:8c:eb:4a: da:0c:15:eb:64:81:b6:7f:7d:29:52:10:75:19:70: 42:30:23:3b:dc:7a:6c:48:7a:e4:92:cb:35:5a:1d: 72:1b:6b:c3:af:fb:c1:fa:51:50:49:79:e9:77:62: 08:14:69:ef:58:3f:be:6a:1a:68:60:8b:0e:72:8c: d2:33:74:a8:43:4b:47:20:d1:2e:34:7e:06:88:eb: e3:f4:03:c4:6d:d4:cf:4b:52:f8:fc:6d:53:09:ee: 16:63:85:8a:5a:f2:97:dd:ae:2a:34:1e:1c:0d:ec: dd:7c:fb:e3:7b:02:8b:f7:46:7f:a9:2b:80:8f:8e: 3d:11:9f:4f:f1:11:84:e4:d3:02:3d:17:de:ba:f4: f7:b9:0b:52:ce:e0:0c:dc:b7:a8:88:10:22:85:c6: 5e:cc:24:59:09:ef:3b:61:11:09:25:90:ad:93:9d: b5:14:5d:d5:62:2c:25:35:a8:0c:ad:d1:e5:b9:bb: 76:2c:4c:99:40:9b:70:ca:6a:84:21:f2:a5:7e:85: 6b:37:42:4a:6a:8b:f8:4c:53:30:5a:0a:4c:c7:a5: 65:32:f0:9a:55:23:8f:ac:a3:df:f7:1d:29:26:9f: f8:5f:90:1a:12:38:5d:91:62:21:70:37:7a:02:38: 32:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0E:CD:06:2A:7A:30:91:DE:CF:59:7C:9F:FC:AA:DD:99:FD:67:CE X509v3 Authority Key Identifier: keyid:72:50:66:A4:4C:CD:FA:EE:44:A7:C9:58:D4:0F:BA:3C:13:33:B1:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725066A44CCDFAEE44A7C958D40FBA3C1333B128.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/725066A44CCDFAEE44A7C958D40FBA3C1333B128.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5d:93:69:c7:98:da:ce:1c:34:d8:da:71:d2:11:f1:d0:fe: 2a:38:18:d9:6d:40:07:b8:7a:c2:69:0f:1a:d5:b7:b2:16:42: 82:f3:d1:eb:d0:09:f9:ad:9c:48:19:5d:8d:3c:b7:4b:5f:eb: 5b:7a:0b:df:24:4b:02:38:68:14:f3:f8:44:55:99:c5:ae:a1: fe:c0:6a:eb:fb:10:68:0d:ac:3d:bb:81:4c:a5:66:a2:6f:88: 9b:ee:1d:8b:59:ee:72:62:b4:53:46:1e:8a:77:25:4b:1f:d1: af:7b:e5:f9:16:11:ce:6f:f1:78:95:25:2e:4a:be:18:c0:0c: ac:a8:4f:81:ee:e7:27:8b:d2:da:6a:53:ed:dd:52:22:98:8c: d0:32:46:b7:64:15:98:04:42:b3:60:4c:e7:52:21:62:1c:87: 5c:de:10:18:0e:c3:85:eb:a2:41:80:92:cc:fb:9a:37:04:48: b1:6f:ec:51:28:8c:70:cc:e2:f1:de:0e:4e:7f:e8:7e:a1:f0: 32:25:d1:75:8f:39:e8:f0:e6:1a:75:d1:ff:81:c9:e9:0d:d3: cd:b4:a7:87:fe:32:0a:98:ba:dd:cb:60:2c:25:0f:2a:98:fc: 0b:f6:25:1c:b1:f5:5c:75:2d:d7:d8:27:a7:87:cd:b0:17:88: 92:b4:47:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTyl/Qc4ulerPlPRcRq8C26pHXL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0Mx MzMzQjEyODAeFw0yNjEwMjQyMjA2NDdaFw0yNjEwMjUyMzE0NDdaMDMxMTAvBgNV BAMTKEZDMEVDRDA2MkE3QTMwOTFERUNGNTk3QzlGRkNBQUREOTlGRDY3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkBqI79ohl6qcR2ozrStoMFetk gbZ/fSlSEHUZcEIwIzvcemxIeuSSyzVaHXIba8Ov+8H6UVBJeel3YggUae9YP75q Gmhgiw5yjNIzdKhDS0cg0S40fgaI6+P0A8Rt1M9LUvj8bVMJ7hZjhYpa8pfdrio0 HhwN7N18++N7Aov3Rn+pK4CPjj0Rn0/xEYTk0wI9F9669Pe5C1LO4Azct6iIECKF xl7MJFkJ7zthEQklkK2TnbUUXdViLCU1qAyt0eW5u3YsTJlAm3DKaoQh8qV+hWs3 Qkpqi/hMUzBaCkzHpWUy8JpVI4+so9/3HSkmn/hfkBoSOF2RYiFwN3oCODJ7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/A7NBip6MJHez1l8n/yq3Zn9Z84wHwYDVR0j BBgwFoAUclBmpEzN+u5Ep8lY1A+6PBMzsSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YWVmODM3YjMtZGZkMi00MmNjLTliNzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0 Q0NERkFFRTQ0QTdDOTU4RDQwRkJBM0MxMzMzQjEyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUwNjZBNDRDQ0RGQUVFNDRBN0M5NThENDBGQkEzQzEzMzNC MTI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvNzI1MDY2QTQ0Q0NERkFFRTQ0QTdDOTU4RDQwRkJB M0MxMzMzQjEyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRdk2nHmNrOHDTY2nHSEfHQ/io4GNltQAe4 esJpDxrVt7IWQoLz0evQCfmtnEgZXY08t0tf61t6C98kSwI4aBTz+ERVmcWuof7A auv7EGgNrD27gUylZqJviJvuHYtZ7nJitFNGHop3JUsf0a975fkWEc5v8XiVJS5K vhjADKyoT4Hu5yeL0tpqU+3dUiKYjNAyRrdkFZgEQrNgTOdSIWIch1zeEBgOw4Xr okGAksz7mjcESLFv7FEojHDM4vHeDk5/6H6h8DIl0XWPOejw5hp10f+ByekN0820 p4f+MgqYut3LYCwlDyqY/Av2JRyx9Vx1LdfYJ6eHzbAXiJK0R4Q= -----END CERTIFICATE-----Generated at Sun Oct 25 03:08:21 2026 by rpki-client