$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft File: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft (raw, json) Hash identifier: 2mguA95u0IQbLzSdyyvjZtoHUcEuTjtactwygTpKy+8= Subject key identifier: DB:C0:B8:30:8B:C4:91:79:68:52:00:2F:C6:D0:74:C4:EC:A4:CC:16 Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Certificate serial: 4A7277F2E37324BA0D5DA995C5B4BF3C13735D30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 17:32:43 +0000 Manifest this update: Tue 21 Jul 2026 17:27:43 +0000 Manifest next update: Wed 22 Jul 2026 19:05:43 +0000 Files and hashes: 1: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: NA2vG2Q1kDJqOsypeMdeccP+qZk1Bv6cVc2oTP2Tmkw=) 2: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl (hash: VixXiL/oCFYH7yDQVk5KdMMHqa/BMmq+eGVOgEOjpDw=) 3: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=) 4: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: Ndn10HkuTSjLbjizNWK1QWx6xtlpc6JAMMmVzvO86rw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 19:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:72:77:f2:e3:73:24:ba:0d:5d:a9:95:c5:b4:bf:3c:13:73:5d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Validity Not Before: Jul 21 17:27:43 2026 GMT Not After : Jul 22 19:05:43 2026 GMT Subject: CN=DBC0B8308BC491796852002FC6D074C4ECA4CC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:62:26:e1:6e:b0:d2:4f:7e:3d:c7:83:1d: 97:1f:57:d0:9a:82:a5:5b:f5:08:12:ca:ec:98:3c: c3:f9:78:94:4a:c3:15:3f:fc:a2:be:b0:64:7a:37: dd:1a:ed:16:4b:e0:e2:5d:0f:18:51:d9:17:44:3d: 4a:a0:94:63:92:33:7d:6b:9b:98:b9:cf:e5:43:ec: 76:1f:85:70:3d:90:3e:fa:c1:6d:27:6f:77:82:1f: 2d:a7:af:0e:79:80:b2:98:8e:7c:a8:76:48:0f:7d: 13:90:33:d0:41:65:1f:d0:5b:b4:46:4a:e3:2a:98: 34:0f:b9:8f:77:9a:ac:4f:49:14:8c:c1:33:5c:0e: b0:ec:ea:69:f1:cc:40:c9:d2:0a:9a:7c:3e:f0:78: 07:8a:b9:6d:a0:21:e2:21:64:9e:85:f8:f9:6e:12: 9f:ae:b9:a7:b6:b1:34:3c:bc:a5:83:84:a1:5d:a8: 3d:d3:7a:09:19:0c:1b:22:2f:92:c3:13:3d:02:68: a3:92:74:85:cf:36:52:fb:3b:cd:e2:9e:fc:38:3f: c4:a1:5e:6b:3a:e2:98:19:95:42:f5:c3:ce:d8:6a: 99:02:73:0c:26:d8:2c:9c:28:6d:7e:b2:e6:29:6e: ba:99:7c:ff:45:6c:be:56:5c:a1:9f:02:e4:ed:ff: c7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C0:B8:30:8B:C4:91:79:68:52:00:2F:C6:D0:74:C4:EC:A4:CC:16 X509v3 Authority Key Identifier: keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:f1:16:a1:27:8d:84:e5:60:ef:b1:c2:65:1b:10:63:66:20: 75:21:0f:ea:1e:65:65:05:cd:80:a6:e5:85:84:ea:2d:41:8c: e6:d7:25:38:1e:16:3f:2d:2d:d2:eb:31:09:44:56:e9:a6:40: 66:88:c9:80:e9:21:4c:1b:c2:04:a7:24:01:77:cc:28:16:3f: 73:83:09:ce:be:e7:a4:ad:4b:cc:57:12:cc:a9:21:3d:d7:b6: d4:bf:be:a0:12:4b:31:8c:30:70:6f:c6:9e:00:11:a8:d0:63: 9a:a9:e1:8c:4f:71:9f:05:fa:2c:f2:43:d4:8d:0a:9c:f3:4b: 6f:58:68:0d:65:1a:cc:fd:df:d4:be:e8:72:30:a4:98:83:5a: b0:ca:57:89:b5:b6:07:de:1f:c6:83:6b:ce:ef:09:c9:88:1a: 8a:b2:25:ac:0a:f4:20:ab:c2:60:0d:02:f1:eb:74:57:c9:0b: 98:1c:93:3d:c1:e2:bb:77:10:53:e2:76:bb:f5:dd:6c:c7:9e: 79:5e:06:c5:56:00:7d:1a:6e:fb:a7:f1:7b:7d:59:81:ce:e1: 6b:5d:aa:87:15:a9:94:c1:a8:da:e7:c9:c0:ee:4d:7d:91:8c: f1:c1:65:4a:40:ae:91:55:d0:22:61:7e:d6:19:6a:32:ca:f8: c2:79:58:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnJ38uNzJLoNXamVxbS/PBNzXTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VBQzNE NTVDM0Q3QTAeFw0yNjA3MjExNzI3NDNaFw0yNjA3MjIxOTA1NDNaMDMxMTAvBgNV BAMTKERCQzBCODMwOEJDNDkxNzk2ODUyMDAyRkM2RDA3NEM0RUNBNENDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC032Im4W6w0k9+PceDHZcfV9Ca gqVb9QgSyuyYPMP5eJRKwxU//KK+sGR6N90a7RZL4OJdDxhR2RdEPUqglGOSM31r m5i5z+VD7HYfhXA9kD76wW0nb3eCHy2nrw55gLKYjnyodkgPfROQM9BBZR/QW7RG SuMqmDQPuY93mqxPSRSMwTNcDrDs6mnxzEDJ0gqafD7weAeKuW2gIeIhZJ6F+Plu Ep+uuae2sTQ8vKWDhKFdqD3TegkZDBsiL5LDEz0CaKOSdIXPNlL7O83invw4P8Sh Xms64pgZlUL1w87YapkCcwwm2CycKG1+suYpbrqZfP9FbL5WXKGfAuTt/8dTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU28C4MIvEkXloUgAvxtB0xOykzBYwHwYDVR0j BBgwFoAUslqomZHfgZY9uVrLgCPqw9VcPXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjUzNTVjNWEtZWZjOC00OGY3LTkwMmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5 MURGODE5NjNEQjk1QUNCODAyM0VBQzNENTVDM0Q3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjVBQTg5OTkxREY4MTk2M0RCOTVBQ0I4MDIzRUFDM0Q1NUMz RDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VB QzNENTVDM0Q3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjxFqEnjYTlYO+xwmUbEGNmIHUhD+oeZWUF zYCm5YWE6i1BjObXJTgeFj8tLdLrMQlEVummQGaIyYDpIUwbwgSnJAF3zCgWP3OD Cc6+56StS8xXEsypIT3XttS/vqASSzGMMHBvxp4AEajQY5qp4YxPcZ8F+izyQ9SN CpzzS29YaA1lGsz939S+6HIwpJiDWrDKV4m1tgfeH8aDa87vCcmIGoqyJawK9CCr wmANAvHrdFfJC5gckz3B4rt3EFPidrv13WzHnnleBsVWAH0abvun8Xt9WYHO4Wtd qocVqZTBqNrnycDuTX2RjPHBZUpArpFV0CJhftYZajLK+MJ5WOE= -----END CERTIFICATE-----Generated at Wed Jul 22 00:07:32 2026 by rpki-client