$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft File: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft (raw, json) Hash identifier: GuxTtvb8cSNZhEFdZng55AGAtlMvd9SGi+9jUbcu8iw= Subject key identifier: CC:CA:A5:08:B0:66:17:1E:8C:48:00:6C:51:0C:61:0C:CA:C6:D4:D3 Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Certificate serial: 261D6A301A2099B1C3CF480DE9F0759447752043 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft Manifest number: 2F Signing time: Fri 05 Jun 2026 21:16:54 +0000 Manifest this update: Fri 05 Jun 2026 21:11:54 +0000 Manifest next update: Sat 06 Jun 2026 21:38:54 +0000 Files and hashes: 1: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl (hash: kxDPEtQXihuFNAEFwc9x5M7C16eS+kebGrxW0Y0uYtE=) 2: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=) 3: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: NA2vG2Q1kDJqOsypeMdeccP+qZk1Bv6cVc2oTP2Tmkw=) 4: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: Ndn10HkuTSjLbjizNWK1QWx6xtlpc6JAMMmVzvO86rw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 21:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1d:6a:30:1a:20:99:b1:c3:cf:48:0d:e9:f0:75:94:47:75:20:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Validity Not Before: Jun 5 21:11:54 2026 GMT Not After : Jun 6 21:38:54 2026 GMT Subject: CN=CCCAA508B066171E8C48006C510C610CCAC6D4D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:23:93:a0:bb:8e:4b:b5:86:a7:d6:a1:69: eb:ca:5c:5e:45:90:49:3d:bd:2e:dd:1e:cf:c3:98: 46:dd:b6:b6:15:ed:54:4f:97:21:36:e8:31:d5:d8: f7:fb:03:c7:b2:2d:54:1a:45:2e:d4:53:c3:33:be: 9d:4f:d9:04:f9:05:b7:4b:f2:e6:d4:83:2b:76:44: 9e:c0:0e:dd:c2:41:07:49:35:c3:84:0f:12:d5:5d: 65:e7:d1:97:1c:84:56:f4:d9:78:c4:e6:7f:45:6d: 45:fa:02:5e:ac:dd:0f:c2:e6:1d:bd:69:52:42:b2: e6:ca:75:d8:d9:54:11:ae:cc:ac:0f:c9:dc:c0:3b: d6:ec:f0:9c:9d:80:f9:c6:c5:03:9a:93:be:65:4a: b9:b8:5a:8c:8b:b9:54:50:21:01:92:db:5c:15:eb: d0:40:13:a8:3c:d7:03:bf:0e:d6:25:e1:da:63:48: 1f:31:1d:61:57:73:ec:1e:29:2d:db:aa:7e:c5:12: 8c:eb:d8:94:ef:60:47:f1:89:37:8d:77:2d:05:e4: a8:44:05:b4:2f:5e:4b:23:8e:82:3c:dc:42:b7:ed: f3:12:c4:bc:90:d5:f9:4c:49:34:44:91:1f:d4:e3: 0b:92:25:1d:5b:17:6a:7d:f5:e7:60:b0:ad:8e:97: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CA:A5:08:B0:66:17:1E:8C:48:00:6C:51:0C:61:0C:CA:C6:D4:D3 X509v3 Authority Key Identifier: keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9f:ca:39:d4:09:b6:4e:4d:a5:94:8d:af:0e:9d:e2:6d:9f: 5f:2f:6b:f9:78:da:5c:ec:c2:14:22:9d:da:7e:29:bb:14:ad: 5d:d2:6c:d5:ff:33:78:bf:73:cd:ed:e0:4e:17:73:e9:fc:0c: fe:1c:da:70:4b:11:8a:7a:3b:6b:14:f8:de:50:c3:47:ac:22: cc:cf:2d:d6:1a:5a:30:dc:d9:24:2c:ff:0c:c2:88:22:6d:02: 63:27:52:e6:85:1c:ab:25:64:34:1f:54:5a:a2:7b:2f:2b:88: d4:5d:35:80:8c:23:a9:35:79:6a:f5:ec:d3:1a:d7:19:59:3c: a5:52:61:29:ab:c9:d7:34:70:11:f5:9c:ac:c3:39:7e:d4:18: 58:b5:b5:87:52:73:ea:3f:86:2e:3f:5e:12:6a:4c:b7:f9:76: 99:1b:66:5b:4c:12:67:5a:a0:f9:67:fc:41:28:57:28:ef:a6: b2:63:34:d2:bc:3a:49:ae:9a:fb:c6:83:6a:d3:53:9b:62:f6: 9f:28:52:97:c5:92:79:00:53:34:ef:0b:e4:62:d1:32:ce:78: 16:20:bf:5a:c9:98:04:17:7c:09:d2:49:63:a5:e4:9f:b6:22: c9:d6:6c:03:34:33:bf:9f:4b:7f:6f:e8:f0:7c:40:b1:20:2d: df:f6:59:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJh1qMBogmbHDz0gN6fB1lEd1IEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VBQzNE NTVDM0Q3QTAeFw0yNjA2MDUyMTExNTRaFw0yNjA2MDYyMTM4NTRaMDMxMTAvBgNV BAMTKENDQ0FBNTA4QjA2NjE3MUU4QzQ4MDA2QzUxMEM2MTBDQ0FDNkQ0RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEyOToLuOS7WGp9ahaevKXF5F kEk9vS7dHs/DmEbdtrYV7VRPlyE26DHV2Pf7A8eyLVQaRS7UU8Mzvp1P2QT5BbdL 8ubUgyt2RJ7ADt3CQQdJNcOEDxLVXWXn0ZcchFb02XjE5n9FbUX6Al6s3Q/C5h29 aVJCsubKddjZVBGuzKwPydzAO9bs8JydgPnGxQOak75lSrm4WoyLuVRQIQGS21wV 69BAE6g81wO/DtYl4dpjSB8xHWFXc+weKS3bqn7FEozr2JTvYEfxiTeNdy0F5KhE BbQvXksjjoI83EK37fMSxLyQ1flMSTREkR/U4wuSJR1bF2p99edgsK2Ol9whAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzMqlCLBmFx6MSABsUQxhDMrG1NMwHwYDVR0j BBgwFoAUslqomZHfgZY9uVrLgCPqw9VcPXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjUzNTVjNWEtZWZjOC00OGY3LTkwMmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5 MURGODE5NjNEQjk1QUNCODAyM0VBQzNENTVDM0Q3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjVBQTg5OTkxREY4MTk2M0RCOTVBQ0I4MDIzRUFDM0Q1NUMz RDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VB QzNENTVDM0Q3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGfyjnUCbZOTaWUja8OneJtn18va/l42lzs whQindp+KbsUrV3SbNX/M3i/c83t4E4Xc+n8DP4c2nBLEYp6O2sU+N5Qw0esIszP LdYaWjDc2SQs/wzCiCJtAmMnUuaFHKslZDQfVFqiey8riNRdNYCMI6k1eWr17NMa 1xlZPKVSYSmrydc0cBH1nKzDOX7UGFi1tYdSc+o/hi4/XhJqTLf5dpkbZltMEmda oPln/EEoVyjvprJjNNK8OkmumvvGg2rTU5ti9p8oUpfFknkAUzTvC+Ri0TLOeBYg v1rJmAQXfAnSSWOl5J+2IsnWbAM0M7+fS39v6PB8QLEgLd/2Wf0= -----END CERTIFICATE-----Generated at Sat Jun 6 15:49:53 2026 by rpki-client