$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft File: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft (raw, json) Hash identifier: SubLS1A4epk6BWYQUERKqucOuUfE1kmoVJhm4pQwubI= Subject key identifier: 09:26:AD:44:D5:92:39:5B:DF:52:2C:A8:EC:1A:0E:7C:BD:A1:EF:79 Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Certificate serial: 36AFAABCF9485039C6FD3F5B23051969391C4CD7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft Manifest number: A7 Signing time: Fri 04 Sep 2026 22:23:54 +0000 Manifest this update: Fri 04 Sep 2026 22:18:54 +0000 Manifest next update: Sun 06 Sep 2026 02:16:54 +0000 Files and hashes: 1: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl (hash: jY8XguPHuhg9rb7HGYqNIMvdNjsPD0pnBnYRbzrhV88=) 2: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: Ndn10HkuTSjLbjizNWK1QWx6xtlpc6JAMMmVzvO86rw=) 3: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: NA2vG2Q1kDJqOsypeMdeccP+qZk1Bv6cVc2oTP2Tmkw=) 4: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 23:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:af:aa:bc:f9:48:50:39:c6:fd:3f:5b:23:05:19:69:39:1c:4c:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Validity Not Before: Sep 4 22:18:54 2026 GMT Not After : Sep 6 02:16:54 2026 GMT Subject: CN=0926AD44D592395BDF522CA8EC1A0E7CBDA1EF79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:a0:b4:06:ba:b2:c4:91:36:70:a2:2b:1e: 57:6a:62:14:7a:25:8e:dc:40:49:b3:77:27:8a:94: 0b:f8:7b:3c:ad:44:21:f2:d4:a9:73:ac:3c:0a:7b: d1:e6:a8:db:a6:1b:c3:60:b6:59:7c:39:7d:85:19: dc:8b:7c:25:61:ee:07:a9:e6:6e:d1:87:d5:cf:ec: 36:a1:cf:40:38:d7:0c:53:2e:5d:5d:5e:14:3a:99: 2d:53:32:7a:94:d7:16:33:b6:59:04:0b:f2:75:64: 24:b7:6b:47:b6:4c:a7:91:45:6f:92:53:bf:90:d1: 24:6c:eb:25:5c:35:6f:b6:73:9c:47:f5:31:b4:1d: 47:f7:11:5a:41:a7:d4:89:8f:b7:94:da:75:09:0a: 0a:a4:8c:02:f1:46:34:7b:9c:33:80:d1:b3:b3:d0: 24:e8:75:59:c1:c1:e1:f3:55:67:18:58:d7:60:d5: 97:9b:64:a9:6f:f2:00:66:cf:cb:10:bd:13:d0:78: 4f:ba:6f:8d:b4:60:d1:36:32:22:4d:5e:2a:31:2e: d2:23:e4:8d:cd:15:83:19:a7:12:2d:0f:fd:b6:aa: 33:51:00:3e:ae:d9:c0:94:01:69:1b:56:53:b3:9b: a4:30:30:2a:a5:4e:be:49:ae:68:5a:8e:d8:93:5b: bc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:26:AD:44:D5:92:39:5B:DF:52:2C:A8:EC:1A:0E:7C:BD:A1:EF:79 X509v3 Authority Key Identifier: keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:53:d2:bc:11:20:02:a6:68:e4:48:d2:d1:c8:f1:d7:12:19: 94:cb:ff:be:f2:68:3d:9a:0f:1c:fe:c0:5d:f5:94:f5:8d:e7: 99:d2:b3:2f:34:b6:1c:0b:ed:ac:2f:28:11:5e:42:79:fe:35: 76:f2:b4:99:ea:d3:89:e5:af:7a:c5:9c:b3:1e:b5:e6:ca:5f: bf:7d:ba:a0:3a:03:aa:37:21:24:c2:3e:ac:6a:99:a1:26:ae: 8b:02:49:37:e9:37:8c:b8:28:56:f4:39:03:78:37:27:be:f4: 4b:37:e7:f5:e6:46:42:31:89:47:49:3c:39:ba:88:3d:16:68: db:b3:07:ac:88:bd:58:c6:29:18:22:27:fd:3c:28:a6:d1:9c: 7f:49:fc:e9:d9:97:3a:2f:40:6a:aa:66:57:a5:44:23:42:7f: e3:17:57:fb:37:59:44:67:cd:5e:b9:78:6b:3f:66:e6:20:1b: c9:76:d9:5e:c8:4f:d5:40:bf:27:b1:07:20:9f:10:e0:4e:ee: d0:e7:6a:9a:82:5c:2d:55:52:cf:4a:38:0d:b7:c0:34:0e:42: 58:cf:42:e9:02:cb:46:7c:8e:eb:ee:05:d2:69:00:86:ac:fa: 39:16:9b:d6:86:1c:56:64:98:c0:9c:2b:3f:16:b6:0b:51:f4: 06:3c:12:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNq+qvPlIUDnG/T9bIwUZaTkcTNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VBQzNE NTVDM0Q3QTAeFw0yNjA5MDQyMjE4NTRaFw0yNjA5MDYwMjE2NTRaMDMxMTAvBgNV BAMTKDA5MjZBRDQ0RDU5MjM5NUJERjUyMkNBOEVDMUEwRTdDQkRBMUVGNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0z6C0BrqyxJE2cKIrHldqYhR6 JY7cQEmzdyeKlAv4ezytRCHy1KlzrDwKe9HmqNumG8Ngtll8OX2FGdyLfCVh7gep 5m7Rh9XP7Dahz0A41wxTLl1dXhQ6mS1TMnqU1xYztlkEC/J1ZCS3a0e2TKeRRW+S U7+Q0SRs6yVcNW+2c5xH9TG0HUf3EVpBp9SJj7eU2nUJCgqkjALxRjR7nDOA0bOz 0CTodVnBweHzVWcYWNdg1ZebZKlv8gBmz8sQvRPQeE+6b420YNE2MiJNXioxLtIj 5I3NFYMZpxItD/22qjNRAD6u2cCUAWkbVlOzm6QwMCqlTr5JrmhajtiTW7yLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCSatRNWSOVvfUiyo7BoOfL2h73kwHwYDVR0j BBgwFoAUslqomZHfgZY9uVrLgCPqw9VcPXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjUzNTVjNWEtZWZjOC00OGY3LTkwMmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5 MURGODE5NjNEQjk1QUNCODAyM0VBQzNENTVDM0Q3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjVBQTg5OTkxREY4MTk2M0RCOTVBQ0I4MDIzRUFDM0Q1NUMz RDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VB QzNENTVDM0Q3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhT0rwRIAKmaORI0tHI8dcSGZTL/77yaD2a Dxz+wF31lPWN55nSsy80thwL7awvKBFeQnn+NXbytJnq04nlr3rFnLMetebKX799 uqA6A6o3ISTCPqxqmaEmrosCSTfpN4y4KFb0OQN4Nye+9Es35/XmRkIxiUdJPDm6 iD0WaNuzB6yIvVjGKRgiJ/08KKbRnH9J/OnZlzovQGqqZlelRCNCf+MXV/s3WURn zV65eGs/ZuYgG8l22V7IT9VAvyexByCfEOBO7tDnapqCXC1VUs9KOA23wDQOQljP QukCy0Z8juvuBdJpAIas+jkWm9aGHFZkmMCcKz8WtgtR9AY8EkI= -----END CERTIFICATE-----Generated at Sat Sep 5 04:08:41 2026 by rpki-client