$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft File: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft (raw, json) Hash identifier: fXkfNgkpYr2W3uR7AJkWxPdIQHa3lfPZg1vMSJWSIVk= Subject key identifier: 53:84:F2:3D:63:27:16:67:67:87:74:FA:4A:CB:20:1C:83:B1:F7:4C Authority key identifier: B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A Certificate issuer: /CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Certificate serial: 44DE2B6C0D441455003743EB4ABECCE4B54EC76E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft Manifest number: E9 Signing time: Sat 24 Oct 2026 22:37:20 +0000 Manifest this update: Sat 24 Oct 2026 22:32:20 +0000 Manifest next update: Mon 26 Oct 2026 00:04:20 +0000 Files and hashes: 1: 3130332e3135362e3232372e302f32342d3234203d3e203435373031.roa (hash: IhEwcpICZNPed1st7QD2ul0Xv1zBvNohPSdVYQvZPpI=) 2: B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl (hash: OxvH+ZmschKjctG6Gx5QxVJ8gJYzmeD0fBM0eVW8yrg=) 3: 323430363a386563303a3a2f33322d3332203d3e203435373031.roa (hash: Ndn10HkuTSjLbjizNWK1QWx6xtlpc6JAMMmVzvO86rw=) 4: 3130332e3135362e3232362e302f32342d3234203d3e203435373031.roa (hash: NA2vG2Q1kDJqOsypeMdeccP+qZk1Bv6cVc2oTP2Tmkw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:de:2b:6c:0d:44:14:55:00:37:43:eb:4a:be:cc:e4:b5:4e:c7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B25AA89991DF81963DB95ACB8023EAC3D55C3D7A Validity Not Before: Oct 24 22:32:20 2026 GMT Not After : Oct 26 00:04:20 2026 GMT Subject: CN=5384F23D63271667678774FA4ACB201C83B1F74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:af:19:3a:9d:9f:05:c4:85:07:3e:80:cc:11: af:34:61:00:ce:63:f3:73:01:3d:e8:32:e6:17:18: 9d:82:46:3f:36:bd:fd:92:f8:88:ca:57:f8:54:d5: d4:c5:99:86:90:27:74:f7:af:b1:03:2c:f2:2b:47: 9f:57:26:be:8e:00:40:aa:6e:3b:14:40:f1:1d:12: 30:51:92:03:92:c6:48:eb:f7:a6:5e:09:1f:4e:2b: ef:0d:c4:45:c0:95:1d:9d:f7:1b:df:41:6b:d7:35: b5:bc:ce:66:7e:5a:e1:78:8e:a2:50:67:68:50:14: 4a:a9:18:4b:5f:18:78:30:b8:af:58:d6:8e:f6:7d: 04:3d:86:67:60:c5:c3:ed:1f:34:c5:0c:b7:90:24: a0:a5:04:a5:9a:9d:1d:ca:29:b1:eb:74:2b:5d:8a: ca:93:0a:55:74:f3:0c:cc:cd:92:5d:89:90:c4:2d: 72:91:c5:0d:cb:ce:ba:bd:86:54:b7:20:30:54:08: 37:a6:07:ca:99:75:51:55:2a:e3:c9:37:a7:1f:46: 81:78:bd:1c:81:cb:4d:07:f0:39:8f:a5:f2:5a:c9: ab:44:9b:69:c2:6e:86:ac:bc:5a:1c:49:62:a1:d9: 98:dc:36:66:e8:9e:1f:f9:ed:db:0c:f3:08:94:8f: 42:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:84:F2:3D:63:27:16:67:67:87:74:FA:4A:CB:20:1C:83:B1:F7:4C X509v3 Authority Key Identifier: keyid:B2:5A:A8:99:91:DF:81:96:3D:B9:5A:CB:80:23:EA:C3:D5:5C:3D:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/B25AA89991DF81963DB95ACB8023EAC3D55C3D7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:83:ac:10:36:7b:ef:8c:08:38:e4:20:08:7f:55:44:6c:64: 8b:39:73:fa:2f:22:e3:ed:6a:23:08:1c:f3:bf:ce:5a:92:6c: b8:18:35:12:fe:9b:eb:f0:38:e2:4d:53:aa:1b:f9:78:22:8d: f6:8e:74:20:6d:98:6a:8f:45:c2:43:c3:17:3c:ab:b1:a1:3f: 61:a3:04:40:a3:9a:84:fa:22:4a:f0:5c:3c:06:40:76:67:81: 16:61:cc:df:15:a9:2b:1b:a8:91:e6:99:e2:77:c8:8b:aa:d4: be:d4:c6:55:90:46:73:c1:88:32:6f:d4:34:58:cc:88:3b:3b: 0b:42:fe:b1:25:a3:8d:ff:17:34:ff:a8:99:b2:9e:e3:df:1b: f3:9f:38:8e:92:89:18:5c:6f:27:10:38:06:8b:76:43:5a:80: a9:eb:ea:cc:dd:c4:3c:ff:6c:5b:6e:12:0d:89:a5:6e:d7:bc: 80:67:7b:d1:a7:68:34:e5:b2:7c:e1:84:e7:37:9a:53:c8:74: 97:b1:3c:b3:57:1d:a2:5a:55:91:18:16:2f:42:10:ba:f0:f4: c0:bd:8d:df:59:3a:ec:42:85:3b:79:16:69:49:b5:86:db:28: fe:06:98:ee:e1:7f:32:35:38:e8:97:df:3c:fa:c7:df:f8:ed: 3b:1b:db:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURN4rbA1EFFUAN0PrSr7M5LVOx24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VBQzNE NTVDM0Q3QTAeFw0yNjEwMjQyMjMyMjBaFw0yNjEwMjYwMDA0MjBaMDMxMTAvBgNV BAMTKDUzODRGMjNENjMyNzE2Njc2Nzg3NzRGQTRBQ0IyMDFDODNCMUY3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrxk6nZ8FxIUHPoDMEa80YQDO Y/NzAT3oMuYXGJ2CRj82vf2S+IjKV/hU1dTFmYaQJ3T3r7EDLPIrR59XJr6OAECq bjsUQPEdEjBRkgOSxkjr96ZeCR9OK+8NxEXAlR2d9xvfQWvXNbW8zmZ+WuF4jqJQ Z2hQFEqpGEtfGHgwuK9Y1o72fQQ9hmdgxcPtHzTFDLeQJKClBKWanR3KKbHrdCtd isqTClV08wzMzZJdiZDELXKRxQ3Lzrq9hlS3IDBUCDemB8qZdVFVKuPJN6cfRoF4 vRyBy00H8DmPpfJayatEm2nCboasvFocSWKh2ZjcNmbonh/57dsM8wiUj0INAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU4TyPWMnFmdnh3T6SssgHIOx90wwHwYDVR0j BBgwFoAUslqomZHfgZY9uVrLgCPqw9VcPXowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjUzNTVjNWEtZWZjOC00OGY3LTkwMmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5 MURGODE5NjNEQjk1QUNCODAyM0VBQzNENTVDM0Q3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMjVBQTg5OTkxREY4MTk2M0RCOTVBQ0I4MDIzRUFDM0Q1NUMz RDdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjUzNTVjNWEtZWZjOC00OGY3LTkw MmYtNmUzMWZjNDI5OTVhLzAvQjI1QUE4OTk5MURGODE5NjNEQjk1QUNCODAyM0VB QzNENTVDM0Q3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCDrBA2e++MCDjkIAh/VURsZIs5c/ovIuPt aiMIHPO/zlqSbLgYNRL+m+vwOOJNU6ob+XgijfaOdCBtmGqPRcJDwxc8q7GhP2Gj BECjmoT6IkrwXDwGQHZngRZhzN8VqSsbqJHmmeJ3yIuq1L7UxlWQRnPBiDJv1DRY zIg7OwtC/rElo43/FzT/qJmynuPfG/OfOI6SiRhcbycQOAaLdkNagKnr6szdxDz/ bFtuEg2JpW7XvIBne9GnaDTlsnzhhOc3mlPIdJexPLNXHaJaVZEYFi9CELrw9MC9 jd9ZOuxChTt5FmlJtYbbKP4GmO7hfzI1OOiX3zz6x9/47Tsb254= -----END CERTIFICATE-----Generated at Sun Oct 25 14:24:46 2026 by rpki-client