$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft File: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft (raw, json) Hash identifier: jWOxHf5/qiRMNwYCPDIsRHOvT7gW9qN1axe0OBxttmA= Subject key identifier: 9F:2A:26:7B:18:21:05:83:9F:A4:83:8B:3E:F4:7A:F4:C5:60:35:58 Authority key identifier: 72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 Certificate issuer: /CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Certificate serial: 18C0BD5B3A772853DD0A0616470D9267152DED97 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 23:38:08 +0000 Manifest this update: Wed 16 Sep 2026 23:33:08 +0000 Manifest next update: Fri 18 Sep 2026 03:02:08 +0000 Files and hashes: 1: 725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl (hash: l11iDTdtn3Guq+jJRn1HkLK156ZuZ/lQqhePyGHWDV0=) 2: 3131362e3235342e3130302e302f32322d3234203d3e203535363933.roa (hash: 2ZgfJvyLTSbmKyjhb50szLtpeLkF+krwXndUc1mrD0c=) 3: 3130332e31382e3133322e302f32322d3234203d3e203535363933.roa (hash: Fn5PKzmC7YA1TbvzOZXs3Jzaa7OB0gZmLLWwdOBo6Sk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c0:bd:5b:3a:77:28:53:dd:0a:06:16:47:0d:92:67:15:2d:ed:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725189DBE7D964436A85FAC1FC33E5BF5C460A97 Validity Not Before: Sep 16 23:33:08 2026 GMT Not After : Sep 18 03:02:08 2026 GMT Subject: CN=9F2A267B182105839FA4838B3EF47AF4C5603558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:09:d4:1b:83:83:da:66:e3:9d:25:37:94: ff:71:28:ce:31:52:93:fd:d7:74:0b:58:ba:1a:09: 80:f0:dd:8e:be:3d:29:32:15:b3:39:14:17:dc:66: 5b:64:8f:e6:55:91:11:e3:c5:16:02:d0:50:b7:db: ec:73:1b:36:c5:29:83:57:bb:a8:d5:a0:ca:06:29: ee:db:70:10:38:a2:17:69:7b:d4:20:af:d1:9b:2a: 6c:32:ec:8c:8a:3d:68:5c:ba:ba:62:f9:a5:16:88: d2:13:bb:9f:56:ea:82:fe:cb:50:ae:80:74:84:ea: 72:84:cc:c2:fa:85:ec:c8:92:64:58:fa:3a:44:4f: 62:16:7b:8d:18:ae:61:78:02:3e:49:be:8e:2e:2e: 09:28:a5:37:2d:b2:be:62:c9:19:79:b4:b1:24:40: c8:99:97:45:1a:e0:92:b4:64:80:d6:1e:8c:bd:7c: f5:17:bc:70:56:4a:5d:ec:4e:26:e7:3f:23:71:35: 0d:c6:91:2f:8a:33:d5:4c:7c:ee:ee:5a:17:97:a5: a7:6d:73:09:bf:75:67:8d:45:65:69:6e:6d:4a:a4: f0:cf:4e:2c:b6:cf:ff:dd:14:e6:fd:ae:0a:6f:06: ad:c8:ee:3a:8f:26:fb:66:66:f5:7c:9d:07:f5:12: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2A:26:7B:18:21:05:83:9F:A4:83:8B:3E:F4:7A:F4:C5:60:35:58 X509v3 Authority Key Identifier: keyid:72:51:89:DB:E7:D9:64:43:6A:85:FA:C1:FC:33:E5:BF:5C:46:0A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/725189DBE7D964436A85FAC1FC33E5BF5C460A97.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd54b4e2-2e58-465b-afaa-1c9465c882e6/0/725189DBE7D964436A85FAC1FC33E5BF5C460A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:4a:67:08:20:21:07:9c:f0:fc:60:0e:4b:c6:df:00:e6:bc: 91:22:17:e3:27:e2:1b:77:8d:09:ea:6b:25:9c:fb:05:63:9c: 42:c7:c1:28:97:e2:f2:c0:18:23:1d:0b:92:3f:dd:01:f8:d3: 8d:3b:2f:bf:b3:9a:14:40:6b:6a:61:30:31:ab:b4:89:53:53: 8e:7c:37:dd:ca:a7:b7:08:95:ea:3b:ae:ec:9c:09:b6:ff:93: 68:08:31:87:7a:24:bf:cd:ad:35:05:f8:39:18:93:df:06:f4: 81:8d:e0:84:91:4e:5b:69:50:38:39:ae:ed:f4:a4:9a:70:c1: ed:c7:11:c4:72:f8:4c:b9:43:65:51:6f:f9:8e:32:e3:21:7b: 7f:30:40:aa:db:43:da:64:87:e3:44:ac:95:0a:6b:ef:63:1e: 46:f4:cb:7e:cb:43:02:20:4f:0c:46:b1:aa:9a:2e:92:30:d6: 21:e8:05:f6:7f:f1:31:d6:ff:90:59:01:1d:b4:bf:28:62:1b: 8d:fa:3e:51:2e:de:38:48:7c:16:15:07:28:53:69:84:33:94: 92:43:62:17:91:c2:9b:83:34:32:29:98:d9:77:c9:f5:33:82: b1:31:8f:65:0d:cc:bd:36:11:62:6c:83:e6:da:7c:6e:cb:03: f2:b3:be:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMC9Wzp3KFPdCgYWRw2SZxUt7ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1 QzQ2MEE5NzAeFw0yNjA5MTYyMzMzMDhaFw0yNjA5MTgwMzAyMDhaMDMxMTAvBgNV BAMTKDlGMkEyNjdCMTgyMTA1ODM5RkE0ODM4QjNFRjQ3QUY0QzU2MDM1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF1AnUG4OD2mbjnSU3lP9xKM4x UpP913QLWLoaCYDw3Y6+PSkyFbM5FBfcZltkj+ZVkRHjxRYC0FC32+xzGzbFKYNX u6jVoMoGKe7bcBA4ohdpe9Qgr9GbKmwy7IyKPWhcurpi+aUWiNITu59W6oL+y1Cu gHSE6nKEzML6hezIkmRY+jpET2IWe40YrmF4Aj5Jvo4uLgkopTctsr5iyRl5tLEk QMiZl0Ua4JK0ZIDWHoy9fPUXvHBWSl3sTibnPyNxNQ3GkS+KM9VMfO7uWheXpadt cwm/dWeNRWVpbm1KpPDPTiy2z//dFOb9rgpvBq3I7jqPJvtmZvV8nQf1EgBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnyomexghBYOfpIOLPvR69MVgNVgwHwYDVR0j BBgwFoAUclGJ2+fZZENqhfrB/DPlv1xGCpcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ1NGI0ZTItMmU1OC00NjViLWFmYWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJF N0Q5NjQ0MzZBODVGQUMxRkMzM0U1QkY1QzQ2MEE5Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjUxODlEQkU3RDk2NDQzNkE4NUZBQzFGQzMzRTVCRjVDNDYw QTk3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ1NGI0ZTItMmU1OC00NjViLWFm YWEtMWM5NDY1Yzg4MmU2LzAvNzI1MTg5REJFN0Q5NjQ0MzZBODVGQUMxRkMzM0U1 QkY1QzQ2MEE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1KZwggIQec8PxgDkvG3wDmvJEiF+Mn4ht3 jQnqayWc+wVjnELHwSiX4vLAGCMdC5I/3QH40407L7+zmhRAa2phMDGrtIlTU458 N93Kp7cIleo7ruycCbb/k2gIMYd6JL/NrTUF+DkYk98G9IGN4ISRTltpUDg5ru30 pJpwwe3HEcRy+Ey5Q2VRb/mOMuMhe38wQKrbQ9pkh+NErJUKa+9jHkb0y37LQwIg TwxGsaqaLpIw1iHoBfZ/8THW/5BZAR20vyhiG436PlEu3jhIfBYVByhTaYQzlJJD YheRwpuDNDIpmNl3yfUzgrExj2UNzL02EWJsg+bafG7LA/KzviU= -----END CERTIFICATE-----Generated at Thu Sep 17 09:19:04 2026 by rpki-client