$ rpki-client -vvvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft File: 252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft (raw, json) Hash identifier: ardGzt3RYem4BWScIZkAWR8zSxThyI/QnO5H6/iqXxw= Subject key identifier: 40:EA:51:12:39:EC:BE:E6:CD:DA:1E:EA:48:F5:F9:6C:78:BC:BF:84 Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04 Certificate issuer: /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404 Certificate serial: 7C384899638AB5C33927BBD7F5A3D5C37221A626 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 15:00:11 +0000 Manifest this update: Mon 21 Sep 2026 14:55:11 +0000 Manifest next update: Tue 22 Sep 2026 18:52:11 +0000 Files and hashes: 1: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: bSG6QHsujRPX+Uc294mdpRp76mW3JciOY0a15lJ+VVw=) 2: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: WBBveR8OOQyEDRNcy74ITNE5Qj9H1E1tJp48zRmuwlY=) 3: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: TMqEA7J0ys9Jdhs2856BZEmIfYAozAOdr0iBxVxAx0g=) 4: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: yogqlIBUcGwqvPyK5arWetAJIbHveLQtDXqk1GIkHHk=) 5: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: YPUqXiKd2hAz2pX0+rgtSnv5w4BDn1Ero1nRv8u6wqI=) 6: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: rmV7MY4FaBL6o6ZE4wLzlBfjsWL4ecrBXmGTlIU19+k=) 7: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: mha8gB43Q52dsFp/n7sRBfxP/9miPkjrCifPwwjXt6U=) 8: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: +gv7mshFwG91guPNffeDqFP8VhtlPTdkF38Mrqjvafw=) 9: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: DkW9L5+PRdqINtmxFS5yNgiVWSBo+5OuUsw7BGLvYSk=) 10: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: DCPg6Ceyq9c+k2hdqM6DEY3nNAcqnqv/oWZOgjUDo90=) 11: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: +ksoHoQYPmnvJLnhpxWFWjlrA5368fIleRTPmBuQhGA=) 12: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: JR5H0hn3DWJHrXV20lfY1slEZAl4SEHjqDKtqBHNcqI=) 13: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: oJFtmwsSoFHyiQKa+hhNclMhUfKj2vrKOCFlonKmBY8=) 14: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (hash: xHTM4Dl9Q5HuRM0LLQTU8e9mpsnqdL1Szb5p9XaOS1U=) 15: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: T4u7/Nxiv77dyzQ5TjQIDrnfM70wI1Uq+rGxmxLYoAE=) 16: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: bBy/kH9ORj5HD9m2tQaWWAzIRLY2ViIAnPDxIlu81f0=) 17: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: qX0vHaktqrz7m71UxdI7W17RvwKo2V0MxJaJkQs2PQQ=) 18: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (hash: gAp0kb05Si/jPjD4eeDDJSuwWKLzwojxc9RQ2S/bgmM=) 19: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: yX0AHZ6vh/yAq73HA0k0VP+xBtvvK38tr+ZxhA31lsU=) 20: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: 1GOi0KPMqFlJFa1xPEu/J6WGo/8YFfXReaWdo3rhMrk=) 21: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: bDJ0M8WfLVWpZjcMwek+H+ZptXQ/czkZxGTFLt1V65s=) 22: 252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl (hash: F597iA/3N9YkiJ0X5QFMunC9Y54EHKWnhbF8Jp5bgqo=) 23: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: MQr9cSgps4LHbGDJz9c4lbY3OsWW8+f0/YtOH610fL8=) 24: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: Y7pYu6uoU6Wtor/glKejJAeG037qTauUcrlHaByRYu8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 18:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:38:48:99:63:8a:b5:c3:39:27:bb:d7:f5:a3:d5:c3:72:21:a6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404 Validity Not Before: Sep 21 14:55:11 2026 GMT Not After : Sep 22 18:52:11 2026 GMT Subject: CN=40EA511239ECBEE6CDDA1EEA48F5F96C78BCBF84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d0:f9:f8:c9:a0:83:0f:2e:be:10:e4:7c:2b: 4d:59:0e:c1:80:d8:33:b5:d8:ab:b2:12:c6:95:34: 03:ef:91:f7:dc:58:dd:b2:01:d3:8d:03:d3:a5:2e: ee:ee:66:a4:77:32:53:57:5e:e8:58:30:7b:e8:60: c0:06:17:d5:79:d6:ee:f1:02:88:a9:f7:99:e2:b3: dc:f9:b1:29:56:7d:a8:23:91:c2:3c:28:ce:a0:a6: 35:33:b7:e5:7c:c7:0e:fa:30:ca:e5:53:e1:7e:02: 33:a7:b0:de:24:81:86:fc:e0:b0:bc:ee:37:7c:ab: 35:91:a5:c4:7e:30:bd:0f:96:17:56:4f:bf:41:3e: 3b:06:df:72:9e:07:f1:58:96:bc:6e:37:d6:e7:4e: 33:36:ab:b7:9a:36:e0:16:b1:06:bb:4d:76:bd:ed: 27:6f:ce:37:5b:85:56:b0:30:c4:5f:3d:ac:0f:5f: c3:d3:29:30:ad:83:9f:5e:df:6c:b5:d6:1c:3a:52: ab:dc:26:25:b1:1c:17:a5:e9:ce:25:05:ca:b5:66: b6:4c:14:8d:c7:91:7d:e1:49:9d:ef:fd:dd:2e:55: eb:47:16:76:cd:52:00:be:8c:04:3a:7c:e7:92:cc: 30:92:9c:fe:4f:92:4e:c6:f5:0e:9f:54:88:04:84: f9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EA:51:12:39:EC:BE:E6:CD:DA:1E:EA:48:F5:F9:6C:78:BC:BF:84 X509v3 Authority Key Identifier: keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3b:fa:32:01:dd:27:e4:bf:9e:32:4c:35:8e:e2:fc:8f:e4: 32:60:f3:28:d2:80:2f:ac:67:12:ed:06:fc:97:15:0d:2a:a6: c3:11:3e:22:96:0c:54:e1:a1:d3:d9:1b:ac:ec:20:f7:59:76: cf:0f:1c:9b:96:8b:95:4f:41:91:a0:a2:01:87:fe:ed:37:d6: b5:98:47:28:77:d6:25:0d:f9:38:e8:ef:1f:32:ea:17:c3:2d: b1:c4:75:64:b8:71:9b:ed:a1:ee:da:89:88:69:9c:82:30:a2: 4c:f1:b2:6d:66:39:bb:03:e1:28:d4:e1:89:8a:01:09:91:1e: c0:19:d2:62:c3:bf:ef:ce:28:47:42:1c:36:83:aa:2e:6e:71: 20:04:38:d4:ef:b9:a9:10:96:2e:2e:b6:81:58:e5:ac:2c:c9: f6:d4:10:3d:ef:d8:61:67:4e:1d:53:0c:c3:51:30:8b:aa:d2: 44:bf:35:ae:41:8b:1b:46:78:cb:69:d4:43:36:40:42:43:a6: a4:c0:97:ae:fd:11:08:e5:3e:d3:97:51:77:25:9f:18:d1:b8: 7f:b3:e4:02:d3:b8:05:98:ae:12:0d:e5:d0:61:4f:56:34:af: 42:83:05:43:9c:a6:3c:06:55:a7:36:92:ef:e2:d3:19:66:c2: 24:68:a9:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDhImWOKtcM5J7vX9aPVw3IhpiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4 QTRFRTQwNDAeFw0yNjA5MjExNDU1MTFaFw0yNjA5MjIxODUyMTFaMDMxMTAvBgNV BAMTKDQwRUE1MTEyMzlFQ0JFRTZDRERBMUVFQTQ4RjVGOTZDNzhCQ0JGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE0Pn4yaCDDy6+EOR8K01ZDsGA 2DO12KuyEsaVNAPvkffcWN2yAdONA9OlLu7uZqR3MlNXXuhYMHvoYMAGF9V51u7x Aoip95nis9z5sSlWfagjkcI8KM6gpjUzt+V8xw76MMrlU+F+AjOnsN4kgYb84LC8 7jd8qzWRpcR+ML0PlhdWT79BPjsG33KeB/FYlrxuN9bnTjM2q7eaNuAWsQa7TXa9 7SdvzjdbhVawMMRfPawPX8PTKTCtg59e32y11hw6UqvcJiWxHBel6c4lBcq1ZrZM FI3HkX3hSZ3v/d0uVetHFnbNUgC+jAQ6fOeSzDCSnP5Pkk7G9Q6fVIgEhPktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQOpREjnsvubN2h7qSPX5bHi8v4QwHwYDVR0j BBgwFoAUJSg3yhRLPufbJD68sMEPgYpO5AQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg2YjM4ODktNjk2Ni00NWVmLTkwNzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0Ex NDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4QTRFRTQwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTI4MzdDQTE0NEIzRUU3REIyNDNFQkNCMEMxMEY4MThBNEVF NDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg2YjM4ODktNjk2Ni00NWVmLTkw NzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBG ODE4QTRFRTQwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJM7+jIB3Sfkv54yTDWO4vyP5DJg8yjSgC+s ZxLtBvyXFQ0qpsMRPiKWDFThodPZG6zsIPdZds8PHJuWi5VPQZGgogGH/u031rWY Ryh31iUN+Tjo7x8y6hfDLbHEdWS4cZvtoe7aiYhpnIIwokzxsm1mObsD4SjU4YmK AQmRHsAZ0mLDv+/OKEdCHDaDqi5ucSAEONTvuakQli4utoFY5awsyfbUED3v2GFn Th1TDMNRMIuq0kS/Na5BixtGeMtp1EM2QEJDpqTAl679EQjlPtOXUXclnxjRuH+z 5ALTuAWYrhIN5dBhT1Y0r0KDBUOcpjwGVac2ku/i0xlmwiRoqWk= -----END CERTIFICATE-----Generated at Tue Sep 22 13:39:01 2026 by rpki-client