$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft File: 9252F14B5E62941E764268BF539EE9FAD5793555.mft (raw, json) Hash identifier: s/+afT3DohHBeoxtRNp26xkglWi85MKT/zcELObBer4= Subject key identifier: 04:B2:DB:23:7A:B4:10:EC:73:29:8B:BD:7A:4C:48:D1:1A:06:70:98 Authority key identifier: 92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 Certificate issuer: /CN=9252F14B5E62941E764268BF539EE9FAD5793555 Certificate serial: 6A49838AAED83FCF807CDB40E8894724EA7B1A80 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 05:25:34 +0000 Manifest this update: Sat 13 Jun 2026 05:20:34 +0000 Manifest next update: Sun 14 Jun 2026 05:30:34 +0000 Files and hashes: 1: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: 3WGbhArGVCFic0aSX1S3lij1MSx+kgEOwyaBXRAdn6M=) 2: 9252F14B5E62941E764268BF539EE9FAD5793555.crl (hash: RJGrAiWlwCeBb/752gShw+9e/XbWnX2Rte4AzXbnHc8=) 3: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: CB5Hkvl40RneZnJWQYmd3LsRBOc9YvGv7ZABsi2oGuk=) 4: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: 0HIhYv7U8gSbWNjqp3fbuBBjmpsISLCZzYGihcy9xas=) 5: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: R1vSVJ/Nz5OcbojEfZoeEbcVestRrx2t/NOOXCARjrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 05:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:49:83:8a:ae:d8:3f:cf:80:7c:db:40:e8:89:47:24:ea:7b:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9252F14B5E62941E764268BF539EE9FAD5793555 Validity Not Before: Jun 13 05:20:34 2026 GMT Not After : Jun 14 05:30:34 2026 GMT Subject: CN=04B2DB237AB410EC73298BBD7A4C48D11A067098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:78:bc:9c:c0:90:a3:ae:70:51:21:06:2d: 3b:e0:96:b1:d4:13:99:78:cd:2c:38:6f:a7:a8:9f: 3b:fb:5c:5d:ef:d4:53:5e:2d:d4:1c:e4:e9:d0:2f: a6:f4:d1:44:46:cc:9f:d8:b2:29:36:02:61:fb:1c: e9:77:af:51:54:1c:47:26:93:67:99:89:69:b2:a3: 36:86:15:10:5f:fd:ee:ca:94:24:82:02:33:58:b7: f4:b6:19:c1:e6:53:9a:a7:61:f0:d7:03:c8:78:1d: 2c:99:17:01:81:d0:9f:40:5e:5f:cf:d2:d1:e8:04: bd:48:78:3a:dd:c1:93:4a:00:58:ef:5f:51:9d:56: 22:bd:ad:b5:4a:30:c9:3a:ff:09:f5:2f:fd:23:3c: 50:94:f2:76:0e:68:70:32:7b:81:69:65:8c:dc:c0: e8:cd:39:fa:a0:02:cc:93:88:a4:3a:65:cf:8f:a0: ac:64:6a:65:ad:52:3a:a9:b1:f3:25:bc:b6:4a:10: 8d:05:1b:33:ee:9c:24:e5:41:9b:86:ce:62:72:59: fc:14:80:8f:53:9d:40:3f:eb:92:e4:d5:47:80:c8: 42:36:0c:59:b2:7a:09:ee:bd:99:72:9b:e0:a1:b4: 50:db:f0:cf:7b:a1:59:14:e7:93:6e:d4:9c:46:7e: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B2:DB:23:7A:B4:10:EC:73:29:8B:BD:7A:4C:48:D1:1A:06:70:98 X509v3 Authority Key Identifier: keyid:92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:bc:08:90:b1:1f:06:cd:08:c2:1c:ae:9e:71:9d:63:c6:86: 46:77:09:c0:fe:85:b6:19:40:ef:58:d5:16:99:d3:29:76:28: ec:1e:05:e7:26:f4:1f:c6:7e:3d:6d:f4:19:20:6d:04:35:c5: 78:79:8c:7c:58:78:f0:e9:f6:98:46:1a:4b:b6:ab:f4:38:e7: ef:ad:4b:33:e5:ab:db:d3:72:73:0e:2f:77:f5:d5:41:7c:e9: 95:16:08:12:46:8d:59:6f:4e:b5:b8:1f:be:98:40:93:da:b7: 19:d8:fc:59:53:18:da:9a:ae:e4:17:71:73:da:ba:51:8c:1d: 7c:85:56:e8:82:7f:22:2a:5c:25:44:3b:57:15:f5:73:3f:49: ed:f4:64:67:07:e8:e9:14:b9:57:47:34:3a:3f:66:98:73:be: 08:cf:91:3b:b7:24:eb:ab:64:19:b8:5a:e4:e7:29:bf:61:c3: 6f:1d:c9:bf:77:c9:65:80:55:46:2f:ba:6c:fb:92:87:59:d6: fd:b7:a2:31:c3:9c:d7:ef:ca:d7:09:dc:78:7f:42:90:91:02: 3f:99:3a:4c:60:9d:1b:7c:04:83:81:75:2b:94:5a:c6:80:8e: a8:f9:28:9e:36:c4:01:7b:02:d1:eb:57:de:30:65:b4:e2:1f: ca:0b:2b:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUakmDiq7YP8+AfNtA6IlHJOp7GoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFE NTc5MzU1NTAeFw0yNjA2MTMwNTIwMzRaFw0yNjA2MTQwNTMwMzRaMDMxMTAvBgNV BAMTKDA0QjJEQjIzN0FCNDEwRUM3MzI5OEJCRDdBNEM0OEQxMUEwNjcwOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+3i8nMCQo65wUSEGLTvglrHU E5l4zSw4b6eonzv7XF3v1FNeLdQc5OnQL6b00URGzJ/Ysik2AmH7HOl3r1FUHEcm k2eZiWmyozaGFRBf/e7KlCSCAjNYt/S2GcHmU5qnYfDXA8h4HSyZFwGB0J9AXl/P 0tHoBL1IeDrdwZNKAFjvX1GdViK9rbVKMMk6/wn1L/0jPFCU8nYOaHAye4FpZYzc wOjNOfqgAsyTiKQ6Zc+PoKxkamWtUjqpsfMlvLZKEI0FGzPunCTlQZuGzmJyWfwU gI9TnUA/65Lk1UeAyEI2DFmyegnuvZlym+ChtFDb8M97oVkU55Nu1JxGfkclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBLLbI3q0EOxzKYu9ekxI0RoGcJgwHwYDVR0j BBgwFoAUklLxS15ilB52Qmi/U57p+tV5NVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVkNDZmODItY2YxMS00ZTMyLWIwNTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1 RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFENTc5MzU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjUyRjE0QjVFNjI5NDFFNzY0MjY4QkY1MzlFRTlGQUQ1Nzkz NTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5 RkFENTc5MzU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHK8CJCxHwbNCMIcrp5xnWPGhkZ3CcD+hbYZ QO9Y1RaZ0yl2KOweBecm9B/Gfj1t9BkgbQQ1xXh5jHxYePDp9phGGku2q/Q45++t SzPlq9vTcnMOL3f11UF86ZUWCBJGjVlvTrW4H76YQJPatxnY/FlTGNqaruQXcXPa ulGMHXyFVuiCfyIqXCVEO1cV9XM/Se30ZGcH6OkUuVdHNDo/ZphzvgjPkTu3JOur ZBm4WuTnKb9hw28dyb93yWWAVUYvumz7kodZ1v23ojHDnNfvytcJ3Hh/QpCRAj+Z OkxgnRt8BIOBdSuUWsaAjqj5KJ42xAF7AtHrV94wZbTiH8oLK3A= -----END CERTIFICATE-----Generated at Sat Jun 13 21:52:22 2026 by rpki-client