$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft File: 9252F14B5E62941E764268BF539EE9FAD5793555.mft (raw, json) Hash identifier: 4dvvObUvAkB32Q+TxezKuRl8tbwvgZhfvRaEJmmIIVY= Subject key identifier: DD:9C:3C:02:6E:C3:AA:96:75:31:F1:2C:14:89:EF:1C:1E:26:04:08 Authority key identifier: 92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 Certificate issuer: /CN=9252F14B5E62941E764268BF539EE9FAD5793555 Certificate serial: 29B9EB5CF465E8739BFF25ED77CCBB59EE4668BC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft Manifest number: BF Signing time: Mon 21 Sep 2026 10:39:40 +0000 Manifest this update: Mon 21 Sep 2026 10:34:40 +0000 Manifest next update: Tue 22 Sep 2026 12:02:40 +0000 Files and hashes: 1: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: 0HIhYv7U8gSbWNjqp3fbuBBjmpsISLCZzYGihcy9xas=) 2: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: CB5Hkvl40RneZnJWQYmd3LsRBOc9YvGv7ZABsi2oGuk=) 3: 9252F14B5E62941E764268BF539EE9FAD5793555.crl (hash: yRzHBPztWcU/NoM2672QV8t9SFzigfQFWY7cGgnD0S4=) 4: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: 3WGbhArGVCFic0aSX1S3lij1MSx+kgEOwyaBXRAdn6M=) 5: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: R1vSVJ/Nz5OcbojEfZoeEbcVestRrx2t/NOOXCARjrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 12:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b9:eb:5c:f4:65:e8:73:9b:ff:25:ed:77:cc:bb:59:ee:46:68:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9252F14B5E62941E764268BF539EE9FAD5793555 Validity Not Before: Sep 21 10:34:40 2026 GMT Not After : Sep 22 12:02:40 2026 GMT Subject: CN=DD9C3C026EC3AA967531F12C1489EF1C1E260408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:67:b7:26:bc:41:bb:2c:1f:e3:2c:29:4b: 1e:05:59:b3:d0:57:e1:27:59:13:9a:75:c6:1b:e5: 85:13:db:21:7e:e0:b1:7a:a4:16:85:86:72:e1:23: 15:fd:cb:ce:4a:9a:30:fb:b5:52:41:73:cc:6e:11: 02:27:b4:99:27:b3:96:3e:1e:87:27:7d:2f:bc:5e: ce:c0:06:ab:86:f7:e0:8a:26:23:cc:c5:df:66:7b: fb:cc:e8:33:e0:9a:85:5a:02:bd:3c:1f:da:58:4a: 52:1d:0c:7e:98:48:4f:e3:18:1a:e1:da:e3:eb:f0: cb:70:cc:ee:6b:ef:1d:aa:c8:2b:fd:f3:3b:cc:9c: bf:c0:28:79:f6:31:ec:16:ef:1c:88:2e:e2:f4:64: 88:48:5a:57:8d:a0:d8:8b:fb:50:82:f8:44:48:64: 2f:b5:7b:6a:12:96:52:02:32:18:65:7a:c1:bd:0e: 93:76:05:af:5a:52:d8:b4:af:51:fd:33:5d:fb:db: 90:9d:ff:2a:b1:94:40:56:4b:9e:36:7d:1b:85:2b: 1e:9f:45:7e:9d:17:d6:4f:e6:11:25:dd:5a:d6:bb: 27:58:22:37:7e:ea:6f:c5:0f:e2:86:f0:64:1e:41: 45:26:0e:ad:6b:01:da:a6:d0:41:25:8d:36:9c:73: 2d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9C:3C:02:6E:C3:AA:96:75:31:F1:2C:14:89:EF:1C:1E:26:04:08 X509v3 Authority Key Identifier: keyid:92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:82:55:45:27:d1:72:e2:2d:49:eb:ea:64:77:b3:25:69:41: 3f:46:01:19:69:e1:54:34:84:f4:3c:3e:5f:0e:4f:ca:98:e4: fb:a3:8d:8e:84:c6:32:91:37:7d:de:10:b9:a3:71:69:88:f3: e1:df:09:9d:5e:df:9d:87:24:76:05:0f:6f:51:b5:0e:37:46: 0a:83:6d:63:b0:20:aa:82:4e:a1:3a:1f:b6:0d:e4:93:83:67: 67:1e:f1:d3:1f:3a:a1:f7:e4:8d:d4:17:f2:c8:f1:1f:f3:b3: e2:08:57:a1:f8:20:55:fb:66:82:59:30:c7:55:ce:84:4f:f0: 25:6a:a0:83:71:d6:e8:37:5f:ef:57:b2:f8:17:00:10:cd:5a: b4:c2:15:94:d5:5e:a4:05:33:1b:68:74:d5:cf:eb:7f:cc:f9: ad:e1:50:23:4e:cd:30:3a:a8:73:35:03:b5:3c:c6:a6:15:e7: c1:06:ed:ef:2c:50:b9:d8:b0:db:75:29:af:b8:10:f7:5f:ca: da:5c:bc:58:1a:b5:99:4e:87:b6:52:50:c5:0f:b7:35:7f:91: 8c:80:a7:ca:e1:47:01:f6:c9:7a:f3:7f:59:29:20:6c:bc:9a: 6d:83:86:5e:0d:9c:c8:dd:b9:b8:73:3e:fd:90:73:c7:7d:e6: 9e:11:88:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbnrXPRl6HOb/yXtd8y7We5GaLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFE NTc5MzU1NTAeFw0yNjA5MjExMDM0NDBaFw0yNjA5MjIxMjAyNDBaMDMxMTAvBgNV BAMTKEREOUMzQzAyNkVDM0FBOTY3NTMxRjEyQzE0ODlFRjFDMUUyNjA0MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW32e3JrxBuywf4ywpSx4FWbPQ V+EnWROadcYb5YUT2yF+4LF6pBaFhnLhIxX9y85KmjD7tVJBc8xuEQIntJkns5Y+ HocnfS+8Xs7ABquG9+CKJiPMxd9me/vM6DPgmoVaAr08H9pYSlIdDH6YSE/jGBrh 2uPr8MtwzO5r7x2qyCv98zvMnL/AKHn2MewW7xyILuL0ZIhIWleNoNiL+1CC+ERI ZC+1e2oSllICMhhlesG9DpN2Ba9aUti0r1H9M13725Cd/yqxlEBWS542fRuFKx6f RX6dF9ZP5hEl3VrWuydYIjd+6m/FD+KG8GQeQUUmDq1rAdqm0EEljTaccy0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Zw8Am7DqpZ1MfEsFInvHB4mBAgwHwYDVR0j BBgwFoAUklLxS15ilB52Qmi/U57p+tV5NVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVkNDZmODItY2YxMS00ZTMyLWIwNTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1 RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFENTc5MzU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjUyRjE0QjVFNjI5NDFFNzY0MjY4QkY1MzlFRTlGQUQ1Nzkz NTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5 RkFENTc5MzU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqCVUUn0XLiLUnr6mR3syVpQT9GARlp4VQ0 hPQ8Pl8OT8qY5PujjY6ExjKRN33eELmjcWmI8+HfCZ1e352HJHYFD29RtQ43RgqD bWOwIKqCTqE6H7YN5JODZ2ce8dMfOqH35I3UF/LI8R/zs+IIV6H4IFX7ZoJZMMdV zoRP8CVqoINx1ug3X+9XsvgXABDNWrTCFZTVXqQFMxtodNXP63/M+a3hUCNOzTA6 qHM1A7U8xqYV58EG7e8sULnYsNt1Ka+4EPdfytpcvFgatZlOh7ZSUMUPtzV/kYyA p8rhRwH2yXrzf1kpIGy8mm2Dhl4NnMjdubhzPv2Qc8d95p4RiCQ= -----END CERTIFICATE-----Generated at Tue Sep 22 03:38:33 2026 by rpki-client