$ rpki-client -vvf rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft File: A952A58DE132E26886D9A077713042EADBA3C178.mft (raw, json) Hash identifier: RQ357dYmBlbaFDMPd0c9KP7dFmiCF6U1tSnwGHgVzfY= Subject key identifier: E1:81:19:54:32:7B:8D:97:9F:DE:1D:0E:07:2B:3E:D0:4E:0D:03:23 Authority key identifier: A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 Certificate issuer: /CN=A952A58DE132E26886D9A077713042EADBA3C178 Certificate serial: 466DF8A7374C65E3EEFF566994BE0BB48CC21740 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft Manifest number: 3F Signing time: Wed 17 Jun 2026 03:21:52 +0000 Manifest this update: Wed 17 Jun 2026 03:16:52 +0000 Manifest next update: Thu 18 Jun 2026 06:07:52 +0000 Files and hashes: 1: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: I9P+22XUrYqfAeG+s4HEGC5b6efFAbm0WVpCZy5OhYk=) 2: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: j2rPBHDu8altdMacoto0CdEJNfbZiyRNmXyQ2rZHa2o=) 3: A952A58DE132E26886D9A077713042EADBA3C178.crl (hash: 9AKdmQDLWfdTIjSOpmTp6/kcRKrEuLRWv46OjMSxS34=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6d:f8:a7:37:4c:65:e3:ee:ff:56:69:94:be:0b:b4:8c:c2:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A952A58DE132E26886D9A077713042EADBA3C178 Validity Not Before: Jun 17 03:16:52 2026 GMT Not After : Jun 18 06:07:52 2026 GMT Subject: CN=E1811954327B8D979FDE1D0E072B3ED04E0D0323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:aa:3c:5c:af:c9:b1:d7:3c:b8:f3:f0:06:a4: ed:02:c5:8c:fb:6c:60:2a:d5:9f:eb:65:56:1b:0f: 22:c2:0a:dd:44:4e:aa:ff:7d:06:37:d4:f1:ed:17: 5e:2f:a9:1b:f0:c6:27:61:dd:7d:41:d2:e4:c2:3a: c9:6a:47:e3:1f:08:32:b9:65:4a:54:43:54:a9:db: d4:33:c8:b9:d1:08:fa:f0:07:d4:9b:61:dc:a7:8b: 5b:98:70:3d:94:f1:f2:08:44:79:41:ba:0e:7d:cc: 7d:b1:a0:a2:39:f8:55:d5:4c:64:93:31:25:46:1b: f6:11:09:c2:42:fe:0a:dd:45:9e:2d:7d:0f:48:aa: b6:b7:0e:45:5d:a1:0f:19:a0:bd:91:2c:c2:9b:7f: 5b:d6:98:ba:4e:48:09:7d:05:67:44:dd:81:b8:6d: b4:22:39:72:b8:ce:2b:f3:97:e0:af:a4:a8:6c:87: 9a:2e:c7:28:fb:7c:1a:fa:66:56:ab:e9:74:48:80: 5f:7f:49:ed:50:1e:65:96:36:08:2b:6a:58:59:b7: e6:ac:80:af:a5:24:ca:b1:fd:c1:6b:4b:00:13:65: 63:f2:11:93:7e:9e:24:fa:30:e9:e2:d1:c2:8b:53: d3:85:e4:33:f0:69:3a:c2:90:5e:5a:0f:66:6f:0a: 6f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:81:19:54:32:7B:8D:97:9F:DE:1D:0E:07:2B:3E:D0:4E:0D:03:23 X509v3 Authority Key Identifier: keyid:A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6b:a3:97:5d:e7:f5:14:39:31:52:55:8d:c3:ae:99:6b:3e: 96:86:31:8e:b7:cf:24:22:0e:97:65:46:bc:6a:a6:15:b7:46: ed:24:db:77:c0:29:5d:b5:63:cf:6e:29:4b:cb:41:d6:7b:df: 3a:2a:7e:33:1b:3a:be:57:c7:8b:cd:5f:f8:1f:76:47:07:bd: 84:41:35:2c:95:25:4a:04:1b:13:be:23:f0:86:c5:da:b2:96: 2f:ef:12:1a:0b:60:c1:8d:08:ca:95:43:af:64:d3:9f:be:32: 77:aa:f2:80:0a:56:cb:04:c0:48:a4:f4:18:ae:2a:73:f2:71: 1f:ca:ab:7e:32:da:61:6a:9a:9a:64:ff:fd:2a:dd:5e:8a:d0: de:7f:f0:c8:9b:43:e9:6a:12:07:96:88:1c:c9:ad:4e:ae:bc: 4d:3e:66:2a:ce:d4:c6:7e:d6:50:00:a2:16:4f:75:61:6e:43: a5:26:85:06:e8:36:47:79:e5:c5:44:23:a2:1a:c4:ea:f6:5b: af:61:5b:00:9b:4f:96:2f:49:9d:f9:35:51:c2:29:09:98:a8: fc:3d:f2:16:7e:12:30:2d:cf:cf:04:98:f0:d8:d8:2a:9d:98: 49:a7:d2:18:75:3b:f6:97:ac:b0:b3:73:3b:c4:44:1e:21:2a: f3:73:18:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURm34pzdMZePu/1ZplL4LtIzCF0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFE QkEzQzE3ODAeFw0yNjA2MTcwMzE2NTJaFw0yNjA2MTgwNjA3NTJaMDMxMTAvBgNV BAMTKEUxODExOTU0MzI3QjhEOTc5RkRFMUQwRTA3MkIzRUQwNEUwRDAzMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjqjxcr8mx1zy48/AGpO0CxYz7 bGAq1Z/rZVYbDyLCCt1ETqr/fQY31PHtF14vqRvwxidh3X1B0uTCOslqR+MfCDK5 ZUpUQ1Sp29QzyLnRCPrwB9SbYdyni1uYcD2U8fIIRHlBug59zH2xoKI5+FXVTGST MSVGG/YRCcJC/grdRZ4tfQ9Iqra3DkVdoQ8ZoL2RLMKbf1vWmLpOSAl9BWdE3YG4 bbQiOXK4zivzl+CvpKhsh5ouxyj7fBr6Zlar6XRIgF9/Se1QHmWWNggralhZt+as gK+lJMqx/cFrSwATZWPyEZN+niT6MOni0cKLU9OF5DPwaTrCkF5aD2ZvCm8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4YEZVDJ7jZef3h0OBys+0E4NAyMwHwYDVR0j BBgwFoAUqVKljeEy4miG2aB3cTBC6tujwXgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk1N2EzYmYtNDgyMy00NjA5LTg1Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERF MTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFEQkEzQzE3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTUyQTU4REUxMzJFMjY4ODZEOUEwNzc3MTMwNDJFQURCQTND MTc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQy RUFEQkEzQzE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtro5dd5/UUOTFSVY3DrplrPpaGMY63zyQi DpdlRrxqphW3Ru0k23fAKV21Y89uKUvLQdZ73zoqfjMbOr5Xx4vNX/gfdkcHvYRB NSyVJUoEGxO+I/CGxdqyli/vEhoLYMGNCMqVQ69k05++Mneq8oAKVssEwEik9Biu KnPycR/Kq34y2mFqmppk//0q3V6K0N5/8MibQ+lqEgeWiBzJrU6uvE0+ZirO1MZ+ 1lAAohZPdWFuQ6UmhQboNkd55cVEI6IaxOr2W69hWwCbT5YvSZ35NVHCKQmYqPw9 8hZ+EjAtz88EmPDY2CqdmEmn0hh1O/aXrLCzczvERB4hKvNzGJg= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:34 2026 by rpki-client