$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft File: A952A58DE132E26886D9A077713042EADBA3C178.mft (raw, json) Hash identifier: Kfkri2fSudnL953Nk+/SImC2ZpwqX75Znujuo1IrUP8= Subject key identifier: E5:97:15:2B:F0:F9:7E:09:3B:2B:5E:60:95:58:75:95:66:60:58:1F Authority key identifier: A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 Certificate issuer: /CN=A952A58DE132E26886D9A077713042EADBA3C178 Certificate serial: 1FB137A6599CC1DF2787C9DB755FBF2EE6A8A964 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 08:09:54 +0000 Manifest this update: Sat 26 Sep 2026 08:04:54 +0000 Manifest next update: Sun 27 Sep 2026 08:39:54 +0000 Files and hashes: 1: A952A58DE132E26886D9A077713042EADBA3C178.crl (hash: F0t+fZrIOppdBmRpfJChQTFdEYuEg47x6QWJBQz9Vcs=) 2: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: j2rPBHDu8altdMacoto0CdEJNfbZiyRNmXyQ2rZHa2o=) 3: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: I9P+22XUrYqfAeG+s4HEGC5b6efFAbm0WVpCZy5OhYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 08:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b1:37:a6:59:9c:c1:df:27:87:c9:db:75:5f:bf:2e:e6:a8:a9:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A952A58DE132E26886D9A077713042EADBA3C178 Validity Not Before: Sep 26 08:04:54 2026 GMT Not After : Sep 27 08:39:54 2026 GMT Subject: CN=E597152BF0F97E093B2B5E60955875956660581F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:91:ba:f3:b0:f5:b8:b9:2e:eb:6e:ea:7b: 9f:d0:c1:4d:78:85:b0:40:7a:06:5a:43:5e:c1:6e: b2:52:cb:9d:2a:5b:8a:f4:0f:05:8d:f6:b8:c3:b6: 6b:9c:e8:4f:85:3e:1f:73:0f:3c:1b:ad:94:5b:d3: 91:8d:1e:62:9f:13:39:52:6f:21:c0:0f:15:d4:ae: 0e:43:4f:26:de:28:63:7c:96:91:ef:eb:78:aa:1f: 3b:74:b9:d4:5c:49:96:b8:33:4c:a0:8e:fc:d3:c9: 2f:8c:13:6c:93:8e:aa:4f:5d:02:be:14:41:48:73: e4:a1:66:7e:f7:29:6f:19:4c:e9:d1:83:80:59:51: b7:2a:4f:7b:6e:f3:3c:ff:c4:ed:fb:d7:f2:b4:7b: 6a:72:45:3d:be:0c:00:be:8e:7e:77:d9:f5:9b:a4: cc:8f:ac:77:a7:29:45:f1:31:88:ce:df:20:29:0d: 16:85:d0:f5:06:51:5e:fb:c8:db:27:be:86:0a:39: d3:27:91:47:d5:41:fa:0d:65:45:b5:26:c7:d8:6b: 85:22:92:38:54:c0:e2:e1:b0:cb:60:fb:1b:94:e5: 52:8a:e9:a7:fe:89:6f:5f:cd:69:80:08:40:a9:7a: f6:98:12:c7:21:98:99:76:12:56:f7:0d:f6:a0:0c: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:97:15:2B:F0:F9:7E:09:3B:2B:5E:60:95:58:75:95:66:60:58:1F X509v3 Authority Key Identifier: keyid:A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:72:34:75:5a:61:a5:55:2b:a5:aa:ba:68:19:76:77:ca: e4:b0:38:94:11:2d:79:cf:1b:9e:cd:4d:a8:bc:a6:e5:da:4f: 1b:34:7f:ab:c1:4a:a6:77:8a:b4:0d:03:68:b6:7c:ee:d3:28: 68:1f:b1:48:0d:48:17:7b:49:d7:2b:64:4b:af:a6:f0:af:22: b9:16:38:9b:df:f0:a2:e0:a5:cd:ab:ad:86:e3:d7:7e:a7:c9: b5:21:c8:57:8d:ee:d3:31:aa:a4:eb:82:36:ff:e4:ca:18:25: 94:45:f2:ee:c7:c1:9f:6a:2a:e0:56:10:c2:c7:a9:4b:d7:49: 80:45:c1:ef:ac:15:5d:30:19:c1:45:bb:1b:21:6d:4d:be:40: 1b:44:ed:12:61:56:4d:6a:76:75:4f:e2:02:47:fb:7c:87:e7: 6b:eb:17:0f:d3:03:cc:1e:40:ca:87:79:7c:46:b1:29:99:39: 76:00:de:8e:4f:50:23:ea:83:50:bb:5c:31:a1:62:15:f6:d4: 2b:3e:de:25:f0:7f:d3:2a:79:5f:ee:88:49:89:4f:39:dc:db: 26:63:07:25:a5:74:7b:ef:2b:f1:17:6d:a9:ee:bc:81:8f:01: b7:f5:da:79:e4:cf:73:2d:03:45:49:b5:f3:c9:54:c4:7b:fc: 5e:79:0d:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7E3plmcwd8nh8nbdV+/LuaoqWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFE QkEzQzE3ODAeFw0yNjA5MjYwODA0NTRaFw0yNjA5MjcwODM5NTRaMDMxMTAvBgNV BAMTKEU1OTcxNTJCRjBGOTdFMDkzQjJCNUU2MDk1NTg3NTk1NjY2MDU4MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrJG687D1uLku627qe5/QwU14 hbBAegZaQ17BbrJSy50qW4r0DwWN9rjDtmuc6E+FPh9zDzwbrZRb05GNHmKfEzlS byHADxXUrg5DTybeKGN8lpHv63iqHzt0udRcSZa4M0ygjvzTyS+ME2yTjqpPXQK+ FEFIc+ShZn73KW8ZTOnRg4BZUbcqT3tu8zz/xO371/K0e2pyRT2+DAC+jn532fWb pMyPrHenKUXxMYjO3yApDRaF0PUGUV77yNsnvoYKOdMnkUfVQfoNZUW1JsfYa4Ui kjhUwOLhsMtg+xuU5VKK6af+iW9fzWmACECpevaYEschmJl2Elb3DfagDIGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZcVK/D5fgk7K15glVh1lWZgWB8wHwYDVR0j BBgwFoAUqVKljeEy4miG2aB3cTBC6tujwXgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk1N2EzYmYtNDgyMy00NjA5LTg1Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERF MTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFEQkEzQzE3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTUyQTU4REUxMzJFMjY4ODZEOUEwNzc3MTMwNDJFQURCQTND MTc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQy RUFEQkEzQzE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHuDcjR1WmGlVSulqrpoGXZ3yuSwOJQRLXnP G57NTai8puXaTxs0f6vBSqZ3irQNA2i2fO7TKGgfsUgNSBd7SdcrZEuvpvCvIrkW OJvf8KLgpc2rrYbj136nybUhyFeN7tMxqqTrgjb/5MoYJZRF8u7HwZ9qKuBWEMLH qUvXSYBFwe+sFV0wGcFFuxshbU2+QBtE7RJhVk1qdnVP4gJH+3yH52vrFw/TA8we QMqHeXxGsSmZOXYA3o5PUCPqg1C7XDGhYhX21Cs+3iXwf9MqeV/uiEmJTznc2yZj ByWldHvvK/EXbanuvIGPAbf12nnkz3MtA0VJtfPJVMR7/F55DcE= -----END CERTIFICATE-----Generated at Sun Sep 27 00:44:58 2026 by rpki-client