$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft File: 152D7DF6753FDF6809AF8EEC4158A0787450959B.mft (raw, json) Hash identifier: gSV1MbOkUIn6FoT1VM5gNgNZhQBlG62DRb28G/m9+LI= Subject key identifier: 5F:A0:60:CC:D0:C8:40:70:47:A8:80:5E:BF:6B:A7:54:05:5E:34:76 Authority key identifier: 15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B Certificate issuer: /CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Certificate serial: 43A95DBF218A2419EA14297503E578783F26075F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 12:57:23 +0000 Manifest this update: Tue 22 Sep 2026 12:52:23 +0000 Manifest next update: Wed 23 Sep 2026 14:14:23 +0000 Files and hashes: 1: 323430353a326363303a393a3a2f34382d3438203d3e20313336303739.roa (hash: 8qbIjl9zr4ylqDb4nGMqZgAdI9S2G61h5D7139k9paI=) 2: 3130332e38362e3130302e302f32342d3234203d3e20313336303739.roa (hash: 4PzbZRuGW4w9K+AQtbo2sSaNspynGeSFyEx3Ih4El8A=) 3: 323430353a326363303a383a3a2f34382d3438203d3e20313336303739.roa (hash: It2GvpWPSLsFl7rz2mRZU7LXm27AzqHqdj3cFIXNFIk=) 4: 152D7DF6753FDF6809AF8EEC4158A0787450959B.crl (hash: 4ZbbPPXIfiLLWJkPCc/o6ZGUQbxwdGy7VluSZyd+PqI=) 5: 323430353a326363303a3a2f33322d3332203d3e20313336303739.roa (hash: GjrYL8GtEeE9lp0HSHCaLlwAAKogLsDWrpkYpLE2hlY=) 6: 323430353a326363303a3a2f34382d3438203d3e20313336303739.roa (hash: ESvaR1DL+/je/4olzPp2pqCkYB5DL7HxVCrwiDRPaGo=) 7: 323430353a326363303a353a3a2f34382d3438203d3e20313336303739.roa (hash: Epp4HAZE0W9I/EfSN4vso22uXIIi9KdQMgAH3xFapkU=) 8: 323430353a326363303a333a3a2f34382d3438203d3e20313336303739.roa (hash: wPZVLrH//aXJLfQ84ftaIngI3Qi0dpoJEo8RZBRr33Y=) 9: 323430353a326363303a343a3a2f34382d3438203d3e20313336303739.roa (hash: c8Wu4gguWuW01scw1VmhS5njYR/LD3UEGKXOdAsPYh0=) 10: 3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (hash: S3Lt8Yj0Bj89QV3dgVMcSiUeVm0W6yG3NUqqTsEb6WE=) 11: 323430353a326363303a623a3a2f34382d3438203d3e20313336303739.roa (hash: XsexSvb1l3rPkBKSGRPEjdjeUVqotRrEodOLIq5SCmw=) 12: 323430353a326363303a313a3a2f34382d3438203d3e20313336303739.roa (hash: yWU5OjBVyfKjAUFIWMMkTc3ROsJefZZW78RQYHjdY3g=) 13: 323430353a326363303a363a3a2f34382d3438203d3e20313336303739.roa (hash: lp+K27VKKl2AaaMMbjKOgz/UaFOEOVsMrt0Pi1dn5FI=) 14: 3130332e38362e3130302e302f32332d3233203d3e20313336303739.roa (hash: tu3AmkYv6OjKULA1Hlhe48YSBX8fxkzhYqyVPC8IjFo=) 15: 323430353a326363303a373a3a2f34382d3438203d3e20313336303739.roa (hash: DIiDAYxawgYnEH3zecu4aTkx8vuh6itbIN09fv6cnWA=) 16: 323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (hash: 26y4hHF9zZmxX4K/PcdEAhquIrXoPxj2VsyMOJ25s0o=) 17: 323430353a326363303a613a3a2f34382d3438203d3e20313336303739.roa (hash: qzb7Bo6deR1N6q5IRoWBFGvKs3rfmyZwKAyj7XUQE7w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 14:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a9:5d:bf:21:8a:24:19:ea:14:29:75:03:e5:78:78:3f:26:07:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=152D7DF6753FDF6809AF8EEC4158A0787450959B Validity Not Before: Sep 22 12:52:23 2026 GMT Not After : Sep 23 14:14:23 2026 GMT Subject: CN=5FA060CCD0C8407047A8805EBF6BA754055E3476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:65:79:45:dc:84:5b:22:4f:6e:0e:af:05:c0: ae:2d:51:b1:b6:fc:a6:36:aa:9b:47:ef:80:4f:03: 7c:82:58:da:0a:bb:94:08:22:80:4c:74:7c:08:d0: ed:9c:5a:4a:ef:fa:9f:ec:e9:19:02:41:1e:24:b3: c8:7d:d9:84:93:90:f8:29:10:9e:f3:e4:91:ec:d0: 12:9b:57:15:63:7e:ca:88:96:e2:2b:36:80:e6:f7: 46:b0:21:a4:27:56:29:57:73:84:95:61:ff:d6:c3: fa:20:1a:93:84:95:cc:13:6d:7e:2a:be:71:49:d1: 69:98:25:d4:79:89:7c:25:74:9b:c6:64:00:51:30: 59:95:12:5b:6d:f8:2e:40:db:11:a9:2f:d0:38:f6: dd:b6:77:f2:32:5d:66:78:a3:4d:c2:4f:71:70:6a: 12:3a:4b:50:76:99:0a:06:5f:61:f5:95:2a:5d:0b: a4:9a:d8:73:6d:d3:f4:66:22:d1:00:71:55:3e:8e: f3:c1:80:5e:36:08:52:a1:f2:bc:30:e8:65:23:77: 2d:88:68:1c:4c:6d:2d:fb:34:2f:8c:3a:5f:4d:94: ea:f4:91:19:ed:ca:f4:00:b8:0f:5a:c0:cf:02:10: 02:be:8a:7a:e0:c4:a5:21:6d:1b:77:7e:a3:f7:04: 4c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A0:60:CC:D0:C8:40:70:47:A8:80:5E:BF:6B:A7:54:05:5E:34:76 X509v3 Authority Key Identifier: keyid:15:2D:7D:F6:75:3F:DF:68:09:AF:8E:EC:41:58:A0:78:74:50:95:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/152D7DF6753FDF6809AF8EEC4158A0787450959B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/152D7DF6753FDF6809AF8EEC4158A0787450959B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:91:4b:bf:88:97:7d:01:a2:6e:64:24:a4:6b:1a:95:77:5b: a7:22:b4:56:5d:94:26:85:75:c1:6a:c8:fc:1b:38:82:5d:c7: 83:0a:13:6c:e0:bf:a3:59:79:c8:3b:8e:4f:ee:5a:78:fb:6c: 0e:47:57:4c:34:e3:c1:a3:15:5b:33:df:3a:04:6d:55:bc:8a: 4a:8c:71:98:86:a9:4f:b5:89:41:a1:29:8f:22:72:50:b9:a2: be:52:7d:3f:5a:37:3f:3a:f3:73:23:ea:14:1f:0f:a6:e0:1b: f5:58:36:d9:dc:39:63:02:bd:a6:24:f9:c4:39:2f:ae:83:f9: da:84:60:c4:66:28:51:c4:7c:de:eb:d9:a8:26:ce:13:4b:c6: 34:30:c5:54:71:d7:90:ca:c5:25:e7:eb:06:03:25:2d:84:e4: 51:bf:e4:a1:b7:0c:8d:2a:4d:39:90:07:83:1d:74:35:4b:5b: da:b2:c5:3f:77:ee:84:2e:68:76:d8:79:6b:b9:00:e9:3e:e8: 60:28:c6:70:4e:2a:a0:e9:5f:36:cf:5b:12:76:7e:12:e2:9c: 21:a2:b2:cd:cf:d4:e2:61:85:11:50:70:8f:80:57:07:b0:f0: 94:3e:34:d6:0a:46:c8:72:07:0b:01:94:47:9c:c1:8b:69:3a: eb:92:76:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6ldvyGKJBnqFCl1A+V4eD8mB18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3 NDUwOTU5QjAeFw0yNjA5MjIxMjUyMjNaFw0yNjA5MjMxNDE0MjNaMDMxMTAvBgNV BAMTKDVGQTA2MENDRDBDODQwNzA0N0E4ODA1RUJGNkJBNzU0MDU1RTM0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzZXlF3IRbIk9uDq8FwK4tUbG2 /KY2qptH74BPA3yCWNoKu5QIIoBMdHwI0O2cWkrv+p/s6RkCQR4ks8h92YSTkPgp EJ7z5JHs0BKbVxVjfsqIluIrNoDm90awIaQnVilXc4SVYf/Ww/ogGpOElcwTbX4q vnFJ0WmYJdR5iXwldJvGZABRMFmVEltt+C5A2xGpL9A49t22d/IyXWZ4o03CT3Fw ahI6S1B2mQoGX2H1lSpdC6Sa2HNt0/RmItEAcVU+jvPBgF42CFKh8rww6GUjdy2I aBxMbS37NC+MOl9NlOr0kRntyvQAuA9awM8CEAK+inrgxKUhbRt3fqP3BExtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX6BgzNDIQHBHqIBev2unVAVeNHYwHwYDVR0j BBgwFoAUFS199nU/32gJr47sQVigeHRQlZswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGU2OTNiODktNDU5Ny00MGI1LTkyYjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3 NTNGREY2ODA5QUY4RUVDNDE1OEEwNzg3NDUwOTU5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTJEN0RGNjc1M0ZERjY4MDlBRjhFRUM0MTU4QTA3ODc0NTA5 NTlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGU2OTNiODktNDU5Ny00MGI1LTky YjAtYjI5OWZhNzY5YWZhLzAvMTUyRDdERjY3NTNGREY2ODA5QUY4RUVDNDE1OEEw Nzg3NDUwOTU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmRS7+Il30Bom5kJKRrGpV3W6citFZdlCaF dcFqyPwbOIJdx4MKE2zgv6NZecg7jk/uWnj7bA5HV0w048GjFVsz3zoEbVW8ikqM cZiGqU+1iUGhKY8iclC5or5SfT9aNz8683Mj6hQfD6bgG/VYNtncOWMCvaYk+cQ5 L66D+dqEYMRmKFHEfN7r2agmzhNLxjQwxVRx15DKxSXn6wYDJS2E5FG/5KG3DI0q TTmQB4MddDVLW9qyxT937oQuaHbYeWu5AOk+6GAoxnBOKqDpXzbPWxJ2fhLinCGi ss3P1OJhhRFQcI+AVwew8JQ+NNYKRshyBwsBlEecwYtpOuuSdqU= -----END CERTIFICATE-----Generated at Tue Sep 22 17:17:43 2026 by rpki-client