$ rpki-client -vvf rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft File: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft (raw, json) Hash identifier: IA3lBtfGAhtLC/G+mU/xs15kaZXWYCp5ZnGHHya+MTc= Subject key identifier: 73:0D:20:EC:BC:3C:8A:7E:25:9A:75:B4:46:1B:F0:E8:5D:48:AF:24 Authority key identifier: 01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 Certificate issuer: /CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Certificate serial: 016EB6E2FC316FDB6946856D04BE46A6E131B1E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 10:15:24 +0000 Manifest this update: Wed 17 Jun 2026 10:10:24 +0000 Manifest next update: Thu 18 Jun 2026 13:47:24 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: mPVDpClyc+EXYxrQu2c3VY1E3eKpZXve7tc3ve723GM=) 2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: OvoWtyj+yRizvm8CdcOpOPom/9HPHlWTkmE0eRJkAww=) 3: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl (hash: t0SaPgLjkCq+yOcsODql98u6guG5Xx2aJ8MiWqb4sZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6e:b6:e2:fc:31:6f:db:69:46:85:6d:04:be:46:a6:e1:31:b1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Validity Not Before: Jun 17 10:10:24 2026 GMT Not After : Jun 18 13:47:24 2026 GMT Subject: CN=730D20ECBC3C8A7E259A75B4461BF0E85D48AF24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:c2:8d:d4:f8:b7:8d:9f:98:37:ff:69:44: ee:91:9e:8d:c1:69:af:d9:da:b3:cf:f3:03:b2:17: d5:2b:57:93:9d:49:f2:ff:33:44:10:ac:79:db:91: fa:e4:6e:6c:ba:b0:cd:37:23:2f:2e:23:da:ce:b1: d6:ff:09:44:21:f8:1f:1c:0c:35:68:5f:2f:30:93: 12:57:10:0d:a5:29:f3:d4:96:e3:7c:c5:84:83:0c: f6:71:5e:3c:88:79:e2:b9:b5:d0:23:6b:3d:dc:ec: 03:09:cb:be:51:58:31:cd:25:b2:1a:4c:56:02:29: 12:df:44:35:a3:43:f0:9d:25:af:87:43:c7:ea:61: 3f:1a:46:66:aa:b4:55:88:6a:8e:18:a0:8b:af:a8: b3:1f:f4:41:80:76:78:42:18:3c:8d:6a:ae:4e:03: 76:c5:25:b0:77:f2:1e:84:b5:e4:7d:98:0a:68:8f: e5:85:be:a2:91:67:56:9c:c4:63:93:c4:9f:a4:7f: e2:a8:c8:a1:bf:c7:e1:8b:5e:30:c6:c9:d1:0b:d0: 27:7f:f1:3d:4a:3b:93:3b:e6:bf:41:fe:ad:29:f0: 49:ca:53:5c:c3:62:5c:f8:ae:db:25:f7:c4:f6:83: 52:d8:af:a7:69:03:b0:fe:7e:84:43:27:bd:f1:d5: 56:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0D:20:EC:BC:3C:8A:7E:25:9A:75:B4:46:1B:F0:E8:5D:48:AF:24 X509v3 Authority Key Identifier: keyid:01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:98:db:8e:ca:90:e2:22:04:6f:5b:8a:31:be:73:10:f8:db: 2a:61:07:93:ab:14:e3:c9:c1:d4:a1:6d:cb:1f:82:e0:53:d3: f0:b5:92:46:18:ba:40:d6:16:57:c4:89:50:ba:70:41:8a:6b: 00:e3:b1:44:9c:71:1c:a2:92:e9:e6:fa:88:c2:fd:3c:a8:03: 5d:f5:e6:e4:a1:f2:09:f5:8a:34:27:92:a3:ef:e7:48:b4:cb: a4:6c:49:4e:c7:47:9d:d4:8a:82:e0:5a:ba:c3:7e:31:fe:44: d3:b9:a0:f9:25:91:6d:53:a7:11:ba:eb:85:63:21:5d:c1:0b: e5:01:1b:22:04:d0:c3:9a:23:a7:dd:a9:a5:ce:63:ff:e1:90: b2:4d:b5:fa:b6:4c:6a:b2:8d:5c:ad:ff:6b:19:02:c7:cd:98: d2:3b:f5:b1:e1:34:e7:97:d0:46:cf:1a:ae:82:e5:5e:a1:19: f3:0f:41:b0:87:52:c8:5d:8f:34:ac:f5:2f:f2:e6:34:13:c4: 91:d9:32:30:34:b1:fc:25:16:93:c5:72:79:28:8d:db:e1:5a: 5b:77:d0:88:d2:26:5e:3e:13:fe:2e:42:08:f3:39:8e:7b:c8: ca:7b:80:0a:d9:30:58:59:0d:cd:b7:26:e7:f2:d1:5f:d1:50: 9d:8d:15:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAW624vwxb9tpRoVtBL5GpuExseMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNG NTM5QTkxMjAeFw0yNjA2MTcxMDEwMjRaFw0yNjA2MTgxMzQ3MjRaMDMxMTAvBgNV BAMTKDczMEQyMEVDQkMzQzhBN0UyNTlBNzVCNDQ2MUJGMEU4NUQ0OEFGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iMKN1Pi3jZ+YN/9pRO6Rno3B aa/Z2rPP8wOyF9UrV5OdSfL/M0QQrHnbkfrkbmy6sM03Iy8uI9rOsdb/CUQh+B8c DDVoXy8wkxJXEA2lKfPUluN8xYSDDPZxXjyIeeK5tdAjaz3c7AMJy75RWDHNJbIa TFYCKRLfRDWjQ/CdJa+HQ8fqYT8aRmaqtFWIao4YoIuvqLMf9EGAdnhCGDyNaq5O A3bFJbB38h6EteR9mApoj+WFvqKRZ1acxGOTxJ+kf+KoyKG/x+GLXjDGydEL0Cd/ 8T1KO5M75r9B/q0p8EnKU1zDYlz4rtsl98T2g1LYr6dpA7D+foRDJ73x1VZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcw0g7Lw8in4lmnW0Rhvw6F1IryQwHwYDVR0j BBgwFoAUAVLY53/0+RMxOrvti7Lq8/U5qRIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwYzhmODYtYmNkNS00YjdhLWE5YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3 RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNGNTM5QTkxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTUyRDhFNzdGRjRGOTEzMzEzQUJCRUQ4QkIyRUFGM0Y1MzlB OTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVB RjNGNTM5QTkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyY247KkOIiBG9bijG+cxD42yphB5OrFOPJ wdShbcsfguBT0/C1kkYYukDWFlfEiVC6cEGKawDjsUSccRyikunm+ojC/TyoA131 5uSh8gn1ijQnkqPv50i0y6RsSU7HR53UioLgWrrDfjH+RNO5oPklkW1TpxG664Vj IV3BC+UBGyIE0MOaI6fdqaXOY//hkLJNtfq2TGqyjVyt/2sZAsfNmNI79bHhNOeX 0EbPGq6C5V6hGfMPQbCHUshdjzSs9S/y5jQTxJHZMjA0sfwlFpPFcnkojdvhWlt3 0IjSJl4+E/4uQgjzOY57yMp7gArZMFhZDc23Jufy0V/RUJ2NFR0= -----END CERTIFICATE-----Generated at Wed Jun 17 12:39:56 2026 by rpki-client