$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft File: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft (raw, json) Hash identifier: IDyqxAZiYEVPkziju2s2wJ5sfwaOZCXZ9xT3F9yM0PU= Subject key identifier: DA:AA:85:DD:DB:C6:EA:1F:35:0F:98:B3:0E:2B:E9:65:65:17:B0:90 Authority key identifier: 01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 Certificate issuer: /CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Certificate serial: 27EC4F7DAE33261B85DA799122BB6889854DE607 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft Manifest number: BD Signing time: Sun 20 Sep 2026 16:22:11 +0000 Manifest this update: Sun 20 Sep 2026 16:17:11 +0000 Manifest next update: Mon 21 Sep 2026 19:23:11 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: OvoWtyj+yRizvm8CdcOpOPom/9HPHlWTkmE0eRJkAww=) 2: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl (hash: 2Fm6FbKhyYkcr0PJSvsturagxAgZDZcwhimka8mH1e8=) 3: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: mPVDpClyc+EXYxrQu2c3VY1E3eKpZXve7tc3ve723GM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 19:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ec:4f:7d:ae:33:26:1b:85:da:79:91:22:bb:68:89:85:4d:e6:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Validity Not Before: Sep 20 16:17:11 2026 GMT Not After : Sep 21 19:23:11 2026 GMT Subject: CN=DAAA85DDDBC6EA1F350F98B30E2BE9656517B090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:d2:2c:b5:48:c6:77:84:fb:a2:5c:ae:2b: d2:c5:eb:2c:24:11:5f:e9:8c:5c:ea:eb:24:a2:be: 47:c6:50:e3:dd:82:47:64:1f:a2:07:03:35:35:2c: 47:c5:0c:08:76:d5:21:d2:03:ba:cc:f4:41:04:1b: f0:8c:f8:3b:1d:aa:e6:90:60:2f:c1:bb:af:ac:75: bf:a0:e6:2e:3e:57:d9:e5:c9:7f:24:3e:e8:5a:4f: e9:76:e9:2d:f6:87:dc:a4:c8:51:9f:8e:89:b4:48: 08:a8:36:29:d9:b4:6d:7a:67:0c:ba:1d:dd:24:59: f8:10:db:d9:ac:5d:9a:a8:cf:1c:7e:75:0b:bc:9e: d5:94:00:e2:da:3c:be:49:96:09:8c:3b:73:6f:06: bb:39:63:29:73:d3:c5:5c:3c:33:bd:38:e0:29:66: 45:43:22:54:bd:57:c7:f2:f0:6d:1a:ee:88:fb:82: 94:11:e1:d0:db:5a:aa:cd:57:b1:15:0d:9d:96:f1: 41:bb:e6:95:1d:24:77:36:2c:3b:cc:b6:49:ac:17: 12:43:e4:0e:27:a2:ac:c4:1b:c7:0b:ce:17:80:83: 90:6a:7e:21:11:37:2e:74:3e:08:40:8b:f3:c7:0c: 8a:b1:08:b7:5e:c1:3d:df:6d:c7:06:93:ce:9f:08: 5d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AA:85:DD:DB:C6:EA:1F:35:0F:98:B3:0E:2B:E9:65:65:17:B0:90 X509v3 Authority Key Identifier: keyid:01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:22:5c:74:1a:77:e5:da:a9:a9:b6:6c:f9:b1:a2:2e:62:e4: d7:35:86:d5:72:fd:de:c0:b6:67:4a:4b:74:42:6a:ce:54:2c: 1a:23:75:61:29:81:36:79:73:63:83:c2:dd:78:97:f8:9e:c8: a7:db:bd:a1:86:17:ce:dc:71:5e:be:bf:24:8d:c3:91:5e:34: c2:9d:f4:ff:6e:97:b0:ab:8d:fb:47:4b:32:15:74:13:a0:c1: 67:f1:29:0b:8b:d6:fd:a0:a5:ce:36:06:c4:76:1d:1a:3c:3d: 4c:9d:e4:ee:95:80:0e:96:1e:8c:8a:9f:9f:67:40:3c:76:d3: 1e:fb:c5:b6:6e:b1:ca:58:52:1c:61:05:e2:67:e0:6d:2e:50: cd:73:9f:70:52:26:1f:0d:5b:c1:b1:d0:89:72:c1:d8:13:9e: 91:a5:83:6b:e9:ae:b0:f5:c2:e5:ad:d9:2b:b5:d7:e2:11:c4: 12:24:3b:56:86:f1:46:dd:7d:9b:25:3e:ed:bb:55:26:dc:2f: 3f:4b:bd:cc:92:46:ed:55:b4:13:f4:99:d9:43:e3:88:cc:13: 38:04:ea:f2:25:38:b0:e9:4c:3b:9a:e9:9a:55:2c:4a:08:9b: bd:d0:e2:30:e1:50:72:6d:d7:81:71:c2:35:eb:c5:a7:f6:9d: 6c:4c:74:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+xPfa4zJhuF2nmRIrtoiYVN5gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNG NTM5QTkxMjAeFw0yNjA5MjAxNjE3MTFaFw0yNjA5MjExOTIzMTFaMDMxMTAvBgNV BAMTKERBQUE4NUREREJDNkVBMUYzNTBGOThCMzBFMkJFOTY1NjUxN0IwOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bNIstUjGd4T7olyuK9LF6ywk EV/pjFzq6ySivkfGUOPdgkdkH6IHAzU1LEfFDAh21SHSA7rM9EEEG/CM+DsdquaQ YC/Bu6+sdb+g5i4+V9nlyX8kPuhaT+l26S32h9ykyFGfjom0SAioNinZtG16Zwy6 Hd0kWfgQ29msXZqozxx+dQu8ntWUAOLaPL5JlgmMO3NvBrs5Yylz08VcPDO9OOAp ZkVDIlS9V8fy8G0a7oj7gpQR4dDbWqrNV7EVDZ2W8UG75pUdJHc2LDvMtkmsFxJD 5A4noqzEG8cLzheAg5BqfiERNy50PghAi/PHDIqxCLdewT3fbccGk86fCF1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2qqF3dvG6h81D5izDivpZWUXsJAwHwYDVR0j BBgwFoAUAVLY53/0+RMxOrvti7Lq8/U5qRIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwYzhmODYtYmNkNS00YjdhLWE5YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3 RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNGNTM5QTkxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTUyRDhFNzdGRjRGOTEzMzEzQUJCRUQ4QkIyRUFGM0Y1MzlB OTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVB RjNGNTM5QTkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0iXHQad+Xaqam2bPmxoi5i5Nc1htVy/d7A tmdKS3RCas5ULBojdWEpgTZ5c2ODwt14l/ieyKfbvaGGF87ccV6+vySNw5FeNMKd 9P9ul7CrjftHSzIVdBOgwWfxKQuL1v2gpc42BsR2HRo8PUyd5O6VgA6WHoyKn59n QDx20x77xbZuscpYUhxhBeJn4G0uUM1zn3BSJh8NW8Gx0IlywdgTnpGlg2vprrD1 wuWt2Su11+IRxBIkO1aG8UbdfZslPu27VSbcLz9LvcySRu1VtBP0mdlD44jMEzgE 6vIlOLDpTDua6ZpVLEoIm73Q4jDhUHJt14FxwjXrxaf2nWxMdFM= -----END CERTIFICATE-----Generated at Mon Sep 21 13:36:41 2026 by rpki-client