$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft File: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft (raw, json) Hash identifier: ROZ5Wm1VBjRLjh1jFoVPfps8FsY+NbmhcNXinoVP4CU= Subject key identifier: E3:2D:7B:30:D6:20:82:3A:B5:98:6C:B4:8D:6A:59:C5:7E:67:C7:90 Authority key identifier: C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F Certificate issuer: /CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Certificate serial: 189C743F2E7F12A27D30B0CF791716B3779D9094 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 19:35:41 +0000 Manifest this update: Mon 21 Sep 2026 19:30:41 +0000 Manifest next update: Tue 22 Sep 2026 20:08:41 +0000 Files and hashes: 1: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: 3sTXjzHUOLPeEyAojCjuo6mjJbiX0Eb7eAu+BmtWebk=) 2: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl (hash: ZioUH1+90Zo4gdIirS9ZoY+ERtKlvk/uAMAnH+omAtI=) 3: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: 5StnOeqZ96buXCGi/ZTPekGCsI1j8G00cwvVyv/D23k=) 4: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: yAZGzCFckEolEtkEocUhLNSw4BV4DJZdNzdA0tVkGtA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:9c:74:3f:2e:7f:12:a2:7d:30:b0:cf:79:17:16:b3:77:9d:90:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Validity Not Before: Sep 21 19:30:41 2026 GMT Not After : Sep 22 20:08:41 2026 GMT Subject: CN=E32D7B30D620823AB5986CB48D6A59C57E67C790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fb:a8:29:ce:5d:c0:2e:e4:0e:60:a8:74:67: bc:28:98:93:22:d5:e5:86:fc:6f:c7:f7:79:66:eb: d9:60:c7:f0:05:6d:52:5b:6a:73:16:f3:1b:ea:c7: f8:af:10:2f:6c:7b:32:57:33:cd:b1:cd:29:b1:27: 60:71:6d:02:ce:e7:7f:0e:fc:8f:b7:0b:1a:08:66: 8a:83:e3:a0:e9:4d:21:f7:de:aa:50:94:37:4d:aa: 90:6a:31:9e:71:39:a1:ba:8f:64:75:b3:4a:c2:bd: bd:4e:6c:b7:0d:3b:aa:c0:d0:3e:78:e7:78:69:2a: f2:6c:c4:c7:7d:f4:b4:33:10:80:f9:9f:64:26:e9: 54:1c:97:4c:c4:54:07:a3:8a:d1:20:66:9c:cc:54: 12:f6:2f:5f:0f:b3:ee:1d:2a:80:9f:f5:42:ee:5b: 97:9e:dd:96:a1:e0:cd:eb:97:f3:57:ad:18:03:30: cf:e4:ae:04:da:38:ea:5e:22:e8:1e:66:ba:a3:f5: a8:c5:64:b6:1d:09:3c:e6:f4:67:9c:ef:9b:8b:20: 37:a8:5e:16:7c:90:bd:ee:26:50:b3:48:5a:00:cb: 50:16:0f:6a:28:53:66:66:7c:72:c3:c7:70:14:96: 53:8e:3d:1f:e8:78:1c:6b:26:2a:c7:12:57:b7:d2: 51:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:7B:30:D6:20:82:3A:B5:98:6C:B4:8D:6A:59:C5:7E:67:C7:90 X509v3 Authority Key Identifier: keyid:C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:2e:2c:4a:0f:cf:42:03:df:3b:90:fc:8d:56:44:3f:09:e1: 01:56:26:f8:41:79:a7:a6:d7:9f:2f:d3:73:5d:97:7f:df:d9: 48:7b:86:32:8b:4c:e1:b2:78:23:48:f9:52:34:8e:19:af:82: f7:83:83:b8:0f:a3:5b:22:6a:45:a4:6e:6c:f5:85:c2:a8:d3: 57:cd:59:74:f3:0f:86:5f:b9:97:3e:3e:44:3f:30:cf:27:5c: 84:02:bb:ba:b7:2c:d1:2c:01:bf:4e:82:e4:85:b3:83:d7:83: a5:40:d2:67:91:72:4c:1b:3c:07:a6:b6:dd:64:13:c0:d0:54: b1:98:00:5c:8b:ff:08:d9:00:90:2d:db:9f:e1:7b:f5:e9:e5: 7b:1d:ec:23:5b:30:0b:fb:fb:52:20:0a:80:21:2d:8c:36:86: bc:4a:2c:af:29:63:b1:17:26:67:f4:e3:5d:a9:93:e1:5f:32: a4:c9:cd:20:f3:5c:7e:22:cf:93:6e:5b:88:72:97:fd:9f:7e: 64:e0:96:d5:50:7f:09:80:db:5c:a1:a0:72:49:4b:c6:6e:fc: 3d:61:e1:96:6d:24:69:da:71:fc:b3:f3:25:4d:36:4a:ba:e3: 76:63:97:a2:8f:bf:53:b0:22:0c:af:80:89:80:a8:fe:45:b5: 47:04:5e:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJx0Py5/EqJ9MLDPeRcWs3edkJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5 QUIxQzc4RjAeFw0yNjA5MjExOTMwNDFaFw0yNjA5MjIyMDA4NDFaMDMxMTAvBgNV BAMTKEUzMkQ3QjMwRDYyMDgyM0FCNTk4NkNCNDhENkE1OUM1N0U2N0M3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+6gpzl3ALuQOYKh0Z7womJMi 1eWG/G/H93lm69lgx/AFbVJbanMW8xvqx/ivEC9sezJXM82xzSmxJ2BxbQLO538O /I+3CxoIZoqD46DpTSH33qpQlDdNqpBqMZ5xOaG6j2R1s0rCvb1ObLcNO6rA0D54 53hpKvJsxMd99LQzEID5n2Qm6VQcl0zEVAejitEgZpzMVBL2L18Ps+4dKoCf9ULu W5ee3Zah4M3rl/NXrRgDMM/krgTaOOpeIugeZrqj9ajFZLYdCTzm9Gec75uLIDeo XhZ8kL3uJlCzSFoAy1AWD2ooU2ZmfHLDx3AUllOOPR/oeBxrJirHEle30lFBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4y17MNYggjq1mGy0jWpZxX5nx5AwHwYDVR0j BBgwFoAUxSwSq5sTWbk8bIZAPTtR0Zqxx48wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwNzNhY2UtYTY5MS00ODYzLTljMWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5 QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5QUIxQzc4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTJDMTJBQjlCMTM1OUI5M0M2Qzg2NDAzRDNCNTFEMTlBQjFD NzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUx RDE5QUIxQzc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0uLEoPz0ID3zuQ/I1WRD8J4QFWJvhBeaem 158v03Ndl3/f2Uh7hjKLTOGyeCNI+VI0jhmvgveDg7gPo1siakWkbmz1hcKo01fN WXTzD4ZfuZc+PkQ/MM8nXIQCu7q3LNEsAb9OguSFs4PXg6VA0meRckwbPAemtt1k E8DQVLGYAFyL/wjZAJAt25/he/Xp5Xsd7CNbMAv7+1IgCoAhLYw2hrxKLK8pY7EX Jmf0412pk+FfMqTJzSDzXH4iz5NuW4hyl/2ffmTgltVQfwmA21yhoHJJS8Zu/D1h 4ZZtJGnacfyz8yVNNkq643Zjl6KPv1OwIgyvgImAqP5FtUcEXrg= -----END CERTIFICATE-----Generated at Tue Sep 22 10:54:42 2026 by rpki-client