$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft File: 2552F050305622A342A57694E0C15404F4475354.mft (raw, json) Hash identifier: yl5QaabloAr5zER3GYuEaxy2s38FA4HOAgIi3b3UliI= Subject key identifier: ED:76:AC:0F:7E:16:53:01:71:73:49:33:14:C3:0D:20:4E:21:C0:D5 Authority key identifier: 25:52:F0:50:30:56:22:A3:42:A5:76:94:E0:C1:54:04:F4:47:53:54 Certificate issuer: /CN=2552F050305622A342A57694E0C15404F4475354 Certificate serial: 4E5571105E779402727B1C0FC74B66C0FEEFF40E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2552F050305622A342A57694E0C15404F4475354.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft Manifest number: CF Signing time: Sat 03 Oct 2026 22:33:04 +0000 Manifest this update: Sat 03 Oct 2026 22:28:04 +0000 Manifest next update: Sun 04 Oct 2026 23:22:04 +0000 Files and hashes: 1: 3130332e35312e3135382e302f32342d3234203d3e203538333934.roa (hash: u5m8wjdIm8TfcMvPgVMpXwI4v6YiahK9nqtecHDPjuA=) 2: 2552F050305622A342A57694E0C15404F4475354.crl (hash: eEgZv1if8JdOkcupnGehMrFnDkXMbDURa9cAHjWf9zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.crl rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2552F050305622A342A57694E0C15404F4475354.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 23:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:55:71:10:5e:77:94:02:72:7b:1c:0f:c7:4b:66:c0:fe:ef:f4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2552F050305622A342A57694E0C15404F4475354 Validity Not Before: Oct 3 22:28:04 2026 GMT Not After : Oct 4 23:22:04 2026 GMT Subject: CN=ED76AC0F7E1653017173493314C30D204E21C0D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:da:16:0c:8a:ce:88:35:e9:cc:c1:9c:51: fe:74:56:c4:43:63:80:6d:d0:8e:07:07:df:a6:81: 51:33:ea:7f:f3:69:1f:80:11:95:76:5e:5d:62:99: 75:0a:bd:2f:84:12:51:37:dd:fe:42:fd:9e:cd:97: fc:98:93:99:b2:8e:3c:e5:9f:ff:35:c5:77:b5:a6: 68:85:e1:44:52:c3:85:74:02:fa:51:6f:a5:d5:b3: 8f:b6:08:5f:bd:fb:0f:ab:9d:65:3c:ed:32:0f:3d: be:30:db:1f:6d:8e:5a:cd:c3:f0:11:8c:e0:3c:a6: c7:52:84:30:3d:2b:a3:a7:90:92:4c:8f:ed:de:77: dc:d5:e8:c1:57:07:1c:4b:f6:ba:b1:6b:dd:51:f0: e0:8e:43:c4:3c:78:53:a2:b1:9a:99:7b:63:63:6f: 9f:60:d5:b7:e2:84:e2:7b:ee:07:95:ba:a1:18:6a: ef:93:10:d6:57:77:ba:94:ce:8c:c0:37:24:9a:31: ae:21:65:a6:ec:e1:80:95:98:ea:f8:2b:fd:66:00: c5:79:4a:20:57:a0:ee:44:23:53:ea:2f:98:15:98: 34:5a:1f:47:2c:dd:5a:f6:a8:bc:75:9d:d0:de:1b: 1e:f2:d0:43:34:0d:41:69:55:37:34:70:22:c4:91: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:76:AC:0F:7E:16:53:01:71:73:49:33:14:C3:0D:20:4E:21:C0:D5 X509v3 Authority Key Identifier: keyid:25:52:F0:50:30:56:22:A3:42:A5:76:94:E0:C1:54:04:F4:47:53:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2552F050305622A342A57694E0C15404F4475354.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/2552F050305622A342A57694E0C15404F4475354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:39:30:1f:c4:ff:10:76:0b:08:9c:c8:06:78:7a:a4:cb:25: de:e9:61:e2:b4:40:4e:80:2b:de:55:e1:73:d3:d7:de:8b:b1: 11:6b:35:d6:49:28:7e:b9:2b:d7:f0:04:e0:8f:52:03:96:9a: 97:26:e5:24:e5:cb:e2:49:04:65:63:5e:0a:8f:58:27:4b:58: 70:d6:91:78:4b:83:f3:a5:18:a4:b9:cd:71:bd:f8:1d:11:a2: 19:3e:e6:84:99:44:ee:18:0e:21:91:6a:18:7f:14:a5:78:4d: de:b1:de:9a:d9:82:ac:fd:37:4a:30:d8:2c:c5:41:78:f6:fe: 25:d5:e0:c8:9b:47:6a:aa:93:2d:9d:6d:29:d6:19:84:20:cc: 32:eb:6e:45:16:a7:ff:e6:0d:fc:aa:cf:e5:df:be:d7:a7:73: 8a:bb:87:94:2c:2f:dd:dd:f2:13:2a:7f:9c:99:87:1e:90:a7: 58:1a:41:bb:ba:e1:bb:cb:f5:ee:96:a0:1a:17:8d:eb:39:13: f5:80:f8:2b:7c:51:68:de:b3:70:2e:8c:c2:f2:d7:7c:24:3c: d6:7d:c7:70:39:e9:07:81:8d:e4:86:f6:f4:ca:d2:4a:2e:9b: 68:c8:2c:0f:74:11:4f:59:97:5c:1a:92:71:a5:3a:12:88:a5: b0:d5:d3:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTlVxEF53lAJyexwPx0tmwP7v9A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1MkYwNTAzMDU2MjJBMzQyQTU3Njk0RTBDMTU0MDRG NDQ3NTM1NDAeFw0yNjEwMDMyMjI4MDRaFw0yNjEwMDQyMzIyMDRaMDMxMTAvBgNV BAMTKEVENzZBQzBGN0UxNjUzMDE3MTczNDkzMzE0QzMwRDIwNEUyMUMwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHtoWDIrOiDXpzMGcUf50VsRD Y4Bt0I4HB9+mgVEz6n/zaR+AEZV2Xl1imXUKvS+EElE33f5C/Z7Nl/yYk5myjjzl n/81xXe1pmiF4URSw4V0AvpRb6XVs4+2CF+9+w+rnWU87TIPPb4w2x9tjlrNw/AR jOA8psdShDA9K6OnkJJMj+3ed9zV6MFXBxxL9rqxa91R8OCOQ8Q8eFOisZqZe2Nj b59g1bfihOJ77geVuqEYau+TENZXd7qUzozANySaMa4hZabs4YCVmOr4K/1mAMV5 SiBXoO5EI1PqL5gVmDRaH0cs3Vr2qLx1ndDeGx7y0EM0DUFpVTc0cCLEkUm1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7XasD34WUwFxc0kzFMMNIE4hwNUwHwYDVR0j BBgwFoAUJVLwUDBWIqNCpXaU4MFUBPRHU1QwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTgxZjY4YTMtYjM1NC00ODAxLWI5NDktMzQ1MmU3YjFmNzJmLzAvMjU1MkYwNTAz MDU2MjJBMzQyQTU3Njk0RTBDMTU0MDRGNDQ3NTM1NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTUyRjA1MDMwNTYyMkEzNDJBNTc2OTRFMEMxNTQwNEY0NDc1 MzU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTgxZjY4YTMtYjM1NC00ODAxLWI5 NDktMzQ1MmU3YjFmNzJmLzAvMjU1MkYwNTAzMDU2MjJBMzQyQTU3Njk0RTBDMTU0 MDRGNDQ3NTM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB05MB/E/xB2CwicyAZ4eqTLJd7pYeK0QE6A K95V4XPT196LsRFrNdZJKH65K9fwBOCPUgOWmpcm5STly+JJBGVjXgqPWCdLWHDW kXhLg/OlGKS5zXG9+B0Rohk+5oSZRO4YDiGRahh/FKV4Td6x3prZgqz9N0ow2CzF QXj2/iXV4MibR2qqky2dbSnWGYQgzDLrbkUWp//mDfyqz+Xfvtenc4q7h5QsL93d 8hMqf5yZhx6Qp1gaQbu64bvL9e6WoBoXjes5E/WA+Ct8UWjes3AujMLy13wkPNZ9 x3A56QeBjeSG9vTK0koum2jILA90EU9Zl1waknGlOhKIpbDV0/c= -----END CERTIFICATE-----Generated at Sun Oct 4 21:23:14 2026 by rpki-client