$ rpki-client -vvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft File: 252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft (raw, json) Hash identifier: xVtpIJahr3IvCtFBLXKyxLCSVqOkbO0jUSkBULR0Kp8= Subject key identifier: D4:97:AC:DC:80:86:70:F6:27:E6:E2:8A:B8:F8:46:4C:70:40:D1:AA Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04 Certificate issuer: /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404 Certificate serial: 4AFCCFF0BEF96FFB6B1694633F4243DDFAB2694A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 07:38:52 +0000 Manifest this update: Fri 24 Jul 2026 07:33:52 +0000 Manifest next update: Sat 25 Jul 2026 08:13:52 +0000 Files and hashes: 1: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: oJFtmwsSoFHyiQKa+hhNclMhUfKj2vrKOCFlonKmBY8=) 2: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: MQr9cSgps4LHbGDJz9c4lbY3OsWW8+f0/YtOH610fL8=) 3: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: DkW9L5+PRdqINtmxFS5yNgiVWSBo+5OuUsw7BGLvYSk=) 4: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: T4u7/Nxiv77dyzQ5TjQIDrnfM70wI1Uq+rGxmxLYoAE=) 5: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (hash: xHTM4Dl9Q5HuRM0LLQTU8e9mpsnqdL1Szb5p9XaOS1U=) 6: 252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl (hash: lSx8e1ZwbI+8ZFARn5gDXUMqqbz7hj+KXCi0algpBN4=) 7: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: JR5H0hn3DWJHrXV20lfY1slEZAl4SEHjqDKtqBHNcqI=) 8: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: 1GOi0KPMqFlJFa1xPEu/J6WGo/8YFfXReaWdo3rhMrk=) 9: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: WBBveR8OOQyEDRNcy74ITNE5Qj9H1E1tJp48zRmuwlY=) 10: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: yX0AHZ6vh/yAq73HA0k0VP+xBtvvK38tr+ZxhA31lsU=) 11: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: bBy/kH9ORj5HD9m2tQaWWAzIRLY2ViIAnPDxIlu81f0=) 12: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: Y7pYu6uoU6Wtor/glKejJAeG037qTauUcrlHaByRYu8=) 13: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: mha8gB43Q52dsFp/n7sRBfxP/9miPkjrCifPwwjXt6U=) 14: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: yogqlIBUcGwqvPyK5arWetAJIbHveLQtDXqk1GIkHHk=) 15: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: bSG6QHsujRPX+Uc294mdpRp76mW3JciOY0a15lJ+VVw=) 16: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: TMqEA7J0ys9Jdhs2856BZEmIfYAozAOdr0iBxVxAx0g=) 17: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: bDJ0M8WfLVWpZjcMwek+H+ZptXQ/czkZxGTFLt1V65s=) 18: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: +ksoHoQYPmnvJLnhpxWFWjlrA5368fIleRTPmBuQhGA=) 19: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: DCPg6Ceyq9c+k2hdqM6DEY3nNAcqnqv/oWZOgjUDo90=) 20: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: qX0vHaktqrz7m71UxdI7W17RvwKo2V0MxJaJkQs2PQQ=) 21: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: YPUqXiKd2hAz2pX0+rgtSnv5w4BDn1Ero1nRv8u6wqI=) 22: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (hash: gAp0kb05Si/jPjD4eeDDJSuwWKLzwojxc9RQ2S/bgmM=) 23: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: rmV7MY4FaBL6o6ZE4wLzlBfjsWL4ecrBXmGTlIU19+k=) 24: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: +gv7mshFwG91guPNffeDqFP8VhtlPTdkF38Mrqjvafw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fc:cf:f0:be:f9:6f:fb:6b:16:94:63:3f:42:43:dd:fa:b2:69:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404 Validity Not Before: Jul 24 07:33:52 2026 GMT Not After : Jul 25 08:13:52 2026 GMT Subject: CN=D497ACDC808670F627E6E28AB8F8464C7040D1AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:72:de:e9:01:9b:de:e6:9a:a0:1b:75:68: 42:f6:0d:22:9c:fe:95:a9:90:33:a6:ab:ef:f5:ce: ac:4e:89:92:23:2f:bc:57:0a:c1:3c:60:b5:20:85: e6:0f:e4:40:89:76:54:c8:b4:3b:fe:80:a2:88:34: a4:b4:43:de:32:24:f5:db:be:30:1a:dd:df:de:0b: fe:ad:71:9b:4c:bd:55:af:f3:05:41:d6:15:63:73: 3a:2f:01:03:d4:5e:84:6c:8e:87:c0:0c:fa:0e:59: 2b:a4:1e:ca:3b:6f:77:a9:d6:a2:b8:9f:b6:12:cd: a2:50:b4:f0:cc:66:ef:df:c3:05:4c:22:46:07:89: 16:84:d3:4d:3b:ec:01:33:1a:f6:d3:4b:8d:7c:de: b5:98:ae:6a:90:a8:4d:ac:60:48:0d:3b:53:1e:02: 3b:8c:7c:a5:31:ce:d9:d8:13:48:d0:e3:2c:e1:89: 68:3b:c6:5d:ee:1b:0a:e5:5f:e9:72:75:82:a7:66: a0:9a:7d:91:14:01:69:ba:c3:32:87:59:99:c9:8c: 7a:e9:3e:52:f0:e1:bd:02:eb:99:a1:a0:59:78:73: 13:a7:cf:00:07:07:e6:ea:27:c2:c1:ff:ef:3d:53: 21:76:ed:8b:5c:be:1e:9d:c6:7c:c4:dd:f8:23:86: 92:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:97:AC:DC:80:86:70:F6:27:E6:E2:8A:B8:F8:46:4C:70:40:D1:AA X509v3 Authority Key Identifier: keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:76:58:23:db:e9:38:88:13:14:c9:e3:8c:f1:28:a1:8e:8a: 09:57:69:20:f3:15:f3:b8:78:41:9d:aa:70:34:27:d5:b2:81: 29:8c:77:ad:57:ef:f0:02:99:f9:8b:37:99:35:3d:62:42:ea: 03:19:d6:07:c1:45:f8:08:14:3e:d4:5e:1c:11:3c:a0:cc:23: 55:a0:f5:a4:2b:28:60:6f:1b:bb:bf:f1:d1:4d:06:f4:8f:53: 6f:ef:ed:a5:31:94:b6:59:a9:80:d7:05:dd:12:a3:29:67:07: 29:7d:05:09:5b:90:c3:f0:55:a6:b1:be:50:39:71:3c:7b:71: 6f:65:d0:1e:81:bc:0f:d4:14:2d:c1:ec:84:ce:21:75:14:a1: 23:04:52:2a:5a:52:56:c5:a7:0c:fb:dc:ba:4d:fc:0f:bc:6e: 45:a4:bc:29:cb:5a:1e:80:04:93:50:a8:11:10:0f:9e:f8:74: 60:f9:10:4d:5c:cf:1f:1c:73:83:9e:74:d0:67:64:8d:f5:12: 5c:b2:0a:2c:0c:c9:82:ec:b8:c0:4f:a8:e7:21:72:8a:aa:65: 02:16:1e:d3:6b:03:28:8e:1a:ba:76:e4:4d:f5:83:16:8d:b5: dc:9c:26:99:9f:c0:05:9c:c0:99:8a:73:e0:2a:41:43:a4:93: e1:0f:28:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvzP8L75b/trFpRjP0JD3fqyaUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4 QTRFRTQwNDAeFw0yNjA3MjQwNzMzNTJaFw0yNjA3MjUwODEzNTJaMDMxMTAvBgNV BAMTKEQ0OTdBQ0RDODA4NjcwRjYyN0U2RTI4QUI4Rjg0NjRDNzA0MEQxQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV7HLe6QGb3uaaoBt1aEL2DSKc /pWpkDOmq+/1zqxOiZIjL7xXCsE8YLUgheYP5ECJdlTItDv+gKKINKS0Q94yJPXb vjAa3d/eC/6tcZtMvVWv8wVB1hVjczovAQPUXoRsjofADPoOWSukHso7b3ep1qK4 n7YSzaJQtPDMZu/fwwVMIkYHiRaE00077AEzGvbTS4183rWYrmqQqE2sYEgNO1Me AjuMfKUxztnYE0jQ4yzhiWg7xl3uGwrlX+lydYKnZqCafZEUAWm6wzKHWZnJjHrp PlLw4b0C65mhoFl4cxOnzwAHB+bqJ8LB/+89UyF27Ytcvh6dxnzE3fgjhpLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Jes3ICGcPYn5uKKuPhGTHBA0aowHwYDVR0j BBgwFoAUJSg3yhRLPufbJD68sMEPgYpO5AQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg2YjM4ODktNjk2Ni00NWVmLTkwNzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0Ex NDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4QTRFRTQwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTI4MzdDQTE0NEIzRUU3REIyNDNFQkNCMEMxMEY4MThBNEVF NDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg2YjM4ODktNjk2Ni00NWVmLTkw NzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBG ODE4QTRFRTQwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGp2WCPb6TiIExTJ44zxKKGOiglXaSDzFfO4 eEGdqnA0J9WygSmMd61X7/ACmfmLN5k1PWJC6gMZ1gfBRfgIFD7UXhwRPKDMI1Wg 9aQrKGBvG7u/8dFNBvSPU2/v7aUxlLZZqYDXBd0SoylnByl9BQlbkMPwVaaxvlA5 cTx7cW9l0B6BvA/UFC3B7ITOIXUUoSMEUipaUlbFpwz73LpN/A+8bkWkvCnLWh6A BJNQqBEQD574dGD5EE1czx8cc4OedNBnZI31ElyyCiwMyYLsuMBPqOchcoqqZQIW HtNrAyiOGrp25E31gxaNtdycJpmfwAWcwJmKc+AqQUOkk+EPKMs= -----END CERTIFICATE-----Generated at Fri Jul 24 09:29:19 2026 by rpki-client