$ rpki-client -vvvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft File: 252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft (raw, json) Hash identifier: cwYD7kxVf1cZS6RktMoAUS8gLd+DVfBuJpiquNBzWBo= Subject key identifier: E8:8A:4A:21:BC:80:82:07:F3:14:8F:E6:D2:C0:4B:0A:06:02:34:24 Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04 Certificate issuer: /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404 Certificate serial: 5326C66F7044B77304617ED7A4864E73EC04CDB0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 12:56:55 +0000 Manifest this update: Thu 24 Sep 2026 12:51:55 +0000 Manifest next update: Fri 25 Sep 2026 14:35:55 +0000 Files and hashes: 1: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: DCPg6Ceyq9c+k2hdqM6DEY3nNAcqnqv/oWZOgjUDo90=) 2: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: YPUqXiKd2hAz2pX0+rgtSnv5w4BDn1Ero1nRv8u6wqI=) 3: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: 1GOi0KPMqFlJFa1xPEu/J6WGo/8YFfXReaWdo3rhMrk=) 4: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: rmV7MY4FaBL6o6ZE4wLzlBfjsWL4ecrBXmGTlIU19+k=) 5: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: bDJ0M8WfLVWpZjcMwek+H+ZptXQ/czkZxGTFLt1V65s=) 6: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: yogqlIBUcGwqvPyK5arWetAJIbHveLQtDXqk1GIkHHk=) 7: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (hash: xHTM4Dl9Q5HuRM0LLQTU8e9mpsnqdL1Szb5p9XaOS1U=) 8: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: bSG6QHsujRPX+Uc294mdpRp76mW3JciOY0a15lJ+VVw=) 9: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (hash: gAp0kb05Si/jPjD4eeDDJSuwWKLzwojxc9RQ2S/bgmM=) 10: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: Y7pYu6uoU6Wtor/glKejJAeG037qTauUcrlHaByRYu8=) 11: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: WBBveR8OOQyEDRNcy74ITNE5Qj9H1E1tJp48zRmuwlY=) 12: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: T4u7/Nxiv77dyzQ5TjQIDrnfM70wI1Uq+rGxmxLYoAE=) 13: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: qX0vHaktqrz7m71UxdI7W17RvwKo2V0MxJaJkQs2PQQ=) 14: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: MQr9cSgps4LHbGDJz9c4lbY3OsWW8+f0/YtOH610fL8=) 15: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: bBy/kH9ORj5HD9m2tQaWWAzIRLY2ViIAnPDxIlu81f0=) 16: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: yX0AHZ6vh/yAq73HA0k0VP+xBtvvK38tr+ZxhA31lsU=) 17: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: oJFtmwsSoFHyiQKa+hhNclMhUfKj2vrKOCFlonKmBY8=) 18: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: mha8gB43Q52dsFp/n7sRBfxP/9miPkjrCifPwwjXt6U=) 19: 252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl (hash: YkEzvJUrt+SVJaBp8KymDmVhiV0WDpfjHPnD3vOqaog=) 20: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: DkW9L5+PRdqINtmxFS5yNgiVWSBo+5OuUsw7BGLvYSk=) 21: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: TMqEA7J0ys9Jdhs2856BZEmIfYAozAOdr0iBxVxAx0g=) 22: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: +ksoHoQYPmnvJLnhpxWFWjlrA5368fIleRTPmBuQhGA=) 23: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: +gv7mshFwG91guPNffeDqFP8VhtlPTdkF38Mrqjvafw=) 24: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: JR5H0hn3DWJHrXV20lfY1slEZAl4SEHjqDKtqBHNcqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:26:c6:6f:70:44:b7:73:04:61:7e:d7:a4:86:4e:73:ec:04:cd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404 Validity Not Before: Sep 24 12:51:55 2026 GMT Not After : Sep 25 14:35:55 2026 GMT Subject: CN=E88A4A21BC808207F3148FE6D2C04B0A06023424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:72:f8:ad:62:37:27:bd:88:fd:7f:02:a5: fc:bd:ca:28:c9:79:7d:1c:ac:42:f5:4a:15:d0:d5: c0:e3:e1:15:58:b1:c0:68:f8:2b:e4:2f:bb:9c:bf: 8a:d5:fb:ce:60:03:dc:7e:65:30:e0:b0:b9:f7:35: 48:7b:b9:4f:71:d6:51:25:4e:e3:d0:4e:78:a8:1e: f8:a1:4d:aa:8c:69:54:12:ae:98:df:1d:05:08:e4: cd:3b:8d:0a:13:4d:59:da:76:41:b4:8a:45:a7:a4: dd:bc:23:8b:ba:01:2a:f6:8a:41:9b:90:72:b6:83: 0c:0d:c0:6e:43:31:8d:cc:73:35:4b:fa:08:fc:e5: 60:eb:25:37:b5:f1:d5:21:78:3a:b3:4f:db:f8:a6: 3f:f2:3b:79:b1:58:04:3c:88:3a:63:90:c2:7f:d9: 8e:8f:b8:4e:1b:fd:76:25:75:8d:b7:e4:8d:da:e5: 1c:fb:5f:ec:c4:40:ea:5b:f3:06:49:1c:37:9e:4a: e4:5d:76:2a:de:41:ed:0e:cc:01:63:b0:08:4d:26: eb:10:55:1d:d3:57:9c:1c:b1:bd:dd:4c:79:20:53: 33:e7:54:2e:d1:29:7d:aa:88:63:f7:8d:17:d4:21: 38:3e:82:1d:0a:ef:3d:20:75:8a:2e:0d:dc:62:94: 54:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8A:4A:21:BC:80:82:07:F3:14:8F:E6:D2:C0:4B:0A:06:02:34:24 X509v3 Authority Key Identifier: keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:88:b8:2c:a2:de:13:f7:cd:2b:ea:c8:38:d7:d4:72:45:f2: bd:bf:72:04:67:98:82:9a:d1:a9:b0:7a:bf:39:79:5b:bc:b9: 80:88:61:05:e3:ce:d4:4b:ac:50:79:c0:c2:8e:a2:eb:a1:25: 0c:8d:13:13:73:83:06:ae:d9:25:c9:4b:d2:55:12:3a:76:4b: b5:81:f6:b0:4a:27:ab:c6:5b:f6:62:3e:fb:45:ad:c0:95:15: d0:f0:05:a8:29:eb:1d:6d:63:3f:a0:17:eb:62:9c:d6:8a:8d: b4:07:83:f6:2a:08:49:2c:cc:c2:4c:36:d4:73:27:d8:64:81: aa:2a:99:d4:69:b6:0f:51:34:d6:43:18:6b:5f:df:33:07:3d: f0:7a:f9:12:ba:95:f5:56:2e:9d:7d:b8:65:35:81:a2:1e:54: d4:f2:2e:f8:66:43:fc:ba:c4:6f:94:d8:85:97:51:f7:08:69: 18:f6:8c:05:b3:58:ab:72:be:9e:8d:eb:aa:c6:77:4f:d7:64: 22:8c:a4:fc:6b:79:7d:27:45:3f:97:14:33:41:63:6e:2d:fd: b5:43:65:bd:b0:96:d7:17:7e:a9:81:91:00:5b:38:ce:ec:c4: b2:b3:6e:d4:f8:b8:ec:13:50:7a:b0:a4:8b:8e:e0:84:b2:9f: 18:ab:61:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUybGb3BEt3MEYX7XpIZOc+wEzbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4 QTRFRTQwNDAeFw0yNjA5MjQxMjUxNTVaFw0yNjA5MjUxNDM1NTVaMDMxMTAvBgNV BAMTKEU4OEE0QTIxQkM4MDgyMDdGMzE0OEZFNkQyQzA0QjBBMDYwMjM0MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvHL4rWI3J72I/X8Cpfy9yijJ eX0crEL1ShXQ1cDj4RVYscBo+CvkL7ucv4rV+85gA9x+ZTDgsLn3NUh7uU9x1lEl TuPQTnioHvihTaqMaVQSrpjfHQUI5M07jQoTTVnadkG0ikWnpN28I4u6ASr2ikGb kHK2gwwNwG5DMY3MczVL+gj85WDrJTe18dUheDqzT9v4pj/yO3mxWAQ8iDpjkMJ/ 2Y6PuE4b/XYldY235I3a5Rz7X+zEQOpb8wZJHDeeSuRddireQe0OzAFjsAhNJusQ VR3TV5wcsb3dTHkgUzPnVC7RKX2qiGP3jRfUITg+gh0K7z0gdYouDdxilFRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6IpKIbyAggfzFI/m0sBLCgYCNCQwHwYDVR0j BBgwFoAUJSg3yhRLPufbJD68sMEPgYpO5AQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTg2YjM4ODktNjk2Ni00NWVmLTkwNzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0Ex NDRCM0VFN0RCMjQzRUJDQjBDMTBGODE4QTRFRTQwNC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yNTI4MzdDQTE0NEIzRUU3REIyNDNFQkNCMEMxMEY4MThBNEVF NDA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTg2YjM4ODktNjk2Ni00NWVmLTkw NzMtYWQxNDAxMWFjM2IyLzAvMjUyODM3Q0ExNDRCM0VFN0RCMjQzRUJDQjBDMTBG ODE4QTRFRTQwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaIuCyi3hP3zSvqyDjX1HJF8r2/cgRnmIKa 0amwer85eVu8uYCIYQXjztRLrFB5wMKOouuhJQyNExNzgwau2SXJS9JVEjp2S7WB 9rBKJ6vGW/ZiPvtFrcCVFdDwBagp6x1tYz+gF+tinNaKjbQHg/YqCEkszMJMNtRz J9hkgaoqmdRptg9RNNZDGGtf3zMHPfB6+RK6lfVWLp19uGU1gaIeVNTyLvhmQ/y6 xG+U2IWXUfcIaRj2jAWzWKtyvp6N66rGd0/XZCKMpPxreX0nRT+XFDNBY24t/bVD Zb2wltcXfqmBkQBbOM7sxLKzbtT4uOwTUHqwpIuO4ISynxirYZA= -----END CERTIFICATE-----Generated at Thu Sep 24 20:48:44 2026 by rpki-client