$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft File: 9252F14B5E62941E764268BF539EE9FAD5793555.mft (raw, json) Hash identifier: t4TU8Dpnk5R4yq/Rrrh0JZqW77i5/+VASvi76cBexds= Subject key identifier: 1C:F1:71:B9:D0:09:E5:7B:94:CC:CB:55:A7:45:69:E9:DB:52:93:E5 Authority key identifier: 92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 Certificate issuer: /CN=9252F14B5E62941E764268BF539EE9FAD5793555 Certificate serial: 4347CE9371D021951C3D7FEB5805B7097020852E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 08:36:25 +0000 Manifest this update: Thu 24 Sep 2026 08:31:25 +0000 Manifest next update: Fri 25 Sep 2026 10:02:25 +0000 Files and hashes: 1: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: 0HIhYv7U8gSbWNjqp3fbuBBjmpsISLCZzYGihcy9xas=) 2: 9252F14B5E62941E764268BF539EE9FAD5793555.crl (hash: ACJKVF7fBwEqkwNBxgZQN8A0HiCaAgYKc4pZyxqfWKM=) 3: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: R1vSVJ/Nz5OcbojEfZoeEbcVestRrx2t/NOOXCARjrw=) 4: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: CB5Hkvl40RneZnJWQYmd3LsRBOc9YvGv7ZABsi2oGuk=) 5: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: 3WGbhArGVCFic0aSX1S3lij1MSx+kgEOwyaBXRAdn6M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:47:ce:93:71:d0:21:95:1c:3d:7f:eb:58:05:b7:09:70:20:85:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9252F14B5E62941E764268BF539EE9FAD5793555 Validity Not Before: Sep 24 08:31:25 2026 GMT Not After : Sep 25 10:02:25 2026 GMT Subject: CN=1CF171B9D009E57B94CCCB55A74569E9DB5293E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:90:8c:28:54:d6:0c:1c:74:18:c5:32:6c:33: 9d:9c:63:c8:78:73:37:66:4d:c0:e5:21:20:f4:a5: 60:93:84:d6:34:0c:dc:a7:62:0f:c8:49:5a:b0:e6: 37:64:5c:be:6f:15:4f:6b:4e:23:79:3b:bb:51:f9: 2e:4e:bf:b3:09:16:79:83:cc:2d:c6:54:27:57:34: f2:04:b8:f0:ec:d8:d2:80:c5:97:1b:42:4c:71:2e: e2:bb:d6:0b:60:10:29:82:ba:0f:97:ca:bf:70:0d: 08:f3:b2:3c:f9:c5:9c:d1:17:42:4f:04:b3:ed:49: ea:8a:0f:23:33:0e:12:96:3e:33:a0:9f:2d:4e:a4: 75:06:7c:e7:d1:fe:88:e4:57:d3:1a:3e:37:a4:02: 55:5a:90:bf:62:77:a7:a3:c0:25:07:e3:3b:d7:2d: 90:98:c0:f4:ba:80:96:e8:6f:e7:6e:a5:02:f8:03: c3:4e:27:dc:d0:d4:48:38:74:6c:de:dd:cf:e4:8c: ba:95:51:3c:7f:46:d4:56:c3:ce:00:f9:b1:09:c6: 86:b6:3b:b0:9b:f9:0d:6e:06:ea:19:eb:93:b2:54: ed:12:2f:33:81:c4:be:bb:40:6c:4f:9f:b3:d1:0a: 43:f8:89:b1:4c:7a:fd:17:85:28:c2:8f:62:3e:04: 48:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F1:71:B9:D0:09:E5:7B:94:CC:CB:55:A7:45:69:E9:DB:52:93:E5 X509v3 Authority Key Identifier: keyid:92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:00:1d:50:cc:a9:c9:87:e4:d6:0d:f5:a3:18:cb:54:e3:6d: 62:89:ea:88:76:48:4e:9b:a4:c9:fd:9c:82:2c:8b:b0:57:b8: 81:8d:7d:2a:11:fe:9e:0a:62:0b:cb:39:d5:a8:93:7f:99:55: b8:76:37:77:b9:58:f9:18:d3:ec:00:87:69:fb:40:2a:5a:21: f4:48:1b:a7:14:b2:95:aa:3e:5e:92:c5:ed:8f:d6:91:c6:4a: 07:e1:5c:8b:f6:2c:aa:b1:8e:3b:8a:1d:f3:fa:05:76:d8:0b: 78:ee:c9:f5:6d:71:7b:cc:27:6c:86:67:93:de:ae:3a:54:4f: b2:0c:ba:84:f7:73:1b:4c:bd:7f:2e:97:e6:e9:0c:0a:cc:27: f0:c4:05:2d:27:b5:c6:35:a3:e7:98:ee:e2:e9:d0:d8:5e:5a: bf:7d:33:80:fe:94:d4:33:01:72:de:e2:e7:19:e8:c5:d4:16: da:bd:25:09:a0:f5:3d:ae:f5:94:03:ad:a7:57:6b:6c:50:52: ab:bf:2c:c3:e0:af:4f:46:9e:b9:3c:36:9a:e4:a0:20:1f:d3: b6:c4:ba:d5:27:e1:54:10:11:75:1c:23:f5:2f:71:35:36:20: 79:12:79:6a:d9:71:01:8f:0f:9a:12:0f:a6:e2:af:b2:c7:d2: 82:17:26:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0fOk3HQIZUcPX/rWAW3CXAghS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFE NTc5MzU1NTAeFw0yNjA5MjQwODMxMjVaFw0yNjA5MjUxMDAyMjVaMDMxMTAvBgNV BAMTKDFDRjE3MUI5RDAwOUU1N0I5NENDQ0I1NUE3NDU2OUU5REI1MjkzRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgkIwoVNYMHHQYxTJsM52cY8h4 czdmTcDlISD0pWCThNY0DNynYg/ISVqw5jdkXL5vFU9rTiN5O7tR+S5Ov7MJFnmD zC3GVCdXNPIEuPDs2NKAxZcbQkxxLuK71gtgECmCug+Xyr9wDQjzsjz5xZzRF0JP BLPtSeqKDyMzDhKWPjOgny1OpHUGfOfR/ojkV9MaPjekAlVakL9id6ejwCUH4zvX LZCYwPS6gJbob+dupQL4A8NOJ9zQ1Eg4dGze3c/kjLqVUTx/RtRWw84A+bEJxoa2 O7Cb+Q1uBuoZ65OyVO0SLzOBxL67QGxPn7PRCkP4ibFMev0XhSjCj2I+BEgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHPFxudAJ5XuUzMtVp0Vp6dtSk+UwHwYDVR0j BBgwFoAUklLxS15ilB52Qmi/U57p+tV5NVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVkNDZmODItY2YxMS00ZTMyLWIwNTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1 RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFENTc5MzU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjUyRjE0QjVFNjI5NDFFNzY0MjY4QkY1MzlFRTlGQUQ1Nzkz NTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5 RkFENTc5MzU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkAHVDMqcmH5NYN9aMYy1TjbWKJ6oh2SE6b pMn9nIIsi7BXuIGNfSoR/p4KYgvLOdWok3+ZVbh2N3e5WPkY0+wAh2n7QCpaIfRI G6cUspWqPl6Sxe2P1pHGSgfhXIv2LKqxjjuKHfP6BXbYC3juyfVtcXvMJ2yGZ5Pe rjpUT7IMuoT3cxtMvX8ul+bpDArMJ/DEBS0ntcY1o+eY7uLp0NheWr99M4D+lNQz AXLe4ucZ6MXUFtq9JQmg9T2u9ZQDradXa2xQUqu/LMPgr09Gnrk8NprkoCAf07bE utUn4VQQEXUcI/UvcTU2IHkSeWrZcQGPD5oSD6bir7LH0oIXJsQ= -----END CERTIFICATE-----Generated at Thu Sep 24 23:37:06 2026 by rpki-client