$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft File: 9252F14B5E62941E764268BF539EE9FAD5793555.mft (raw, json) Hash identifier: nnFQNp7NEJfV0DZLJGJTDmoWU1XtlXKyYGFNfTkvsI0= Subject key identifier: 46:04:B7:AA:98:0F:1E:CD:ED:46:AA:54:21:FB:2A:06:59:A2:10:CE Authority key identifier: 92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 Certificate issuer: /CN=9252F14B5E62941E764268BF539EE9FAD5793555 Certificate serial: 3EACADF77E60AA5FEAC55406DA25E33C424A32BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:59:33 +0000 Manifest this update: Thu 23 Jul 2026 19:54:33 +0000 Manifest next update: Fri 24 Jul 2026 23:57:33 +0000 Files and hashes: 1: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: R1vSVJ/Nz5OcbojEfZoeEbcVestRrx2t/NOOXCARjrw=) 2: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: CB5Hkvl40RneZnJWQYmd3LsRBOc9YvGv7ZABsi2oGuk=) 3: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: 0HIhYv7U8gSbWNjqp3fbuBBjmpsISLCZzYGihcy9xas=) 4: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: 3WGbhArGVCFic0aSX1S3lij1MSx+kgEOwyaBXRAdn6M=) 5: 9252F14B5E62941E764268BF539EE9FAD5793555.crl (hash: hdvx2u8HESVlEUv84ZVdmqCQk4Yp2qo1WzgHzm8mGRs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ac:ad:f7:7e:60:aa:5f:ea:c5:54:06:da:25:e3:3c:42:4a:32:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9252F14B5E62941E764268BF539EE9FAD5793555 Validity Not Before: Jul 23 19:54:33 2026 GMT Not After : Jul 24 23:57:33 2026 GMT Subject: CN=4604B7AA980F1ECDED46AA5421FB2A0659A210CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:02:8a:d5:60:8e:ee:35:c9:f9:81:7a:f4:3c: e1:a1:c7:ed:13:62:4a:9c:a6:a1:90:73:e5:30:ff: 2a:b9:46:f7:04:26:08:36:e1:59:cf:b0:13:34:e5: 1d:dc:20:6e:fc:c4:cb:65:ea:35:43:b9:2a:6b:89: f0:c7:93:d7:2d:7d:41:4f:cd:83:72:3d:bf:01:1c: 04:97:76:17:e5:b8:07:f5:10:ba:b5:68:97:b0:48: b9:71:83:93:8d:df:0c:a6:ad:19:d1:62:3b:33:37: ba:79:20:78:68:3e:9a:e3:e4:06:b9:c4:cb:89:64: 9f:c5:5d:e1:ce:7f:5a:33:58:64:df:ab:33:aa:c9: 32:87:b9:b9:b0:fd:2b:3c:31:dd:bb:57:81:c0:ce: da:af:66:c0:82:d1:01:a6:c1:a8:45:32:15:04:17: b9:c0:11:53:fd:ca:ce:9e:90:d1:57:88:92:fe:b6: 98:f6:32:01:44:29:82:04:ff:43:93:fb:70:d1:4b: 62:ca:f2:6f:27:f8:d4:f2:8c:9e:08:5f:c2:3c:fc: c9:eb:9f:e0:45:5a:86:5f:9a:be:8b:42:bd:18:8c: 6d:99:75:2d:b7:f8:5e:d0:64:a6:36:22:05:d9:8a: 66:a4:0f:eb:7a:8d:5c:56:46:db:4a:b6:9e:78:d8: 1b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:04:B7:AA:98:0F:1E:CD:ED:46:AA:54:21:FB:2A:06:59:A2:10:CE X509v3 Authority Key Identifier: keyid:92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:80:08:37:a7:0c:b2:38:fd:a2:be:99:ec:09:63:cb:50:1e: 04:64:ad:55:c4:0d:75:48:15:ad:db:24:93:75:25:03:6f:49: ec:3c:cb:02:02:01:bf:fb:c4:18:25:7a:51:9d:b5:59:05:c7: 37:61:8f:ec:58:47:e8:22:b0:55:2b:49:c4:ec:35:e5:1e:69: 6e:35:31:c8:c1:6e:b8:2b:a9:02:23:3e:34:03:b5:b5:aa:bc: a2:bf:fc:2e:32:59:f8:fc:3a:a3:ab:cd:a6:2f:73:55:75:f4: bf:98:42:74:aa:0c:5f:72:71:ba:b8:c6:7c:3a:89:09:78:49: bf:cb:04:cb:c0:5b:fa:67:f8:0a:e7:42:83:7e:dc:b4:92:04: 7b:25:64:2e:49:55:95:4f:31:de:76:b7:d0:9b:c2:e6:0f:18: 0a:4c:67:68:9a:4b:51:fa:cc:3c:d0:b4:9d:41:8b:91:d7:2c: ec:d9:96:05:d3:33:c5:0c:56:99:d0:db:72:e4:d5:6a:11:09: 4d:6d:de:8a:e6:e7:d0:eb:06:a8:e7:d8:97:62:d1:1b:90:d4: 12:d8:f0:b8:25:13:65:79:9b:99:3d:5d:00:13:27:f2:a1:aa: f2:45:8e:0a:32:b5:2e:16:ba:ec:29:c6:85:d5:f9:b4:67:c0: f8:f1:3f:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqyt935gql/qxVQG2iXjPEJKMrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFE NTc5MzU1NTAeFw0yNjA3MjMxOTU0MzNaFw0yNjA3MjQyMzU3MzNaMDMxMTAvBgNV BAMTKDQ2MDRCN0FBOTgwRjFFQ0RFRDQ2QUE1NDIxRkIyQTA2NTlBMjEwQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxAorVYI7uNcn5gXr0POGhx+0T YkqcpqGQc+Uw/yq5RvcEJgg24VnPsBM05R3cIG78xMtl6jVDuSprifDHk9ctfUFP zYNyPb8BHASXdhfluAf1ELq1aJewSLlxg5ON3wymrRnRYjszN7p5IHhoPprj5Aa5 xMuJZJ/FXeHOf1ozWGTfqzOqyTKHubmw/Ss8Md27V4HAztqvZsCC0QGmwahFMhUE F7nAEVP9ys6ekNFXiJL+tpj2MgFEKYIE/0OT+3DRS2LK8m8n+NTyjJ4IX8I8/Mnr n+BFWoZfmr6LQr0YjG2ZdS23+F7QZKY2IgXZimakD+t6jVxWRttKtp542BupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURgS3qpgPHs3tRqpUIfsqBlmiEM4wHwYDVR0j BBgwFoAUklLxS15ilB52Qmi/U57p+tV5NVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVkNDZmODItY2YxMS00ZTMyLWIwNTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1 RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFENTc5MzU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjUyRjE0QjVFNjI5NDFFNzY0MjY4QkY1MzlFRTlGQUQ1Nzkz NTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5 RkFENTc5MzU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuACDenDLI4/aK+mewJY8tQHgRkrVXEDXVI Fa3bJJN1JQNvSew8ywICAb/7xBglelGdtVkFxzdhj+xYR+gisFUrScTsNeUeaW41 McjBbrgrqQIjPjQDtbWqvKK//C4yWfj8OqOrzaYvc1V19L+YQnSqDF9ycbq4xnw6 iQl4Sb/LBMvAW/pn+ArnQoN+3LSSBHslZC5JVZVPMd52t9CbwuYPGApMZ2iaS1H6 zDzQtJ1Bi5HXLOzZlgXTM8UMVpnQ23Lk1WoRCU1t3orm59DrBqjn2Jdi0RuQ1BLY 8LglE2V5m5k9XQATJ/KhqvJFjgoytS4WuuwpxoXV+bRnwPjxP9E= -----END CERTIFICATE-----Generated at Fri Jul 24 05:17:43 2026 by rpki-client