$ rpki-client -vvf rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft File: A952A58DE132E26886D9A077713042EADBA3C178.mft (raw, json) Hash identifier: U/pz81XxgCJDr/dvjNn9M/nIZQwr0eReF/xFqiL4jfs= Subject key identifier: 26:7D:22:6E:98:44:5E:79:28:82:1F:2D:06:D9:2B:4B:03:E5:C9:28 Authority key identifier: A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 Certificate issuer: /CN=A952A58DE132E26886D9A077713042EADBA3C178 Certificate serial: 21FF26D66DAC1A22273B5ABF020230FA3821539C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft Manifest number: 71 Signing time: Fri 24 Jul 2026 02:27:15 +0000 Manifest this update: Fri 24 Jul 2026 02:22:15 +0000 Manifest next update: Sat 25 Jul 2026 05:07:15 +0000 Files and hashes: 1: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: j2rPBHDu8altdMacoto0CdEJNfbZiyRNmXyQ2rZHa2o=) 2: A952A58DE132E26886D9A077713042EADBA3C178.crl (hash: yc3cna/wGKn1DcwbPxjyyGk+Zo7mRO/GARFZ5HqJVyU=) 3: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: I9P+22XUrYqfAeG+s4HEGC5b6efFAbm0WVpCZy5OhYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:07:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ff:26:d6:6d:ac:1a:22:27:3b:5a:bf:02:02:30:fa:38:21:53:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A952A58DE132E26886D9A077713042EADBA3C178 Validity Not Before: Jul 24 02:22:15 2026 GMT Not After : Jul 25 05:07:15 2026 GMT Subject: CN=267D226E98445E7928821F2D06D92B4B03E5C928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a7:d3:f9:c3:3f:19:02:9b:b3:a5:8b:b0:8a: b0:e4:ff:68:fe:1b:92:1a:ab:2c:9c:3e:e1:63:e8: e4:2e:92:12:25:24:97:87:03:4d:4a:5b:4c:c8:5f: 63:e2:58:e6:f9:35:18:a8:88:8e:1f:94:aa:39:aa: 9f:0b:32:19:75:e1:7f:f3:b1:08:e0:e7:6d:6a:8b: c9:ae:55:bc:d2:1d:d7:ec:48:9c:f8:ba:a4:ec:e9: a7:5e:76:1e:32:0d:54:bb:6f:98:52:23:ad:16:36: 16:bb:1e:c8:da:96:95:2d:9a:23:27:1c:2a:b7:60: 91:d4:01:43:c5:0f:6f:44:6d:a6:31:68:4c:92:13: 74:c0:ef:cd:eb:d9:8e:52:c0:a4:57:72:eb:f5:55: fd:83:f4:51:fc:08:78:cd:d3:47:a5:41:42:45:51: d9:62:0d:1d:87:30:e3:cc:08:fa:4c:9e:7c:2c:3d: 3b:cd:42:a6:49:5e:37:7c:85:35:84:b0:3f:02:10: 8b:1a:85:dc:bc:80:07:87:7e:7c:cb:3a:20:18:b8: 0b:61:37:37:1a:75:7f:47:8a:29:94:10:7f:d4:69: 74:b8:98:aa:ad:93:f5:9b:25:70:3e:a0:e1:e8:87: 9d:b9:87:6b:05:9a:71:a4:2d:1a:e3:50:0b:7c:1b: 65:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:7D:22:6E:98:44:5E:79:28:82:1F:2D:06:D9:2B:4B:03:E5:C9:28 X509v3 Authority Key Identifier: keyid:A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:23:4c:c6:cd:a4:a9:d8:b6:f8:17:1f:7e:a8:be:ca:25:c2: 11:6a:78:b3:2b:81:c4:43:55:f8:a2:42:6e:aa:18:a0:10:38: ff:65:14:cb:1c:bc:ce:1f:80:e9:6d:99:4c:95:62:99:7b:c3: 9b:ae:01:10:80:1a:77:bf:ce:2b:6a:41:9b:f6:ae:ad:29:4b: bd:ab:97:7b:00:44:b8:5b:d3:5f:43:24:32:a3:6d:54:66:ff: 72:fb:9b:55:62:c2:9b:bc:46:29:d9:dd:34:5b:03:70:8c:3e: ee:9f:36:f1:70:95:f9:8f:c8:fb:c6:e1:41:8c:e3:91:aa:4e: fe:b5:7b:29:08:55:20:f9:f9:de:f6:86:e2:18:32:49:19:b7: 52:ea:e6:dc:1e:45:98:d1:ff:d2:7f:57:82:fb:f6:c3:ba:1d: db:20:7b:e2:4e:f8:96:64:44:d5:09:67:b2:94:e3:a2:13:18: 7d:75:7c:b3:cb:4e:50:50:42:70:cc:ed:b1:b8:62:74:03:c4: 3c:e5:77:b3:1d:db:1f:0e:00:d3:ac:65:e9:e4:bc:80:8f:96: 25:6e:50:ca:a0:92:58:6f:e5:0b:6c:28:59:01:aa:8f:14:ec: b1:65:b5:c7:98:1b:c9:0d:13:ca:78:4e:8e:c0:d4:1d:a5:f2: 66:cc:d1:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIf8m1m2sGiInO1q/AgIw+jghU5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFE QkEzQzE3ODAeFw0yNjA3MjQwMjIyMTVaFw0yNjA3MjUwNTA3MTVaMDMxMTAvBgNV BAMTKDI2N0QyMjZFOTg0NDVFNzkyODgyMUYyRDA2RDkyQjRCMDNFNUM5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyp9P5wz8ZApuzpYuwirDk/2j+ G5IaqyycPuFj6OQukhIlJJeHA01KW0zIX2PiWOb5NRioiI4flKo5qp8LMhl14X/z sQjg521qi8muVbzSHdfsSJz4uqTs6adedh4yDVS7b5hSI60WNha7HsjalpUtmiMn HCq3YJHUAUPFD29EbaYxaEySE3TA783r2Y5SwKRXcuv1Vf2D9FH8CHjN00elQUJF UdliDR2HMOPMCPpMnnwsPTvNQqZJXjd8hTWEsD8CEIsahdy8gAeHfnzLOiAYuAth NzcadX9HiimUEH/UaXS4mKqtk/WbJXA+oOHoh525h2sFmnGkLRrjUAt8G2WpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJn0ibphEXnkogh8tBtkrSwPlySgwHwYDVR0j BBgwFoAUqVKljeEy4miG2aB3cTBC6tujwXgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk1N2EzYmYtNDgyMy00NjA5LTg1Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERF MTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFEQkEzQzE3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTUyQTU4REUxMzJFMjY4ODZEOUEwNzc3MTMwNDJFQURCQTND MTc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQy RUFEQkEzQzE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUjTMbNpKnYtvgXH36ovsolwhFqeLMrgcRD VfiiQm6qGKAQOP9lFMscvM4fgOltmUyVYpl7w5uuARCAGne/zitqQZv2rq0pS72r l3sARLhb019DJDKjbVRm/3L7m1Viwpu8RinZ3TRbA3CMPu6fNvFwlfmPyPvG4UGM 45GqTv61eykIVSD5+d72huIYMkkZt1Lq5tweRZjR/9J/V4L79sO6Hdsge+JO+JZk RNUJZ7KU46ITGH11fLPLTlBQQnDM7bG4YnQDxDzld7Md2x8OANOsZenkvICPliVu UMqgklhv5QtsKFkBqo8U7LFltceYG8kNE8p4To7A1B2l8mbM0Q4= -----END CERTIFICATE-----Generated at Fri Jul 24 10:12:56 2026 by rpki-client