$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft File: A952A58DE132E26886D9A077713042EADBA3C178.mft (raw, json) Hash identifier: q/MctccFxT7D9psIJ+cKG5rfJyG9iSRcM/u34Pwd4ys= Subject key identifier: 45:F6:1D:1C:06:77:5F:E8:9F:3C:AB:9E:79:C8:1D:AE:77:84:B7:E6 Authority key identifier: A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 Certificate issuer: /CN=A952A58DE132E26886D9A077713042EADBA3C178 Certificate serial: 2C076FFA8E63983B969EFCE1FA0DF8DDF85A85B0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 07:15:01 +0000 Manifest this update: Wed 23 Sep 2026 07:10:01 +0000 Manifest next update: Thu 24 Sep 2026 10:29:01 +0000 Files and hashes: 1: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: j2rPBHDu8altdMacoto0CdEJNfbZiyRNmXyQ2rZHa2o=) 2: A952A58DE132E26886D9A077713042EADBA3C178.crl (hash: I8VIQTWRkZr6xVHYuIqpJTQnAfNQ23gV7udtuk1gYRk=) 3: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: I9P+22XUrYqfAeG+s4HEGC5b6efFAbm0WVpCZy5OhYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:07:6f:fa:8e:63:98:3b:96:9e:fc:e1:fa:0d:f8:dd:f8:5a:85:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A952A58DE132E26886D9A077713042EADBA3C178 Validity Not Before: Sep 23 07:10:01 2026 GMT Not After : Sep 24 10:29:01 2026 GMT Subject: CN=45F61D1C06775FE89F3CAB9E79C81DAE7784B7E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:eb:e2:eb:57:71:21:db:98:3e:18:79:40:08: 27:3f:9b:05:71:54:b7:67:1d:c0:2a:26:70:4d:04: 47:24:f1:3c:1c:d8:1b:85:1c:64:9f:14:c0:fa:7e: 93:3d:a4:42:9c:56:b3:61:c2:51:c0:49:a7:f1:93: 0e:1b:18:3a:ee:31:e5:05:4e:eb:ac:91:5f:9b:9b: 60:06:03:cd:41:5b:c3:90:64:e4:05:aa:88:a1:95: d7:dd:0e:83:09:bc:9c:67:69:02:17:25:51:64:f9: 50:01:76:59:ef:7f:be:0b:e2:45:ed:cf:c1:5f:ba: 60:d7:2d:4e:1c:05:11:18:e9:83:74:80:69:8b:35: b3:76:6d:cb:d2:78:71:fd:82:dd:b2:e6:bf:76:9a: 3a:95:3c:64:f6:af:33:b0:12:65:15:5b:b0:f3:b7: 57:fb:28:55:62:1c:44:d9:12:ec:1c:84:58:60:67: d1:bd:f0:8f:6d:ff:d6:b7:9b:96:94:74:38:20:1c: 8a:15:d8:d2:56:b0:78:f8:c5:a1:06:61:d0:d8:67: 86:93:e3:24:67:b6:7b:1d:56:44:04:ee:db:44:86: 41:ed:e2:05:19:2e:5b:72:de:0e:b7:20:dc:eb:43: 4f:88:4f:4e:26:30:55:1b:34:2a:36:99:94:0e:cd: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F6:1D:1C:06:77:5F:E8:9F:3C:AB:9E:79:C8:1D:AE:77:84:B7:E6 X509v3 Authority Key Identifier: keyid:A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d5:d8:ef:3e:47:b0:f5:09:48:d8:31:4c:f7:32:95:b0:7c: a9:75:9e:2e:cc:d8:85:a0:f3:a8:52:da:68:85:c0:e0:13:24: 0d:83:b5:c3:a7:5a:3f:ab:4b:8c:34:81:b6:37:3c:59:02:f6: 0b:56:ab:15:92:ca:97:48:4e:81:c3:73:3b:1c:94:c3:e0:a2: 56:dd:91:61:78:cd:d4:bf:6a:b5:4d:c6:5f:1b:5f:ab:2b:79: c2:cd:d1:5a:02:2a:c2:97:5d:34:f1:8d:e3:48:15:3d:78:96: 96:ac:ef:ba:e3:ad:09:4d:95:7b:ac:d3:8b:0c:a6:bd:86:79: 22:1c:e2:36:7e:9d:2c:96:bc:53:07:ad:74:1d:8c:2e:db:d5: 4e:4f:ed:21:d6:24:a3:8b:78:80:19:59:8e:96:04:00:79:ba: e9:76:6f:c4:4e:e1:bc:37:48:2d:0c:8f:39:9d:d0:24:2d:d8: 61:ca:7e:6c:be:14:c4:ff:37:8c:54:6d:e3:f4:ef:c6:f5:e9: 4a:46:74:d5:c9:24:fa:1a:89:d5:3f:b0:83:61:ff:23:5f:14: 42:b4:cf:43:9b:05:18:3f:03:91:e0:30:13:07:5c:37:40:d4: d8:37:b6:d0:92:4a:92:28:a8:4f:dc:c1:69:34:a2:2f:43:64: f5:f5:b8:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAdv+o5jmDuWnvzh+g343fhahbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFE QkEzQzE3ODAeFw0yNjA5MjMwNzEwMDFaFw0yNjA5MjQxMDI5MDFaMDMxMTAvBgNV BAMTKDQ1RjYxRDFDMDY3NzVGRTg5RjNDQUI5RTc5QzgxREFFNzc4NEI3RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo6+LrV3Eh25g+GHlACCc/mwVx VLdnHcAqJnBNBEck8Twc2BuFHGSfFMD6fpM9pEKcVrNhwlHASafxkw4bGDruMeUF TuuskV+bm2AGA81BW8OQZOQFqoihldfdDoMJvJxnaQIXJVFk+VABdlnvf74L4kXt z8FfumDXLU4cBREY6YN0gGmLNbN2bcvSeHH9gt2y5r92mjqVPGT2rzOwEmUVW7Dz t1f7KFViHETZEuwchFhgZ9G98I9t/9a3m5aUdDggHIoV2NJWsHj4xaEGYdDYZ4aT 4yRntnsdVkQE7ttEhkHt4gUZLlty3g63INzrQ0+IT04mMFUbNCo2mZQOzY4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURfYdHAZ3X+ifPKueecgdrneEt+YwHwYDVR0j BBgwFoAUqVKljeEy4miG2aB3cTBC6tujwXgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk1N2EzYmYtNDgyMy00NjA5LTg1Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERF MTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFEQkEzQzE3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTUyQTU4REUxMzJFMjY4ODZEOUEwNzc3MTMwNDJFQURCQTND MTc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQy RUFEQkEzQzE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPV2O8+R7D1CUjYMUz3MpWwfKl1ni7M2IWg 86hS2miFwOATJA2DtcOnWj+rS4w0gbY3PFkC9gtWqxWSypdIToHDczsclMPgolbd kWF4zdS/arVNxl8bX6srecLN0VoCKsKXXTTxjeNIFT14lpas77rjrQlNlXus04sM pr2GeSIc4jZ+nSyWvFMHrXQdjC7b1U5P7SHWJKOLeIAZWY6WBAB5uul2b8RO4bw3 SC0Mjzmd0CQt2GHKfmy+FMT/N4xUbeP078b16UpGdNXJJPoaidU/sINh/yNfFEK0 z0ObBRg/A5HgMBMHXDdA1Ng3ttCSSpIoqE/cwWk0oi9DZPX1uLo= -----END CERTIFICATE-----Generated at Thu Sep 24 02:40:10 2026 by rpki-client