$ rpki-client -vvf rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft File: A952A58DE132E26886D9A077713042EADBA3C178.mft (raw, json) Hash identifier: sJAIN713pZi4TVbBSWHgFsxnKdaAYwOiqKF9GzTMpOA= Subject key identifier: 49:FE:BE:12:E5:8A:93:A4:34:94:34:20:93:47:69:94:3D:95:8C:39 Authority key identifier: A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 Certificate issuer: /CN=A952A58DE132E26886D9A077713042EADBA3C178 Certificate serial: 0FBA244A55B7BEFC6CAB24041D14C0046399C695 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft Manifest number: 0F Signing time: Tue 12 May 2026 19:15:00 +0000 Manifest this update: Tue 12 May 2026 19:10:00 +0000 Manifest next update: Wed 13 May 2026 21:21:00 +0000 Files and hashes: 1: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: I9P+22XUrYqfAeG+s4HEGC5b6efFAbm0WVpCZy5OhYk=) 2: A952A58DE132E26886D9A077713042EADBA3C178.crl (hash: kZCR8UK7et/9SnXL6l8eN1Sp8wIO6BsC9X5MHU6fLYM=) 3: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: j2rPBHDu8altdMacoto0CdEJNfbZiyRNmXyQ2rZHa2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ba:24:4a:55:b7:be:fc:6c:ab:24:04:1d:14:c0:04:63:99:c6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A952A58DE132E26886D9A077713042EADBA3C178 Validity Not Before: May 12 19:10:00 2026 GMT Not After : May 13 21:21:00 2026 GMT Subject: CN=49FEBE12E58A93A434943420934769943D958C39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:78:24:ca:06:a0:4c:f2:fc:23:bc:de:c6: 50:90:e2:9f:fa:fe:96:f2:ef:55:8c:81:51:a6:0b: 04:c9:65:46:80:c7:a9:c9:1f:7a:d3:dd:60:f7:97: 37:51:ca:26:62:30:84:ad:6c:85:d6:d6:6c:95:b4: 90:0b:30:06:83:20:69:d3:ef:a5:21:da:7c:3f:a4: 1e:17:1a:98:81:b0:2c:2d:8d:37:7c:4a:a3:df:2b: d5:66:ab:50:50:29:b5:16:9f:49:c8:c0:7b:69:2b: 8e:57:8b:ab:71:ee:e1:0b:5b:7f:b8:8e:a3:a1:52: 58:68:4a:2f:fd:9f:fe:ef:d7:b1:01:f8:13:45:17: 4f:40:50:83:74:68:5f:76:62:59:f1:98:01:be:a6: 64:c5:25:ac:8d:22:83:e5:bd:71:26:26:d2:37:fb: 83:48:aa:60:2b:a7:6d:59:85:69:0e:b1:b5:35:df: e9:e2:2e:5e:67:7b:dc:f6:9e:87:df:c4:42:26:52: 84:fd:04:03:ba:37:11:ef:fb:b9:6b:a8:1a:41:a9: 37:c1:a9:cf:ba:b2:c8:a6:de:32:60:06:be:b4:24: 4e:58:85:84:70:05:3d:56:f5:55:1a:e0:51:26:12: fa:0b:c0:7f:af:da:45:7b:e6:e8:22:34:29:8a:b8: 3d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FE:BE:12:E5:8A:93:A4:34:94:34:20:93:47:69:94:3D:95:8C:39 X509v3 Authority Key Identifier: keyid:A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b7:95:25:6d:54:c1:32:b6:15:9e:02:42:d4:50:2a:2f:6a: 0a:0a:3c:ef:22:19:4b:b3:d4:db:18:e0:51:76:5b:3e:43:5f: 4c:f4:49:49:9c:6d:bd:76:c7:74:26:55:24:e7:e4:5a:20:e4: 25:10:47:89:d5:32:5d:87:39:59:58:49:bb:3f:68:33:c5:b8: c2:01:77:75:d7:18:ea:9a:92:e0:2b:db:f9:cb:78:01:1c:3a: fd:b1:2e:f4:cd:3a:a4:79:0a:dd:cf:3e:c2:26:1d:00:25:f1: 55:40:54:ae:b7:22:9c:05:1d:e3:a9:e1:8f:25:99:b6:23:51: 96:e8:34:80:42:e7:86:bc:ca:07:9c:36:56:50:0b:2a:e0:19: 1a:75:e6:63:33:4e:fc:5a:74:28:ec:59:58:53:6c:86:5b:a7: 22:16:43:38:a8:0f:d2:d4:e9:b4:d2:27:a6:f2:bb:32:23:3e: 24:73:ae:0b:58:f2:ef:6a:ca:8d:01:5c:3c:50:d6:42:d3:0b: 2b:c2:3d:b9:12:51:0f:c6:46:df:1d:55:38:69:0a:03:25:81: 09:97:ff:7c:ee:c8:f2:9f:58:dc:ea:ac:13:45:91:27:36:6b: 10:f0:28:94:07:8b:49:57:f8:59:f7:8d:d0:1b:af:b3:89:d9: 2a:0c:3e:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7okSlW3vvxsqyQEHRTABGOZxpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFE QkEzQzE3ODAeFw0yNjA1MTIxOTEwMDBaFw0yNjA1MTMyMTIxMDBaMDMxMTAvBgNV BAMTKDQ5RkVCRTEyRTU4QTkzQTQzNDk0MzQyMDkzNDc2OTk0M0Q5NThDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtHgkygagTPL8I7zexlCQ4p/6 /pby71WMgVGmCwTJZUaAx6nJH3rT3WD3lzdRyiZiMIStbIXW1myVtJALMAaDIGnT 76Uh2nw/pB4XGpiBsCwtjTd8SqPfK9Vmq1BQKbUWn0nIwHtpK45Xi6tx7uELW3+4 jqOhUlhoSi/9n/7v17EB+BNFF09AUIN0aF92YlnxmAG+pmTFJayNIoPlvXEmJtI3 +4NIqmArp21ZhWkOsbU13+niLl5ne9z2noffxEImUoT9BAO6NxHv+7lrqBpBqTfB qc+6ssim3jJgBr60JE5YhYRwBT1W9VUa4FEmEvoLwH+v2kV75ugiNCmKuD2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSf6+EuWKk6Q0lDQgk0dplD2VjDkwHwYDVR0j BBgwFoAUqVKljeEy4miG2aB3cTBC6tujwXgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk1N2EzYmYtNDgyMy00NjA5LTg1Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERF MTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFEQkEzQzE3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTUyQTU4REUxMzJFMjY4ODZEOUEwNzc3MTMwNDJFQURCQTND MTc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQy RUFEQkEzQzE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE63lSVtVMEythWeAkLUUCovagoKPO8iGUuz 1NsY4FF2Wz5DX0z0SUmcbb12x3QmVSTn5Fog5CUQR4nVMl2HOVlYSbs/aDPFuMIB d3XXGOqakuAr2/nLeAEcOv2xLvTNOqR5Ct3PPsImHQAl8VVAVK63IpwFHeOp4Y8l mbYjUZboNIBC54a8ygecNlZQCyrgGRp15mMzTvxadCjsWVhTbIZbpyIWQzioD9LU 6bTSJ6byuzIjPiRzrgtY8u9qyo0BXDxQ1kLTCyvCPbkSUQ/GRt8dVThpCgMlgQmX /3zuyPKfWNzqrBNFkSc2axDwKJQHi0lX+Fn3jdAbr7OJ2SoMPtE= -----END CERTIFICATE-----Generated at Wed May 13 06:58:38 2026 by rpki-client