$ rpki-client -vvf rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft File: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft (raw, json) Hash identifier: ADRxeQqRYSszsJ26nhw3qyzb737O1MMdJrvibWb2bBo= Subject key identifier: 09:0C:6E:FD:F2:1F:D5:31:6E:61:2E:4D:64:13:C2:18:E0:FB:90:E0 Authority key identifier: 01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 Certificate issuer: /CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Certificate serial: 72A24FB49270DA3D86EE329623FD86912F62CB07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 12:55:46 +0000 Manifest this update: Thu 23 Jul 2026 12:50:46 +0000 Manifest next update: Fri 24 Jul 2026 16:50:46 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: OvoWtyj+yRizvm8CdcOpOPom/9HPHlWTkmE0eRJkAww=) 2: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: mPVDpClyc+EXYxrQu2c3VY1E3eKpZXve7tc3ve723GM=) 3: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl (hash: /3bF/PMnJg6nA5ABC++ZxRBlIgGK8fL35B151j+4fFg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a2:4f:b4:92:70:da:3d:86:ee:32:96:23:fd:86:91:2f:62:cb:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Validity Not Before: Jul 23 12:50:46 2026 GMT Not After : Jul 24 16:50:46 2026 GMT Subject: CN=090C6EFDF21FD5316E612E4D6413C218E0FB90E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5a:84:97:69:db:55:b2:8a:12:8c:69:ea:34: 25:0a:ba:e9:04:76:23:64:f5:81:56:0d:c9:b4:e9: 5c:c8:62:37:29:0e:41:df:a7:64:39:c0:59:10:27: 48:ba:48:72:a3:90:ae:61:48:d5:d0:5b:9e:a4:f0: 02:7b:81:58:a1:7c:7e:6b:72:03:83:49:eb:8a:70: 8a:c2:03:ba:e4:f3:3d:6d:c0:e5:c2:05:1a:b4:ce: 08:68:35:4b:d8:c8:64:8e:43:ec:2c:1c:87:b6:99: 57:11:b1:7e:7d:de:19:a6:89:fe:c2:5e:3b:bb:f4: 7c:3f:f1:4b:e6:8a:6f:ad:9b:4f:18:50:3f:39:ff: 86:67:ed:49:e8:33:8f:de:96:bc:73:0b:ae:05:b7: 34:a8:95:91:63:a2:7f:0d:a2:55:b9:15:aa:f7:91: 91:b2:4a:7d:a4:a3:d5:f9:47:db:f2:52:d5:3e:98: 96:3a:d6:ff:84:18:c6:c1:77:00:74:c0:61:63:b8: 04:c3:47:2e:2e:1f:85:c8:6e:75:c5:4e:b2:f2:bf: b8:a8:03:e1:ba:b5:f3:74:0b:66:34:80:9d:81:fe: 2c:7c:14:33:c6:1c:07:1a:0b:59:06:79:b6:b1:67: 39:57:38:9f:63:fb:5d:55:db:af:77:e9:62:41:e6: c0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0C:6E:FD:F2:1F:D5:31:6E:61:2E:4D:64:13:C2:18:E0:FB:90:E0 X509v3 Authority Key Identifier: keyid:01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f2:b6:fa:81:32:4f:e4:aa:15:94:aa:f6:d2:25:ed:c5:6e: 19:0f:e2:26:f2:d1:3d:6f:d7:02:2a:46:6b:43:dc:a7:d5:dd: 6b:1c:0d:75:09:23:17:2d:6b:4c:75:5a:2c:df:fc:88:ca:d6: 78:7b:01:95:b8:d6:54:ab:94:91:86:63:15:d5:8f:60:6f:bf: ea:5f:07:9a:47:d8:9c:13:36:d5:e1:ee:ba:b8:6d:ea:9b:79: 67:6e:e9:b6:f8:5f:53:38:23:52:48:6e:92:1b:80:b0:65:49: 30:ad:73:07:b4:7b:12:d1:b4:16:91:aa:9e:72:8b:fd:1e:04: 25:df:66:31:bf:e8:24:d0:0e:b9:1f:50:aa:8c:ab:39:b0:6e: 9a:1c:de:d8:42:2d:82:e1:92:0d:11:b7:8e:0a:29:46:3a:d4: 2c:4b:06:aa:fe:49:0e:37:f3:c2:55:54:8d:ab:4c:c6:6f:78: fe:87:48:85:0d:43:19:59:ff:5b:60:5a:2c:cb:34:ad:e6:67: 2d:e3:82:57:7d:3a:db:6a:1f:39:e7:bf:6e:6f:ca:60:ba:a5: fc:e1:d3:09:4c:1e:5b:47:67:74:c8:7d:de:51:21:c6:c2:c5: 36:10:6b:77:e9:2d:a9:f3:9f:73:3e:0a:7b:d0:9a:41:6f:2e: 14:56:d0:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcqJPtJJw2j2G7jKWI/2GkS9iywcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNG NTM5QTkxMjAeFw0yNjA3MjMxMjUwNDZaFw0yNjA3MjQxNjUwNDZaMDMxMTAvBgNV BAMTKDA5MEM2RUZERjIxRkQ1MzE2RTYxMkU0RDY0MTNDMjE4RTBGQjkwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSWoSXadtVsooSjGnqNCUKuukE diNk9YFWDcm06VzIYjcpDkHfp2Q5wFkQJ0i6SHKjkK5hSNXQW56k8AJ7gVihfH5r cgODSeuKcIrCA7rk8z1twOXCBRq0zghoNUvYyGSOQ+wsHIe2mVcRsX593hmmif7C Xju79Hw/8Uvmim+tm08YUD85/4Zn7UnoM4/elrxzC64FtzSolZFjon8NolW5Far3 kZGySn2ko9X5R9vyUtU+mJY61v+EGMbBdwB0wGFjuATDRy4uH4XIbnXFTrLyv7io A+G6tfN0C2Y0gJ2B/ix8FDPGHAcaC1kGebaxZzlXOJ9j+11V26936WJB5sDNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCQxu/fIf1TFuYS5NZBPCGOD7kOAwHwYDVR0j BBgwFoAUAVLY53/0+RMxOrvti7Lq8/U5qRIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwYzhmODYtYmNkNS00YjdhLWE5YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3 RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNGNTM5QTkxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTUyRDhFNzdGRjRGOTEzMzEzQUJCRUQ4QkIyRUFGM0Y1MzlB OTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVB RjNGNTM5QTkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALytvqBMk/kqhWUqvbSJe3FbhkP4iby0T1v 1wIqRmtD3KfV3WscDXUJIxcta0x1Wizf/IjK1nh7AZW41lSrlJGGYxXVj2Bvv+pf B5pH2JwTNtXh7rq4beqbeWdu6bb4X1M4I1JIbpIbgLBlSTCtcwe0exLRtBaRqp5y i/0eBCXfZjG/6CTQDrkfUKqMqzmwbpoc3thCLYLhkg0Rt44KKUY61CxLBqr+SQ43 88JVVI2rTMZveP6HSIUNQxlZ/1tgWizLNK3mZy3jgld9OttqHznnv25vymC6pfzh 0wlMHltHZ3TIfd5RIcbCxTYQa3fpLanzn3M+CnvQmkFvLhRW0Gw= -----END CERTIFICATE-----Generated at Fri Jul 24 05:41:00 2026 by rpki-client