$ rpki-client -vvf rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft File: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft (raw, json) Hash identifier: Gnfa2Buw+5/ziTpkztnHc/9xfH1qK47u/tOHbGrKSpM= Subject key identifier: EC:D7:1A:F5:86:B5:58:EE:74:C8:A4:F6:F7:33:FB:CA:EE:5E:3B:51 Authority key identifier: 01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 Certificate issuer: /CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Certificate serial: 49DEAA411A82D121EDE897D0AC55ABEF9DA098CC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:06:47 +0000 Manifest this update: Tue 12 May 2026 06:01:47 +0000 Manifest next update: Wed 13 May 2026 08:31:47 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: OvoWtyj+yRizvm8CdcOpOPom/9HPHlWTkmE0eRJkAww=) 2: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl (hash: im3qzU3O85RL6GlpWF4UiEocuNJ4YGorbooRL8PNV6M=) 3: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: mPVDpClyc+EXYxrQu2c3VY1E3eKpZXve7tc3ve723GM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:de:aa:41:1a:82:d1:21:ed:e8:97:d0:ac:55:ab:ef:9d:a0:98:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Validity Not Before: May 12 06:01:47 2026 GMT Not After : May 13 08:31:47 2026 GMT Subject: CN=ECD71AF586B558EE74C8A4F6F733FBCAEE5E3B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6f:40:93:55:2c:b2:c8:56:cd:61:f3:02:a3: d7:65:97:0f:c3:3a:8e:a0:21:0f:e9:89:20:01:d9: ae:a3:72:6d:61:f2:68:00:11:5e:1d:ad:e0:76:c1: 94:79:a1:0b:fa:b0:72:83:1f:cc:d3:2b:69:23:96: 6f:8e:38:3e:f5:c2:fa:56:ab:58:37:5e:8d:6e:95: 3a:4e:58:6a:65:54:1d:ee:1d:f4:03:2c:5a:44:4d: d4:6e:a6:20:c5:6b:5f:6f:60:ab:d4:64:d7:cf:9f: 43:64:4c:ab:9a:1a:13:d1:0b:b8:29:1a:db:91:e9: fe:28:88:8b:f9:bf:23:8b:06:21:c2:41:45:55:30: b6:b2:59:08:0f:80:43:86:e7:c2:de:e5:f1:69:51: 81:c2:28:b0:9d:96:0c:5a:0c:01:ef:0c:ba:67:1b: a1:8e:98:b1:41:56:88:34:5c:dd:19:7c:d6:0a:88: d8:52:9a:00:09:92:64:9c:a5:59:74:48:45:de:02: 4c:bf:61:fc:e8:fd:5d:56:66:dd:b5:31:2b:72:82: 7f:29:c5:4a:c7:9f:8a:8d:ad:4d:61:f3:2a:db:e0: 10:e4:1d:c5:7a:0f:12:ba:90:4a:e4:ad:6e:48:0f: 8d:84:3b:2f:da:66:0e:4c:cf:c6:10:f9:65:2c:a1: d7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D7:1A:F5:86:B5:58:EE:74:C8:A4:F6:F7:33:FB:CA:EE:5E:3B:51 X509v3 Authority Key Identifier: keyid:01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:be:53:0a:d3:6a:a7:26:53:3a:bc:8c:8d:d9:a5:94:37:f9: 39:67:51:b7:ca:1f:3f:49:6f:d3:54:87:e6:e2:7a:6d:b1:c0: d8:8c:58:c2:0d:c7:0d:0b:9c:0d:03:ca:3c:46:85:80:8a:81: e1:75:ac:00:8c:6a:0e:65:43:c8:32:6e:49:c8:b2:bf:e8:84: cf:fa:80:6d:46:84:7d:3f:02:52:7a:7e:18:f5:46:76:eb:c6: aa:d2:3b:75:a2:c8:e2:64:61:f7:29:59:a3:49:fd:8b:30:40: 25:ff:b5:7e:35:b2:af:68:c3:ff:61:25:1f:08:6d:a6:7a:56: 13:80:99:9b:2f:0e:fb:0f:e4:42:87:7a:ac:ac:2e:35:6f:a6: 0f:02:8b:fc:72:e7:c9:23:51:7b:e7:3e:43:bb:71:23:6a:c3: 8b:a3:4f:88:1f:7a:76:3d:d0:aa:8c:4d:95:a7:fe:1a:70:f9: 5c:cc:f9:f0:47:e7:a1:2e:7a:16:58:db:8c:c7:c1:96:7f:a9: c9:d6:17:27:fb:78:6f:ab:ec:39:16:c2:bc:90:38:82:b9:fe: 45:a4:2f:5e:25:a6:5e:76:d0:d1:69:cc:35:1d:2e:89:e4:a0: 88:e5:95:8a:9f:7e:5e:a5:2c:54:68:20:9f:7f:fe:18:70:85: e6:47:d7:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSd6qQRqC0SHt6JfQrFWr752gmMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNG NTM5QTkxMjAeFw0yNjA1MTIwNjAxNDdaFw0yNjA1MTMwODMxNDdaMDMxMTAvBgNV BAMTKEVDRDcxQUY1ODZCNTU4RUU3NEM4QTRGNkY3MzNGQkNBRUU1RTNCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbb0CTVSyyyFbNYfMCo9dllw/D Oo6gIQ/piSAB2a6jcm1h8mgAEV4dreB2wZR5oQv6sHKDH8zTK2kjlm+OOD71wvpW q1g3Xo1ulTpOWGplVB3uHfQDLFpETdRupiDFa19vYKvUZNfPn0NkTKuaGhPRC7gp GtuR6f4oiIv5vyOLBiHCQUVVMLayWQgPgEOG58Le5fFpUYHCKLCdlgxaDAHvDLpn G6GOmLFBVog0XN0ZfNYKiNhSmgAJkmScpVl0SEXeAky/Yfzo/V1WZt21MStygn8p xUrHn4qNrU1h8yrb4BDkHcV6DxK6kErkrW5ID42EOy/aZg5Mz8YQ+WUsodevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Nca9Ya1WO50yKT29zP7yu5eO1EwHwYDVR0j BBgwFoAUAVLY53/0+RMxOrvti7Lq8/U5qRIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwYzhmODYtYmNkNS00YjdhLWE5YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3 RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNGNTM5QTkxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTUyRDhFNzdGRjRGOTEzMzEzQUJCRUQ4QkIyRUFGM0Y1MzlB OTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVB RjNGNTM5QTkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABK+UwrTaqcmUzq8jI3ZpZQ3+TlnUbfKHz9J b9NUh+biem2xwNiMWMINxw0LnA0DyjxGhYCKgeF1rACMag5lQ8gybknIsr/ohM/6 gG1GhH0/AlJ6fhj1RnbrxqrSO3WiyOJkYfcpWaNJ/YswQCX/tX41sq9ow/9hJR8I baZ6VhOAmZsvDvsP5EKHeqysLjVvpg8Ci/xy58kjUXvnPkO7cSNqw4ujT4gfenY9 0KqMTZWn/hpw+VzM+fBH56EuehZY24zHwZZ/qcnWFyf7eG+r7DkWwryQOIK5/kWk L14lpl520NFpzDUdLonkoIjllYqffl6lLFRoIJ9//hhwheZH16k= -----END CERTIFICATE-----Generated at Wed May 13 01:35:19 2026 by rpki-client