$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft File: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft (raw, json) Hash identifier: YAvQ9HHDGXlrfTcCuCm8vr6caCGez94yOP27vXmsZi8= Subject key identifier: 80:A7:64:B4:61:8F:F6:13:73:D8:68:D9:7D:F1:B8:ED:74:44:90:CC Authority key identifier: 01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 Certificate issuer: /CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Certificate serial: 54D9647F25DEF27764D1B4148FDEC16BAAA6B283 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft Manifest number: CC Signing time: Fri 02 Oct 2026 01:27:26 +0000 Manifest this update: Fri 02 Oct 2026 01:22:26 +0000 Manifest next update: Sat 03 Oct 2026 02:30:26 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: OvoWtyj+yRizvm8CdcOpOPom/9HPHlWTkmE0eRJkAww=) 2: 3130332e3230352e35372e302f32342d3234203d3e20313334363339.roa (hash: KyauDRXI/e9uJGW0xrnbNJyN8/VxkRrMwmrqJNQgRJo=) 3: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: mPVDpClyc+EXYxrQu2c3VY1E3eKpZXve7tc3ve723GM=) 4: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl (hash: nZbBa09UoBF/+abghefMnXYfdX4lIiNApGwBsASXH2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 02:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d9:64:7f:25:de:f2:77:64:d1:b4:14:8f:de:c1:6b:aa:a6:b2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Validity Not Before: Oct 2 01:22:26 2026 GMT Not After : Oct 3 02:30:26 2026 GMT Subject: CN=80A764B4618FF61373D868D97DF1B8ED744490CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:72:de:2e:d1:10:d5:c0:0c:76:bc:d8:3c:f1: 76:e1:9e:63:03:47:55:06:79:20:d7:08:15:b8:f1: ea:53:2b:a3:80:af:95:94:3e:f7:9a:a4:ee:dc:fb: 80:f0:69:c3:40:84:ea:71:e4:2d:81:75:54:37:48: 73:e9:7c:3d:3f:02:b3:71:0b:8b:70:34:ca:62:59: 1b:ec:37:bb:e3:fe:40:ec:2c:ac:eb:53:09:b9:4d: 98:ca:5c:73:6b:c2:98:f9:20:bb:ef:8d:ec:32:99: df:a6:41:34:4c:97:b7:e9:37:e1:b8:56:b1:ff:67: 4f:f6:2f:ff:1c:8f:14:d4:e7:41:a7:a5:7c:5c:7e: f4:3a:53:0f:74:95:ad:86:aa:6b:9b:8b:b2:57:fd: 46:a3:62:e0:9e:ce:d1:ed:48:3f:7c:a4:b0:66:2b: 3e:e2:7d:a1:6b:91:08:a7:14:cc:e9:6b:9e:2b:ae: 0c:ba:91:e7:78:97:91:96:b5:b3:28:89:69:42:32: 1b:f9:a3:97:71:42:56:5e:6d:6e:5d:0b:31:2f:13: 59:dc:d0:93:e7:8c:be:11:cc:c2:e7:8c:48:c3:fa: 2f:2b:07:95:a2:d0:59:c2:63:7a:92:e6:c5:4d:61: c9:ca:df:e4:89:c9:9f:93:ad:1a:7f:2f:fa:fb:3c: fd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A7:64:B4:61:8F:F6:13:73:D8:68:D9:7D:F1:B8:ED:74:44:90:CC X509v3 Authority Key Identifier: keyid:01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:cf:16:ed:66:e5:af:f8:3d:96:24:3f:b7:7f:9d:eb:58:56: de:27:66:1b:b2:89:83:95:02:7b:d2:b5:98:d6:a1:c1:31:b2: 4c:32:be:a6:fd:5a:5a:23:a9:ce:20:36:0b:c3:46:6b:f5:20: 55:f2:f2:3e:6d:0c:99:d3:bc:a3:63:f2:bb:fc:97:8f:1b:2f: 44:0d:04:da:87:6a:f0:5c:f4:72:63:4a:25:ec:4a:57:1a:df: aa:0a:dc:e7:d3:0c:d8:ff:b2:b3:c8:c6:10:cf:8f:82:ad:3f: 8f:91:ba:73:b1:7d:ef:8a:06:a3:2e:15:c9:ee:2b:90:d2:ba: f6:68:df:b0:bd:ac:17:f8:c1:4b:3c:89:1e:24:bc:c8:1f:b0: 92:eb:8c:c8:15:eb:f8:51:f2:8a:ad:a8:63:e9:50:55:78:69: 97:3b:4f:77:c7:9a:ee:b6:25:95:3e:7e:14:5e:8a:57:db:01: 2f:a6:ac:ab:2a:88:b8:9e:a2:3e:fe:0a:9d:5f:3f:43:c9:5c: cb:cc:63:03:2f:8f:26:82:d1:14:39:f2:e0:4d:6e:0d:f0:62: 1a:ba:cc:41:70:12:42:7a:62:73:bf:16:e3:3d:c2:82:12:2d: f1:1d:6d:a9:a0:6d:05:1c:7b:01:45:03:06:be:34:2d:8e:c9: 03:16:ff:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNlkfyXe8ndk0bQUj97Ba6qmsoMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNG NTM5QTkxMjAeFw0yNjEwMDIwMTIyMjZaFw0yNjEwMDMwMjMwMjZaMDMxMTAvBgNV BAMTKDgwQTc2NEI0NjE4RkY2MTM3M0Q4NjhEOTdERjFCOEVENzQ0NDkwQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGct4u0RDVwAx2vNg88XbhnmMD R1UGeSDXCBW48epTK6OAr5WUPveapO7c+4DwacNAhOpx5C2BdVQ3SHPpfD0/ArNx C4twNMpiWRvsN7vj/kDsLKzrUwm5TZjKXHNrwpj5ILvvjewymd+mQTRMl7fpN+G4 VrH/Z0/2L/8cjxTU50GnpXxcfvQ6Uw90la2Gqmubi7JX/UajYuCeztHtSD98pLBm Kz7ifaFrkQinFMzpa54rrgy6ked4l5GWtbMoiWlCMhv5o5dxQlZebW5dCzEvE1nc 0JPnjL4RzMLnjEjD+i8rB5Wi0FnCY3qS5sVNYcnK3+SJyZ+TrRp/L/r7PP27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgKdktGGP9hNz2GjZffG47XREkMwwHwYDVR0j BBgwFoAUAVLY53/0+RMxOrvti7Lq8/U5qRIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwYzhmODYtYmNkNS00YjdhLWE5YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3 RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNGNTM5QTkxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTUyRDhFNzdGRjRGOTEzMzEzQUJCRUQ4QkIyRUFGM0Y1MzlB OTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVB RjNGNTM5QTkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnPFu1m5a/4PZYkP7d/netYVt4nZhuyiYOV AnvStZjWocExskwyvqb9Wlojqc4gNgvDRmv1IFXy8j5tDJnTvKNj8rv8l48bL0QN BNqHavBc9HJjSiXsSlca36oK3OfTDNj/srPIxhDPj4KtP4+RunOxfe+KBqMuFcnu K5DSuvZo37C9rBf4wUs8iR4kvMgfsJLrjMgV6/hR8oqtqGPpUFV4aZc7T3fHmu62 JZU+fhReilfbAS+mrKsqiLieoj7+Cp1fP0PJXMvMYwMvjyaC0RQ58uBNbg3wYhq6 zEFwEkJ6YnO/FuM9woISLfEdbamgbQUcewFFAwa+NC2OyQMW/9Y= -----END CERTIFICATE-----Generated at Fri Oct 2 18:22:40 2026 by rpki-client