$ rpki-client -vvf rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft File: 0852B9571B10B9E010A24AEF65D8CD2D47886515.mft (raw, json) Hash identifier: fESIyQE6HIJhkcZ1+NOlKgQOGCyuXZQ3N7M0obbSwUc= Subject key identifier: C9:C7:74:1B:4A:65:4F:38:CF:9B:A5:94:2C:7F:81:8D:8D:44:2F:2D Authority key identifier: 08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15 Certificate issuer: /CN=0852B9571B10B9E010A24AEF65D8CD2D47886515 Certificate serial: 1AC83AD329A592C3EFC861500C36A706D94676FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:37:44 +0000 Manifest this update: Tue 12 May 2026 20:32:44 +0000 Manifest next update: Wed 13 May 2026 21:15:44 +0000 Files and hashes: 1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: PCTRx4Db0OJeT2h639ct7xi+9uM7E+6KAvrUncz4724=) 2: 0852B9571B10B9E010A24AEF65D8CD2D47886515.crl (hash: Cp5iLRaoLIXOOFHmlRRcwlSR1SUW/5MezZV+VMvqW8g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.crl rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c8:3a:d3:29:a5:92:c3:ef:c8:61:50:0c:36:a7:06:d9:46:76:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0852B9571B10B9E010A24AEF65D8CD2D47886515 Validity Not Before: May 12 20:32:44 2026 GMT Not After : May 13 21:15:44 2026 GMT Subject: CN=C9C7741B4A654F38CF9BA5942C7F818D8D442F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:32:8d:20:65:2a:50:de:e4:0b:3e:58:a5: 1c:e0:d9:27:c7:8c:8e:a8:14:36:63:92:ad:c3:64: 0d:77:97:9d:ba:cf:63:76:03:ae:75:48:29:f3:d8: 51:9f:7e:e7:57:bb:90:62:9e:59:0d:ff:13:69:2b: 6b:77:f5:1e:e2:c6:ae:51:45:67:fd:ba:bc:92:e9: ad:73:75:9e:85:88:f5:47:44:5d:8e:c7:dd:92:2d: 6c:37:6f:01:91:48:b1:b5:49:b8:4f:dd:9d:ec:1f: c8:ae:fa:2a:30:bf:a9:98:5a:10:1a:49:d8:00:80: b8:95:05:47:58:32:5e:6f:98:1c:4e:97:c9:ef:c5: 25:74:07:9d:4a:ad:31:65:cf:c7:24:ea:80:02:76: b9:97:d0:d9:aa:2d:01:a9:87:ff:8d:e2:0b:2d:ac: 97:26:38:22:e5:1a:ec:0e:2f:37:db:bb:04:43:72: dd:12:e6:db:24:0f:1f:b0:9e:34:4b:89:d8:94:36: bc:54:c3:6b:b0:e6:03:d8:eb:83:69:61:7e:a8:97: 44:ab:75:b9:1a:cb:f4:4b:25:d3:c5:de:e8:08:28: 68:52:b9:d3:c4:4d:6c:0b:cc:5a:55:86:c6:20:f7: 47:83:cb:cf:ad:27:65:dd:11:46:cf:3b:6c:2f:23: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C7:74:1B:4A:65:4F:38:CF:9B:A5:94:2C:7F:81:8D:8D:44:2F:2D X509v3 Authority Key Identifier: keyid:08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fb:0d:d1:d3:64:69:e0:4e:92:e3:35:c2:5a:28:14:27:f8: 8b:7c:71:a5:c3:45:57:70:c8:b2:3b:d6:21:23:a3:f8:63:00: 45:07:96:ac:17:8c:98:17:ed:89:8e:b9:55:8e:9c:d5:a8:c0: 04:23:a0:f3:1a:23:21:21:96:d7:50:b3:e5:a5:29:0e:07:25: c8:d2:8e:f0:59:38:55:86:16:9f:30:5a:e0:0d:67:11:f6:40: 85:6a:36:d9:18:8b:a1:9d:ff:16:a3:7b:dc:03:9e:30:75:87: 9c:45:c3:ab:34:9f:da:4d:38:91:87:5b:5c:f2:c9:b7:51:44: 82:23:8d:01:51:ae:e2:33:06:66:2d:9b:35:7c:43:56:94:a7: 7c:81:20:f0:b8:63:84:3f:e1:c9:83:f2:1f:66:ba:55:11:c4: b6:be:6b:df:69:52:20:c5:47:3c:fa:cb:be:ed:b5:ef:25:df: a1:e3:5c:26:41:0c:a3:c4:f2:28:48:cc:3d:36:d6:94:1d:02: 32:f0:40:a7:03:8f:63:e5:dc:8c:55:86:d0:ef:de:bb:74:8d: 42:b8:86:d1:a4:44:2d:8a:c8:05:f6:7a:6a:3e:bf:f6:11:16: 9c:b4:79:03:04:68:6c:d9:fe:a2:d3:1a:e8:8d:d5:be:42:ae: 3c:35:4a:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsg60ymlksPvyGFQDDanBtlGdvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg1MkI5NTcxQjEwQjlFMDEwQTI0QUVGNjVEOENEMkQ0 Nzg4NjUxNTAeFw0yNjA1MTIyMDMyNDRaFw0yNjA1MTMyMTE1NDRaMDMxMTAvBgNV BAMTKEM5Qzc3NDFCNEE2NTRGMzhDRjlCQTU5NDJDN0Y4MThEOEQ0NDJGMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXTKNIGUqUN7kCz5YpRzg2SfH jI6oFDZjkq3DZA13l526z2N2A651SCnz2FGffudXu5BinlkN/xNpK2t39R7ixq5R RWf9uryS6a1zdZ6FiPVHRF2Ox92SLWw3bwGRSLG1SbhP3Z3sH8iu+iowv6mYWhAa SdgAgLiVBUdYMl5vmBxOl8nvxSV0B51KrTFlz8ck6oACdrmX0NmqLQGph/+N4gst rJcmOCLlGuwOLzfbuwRDct0S5tskDx+wnjRLidiUNrxUw2uw5gPY64NpYX6ol0Sr dbkay/RLJdPF3ugIKGhSudPETWwLzFpVhsYg90eDy8+tJ2XdEUbPO2wvI4Y/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUycd0G0plTzjPm6WULH+BjY1ELy0wHwYDVR0j BBgwFoAUCFK5VxsQueAQokrvZdjNLUeIZRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4MDMxMjUtZDc3Ny00MDU2LTg0NGQtOGQxYmVmZDAxNjNkLzAvMDg1MkI5NTcx QjEwQjlFMDEwQTI0QUVGNjVEOENEMkQ0Nzg4NjUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODUyQjk1NzFCMTBCOUUwMTBBMjRBRUY2NUQ4Q0QyRDQ3ODg2 NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvMDg1MkI5NTcxQjEwQjlFMDEwQTI0QUVGNjVEOENE MkQ0Nzg4NjUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJX7DdHTZGngTpLjNcJaKBQn+It8caXDRVdw yLI71iEjo/hjAEUHlqwXjJgX7YmOuVWOnNWowAQjoPMaIyEhltdQs+WlKQ4HJcjS jvBZOFWGFp8wWuANZxH2QIVqNtkYi6Gd/xaje9wDnjB1h5xFw6s0n9pNOJGHW1zy ybdRRIIjjQFRruIzBmYtmzV8Q1aUp3yBIPC4Y4Q/4cmD8h9mulURxLa+a99pUiDF Rzz6y77tte8l36HjXCZBDKPE8ihIzD021pQdAjLwQKcDj2Pl3IxVhtDv3rt0jUK4 htGkRC2KyAX2emo+v/YRFpy0eQMEaGzZ/qLTGuiN1b5Crjw1Sj8= -----END CERTIFICATE-----Generated at Wed May 13 02:49:28 2026 by rpki-client