$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft File: 0852B9571B10B9E010A24AEF65D8CD2D47886515.mft (raw, json) Hash identifier: mPBeraOd9y+UB2sM8H+jdTHSbSX5ILI0gWS12dY7QiI= Subject key identifier: D3:DF:4F:59:95:5F:B6:5C:94:15:8F:B8:7D:02:65:A6:D6:2F:03:7F Authority key identifier: 08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15 Certificate issuer: /CN=0852B9571B10B9E010A24AEF65D8CD2D47886515 Certificate serial: 33553F76E0A770145D1D4AE014AEFC53D3F14482 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft Manifest number: C7 Signing time: Sun 27 Sep 2026 14:02:03 +0000 Manifest this update: Sun 27 Sep 2026 13:57:03 +0000 Manifest next update: Mon 28 Sep 2026 15:48:03 +0000 Files and hashes: 1: 0852B9571B10B9E010A24AEF65D8CD2D47886515.crl (hash: nWMjfIkZ24T6PukHo8bc3nhhKQuhM+yZjg3tWud1Hm8=) 2: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: PCTRx4Db0OJeT2h639ct7xi+9uM7E+6KAvrUncz4724=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.crl rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:55:3f:76:e0:a7:70:14:5d:1d:4a:e0:14:ae:fc:53:d3:f1:44:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0852B9571B10B9E010A24AEF65D8CD2D47886515 Validity Not Before: Sep 27 13:57:03 2026 GMT Not After : Sep 28 15:48:03 2026 GMT Subject: CN=D3DF4F59955FB65C94158FB87D0265A6D62F037F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:d4:30:90:5e:ed:67:5c:4d:b8:c7:ae:df: 33:2c:87:ea:fc:eb:f3:27:f6:b0:44:6a:0a:c8:4e: 2e:90:db:60:d6:f8:c6:22:fa:aa:2e:32:f9:ec:8f: e8:6f:ac:5d:68:85:37:69:06:cd:e0:be:67:c4:cf: 35:37:e6:4d:04:e7:82:23:35:8e:c7:f0:0c:88:a0: 1d:ed:dc:56:5a:af:b6:6e:a4:3b:60:4b:a7:a4:fb: a2:10:c0:67:32:68:b3:2a:1d:b9:d6:88:ec:7b:7f: 1a:33:cf:0c:7a:3d:89:38:ea:6e:dc:6c:96:22:e9: 3f:93:1d:69:5a:ea:cc:ce:ab:5a:09:03:11:5f:3a: 1a:1a:05:be:d8:c7:06:90:ec:10:79:83:3a:ec:11: 27:2c:41:fb:f1:49:8a:6b:19:7f:fe:54:37:60:35: 88:ae:ac:3e:24:ed:73:0b:5c:96:5b:ec:2a:04:25: 19:0c:a0:b9:c4:2a:2a:eb:ba:c3:c6:c3:aa:ff:1c: 09:c6:41:c4:55:ca:32:cd:9f:17:e7:7c:f9:1a:9f: a8:29:64:6f:e6:15:cf:c4:fa:f1:c5:24:2a:5d:1f: ad:a1:1e:f8:36:07:91:18:e4:2a:71:dc:8c:82:c4: e6:35:75:9d:9a:e5:0a:3a:a5:08:87:31:b3:8e:9e: bf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DF:4F:59:95:5F:B6:5C:94:15:8F:B8:7D:02:65:A6:D6:2F:03:7F X509v3 Authority Key Identifier: keyid:08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d2:9e:52:18:b9:ef:9e:4a:f7:9b:13:fb:26:76:f9:47:73: 1d:4e:dd:e3:d7:8f:d4:19:9f:4e:2a:0d:6f:b7:a9:f3:0f:9e: 80:a5:78:14:b6:66:88:95:9f:79:cf:f8:f5:f4:30:40:a8:ac: e2:a7:24:d2:fa:f2:a3:dd:85:93:65:70:64:ac:c4:44:b5:b9: 9d:95:40:de:0b:4f:fd:8b:94:70:41:9a:c2:42:50:eb:1a:47: 7f:72:90:e8:e1:ad:eb:06:21:73:92:c7:2f:ac:45:a2:b3:08: 38:e2:3f:98:14:52:13:c7:b6:79:a2:35:00:9c:f7:d7:da:ae: ad:27:e2:bc:d4:89:bd:c1:99:31:f0:7d:b2:15:4c:81:00:c4: 99:c0:0c:d3:1f:4f:22:75:8b:64:23:43:a8:0b:03:f3:98:cc: a3:dd:9f:73:8a:83:86:f6:1d:2c:e1:96:ea:d5:22:e5:5c:4b: a3:26:9f:a0:75:21:d8:3a:29:67:9f:c8:b0:1f:c8:05:2e:12: 6b:38:68:c9:a4:3b:34:00:ec:89:d3:97:f2:13:24:06:81:95: 9b:18:79:78:67:de:2b:dc:59:7a:bc:40:73:92:7b:aa:7e:84: 9e:ee:e7:3b:58:27:8f:43:01:90:c0:0a:dc:68:06:e1:72:1d: ed:e1:38:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1U/duCncBRdHUrgFK78U9PxRIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg1MkI5NTcxQjEwQjlFMDEwQTI0QUVGNjVEOENEMkQ0 Nzg4NjUxNTAeFw0yNjA5MjcxMzU3MDNaFw0yNjA5MjgxNTQ4MDNaMDMxMTAvBgNV BAMTKEQzREY0RjU5OTU1RkI2NUM5NDE1OEZCODdEMDI2NUE2RDYyRjAzN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEdQwkF7tZ1xNuMeu3zMsh+r8 6/Mn9rBEagrITi6Q22DW+MYi+qouMvnsj+hvrF1ohTdpBs3gvmfEzzU35k0E54Ij NY7H8AyIoB3t3FZar7ZupDtgS6ek+6IQwGcyaLMqHbnWiOx7fxozzwx6PYk46m7c bJYi6T+THWla6szOq1oJAxFfOhoaBb7YxwaQ7BB5gzrsEScsQfvxSYprGX/+VDdg NYiurD4k7XMLXJZb7CoEJRkMoLnEKirrusPGw6r/HAnGQcRVyjLNnxfnfPkan6gp ZG/mFc/E+vHFJCpdH62hHvg2B5EY5Cpx3IyCxOY1dZ2a5Qo6pQiHMbOOnr+rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU099PWZVftlyUFY+4fQJlptYvA38wHwYDVR0j BBgwFoAUCFK5VxsQueAQokrvZdjNLUeIZRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4MDMxMjUtZDc3Ny00MDU2LTg0NGQtOGQxYmVmZDAxNjNkLzAvMDg1MkI5NTcx QjEwQjlFMDEwQTI0QUVGNjVEOENEMkQ0Nzg4NjUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODUyQjk1NzFCMTBCOUUwMTBBMjRBRUY2NUQ4Q0QyRDQ3ODg2 NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvMDg1MkI5NTcxQjEwQjlFMDEwQTI0QUVGNjVEOENE MkQ0Nzg4NjUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbSnlIYue+eSvebE/smdvlHcx1O3ePXj9QZ n04qDW+3qfMPnoCleBS2ZoiVn3nP+PX0MECorOKnJNL68qPdhZNlcGSsxES1uZ2V QN4LT/2LlHBBmsJCUOsaR39ykOjhresGIXOSxy+sRaKzCDjiP5gUUhPHtnmiNQCc 99farq0n4rzUib3BmTHwfbIVTIEAxJnADNMfTyJ1i2QjQ6gLA/OYzKPdn3OKg4b2 HSzhlurVIuVcS6Mmn6B1Idg6KWefyLAfyAUuEms4aMmkOzQA7InTl/ITJAaBlZsY eXhn3ivcWXq8QHOSe6p+hJ7u5ztYJ49DAZDACtxoBuFyHe3hOBk= -----END CERTIFICATE-----Generated at Sun Sep 27 18:57:48 2026 by rpki-client