$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft File: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft (raw, json) Hash identifier: vYGdxgZnYMgiCB3i1GJfP5RfXZi5TDT6Q1bTcGjTD4E= Subject key identifier: 3F:1E:28:86:C5:44:F1:D4:1E:5D:06:B7:16:51:AA:9C:C8:AF:0D:39 Authority key identifier: C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F Certificate issuer: /CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Certificate serial: 69778437B5ADDB56AEABEB3E4FEE321BB828AAFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft Manifest number: C3 Signing time: Wed 23 Sep 2026 22:08:27 +0000 Manifest this update: Wed 23 Sep 2026 22:03:27 +0000 Manifest next update: Thu 24 Sep 2026 23:28:27 +0000 Files and hashes: 1: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl (hash: dfdlp+nvfFI9yusoHCAcklPE09kc0Bl/7N1tfa9NRVw=) 2: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: 5StnOeqZ96buXCGi/ZTPekGCsI1j8G00cwvVyv/D23k=) 3: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: yAZGzCFckEolEtkEocUhLNSw4BV4DJZdNzdA0tVkGtA=) 4: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: 3sTXjzHUOLPeEyAojCjuo6mjJbiX0Eb7eAu+BmtWebk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:77:84:37:b5:ad:db:56:ae:ab:eb:3e:4f:ee:32:1b:b8:28:aa:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Validity Not Before: Sep 23 22:03:27 2026 GMT Not After : Sep 24 23:28:27 2026 GMT Subject: CN=3F1E2886C544F1D41E5D06B71651AA9CC8AF0D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:1b:f3:ea:57:c1:29:b5:e6:f7:45:1e:40: 86:59:71:25:da:eb:ee:b5:46:f8:89:e8:0f:3e:9c: 59:77:4e:14:55:40:a5:ae:67:31:ce:7c:fb:23:8b: 1d:ba:d3:cd:c1:01:fd:0b:eb:12:4c:44:38:b9:29: 1c:64:61:47:89:86:08:2b:e9:8d:59:9d:53:69:e6: 75:d2:cb:23:c4:83:e7:66:77:58:8e:a2:19:2d:61: 30:1e:ca:2f:45:54:f4:15:89:23:2f:ff:2b:8d:b1: 2d:69:98:7c:f9:66:f2:cb:f8:19:49:e9:f6:ca:a6: d8:c3:a1:e6:fb:af:86:bd:82:8c:45:be:71:68:f6: 5a:c1:e6:35:36:9c:99:f0:e9:56:25:a5:5c:fc:1c: 5d:8a:7a:4a:e2:5c:76:4d:cd:6b:79:ff:ca:7a:66: db:1f:5a:26:2a:cd:f3:b8:bb:09:80:cd:11:55:37: 79:56:85:74:c2:60:90:af:7e:1f:24:49:89:d6:bc: b8:dd:cf:9c:05:b1:20:e6:e3:5b:b9:5d:1c:f6:1c: d0:3a:18:b8:56:48:51:b2:92:8a:3e:70:63:7b:c9: e4:dd:84:5a:b5:c6:9f:d2:ca:82:1c:88:9b:cb:69: a0:29:2d:ca:cb:8a:51:07:18:f3:35:27:dd:52:a8: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1E:28:86:C5:44:F1:D4:1E:5D:06:B7:16:51:AA:9C:C8:AF:0D:39 X509v3 Authority Key Identifier: keyid:C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:09:ed:ba:a6:78:2d:63:a1:7e:6a:57:a4:8d:4b:47:34:d0: 4b:16:3d:58:a9:31:f6:3e:17:1d:74:0f:61:7e:95:90:82:44: 44:d7:84:f9:e9:9d:74:6b:f9:67:4d:c0:dc:47:ba:31:77:25: 8c:5c:4d:10:fd:da:60:d6:99:ac:56:83:4b:6a:42:95:fc:01: 6e:b2:cf:dd:14:4f:b5:81:00:5a:89:7d:20:30:20:82:b3:86: ac:43:5a:09:8d:96:f0:97:28:ef:b6:4e:2e:84:c5:c5:70:c6: eb:7a:2d:9e:9a:4a:13:22:fb:fa:1f:e6:56:79:05:df:df:b7: 84:95:ff:b2:ba:99:9e:f9:57:9b:68:0d:b4:c3:92:53:00:7c: 19:8e:35:5b:1c:ef:47:a7:af:f8:57:f4:a9:67:2c:a0:5f:5d: fc:9f:f6:b5:0d:6b:ea:00:b3:6d:25:3a:b6:f6:78:c5:16:01: 02:21:b4:a9:b4:cf:c9:27:cd:0f:49:c2:4e:c5:df:27:e1:63: 08:7e:83:58:28:1c:a8:d8:a5:6f:79:70:a0:f0:1d:d4:75:0e: e6:00:74:eb:dc:a5:d5:5d:fd:93:a4:de:8a:16:14:7d:4b:b9: 2f:d2:1b:de:e5:f4:23:36:af:90:b3:eb:cd:70:0d:3c:04:25: e9:12:7c:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXeEN7Wt21auq+s+T+4yG7goqv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5 QUIxQzc4RjAeFw0yNjA5MjMyMjAzMjdaFw0yNjA5MjQyMzI4MjdaMDMxMTAvBgNV BAMTKDNGMUUyODg2QzU0NEYxRDQxRTVEMDZCNzE2NTFBQTlDQzhBRjBEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3vxvz6lfBKbXm90UeQIZZcSXa 6+61RviJ6A8+nFl3ThRVQKWuZzHOfPsjix26083BAf0L6xJMRDi5KRxkYUeJhggr 6Y1ZnVNp5nXSyyPEg+dmd1iOohktYTAeyi9FVPQViSMv/yuNsS1pmHz5ZvLL+BlJ 6fbKptjDoeb7r4a9goxFvnFo9lrB5jU2nJnw6VYlpVz8HF2KekriXHZNzWt5/8p6 ZtsfWiYqzfO4uwmAzRFVN3lWhXTCYJCvfh8kSYnWvLjdz5wFsSDm41u5XRz2HNA6 GLhWSFGykoo+cGN7yeTdhFq1xp/SyoIciJvLaaApLcrLilEHGPM1J91SqIzjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPx4ohsVE8dQeXQa3FlGqnMivDTkwHwYDVR0j BBgwFoAUxSwSq5sTWbk8bIZAPTtR0Zqxx48wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwNzNhY2UtYTY5MS00ODYzLTljMWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5 QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5QUIxQzc4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTJDMTJBQjlCMTM1OUI5M0M2Qzg2NDAzRDNCNTFEMTlBQjFD NzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUx RDE5QUIxQzc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4J7bqmeC1joX5qV6SNS0c00EsWPVipMfY+ Fx10D2F+lZCCRETXhPnpnXRr+WdNwNxHujF3JYxcTRD92mDWmaxWg0tqQpX8AW6y z90UT7WBAFqJfSAwIIKzhqxDWgmNlvCXKO+2Ti6ExcVwxut6LZ6aShMi+/of5lZ5 Bd/ft4SV/7K6mZ75V5toDbTDklMAfBmONVsc70enr/hX9KlnLKBfXfyf9rUNa+oA s20lOrb2eMUWAQIhtKm0z8knzQ9Jwk7F3yfhYwh+g1goHKjYpW95cKDwHdR1DuYA dOvcpdVd/ZOk3ooWFH1LuS/SG97l9CM2r5Cz681wDTwEJekSfKY= -----END CERTIFICATE-----Generated at Thu Sep 24 09:39:25 2026 by rpki-client