$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft File: 9252F14B5E62941E764268BF539EE9FAD5793555.mft (raw, json) Hash identifier: 7rKR3wv+f+8O3x+I4oiusGrMc8q26hUQ1yexa9MEZ+M= Subject key identifier: 75:BE:4B:B4:67:1F:77:66:F2:AB:2F:D1:84:F4:A3:70:0E:1A:64:98 Authority key identifier: 92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 Certificate issuer: /CN=9252F14B5E62941E764268BF539EE9FAD5793555 Certificate serial: 2DF743A513732D0810219C5FEA99890887F9D1D2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 18:12:02 +0000 Manifest this update: Tue 02 Jun 2026 18:07:02 +0000 Manifest next update: Wed 03 Jun 2026 20:01:02 +0000 Files and hashes: 1: 9252F14B5E62941E764268BF539EE9FAD5793555.crl (hash: 6dwYGke9OK0FOgQnDmnrOTqe9eTkOIEa1dZ3GiOVrWE=) 2: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: R1vSVJ/Nz5OcbojEfZoeEbcVestRrx2t/NOOXCARjrw=) 3: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: CB5Hkvl40RneZnJWQYmd3LsRBOc9YvGv7ZABsi2oGuk=) 4: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: 3WGbhArGVCFic0aSX1S3lij1MSx+kgEOwyaBXRAdn6M=) 5: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: 0HIhYv7U8gSbWNjqp3fbuBBjmpsISLCZzYGihcy9xas=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:f7:43:a5:13:73:2d:08:10:21:9c:5f:ea:99:89:08:87:f9:d1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9252F14B5E62941E764268BF539EE9FAD5793555 Validity Not Before: Jun 2 18:07:02 2026 GMT Not After : Jun 3 20:01:02 2026 GMT Subject: CN=75BE4BB4671F7766F2AB2FD184F4A3700E1A6498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:ed:b7:01:ae:ee:67:5e:23:8a:2f:70:9b: af:e1:e4:9b:c0:be:6f:a6:d8:6e:90:16:23:ca:69: 2b:e4:f3:5a:d1:aa:ef:d7:63:5f:69:69:e2:44:60: 94:59:09:29:09:d4:ab:89:85:29:5e:7c:94:d5:2e: 38:0b:37:7d:62:48:e9:60:c4:b1:39:da:34:f9:3c: 53:62:bd:be:56:33:2f:9b:b7:fa:12:0d:6c:98:37: 7a:9d:d0:cf:d4:d7:99:42:07:d7:7b:da:b3:61:f3: d1:4f:dc:69:3b:8a:11:af:80:5b:99:1b:74:7d:78: cb:68:c5:71:5f:26:16:ab:08:2a:2c:52:11:1a:6b: a7:e7:9d:63:a4:49:35:e6:fc:19:fe:a3:71:e2:f4: e1:2a:ba:54:0e:6b:cc:ad:33:f1:55:37:e0:66:bd: 97:fc:a3:a3:fb:93:41:06:c0:ae:70:75:35:23:e7: ee:58:63:80:3d:76:15:76:bf:81:b8:ee:14:29:07: 34:1e:14:0f:58:59:5f:2e:5b:79:d7:ed:d2:e6:78: 5e:fc:49:99:6b:22:9f:29:5a:97:dd:1f:7a:e9:51: 48:8b:ce:b4:a5:af:74:3c:1e:8b:b0:c8:5f:93:44: 66:f3:98:5f:ae:82:ea:61:4a:3b:2c:d0:d6:ba:4d: 5a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BE:4B:B4:67:1F:77:66:F2:AB:2F:D1:84:F4:A3:70:0E:1A:64:98 X509v3 Authority Key Identifier: keyid:92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:dc:c7:05:25:f9:47:e8:1d:1b:9b:f8:14:1e:01:66:23:ec: 86:6c:50:9c:3e:76:3a:ef:2c:32:7e:c2:ba:43:d8:27:55:24: fc:b8:4b:7a:28:ff:20:64:a2:47:b8:39:d3:fe:8f:93:5d:39: 7a:51:3b:37:3e:fd:ed:4e:1e:db:3e:56:31:c2:57:09:71:03: ab:7f:57:89:b5:8a:a9:65:e5:85:7b:61:45:8d:a8:dc:d9:df: 04:86:00:90:9f:02:4c:cc:cd:0a:d0:4b:25:79:52:da:6b:9a: 08:1a:57:c9:a3:07:74:00:be:71:1f:45:7b:e7:56:29:df:a1: 64:92:00:67:e6:d1:63:6a:c1:90:9b:42:fd:fd:e1:5e:c2:ba: 08:72:f9:58:c5:8f:fc:1d:f8:58:49:22:ba:c5:9e:06:05:11: 9a:5a:8e:e7:cf:8c:3a:f4:39:3e:28:64:c4:ce:e6:7c:c7:0f: 24:2d:9f:6a:4a:d2:cc:ad:76:8c:6e:44:24:df:c3:7f:4d:0e: 70:a0:78:0f:cd:6f:a1:e8:e0:fd:23:16:3a:9a:a9:e6:42:95: 87:61:92:51:94:b9:33:35:7c:64:21:50:b5:0e:98:b0:56:27: 72:23:ac:84:aa:61:ab:dc:65:9e:5f:77:7f:43:9a:f0:e1:9c: 7c:fd:f4:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULfdDpRNzLQgQIZxf6pmJCIf50dIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFE NTc5MzU1NTAeFw0yNjA2MDIxODA3MDJaFw0yNjA2MDMyMDAxMDJaMDMxMTAvBgNV BAMTKDc1QkU0QkI0NjcxRjc3NjZGMkFCMkZEMTg0RjRBMzcwMEUxQTY0OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/+23Aa7uZ14jii9wm6/h5JvA vm+m2G6QFiPKaSvk81rRqu/XY19paeJEYJRZCSkJ1KuJhSlefJTVLjgLN31iSOlg xLE52jT5PFNivb5WMy+bt/oSDWyYN3qd0M/U15lCB9d72rNh89FP3Gk7ihGvgFuZ G3R9eMtoxXFfJharCCosUhEaa6fnnWOkSTXm/Bn+o3Hi9OEqulQOa8ytM/FVN+Bm vZf8o6P7k0EGwK5wdTUj5+5YY4A9dhV2v4G47hQpBzQeFA9YWV8uW3nX7dLmeF78 SZlrIp8pWpfdH3rpUUiLzrSlr3Q8HouwyF+TRGbzmF+uguphSjss0Na6TVpDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdb5LtGcfd2byqy/RhPSjcA4aZJgwHwYDVR0j BBgwFoAUklLxS15ilB52Qmi/U57p+tV5NVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVkNDZmODItY2YxMS00ZTMyLWIwNTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1 RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFENTc5MzU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjUyRjE0QjVFNjI5NDFFNzY0MjY4QkY1MzlFRTlGQUQ1Nzkz NTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5 RkFENTc5MzU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALjcxwUl+UfoHRub+BQeAWYj7IZsUJw+djrv LDJ+wrpD2CdVJPy4S3oo/yBkoke4OdP+j5NdOXpROzc+/e1OHts+VjHCVwlxA6t/ V4m1iqll5YV7YUWNqNzZ3wSGAJCfAkzMzQrQSyV5UtprmggaV8mjB3QAvnEfRXvn VinfoWSSAGfm0WNqwZCbQv394V7Cughy+VjFj/wd+FhJIrrFngYFEZpajufPjDr0 OT4oZMTO5nzHDyQtn2pK0sytdoxuRCTfw39NDnCgeA/Nb6Ho4P0jFjqaqeZClYdh klGUuTM1fGQhULUOmLBWJ3IjrISqYavcZZ5fd39DmvDhnHz99Lw= -----END CERTIFICATE-----Generated at Wed Jun 3 03:53:54 2026 by rpki-client