$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft File: 9252F14B5E62941E764268BF539EE9FAD5793555.mft (raw, json) Hash identifier: 8eZO3mYC3x9kRS7uRXnjMVtjGGOl7WIA6zyDV+ASTvc= Subject key identifier: 40:5C:0F:DB:EE:CF:49:77:39:87:60:F7:F2:32:C1:17:E4:CE:73:2F Authority key identifier: 92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 Certificate issuer: /CN=9252F14B5E62941E764268BF539EE9FAD5793555 Certificate serial: 7851BBA163B1F1741D65B4262D25D6308BC84CEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 09:39:10 +0000 Manifest this update: Thu 03 Sep 2026 09:34:10 +0000 Manifest next update: Fri 04 Sep 2026 11:20:10 +0000 Files and hashes: 1: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: 3WGbhArGVCFic0aSX1S3lij1MSx+kgEOwyaBXRAdn6M=) 2: 9252F14B5E62941E764268BF539EE9FAD5793555.crl (hash: pAeO3BIf4Qc6J0IsnsKzMMkn5jpOc2ZbQCGYM6NgCLc=) 3: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: 0HIhYv7U8gSbWNjqp3fbuBBjmpsISLCZzYGihcy9xas=) 4: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: CB5Hkvl40RneZnJWQYmd3LsRBOc9YvGv7ZABsi2oGuk=) 5: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: R1vSVJ/Nz5OcbojEfZoeEbcVestRrx2t/NOOXCARjrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:51:bb:a1:63:b1:f1:74:1d:65:b4:26:2d:25:d6:30:8b:c8:4c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9252F14B5E62941E764268BF539EE9FAD5793555 Validity Not Before: Sep 3 09:34:10 2026 GMT Not After : Sep 4 11:20:10 2026 GMT Subject: CN=405C0FDBEECF4977398760F7F232C117E4CE732F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ef:e2:39:fe:d5:25:59:c7:58:f7:4e:d4:3d: 90:a5:0b:8a:7c:c1:af:7c:b0:4d:b4:f1:d2:0b:73: 01:18:a7:86:fd:33:74:d4:4c:17:e6:19:84:7f:85: 71:26:b8:52:3b:e8:2f:6a:18:89:bf:83:72:33:1c: 1a:6b:39:59:aa:7e:24:e9:6d:1b:25:86:67:2b:bb: e1:a8:fd:b6:1d:e5:89:ab:b4:36:10:19:2d:9c:fb: 0a:be:85:67:c8:e8:b8:d6:08:e2:bc:b2:59:cb:35: 3c:8a:28:a7:28:a0:f7:6f:f8:8f:99:e2:48:66:49: 2c:e9:6e:91:29:25:73:29:fa:78:df:a0:cd:97:63: 8f:6d:d4:6b:c4:29:57:09:55:47:8b:ba:a1:b8:ec: cf:db:60:06:3f:01:4b:ba:e9:93:c4:b4:4b:c0:56: ec:83:83:d8:e5:a5:4a:c6:27:b4:e2:7f:6b:42:64: b4:a6:f6:2d:5b:4c:94:86:af:46:2f:f0:c4:f8:16: 30:e8:ce:e0:20:53:1c:29:a3:28:55:d2:7b:d5:f4: a5:14:ce:15:dc:48:58:1e:71:92:65:9b:37:d0:e8: 0d:15:d1:fb:29:32:23:31:74:ef:9d:3b:67:87:a5: 82:3f:40:22:90:f1:3e:a3:35:fe:99:dc:2b:f0:1f: 07:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5C:0F:DB:EE:CF:49:77:39:87:60:F7:F2:32:C1:17:E4:CE:73:2F X509v3 Authority Key Identifier: keyid:92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:4c:09:fa:7e:55:bb:85:c6:80:31:31:a3:03:59:ae:e5:0c: e0:26:a6:9d:ca:6b:d2:d6:36:39:a1:b8:5b:7b:3a:5a:a0:4c: 1d:13:61:49:91:9e:c3:74:38:d6:5f:05:2f:36:83:8e:c8:b4: 0b:12:ed:c6:a9:77:96:1d:aa:93:41:17:6b:fb:07:bf:04:07: 9f:4c:52:da:45:1f:d2:17:79:ab:e2:d3:41:9f:11:fd:e2:1b: b5:51:5c:c5:a5:43:69:8d:72:8f:9c:a7:3f:81:19:b7:25:ba: 1e:2e:e4:4c:68:85:ba:6a:de:c7:a2:5a:59:ca:27:24:1d:e1: bf:3f:02:ae:99:3d:fb:80:75:e8:f4:d8:cf:d6:17:e0:29:1a: 76:46:a7:e2:96:85:6a:36:36:fd:d8:fa:e6:31:b9:10:d2:51: 39:48:6d:3e:98:8e:d7:b8:ce:73:61:50:57:e9:9c:22:fd:d8: 49:40:0c:b5:bc:70:3a:5f:be:d3:ce:cf:16:90:c3:be:b8:3a: 9a:eb:ec:59:20:6f:11:1a:08:aa:ad:80:d7:11:d4:09:da:fa: 25:31:f6:91:b5:15:3f:1e:d3:8e:0b:ec:ab:02:42:7f:0c:1f: c6:bf:4e:48:8f:7e:b6:08:d9:d3:6a:d3:26:73:6b:a3:d4:9f: 04:83:1a:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeFG7oWOx8XQdZbQmLSXWMIvITOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFE NTc5MzU1NTAeFw0yNjA5MDMwOTM0MTBaFw0yNjA5MDQxMTIwMTBaMDMxMTAvBgNV BAMTKDQwNUMwRkRCRUVDRjQ5NzczOTg3NjBGN0YyMzJDMTE3RTRDRTczMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL7+I5/tUlWcdY907UPZClC4p8 wa98sE208dILcwEYp4b9M3TUTBfmGYR/hXEmuFI76C9qGIm/g3IzHBprOVmqfiTp bRslhmcru+Go/bYd5YmrtDYQGS2c+wq+hWfI6LjWCOK8slnLNTyKKKcooPdv+I+Z 4khmSSzpbpEpJXMp+njfoM2XY49t1GvEKVcJVUeLuqG47M/bYAY/AUu66ZPEtEvA VuyDg9jlpUrGJ7Tif2tCZLSm9i1bTJSGr0Yv8MT4FjDozuAgUxwpoyhV0nvV9KUU zhXcSFgecZJlmzfQ6A0V0fspMiMxdO+dO2eHpYI/QCKQ8T6jNf6Z3CvwHwdZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQFwP2+7PSXc5h2D38jLBF+TOcy8wHwYDVR0j BBgwFoAUklLxS15ilB52Qmi/U57p+tV5NVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVkNDZmODItY2YxMS00ZTMyLWIwNTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1 RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFENTc5MzU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjUyRjE0QjVFNjI5NDFFNzY0MjY4QkY1MzlFRTlGQUQ1Nzkz NTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5 RkFENTc5MzU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO5MCfp+VbuFxoAxMaMDWa7lDOAmpp3Ka9LW NjmhuFt7OlqgTB0TYUmRnsN0ONZfBS82g47ItAsS7capd5YdqpNBF2v7B78EB59M UtpFH9IXeavi00GfEf3iG7VRXMWlQ2mNco+cpz+BGbcluh4u5Exohbpq3seiWlnK JyQd4b8/Aq6ZPfuAdej02M/WF+ApGnZGp+KWhWo2Nv3Y+uYxuRDSUTlIbT6Yjte4 znNhUFfpnCL92ElADLW8cDpfvtPOzxaQw764Oprr7FkgbxEaCKqtgNcR1Ana+iUx 9pG1FT8e044L7KsCQn8MH8a/TkiPfrYI2dNq0yZza6PUnwSDGnQ= -----END CERTIFICATE-----Generated at Thu Sep 3 18:04:58 2026 by rpki-client