$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft File: C352DFD797F0814103500130B1A6B6876355C3DF.mft (raw, json) Hash identifier: 1Oc1YZ6CNQzelsVpR9Z2VLhgiIe2myuX6QFc4mhGiQc= Subject key identifier: 0C:8F:57:C7:8A:77:BF:F3:6B:ED:A2:8C:D9:42:5E:7C:1B:A9:35:40 Authority key identifier: C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF Certificate issuer: /CN=C352DFD797F0814103500130B1A6B6876355C3DF Certificate serial: 4D569DC6DD359DB88AD2B6A6EF2F8B564B8F9190 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft Manifest number: A8 Signing time: Thu 03 Sep 2026 23:51:40 +0000 Manifest this update: Thu 03 Sep 2026 23:46:40 +0000 Manifest next update: Sat 05 Sep 2026 00:15:40 +0000 Files and hashes: 1: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: zyRn7jFyehFEgsKHr+RevPoVMdyoLH00YGiqg3O4fKo=) 2: C352DFD797F0814103500130B1A6B6876355C3DF.crl (hash: 9oilvryIDyk+2ZrJvLu+WoGwzJOeXN7ABNqfrWRZWSI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 00:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:56:9d:c6:dd:35:9d:b8:8a:d2:b6:a6:ef:2f:8b:56:4b:8f:91:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C352DFD797F0814103500130B1A6B6876355C3DF Validity Not Before: Sep 3 23:46:40 2026 GMT Not After : Sep 5 00:15:40 2026 GMT Subject: CN=0C8F57C78A77BFF36BEDA28CD9425E7C1BA93540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bc:1d:a5:a5:e2:e5:62:c7:b0:68:9a:6c:1b: d5:dd:c7:04:a1:e0:60:f2:67:fa:fb:8c:0d:3f:2d: a4:e8:0c:ca:ee:bc:f7:bd:df:f4:38:d5:79:ed:83: f4:7b:b3:00:7c:07:7f:ae:03:8e:65:f7:a1:5e:f6: cd:0b:3d:60:61:f9:0b:fa:40:40:bb:9f:35:f4:35: 33:a1:50:5f:51:d4:cb:08:16:0a:d7:1c:44:ee:d6: 53:df:36:0f:aa:68:d6:12:8b:99:6d:08:a9:08:e4: 28:cc:57:56:b8:04:6d:4d:4a:81:44:0b:34:fa:c4: ea:f6:70:1f:6e:94:f4:ad:43:9b:04:23:28:47:d4: 86:e9:c5:b5:dc:ff:28:74:3b:9d:d2:8c:d1:35:0d: cf:96:03:6f:93:8a:0a:c0:5d:5a:ef:fb:07:77:02: 2c:31:13:9b:be:7f:20:bf:85:ed:96:99:a5:4a:3c: 48:ab:cb:80:85:0b:05:2d:53:13:0b:16:e8:d6:f3: 8a:1e:97:50:85:66:db:8a:10:69:c2:c0:67:04:d0: fa:ac:b1:06:5d:10:8e:33:f3:ef:8f:d7:29:da:6f: 1f:75:d9:7d:94:94:56:55:e0:c5:2d:64:66:b2:81: 96:a5:c3:6f:5e:c6:f3:d5:1c:6d:63:99:66:ea:95: 0d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:8F:57:C7:8A:77:BF:F3:6B:ED:A2:8C:D9:42:5E:7C:1B:A9:35:40 X509v3 Authority Key Identifier: keyid:C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6d:f8:54:f1:83:73:47:d8:85:6e:fa:1f:ce:07:57:2d:5f: 9d:db:6d:97:0d:6e:bb:f5:da:be:b6:a7:e9:7c:c6:34:62:d5: e0:0e:45:45:70:9f:47:fd:99:19:e4:f3:dd:6e:58:57:ea:e5: e2:7e:73:db:c4:33:0c:45:a2:de:6f:86:76:d3:9f:9d:e9:d7: 2f:89:47:5d:3f:3a:3a:7c:39:47:a7:86:67:05:54:a3:3f:11: ef:31:bf:68:5c:e6:ba:20:f4:d9:09:2a:32:6a:8a:45:af:25: 27:65:11:6b:db:d7:2b:4c:2e:e1:1f:23:b8:2a:8b:5c:d1:b9: 43:da:24:be:01:ef:94:43:a9:32:ae:f2:b9:4c:fd:f4:56:81: 1c:a4:64:31:99:ec:34:92:d2:c1:55:0c:e8:65:cd:7e:f6:0f: 40:c7:d2:38:26:74:e9:36:1f:20:32:90:c8:80:6c:ce:9e:e1: 3c:97:63:44:32:f1:84:30:db:83:c5:a1:4f:04:03:3d:29:11: ea:45:37:3b:94:48:3d:88:2c:3c:72:27:79:ac:cb:6b:9f:15: 21:2e:3c:83:11:59:08:6d:81:31:bd:56:24:60:49:f1:1b:95: 32:54:80:b8:d4:d7:9f:8a:8d:67:9f:97:33:7d:a1:19:8b:12: a1:ad:4e:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTVadxt01nbiK0ram7y+LVkuPkZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2 MzU1QzNERjAeFw0yNjA5MDMyMzQ2NDBaFw0yNjA5MDUwMDE1NDBaMDMxMTAvBgNV BAMTKDBDOEY1N0M3OEE3N0JGRjM2QkVEQTI4Q0Q5NDI1RTdDMUJBOTM1NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCivB2lpeLlYsewaJpsG9XdxwSh 4GDyZ/r7jA0/LaToDMruvPe93/Q41Xntg/R7swB8B3+uA45l96Fe9s0LPWBh+Qv6 QEC7nzX0NTOhUF9R1MsIFgrXHETu1lPfNg+qaNYSi5ltCKkI5CjMV1a4BG1NSoFE CzT6xOr2cB9ulPStQ5sEIyhH1IbpxbXc/yh0O53SjNE1Dc+WA2+TigrAXVrv+wd3 AiwxE5u+fyC/he2WmaVKPEiry4CFCwUtUxMLFujW84oel1CFZtuKEGnCwGcE0Pqs sQZdEI4z8++P1ynabx912X2UlFZV4MUtZGaygZalw29exvPVHG1jmWbqlQ31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDI9Xx4p3v/Nr7aKM2UJefBupNUAwHwYDVR0j BBgwFoAUw1Lf15fwgUEDUAEwsaa2h2NVw98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2N2VjMzMtNWE3Mi00YzY1LTlmZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5 N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2MzU1QzNERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzUyREZENzk3RjA4MTQxMDM1MDAxMzBCMUE2QjY4NzYzNTVD M0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2 ODc2MzU1QzNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFt+FTxg3NH2IVu+h/OB1ctX53bbZcNbrv1 2r62p+l8xjRi1eAORUVwn0f9mRnk891uWFfq5eJ+c9vEMwxFot5vhnbTn53p1y+J R10/Ojp8OUenhmcFVKM/Ee8xv2hc5rog9NkJKjJqikWvJSdlEWvb1ytMLuEfI7gq i1zRuUPaJL4B75RDqTKu8rlM/fRWgRykZDGZ7DSS0sFVDOhlzX72D0DH0jgmdOk2 HyAykMiAbM6e4TyXY0Qy8YQw24PFoU8EAz0pEepFNzuUSD2ILDxyJ3msy2ufFSEu PIMRWQhtgTG9ViRgSfEblTJUgLjU15+KjWeflzN9oRmLEqGtTvc= -----END CERTIFICATE-----Generated at Fri Sep 4 16:06:31 2026 by rpki-client