$ rpki-client -vvf rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft File: A952A58DE132E26886D9A077713042EADBA3C178.mft (raw, json) Hash identifier: 1vtL/bWF/Cxlv6+7WOBX6mOF81XqmDtdGLoUOaVKuNw= Subject key identifier: 12:CE:1F:BC:F2:1D:0D:4F:B2:EF:57:22:9C:EE:15:56:50:E4:DD:D6 Authority key identifier: A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 Certificate issuer: /CN=A952A58DE132E26886D9A077713042EADBA3C178 Certificate serial: 7778C467A2C52691F5296E997FF8659FAED2A51E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft Manifest number: 6D Signing time: Tue 21 Jul 2026 04:36:26 +0000 Manifest this update: Tue 21 Jul 2026 04:31:26 +0000 Manifest next update: Wed 22 Jul 2026 05:14:26 +0000 Files and hashes: 1: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: I9P+22XUrYqfAeG+s4HEGC5b6efFAbm0WVpCZy5OhYk=) 2: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: j2rPBHDu8altdMacoto0CdEJNfbZiyRNmXyQ2rZHa2o=) 3: A952A58DE132E26886D9A077713042EADBA3C178.crl (hash: TW9srWEI/dWUWVdzdEAomWT4zGIUa2YfG2g+OZAM2/M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:78:c4:67:a2:c5:26:91:f5:29:6e:99:7f:f8:65:9f:ae:d2:a5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A952A58DE132E26886D9A077713042EADBA3C178 Validity Not Before: Jul 21 04:31:26 2026 GMT Not After : Jul 22 05:14:26 2026 GMT Subject: CN=12CE1FBCF21D0D4FB2EF57229CEE155650E4DDD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:09:a0:9b:41:c1:4e:d2:f2:f8:82:17:6b: e7:5f:3c:bf:f2:6d:69:54:60:29:1a:5c:d4:40:57: 0c:86:b1:a2:ff:d5:60:ac:b6:85:f0:ba:0f:8e:d8: 29:73:6c:7f:79:66:55:93:b3:53:49:ff:1e:09:71: bc:e0:e1:25:5f:c1:5c:15:d1:be:ec:14:66:3d:2e: 03:f9:77:fc:a5:0d:4b:2e:8a:da:8c:5c:fd:3d:ab: d9:bf:78:b1:0e:49:ad:06:71:08:c7:92:19:2e:30: 42:fa:41:cc:0f:1e:e3:8d:f4:7d:97:d5:5a:b4:3a: 09:73:f8:6d:6d:92:65:b8:d3:25:47:33:33:b3:90: 61:b3:b6:36:73:37:fd:60:f0:61:47:0b:7d:51:07: bb:f3:ae:ff:86:40:e8:b7:53:91:b1:83:72:3b:e5: 53:9f:9d:1a:6d:35:4a:d4:29:3d:69:71:99:17:37: 44:99:72:b8:25:d1:d1:a0:a2:e5:61:bb:12:8b:b7: c0:33:53:bb:55:13:01:f2:3a:dc:a8:22:38:70:8f: dc:01:da:99:ce:4b:60:7f:bc:b1:f6:f5:17:ed:7f: 13:7d:8b:18:56:73:20:23:d6:91:52:04:ee:39:d4: 76:f8:c0:54:7b:54:fb:ba:4c:f3:8e:57:75:56:5f: 69:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CE:1F:BC:F2:1D:0D:4F:B2:EF:57:22:9C:EE:15:56:50:E4:DD:D6 X509v3 Authority Key Identifier: keyid:A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e2:64:fc:35:8e:73:d7:8b:ea:31:68:b1:32:ab:66:04:cf: 7d:58:23:6a:2d:03:ed:33:3d:9b:da:f1:e8:9e:5b:79:a5:4b: 9d:62:9d:50:88:6d:ad:aa:3b:a3:e6:15:8c:ed:76:10:7f:43: 15:24:1b:59:36:8a:cf:85:69:74:a9:3f:b6:35:b4:04:65:ea: 71:5c:31:3f:db:e4:be:6e:f1:43:bf:dd:4a:ca:cb:dd:d5:6c: cd:7f:22:b2:ef:40:07:6b:d8:0f:9c:a3:5e:72:80:d5:4a:82: 2b:a1:60:da:b9:aa:ff:64:43:2b:4f:bf:e0:e3:04:b7:9b:ec: 31:5d:ee:76:71:53:18:80:35:80:78:02:c5:61:b7:f2:c5:bc: 2d:9b:73:64:10:da:04:5c:fc:31:73:bf:aa:63:f1:9e:04:6f: 4a:c6:cc:20:b0:51:28:3f:5b:80:9d:e1:6b:b8:e9:75:3c:32: 95:b4:b8:1f:9f:23:9d:98:32:8b:03:ec:88:8f:fc:45:18:60: 00:66:48:1d:82:21:88:0c:8b:9e:dc:9e:b8:af:a7:ef:00:e0: 7c:f5:47:21:50:15:0f:47:bb:75:a5:d5:d0:11:5e:e0:53:69: 91:68:08:31:04:c8:2a:33:76:89:e2:98:03:bc:f7:11:4f:17: 0d:1e:0f:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3jEZ6LFJpH1KW6Zf/hln67SpR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFE QkEzQzE3ODAeFw0yNjA3MjEwNDMxMjZaFw0yNjA3MjIwNTE0MjZaMDMxMTAvBgNV BAMTKDEyQ0UxRkJDRjIxRDBENEZCMkVGNTcyMjlDRUUxNTU2NTBFNERERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFegmgm0HBTtLy+IIXa+dfPL/y bWlUYCkaXNRAVwyGsaL/1WCstoXwug+O2ClzbH95ZlWTs1NJ/x4Jcbzg4SVfwVwV 0b7sFGY9LgP5d/ylDUsuitqMXP09q9m/eLEOSa0GcQjHkhkuMEL6QcwPHuON9H2X 1Vq0Oglz+G1tkmW40yVHMzOzkGGztjZzN/1g8GFHC31RB7vzrv+GQOi3U5Gxg3I7 5VOfnRptNUrUKT1pcZkXN0SZcrgl0dGgouVhuxKLt8AzU7tVEwHyOtyoIjhwj9wB 2pnOS2B/vLH29RftfxN9ixhWcyAj1pFSBO451Hb4wFR7VPu6TPOOV3VWX2k/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEs4fvPIdDU+y71cinO4VVlDk3dYwHwYDVR0j BBgwFoAUqVKljeEy4miG2aB3cTBC6tujwXgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk1N2EzYmYtNDgyMy00NjA5LTg1Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERF MTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFEQkEzQzE3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTUyQTU4REUxMzJFMjY4ODZEOUEwNzc3MTMwNDJFQURCQTND MTc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQy RUFEQkEzQzE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDiZPw1jnPXi+oxaLEyq2YEz31YI2otA+0z PZva8eieW3mlS51inVCIba2qO6PmFYztdhB/QxUkG1k2is+FaXSpP7Y1tARl6nFc MT/b5L5u8UO/3UrKy93VbM1/IrLvQAdr2A+co15ygNVKgiuhYNq5qv9kQytPv+Dj BLeb7DFd7nZxUxiANYB4AsVht/LFvC2bc2QQ2gRc/DFzv6pj8Z4Eb0rGzCCwUSg/ W4Cd4Wu46XU8MpW0uB+fI52YMosD7IiP/EUYYABmSB2CIYgMi57cnrivp+8A4Hz1 RyFQFQ9Hu3Wl1dARXuBTaZFoCDEEyCozdonimAO89xFPFw0eD8A= -----END CERTIFICATE-----Generated at Tue Jul 21 06:41:18 2026 by rpki-client