$ rpki-client -vvf rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft File: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft (raw, json) Hash identifier: 0OACGQiMYkm4GSQ//64n5MvefVJwHiJOEiSwyj+fOEs= Subject key identifier: 61:26:75:FA:86:98:D6:9F:9B:D5:DB:6D:AF:05:BA:17:5E:98:F9:62 Authority key identifier: 01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 Certificate issuer: /CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Certificate serial: 58784A16125E14B9659178AEAD9D6C98DF582D54 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 12:06:13 +0000 Manifest this update: Mon 20 Jul 2026 12:01:13 +0000 Manifest next update: Tue 21 Jul 2026 14:38:13 +0000 Files and hashes: 1: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl (hash: 0RUl/K9SH4a0L8663BJItk4X0V5nR4hj/1u9ERX058o=) 2: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: mPVDpClyc+EXYxrQu2c3VY1E3eKpZXve7tc3ve723GM=) 3: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: OvoWtyj+yRizvm8CdcOpOPom/9HPHlWTkmE0eRJkAww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 14:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:78:4a:16:12:5e:14:b9:65:91:78:ae:ad:9d:6c:98:df:58:2d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Validity Not Before: Jul 20 12:01:13 2026 GMT Not After : Jul 21 14:38:13 2026 GMT Subject: CN=612675FA8698D69F9BD5DB6DAF05BA175E98F962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:51:d4:94:a5:ea:52:98:f8:5f:2d:3e:f2: 91:25:0b:71:a6:d7:9e:95:60:d9:d0:6b:e7:e8:2e: ba:33:fa:ab:ea:69:24:f4:a0:28:24:da:6b:2a:33: 74:4e:c9:6d:43:37:31:40:e4:32:e3:70:7c:96:a8: d4:b7:14:4c:cc:9b:4d:2e:5d:c4:7b:3a:22:e3:31: 98:d9:30:9c:cd:d5:6d:59:a5:01:7e:73:30:89:74: 12:79:63:1f:cf:66:0c:99:31:d7:58:d0:85:c4:50: c8:b8:fb:16:5e:e9:dc:15:89:ae:06:6e:01:43:7f: 4d:eb:99:db:c0:68:0b:de:36:42:f7:6f:88:62:cb: f1:71:47:55:89:06:ac:92:8e:85:ee:61:eb:ef:34: d5:79:7c:d2:2f:3b:b1:3d:b8:eb:af:e8:00:07:c7: 5f:92:62:5f:c5:4c:1b:57:a7:67:a6:2e:7b:70:b6: cf:b7:b3:5f:27:64:66:49:c2:9f:70:a5:82:0e:aa: 69:a9:8e:0e:94:1c:0e:e3:66:68:73:25:cb:69:94: f8:d8:2e:99:13:14:da:42:87:b4:e4:f3:9f:d1:18: f3:a8:ee:fb:b5:c3:8e:53:ab:76:8f:b2:7f:f9:15: 0e:ab:d7:57:96:e0:c3:02:d5:f9:03:15:95:3e:1f: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:26:75:FA:86:98:D6:9F:9B:D5:DB:6D:AF:05:BA:17:5E:98:F9:62 X509v3 Authority Key Identifier: keyid:01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f4:46:52:d6:05:65:30:97:99:7e:77:22:1b:c6:38:f8:6c: 26:00:95:5b:f1:5f:95:ee:bd:35:07:05:f3:ee:ed:54:02:13: 71:53:ca:b1:04:5f:a3:ae:85:01:74:1c:e3:97:d5:2e:16:46: 7e:b5:44:ad:7b:6c:ac:95:7f:2d:b2:64:cb:33:f9:2a:c5:d9: 4c:08:c9:95:a1:71:ce:71:f4:bc:e0:5f:bd:7f:ce:88:91:46: f8:de:0b:30:82:e0:10:c3:a1:20:b2:a7:3c:a1:48:0d:6d:80: 57:18:f1:39:f9:66:29:d2:ab:a9:9f:7b:f8:d7:e8:7e:1e:44: 8c:ec:33:bc:19:99:08:ff:28:e8:4f:8b:06:50:05:ba:3a:c2: 0a:00:81:5e:22:3f:a3:ee:16:b4:df:b1:d1:16:fa:0d:1e:3c: d4:bd:4f:50:6c:d2:33:1b:00:65:34:31:be:bb:b0:d7:36:14: 8f:5b:0d:5a:c3:fa:9f:4e:f3:c3:b7:78:3e:e1:2d:82:a7:1e: 21:21:e9:b5:65:d6:d9:07:5f:b9:84:6c:e1:03:23:b3:07:38: f5:8b:19:4b:5e:65:ca:78:61:ab:7d:63:e4:c6:a5:bb:44:63: 3b:9e:70:45:66:82:32:ae:8c:81:3f:4a:37:92:25:d9:11:25: d6:bd:86:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHhKFhJeFLllkXiurZ1smN9YLVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNG NTM5QTkxMjAeFw0yNjA3MjAxMjAxMTNaFw0yNjA3MjExNDM4MTNaMDMxMTAvBgNV BAMTKDYxMjY3NUZBODY5OEQ2OUY5QkQ1REI2REFGMDVCQTE3NUU5OEY5NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS5VHUlKXqUpj4Xy0+8pElC3Gm 156VYNnQa+foLroz+qvqaST0oCgk2msqM3ROyW1DNzFA5DLjcHyWqNS3FEzMm00u XcR7OiLjMZjZMJzN1W1ZpQF+czCJdBJ5Yx/PZgyZMddY0IXEUMi4+xZe6dwVia4G bgFDf03rmdvAaAveNkL3b4hiy/FxR1WJBqySjoXuYevvNNV5fNIvO7E9uOuv6AAH x1+SYl/FTBtXp2emLntwts+3s18nZGZJwp9wpYIOqmmpjg6UHA7jZmhzJctplPjY LpkTFNpCh7Tk85/RGPOo7vu1w45Tq3aPsn/5FQ6r11eW4MMC1fkDFZU+H5F9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYSZ1+oaY1p+b1dttrwW6F16Y+WIwHwYDVR0j BBgwFoAUAVLY53/0+RMxOrvti7Lq8/U5qRIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwYzhmODYtYmNkNS00YjdhLWE5YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3 RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNGNTM5QTkxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTUyRDhFNzdGRjRGOTEzMzEzQUJCRUQ4QkIyRUFGM0Y1MzlB OTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVB RjNGNTM5QTkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD0RlLWBWUwl5l+dyIbxjj4bCYAlVvxX5Xu vTUHBfPu7VQCE3FTyrEEX6OuhQF0HOOX1S4WRn61RK17bKyVfy2yZMsz+SrF2UwI yZWhcc5x9LzgX71/zoiRRvjeCzCC4BDDoSCypzyhSA1tgFcY8Tn5ZinSq6mfe/jX 6H4eRIzsM7wZmQj/KOhPiwZQBbo6wgoAgV4iP6PuFrTfsdEW+g0ePNS9T1Bs0jMb AGU0Mb67sNc2FI9bDVrD+p9O88O3eD7hLYKnHiEh6bVl1tkHX7mEbOEDI7MHOPWL GUteZcp4Yat9Y+TGpbtEYzuecEVmgjKujIE/SjeSJdkRJda9hgg= -----END CERTIFICATE-----Generated at Tue Jul 21 06:58:39 2026 by rpki-client