$ rpki-client -vvf rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft File: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft (raw, json) Hash identifier: c25X1QsMvyGiJxFQbq+yQKWFpW5o7R0ThgvPJ6QTE2Y= Subject key identifier: 22:E2:25:B6:CD:A7:F2:FB:72:01:A1:8D:BC:3E:27:68:10:00:BC:7E Authority key identifier: 01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 Certificate issuer: /CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Certificate serial: 4BF51873D8C609C3F5352E995A7C3C55E2F7A1AB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 09:26:41 +0000 Manifest this update: Tue 02 Jun 2026 09:21:41 +0000 Manifest next update: Wed 03 Jun 2026 11:04:41 +0000 Files and hashes: 1: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: OvoWtyj+yRizvm8CdcOpOPom/9HPHlWTkmE0eRJkAww=) 2: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: mPVDpClyc+EXYxrQu2c3VY1E3eKpZXve7tc3ve723GM=) 3: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl (hash: geH1BO8yYJO9yXwf6TjGunGYG0IydslTtJSdATPxjHU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f5:18:73:d8:c6:09:c3:f5:35:2e:99:5a:7c:3c:55:e2:f7:a1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Validity Not Before: Jun 2 09:21:41 2026 GMT Not After : Jun 3 11:04:41 2026 GMT Subject: CN=22E225B6CDA7F2FB7201A18DBC3E27681000BC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:22:af:6d:40:96:a9:c1:fd:80:37:43:7a:6b: 82:b3:53:54:f2:96:76:a6:7d:e0:80:94:30:32:2d: 22:39:46:2e:fd:ac:10:3a:f1:e9:dc:53:40:2a:ee: 39:9f:00:74:5e:a4:b3:2e:47:72:04:6f:bc:70:c2: b8:f8:03:c1:2f:25:68:1b:c2:26:08:69:c1:5b:1b: fd:29:ea:09:86:a5:ae:a1:db:fd:d8:bc:02:cc:83: 04:0c:94:fd:bc:d2:9f:cf:59:80:47:cc:92:60:ba: 27:40:be:e6:a1:dd:42:e9:c3:35:76:10:a1:07:01: d1:9f:70:9c:e3:9c:e6:dc:65:b3:17:5d:f5:a4:84: 9b:4e:af:2e:5a:ab:e6:8e:e0:3a:31:2b:2f:3f:f8: f4:df:86:3e:49:f4:df:2f:a8:82:e8:2c:b1:1d:20: c8:b9:73:de:1c:cf:1f:8c:58:c1:40:d3:d2:78:52: 03:82:1b:43:a2:eb:12:54:7a:34:52:6b:4b:f2:0b: 57:19:ef:49:56:3d:eb:c6:39:92:d6:b7:b9:0b:cf: 54:60:c9:c4:83:1b:0a:21:5a:bd:34:a7:1d:77:78: b0:80:e4:97:e5:a0:89:72:d5:47:7d:e5:3a:6f:10: ba:bc:22:65:4f:89:8c:d3:10:bc:35:4f:4a:d2:e1: ed:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E2:25:B6:CD:A7:F2:FB:72:01:A1:8D:BC:3E:27:68:10:00:BC:7E X509v3 Authority Key Identifier: keyid:01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:6f:07:79:96:52:27:f0:b6:ca:5c:0e:b7:99:9e:1e:f7:ee: a4:37:8d:79:68:33:8a:a7:ac:ee:5a:e0:11:e5:49:77:f3:e1: b6:6c:7d:ea:81:1f:8a:5e:d0:d0:5b:3e:ff:1b:03:6f:e9:38: 72:b1:03:60:59:24:29:62:ee:a7:d6:ee:33:6d:a6:26:e7:eb: 20:e7:78:53:b4:6d:78:d2:23:af:60:f7:a9:39:91:9c:41:57: 61:c6:c8:52:86:9a:33:d2:20:38:d4:77:0f:30:0f:6c:35:30: 4a:a9:5e:f3:be:54:c4:f1:dc:9f:0f:97:93:db:9e:e6:0e:1f: 57:a9:20:9c:a7:e8:4e:99:41:5b:87:f9:bb:18:12:3c:a2:08: 9f:8c:94:7c:82:0b:58:7f:b5:dc:4e:d1:42:5e:d7:77:64:13: 26:0a:06:56:ad:7e:cc:2c:1f:a1:dd:27:fc:16:2d:6e:ee:b2: 7e:2d:2a:eb:db:a3:e4:4c:8a:af:c0:9d:4a:6d:05:61:83:37: 61:fb:4d:4a:01:49:4a:a3:c3:54:6d:b2:b9:fd:6d:2e:21:e3: 65:b3:6b:6b:c1:98:a2:9a:b6:6f:2c:0f:e1:a4:81:30:b0:14: d8:d8:53:ac:3b:3b:f4:82:af:40:d0:6d:44:f0:f2:e3:50:6a: 16:bd:a8:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/UYc9jGCcP1NS6ZWnw8VeL3oaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNG NTM5QTkxMjAeFw0yNjA2MDIwOTIxNDFaFw0yNjA2MDMxMTA0NDFaMDMxMTAvBgNV BAMTKDIyRTIyNUI2Q0RBN0YyRkI3MjAxQTE4REJDM0UyNzY4MTAwMEJDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCIq9tQJapwf2AN0N6a4KzU1Ty lnamfeCAlDAyLSI5Ri79rBA68encU0Aq7jmfAHRepLMuR3IEb7xwwrj4A8EvJWgb wiYIacFbG/0p6gmGpa6h2/3YvALMgwQMlP280p/PWYBHzJJguidAvuah3ULpwzV2 EKEHAdGfcJzjnObcZbMXXfWkhJtOry5aq+aO4DoxKy8/+PTfhj5J9N8vqILoLLEd IMi5c94czx+MWMFA09J4UgOCG0Oi6xJUejRSa0vyC1cZ70lWPevGOZLWt7kLz1Rg ycSDGwohWr00px13eLCA5JfloIly1Ud95TpvELq8ImVPiYzTELw1T0rS4e0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIuIlts2n8vtyAaGNvD4naBAAvH4wHwYDVR0j BBgwFoAUAVLY53/0+RMxOrvti7Lq8/U5qRIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwYzhmODYtYmNkNS00YjdhLWE5YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3 RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNGNTM5QTkxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTUyRDhFNzdGRjRGOTEzMzEzQUJCRUQ4QkIyRUFGM0Y1MzlB OTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVB RjNGNTM5QTkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFvB3mWUifwtspcDreZnh737qQ3jXloM4qn rO5a4BHlSXfz4bZsfeqBH4pe0NBbPv8bA2/pOHKxA2BZJCli7qfW7jNtpibn6yDn eFO0bXjSI69g96k5kZxBV2HGyFKGmjPSIDjUdw8wD2w1MEqpXvO+VMTx3J8Pl5Pb nuYOH1epIJyn6E6ZQVuH+bsYEjyiCJ+MlHyCC1h/tdxO0UJe13dkEyYKBlatfsws H6HdJ/wWLW7usn4tKuvbo+RMiq/AnUptBWGDN2H7TUoBSUqjw1Rtsrn9bS4h42Wz a2vBmKKatm8sD+GkgTCwFNjYU6w7O/SCr0DQbUTw8uNQaha9qEM= -----END CERTIFICATE-----Generated at Wed Jun 3 04:01:42 2026 by rpki-client