$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft File: 0852B9571B10B9E010A24AEF65D8CD2D47886515.mft (raw, json) Hash identifier: CfRGp8Y4D7sg7mcC/VpMgqAjRzxhhK7pZ/srR4FHBi0= Subject key identifier: 5F:FB:26:7E:F6:3E:3C:27:A0:6D:8C:A8:1F:96:41:B5:B5:7B:47:F1 Authority key identifier: 08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15 Certificate issuer: /CN=0852B9571B10B9E010A24AEF65D8CD2D47886515 Certificate serial: 73E266E2DB964996855BE60A5040AF805F16815E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 09:03:28 +0000 Manifest this update: Thu 03 Sep 2026 08:58:28 +0000 Manifest next update: Fri 04 Sep 2026 11:00:28 +0000 Files and hashes: 1: 3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (hash: PCTRx4Db0OJeT2h639ct7xi+9uM7E+6KAvrUncz4724=) 2: 0852B9571B10B9E010A24AEF65D8CD2D47886515.crl (hash: z+PA5d8+GyM3IvKEiLGer/6XawYKk48H4ZWZRgHTQTc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.crl rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 11:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e2:66:e2:db:96:49:96:85:5b:e6:0a:50:40:af:80:5f:16:81:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0852B9571B10B9E010A24AEF65D8CD2D47886515 Validity Not Before: Sep 3 08:58:28 2026 GMT Not After : Sep 4 11:00:28 2026 GMT Subject: CN=5FFB267EF63E3C27A06D8CA81F9641B5B57B47F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:ab:78:b3:5e:93:c2:fa:08:3f:0a:37:7d: 9e:9e:af:e6:9b:d8:fb:bb:dd:ff:59:26:11:e8:d7: 9a:cd:db:88:a3:e2:ad:e0:5c:c0:51:0a:78:94:86: b0:ba:2e:c8:a2:c3:c9:16:2c:a4:6b:85:96:02:f8: 9f:3c:fd:21:1c:74:7c:a0:61:fc:89:8b:aa:85:f3: 34:32:eb:35:c1:6c:b8:e2:4f:18:86:b9:38:3d:3f: 03:ce:8a:45:8b:c2:d7:bc:9b:c1:3d:47:36:83:bc: 89:30:e0:43:84:91:87:18:2c:10:dc:8d:66:f9:f1: e6:3e:62:aa:31:bb:af:29:d8:ea:d1:fd:78:b2:31: 9a:73:c9:87:16:02:ae:1f:e4:2d:b1:45:ca:f9:26: 0b:98:16:ff:d1:3a:c2:ca:07:1e:9e:95:9c:9a:9b: 72:54:f6:3a:b7:13:e3:ce:f4:8f:50:e8:5c:94:1a: 00:11:c0:81:c6:be:8f:d1:96:67:da:b7:fa:20:c1: a8:85:14:84:8c:80:f1:56:52:dd:b6:5c:a9:0b:a2: 9b:97:06:3b:6a:48:03:d7:79:13:01:9b:c6:13:78: 1d:b2:1b:2b:1a:19:67:45:fb:39:5a:b3:19:a5:31: 53:07:6c:23:c8:ed:0a:1c:4e:d1:02:39:0e:2c:69: 21:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FB:26:7E:F6:3E:3C:27:A0:6D:8C:A8:1F:96:41:B5:B5:7B:47:F1 X509v3 Authority Key Identifier: keyid:08:52:B9:57:1B:10:B9:E0:10:A2:4A:EF:65:D8:CD:2D:47:88:65:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0852B9571B10B9E010A24AEF65D8CD2D47886515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/0852B9571B10B9E010A24AEF65D8CD2D47886515.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8b:92:7c:48:f2:e8:82:cf:f7:87:90:18:5a:9c:89:83:5f: b9:4f:54:ab:2f:d8:a1:5e:94:ca:5b:85:05:d1:f7:21:f1:11: 6f:ea:14:72:0e:8d:a1:cd:6e:f0:c3:d8:e0:07:bd:1f:9a:82: 13:f3:51:b0:d1:e7:56:0e:4d:57:db:72:26:63:fc:67:96:f4: d7:30:f3:1a:5e:0e:21:8e:5e:f8:b6:48:64:4d:c4:5a:a5:f4: bd:df:56:59:2e:8d:bb:78:78:b5:50:03:58:f8:3a:1a:87:ca: ea:35:0e:c0:c3:d4:5a:03:8f:89:55:69:32:53:aa:92:6a:7a: 2b:eb:5f:ec:8c:07:81:48:89:d1:f5:b3:35:7d:98:cc:92:0a: 28:5c:6e:00:55:0a:ee:8c:a2:64:a2:45:b8:af:35:71:65:ab: 3d:e4:2a:b0:c7:90:3e:35:ec:aa:16:7d:ff:3d:fd:d4:f1:34: 0b:77:53:ea:92:d3:b9:69:ce:d7:92:d4:b6:ac:ce:c7:0d:65: b2:2c:e5:f6:76:9d:2a:57:3f:a2:1f:09:e5:ee:00:cf:e8:3c: d8:d5:c3:e6:90:04:f8:f9:69:93:2a:46:5d:7b:91:89:25:e3: 39:67:47:45:e4:9c:8e:3f:83:ab:4a:54:89:8b:23:b1:c3:a0: 28:9e:3d:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc+Jm4tuWSZaFW+YKUECvgF8WgV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg1MkI5NTcxQjEwQjlFMDEwQTI0QUVGNjVEOENEMkQ0 Nzg4NjUxNTAeFw0yNjA5MDMwODU4MjhaFw0yNjA5MDQxMTAwMjhaMDMxMTAvBgNV BAMTKDVGRkIyNjdFRjYzRTNDMjdBMDZEOENBODFGOTY0MUI1QjU3QjQ3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBEat4s16TwvoIPwo3fZ6er+ab 2Pu73f9ZJhHo15rN24ij4q3gXMBRCniUhrC6Lsiiw8kWLKRrhZYC+J88/SEcdHyg YfyJi6qF8zQy6zXBbLjiTxiGuTg9PwPOikWLwte8m8E9RzaDvIkw4EOEkYcYLBDc jWb58eY+Yqoxu68p2OrR/XiyMZpzyYcWAq4f5C2xRcr5JguYFv/ROsLKBx6elZya m3JU9jq3E+PO9I9Q6FyUGgARwIHGvo/Rlmfat/ogwaiFFISMgPFWUt22XKkLopuX BjtqSAPXeRMBm8YTeB2yGysaGWdF+zlasxmlMVMHbCPI7QocTtECOQ4saSFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX/smfvY+PCegbYyoH5ZBtbV7R/EwHwYDVR0j BBgwFoAUCFK5VxsQueAQokrvZdjNLUeIZRUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDE4MDMxMjUtZDc3Ny00MDU2LTg0NGQtOGQxYmVmZDAxNjNkLzAvMDg1MkI5NTcx QjEwQjlFMDEwQTI0QUVGNjVEOENEMkQ0Nzg4NjUxNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wODUyQjk1NzFCMTBCOUUwMTBBMjRBRUY2NUQ4Q0QyRDQ3ODg2 NTE1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDE4MDMxMjUtZDc3Ny00MDU2LTg0 NGQtOGQxYmVmZDAxNjNkLzAvMDg1MkI5NTcxQjEwQjlFMDEwQTI0QUVGNjVEOENE MkQ0Nzg4NjUxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuLknxI8uiCz/eHkBhanImDX7lPVKsv2KFe lMpbhQXR9yHxEW/qFHIOjaHNbvDD2OAHvR+aghPzUbDR51YOTVfbciZj/GeW9Ncw 8xpeDiGOXvi2SGRNxFql9L3fVlkujbt4eLVQA1j4OhqHyuo1DsDD1FoDj4lVaTJT qpJqeivrX+yMB4FIidH1szV9mMySCihcbgBVCu6MomSiRbivNXFlqz3kKrDHkD41 7KoWff89/dTxNAt3U+qS07lpzteS1LaszscNZbIs5fZ2nSpXP6IfCeXuAM/oPNjV w+aQBPj5aZMqRl17kYkl4zlnR0XknI4/g6tKVImLI7HDoCiePfg= -----END CERTIFICATE-----Generated at Thu Sep 3 22:32:44 2026 by rpki-client