$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft File: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft (raw, json) Hash identifier: 0ThMxEacCMBofg/qgdCwsqB1mjCxL3o3POxYzDJ/CuA= Subject key identifier: 70:34:97:89:E4:8C:C7:CD:3A:63:ED:17:04:B8:EC:FA:0B:E0:4A:2E Authority key identifier: C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F Certificate issuer: /CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Certificate serial: 43C21A138A0A42D04445B99987DEC1A2AF870358 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 03:16:54 +0000 Manifest this update: Thu 03 Sep 2026 03:11:54 +0000 Manifest next update: Fri 04 Sep 2026 06:08:54 +0000 Files and hashes: 1: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: 5StnOeqZ96buXCGi/ZTPekGCsI1j8G00cwvVyv/D23k=) 2: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl (hash: thhuZWCQOq/c1wuJ0/xd6oZ3waHN391+nUvfEvkE6JA=) 3: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: 3sTXjzHUOLPeEyAojCjuo6mjJbiX0Eb7eAu+BmtWebk=) 4: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: yAZGzCFckEolEtkEocUhLNSw4BV4DJZdNzdA0tVkGtA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:c2:1a:13:8a:0a:42:d0:44:45:b9:99:87:de:c1:a2:af:87:03:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Validity Not Before: Sep 3 03:11:54 2026 GMT Not After : Sep 4 06:08:54 2026 GMT Subject: CN=70349789E48CC7CD3A63ED1704B8ECFA0BE04A2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:43:47:ea:8b:2e:61:09:53:7d:3e:cf:aa:87: 6c:2e:f9:c7:89:83:a2:d3:81:13:8f:63:34:0c:b9: ec:b0:5b:21:5c:d4:86:20:a0:5f:30:08:ed:63:30: 14:7b:9e:b7:e7:22:0e:8e:a8:6a:ab:25:51:36:29: 34:d3:0c:96:a7:50:2a:46:b0:db:09:47:25:4f:c0: fa:34:ad:71:4c:dd:33:32:d0:e6:1c:e5:4f:cc:af: 12:58:ca:8e:bf:ca:4b:c3:35:1e:85:cb:8b:72:4e: f6:da:f3:85:a1:27:48:36:04:94:e8:31:f9:a8:ef: a7:b1:8e:d0:26:58:be:08:b2:1a:0f:0c:0f:be:9b: 2b:38:e5:e9:8e:41:23:ee:2a:16:c6:be:49:e2:94: 26:78:20:4c:92:13:17:c1:89:66:56:eb:d9:44:9e: 40:be:ab:d8:2e:c2:f4:c4:d6:23:bd:c9:41:62:0b: 90:c8:4b:cb:da:61:17:cc:33:21:48:2e:cb:0f:00: 29:99:ac:35:02:6c:67:95:ad:ef:c8:5c:6d:5e:88: 9f:de:2f:62:bb:b6:26:5d:cf:60:19:cb:87:8f:20: 8b:1c:d7:f8:7e:27:fa:38:d4:00:b9:c8:23:d1:9f: 56:f4:c1:25:09:21:4f:98:d4:bf:0e:7e:29:0e:0a: 03:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:34:97:89:E4:8C:C7:CD:3A:63:ED:17:04:B8:EC:FA:0B:E0:4A:2E X509v3 Authority Key Identifier: keyid:C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f8:be:72:b6:0a:b1:70:8e:fd:a8:a2:83:56:13:b6:3d:24: 98:fa:0c:06:38:bc:93:39:40:f6:88:81:e2:43:fa:92:6e:19: 29:c3:18:9c:5d:88:bb:5c:03:68:1f:5b:08:29:9e:74:fc:66: ab:e0:e7:db:15:33:34:95:e2:7c:bd:ba:cb:96:5d:b0:40:77: 8f:fe:54:56:26:c4:af:23:aa:bf:cd:4c:83:b4:51:44:e9:d2: e7:a6:18:d9:53:f1:f7:b4:b0:1f:32:52:f0:f6:1a:a1:be:3b: ab:2a:a0:95:3b:f6:6a:6b:70:8b:05:ea:85:d5:48:f5:23:4d: 01:b4:a4:e5:84:ad:17:7c:43:f8:e8:c8:ae:ab:03:16:36:53: 2b:24:bf:a1:03:35:27:f7:b2:35:66:c5:da:d6:ed:e2:c8:42: 03:cb:fc:5f:f3:9b:81:01:62:63:52:fc:b9:8b:2c:a6:41:99: 23:c2:f1:85:80:90:e1:1d:fb:cc:6a:33:43:7f:f5:f1:ab:d8: d6:14:4c:39:d9:72:6a:53:10:a8:13:89:49:94:7f:10:c3:4e: e3:e4:84:8b:63:ca:ef:bb:19:5d:29:29:1d:9b:43:30:ee:97: 6a:3c:ec:fb:4c:4f:72:23:73:67:d7:be:d3:2f:33:63:a2:01: d1:8c:a8:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ8IaE4oKQtBERbmZh97Boq+HA1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5 QUIxQzc4RjAeFw0yNjA5MDMwMzExNTRaFw0yNjA5MDQwNjA4NTRaMDMxMTAvBgNV BAMTKDcwMzQ5Nzg5RTQ4Q0M3Q0QzQTYzRUQxNzA0QjhFQ0ZBMEJFMDRBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoQ0fqiy5hCVN9Ps+qh2wu+ceJ g6LTgROPYzQMueywWyFc1IYgoF8wCO1jMBR7nrfnIg6OqGqrJVE2KTTTDJanUCpG sNsJRyVPwPo0rXFM3TMy0OYc5U/MrxJYyo6/ykvDNR6Fy4tyTvba84WhJ0g2BJTo Mfmo76exjtAmWL4IshoPDA++mys45emOQSPuKhbGvknilCZ4IEySExfBiWZW69lE nkC+q9guwvTE1iO9yUFiC5DIS8vaYRfMMyFILssPACmZrDUCbGeVre/IXG1eiJ/e L2K7tiZdz2AZy4ePIIsc1/h+J/o41AC5yCPRn1b0wSUJIU+Y1L8OfikOCgNXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcDSXieSMx806Y+0XBLjs+gvgSi4wHwYDVR0j BBgwFoAUxSwSq5sTWbk8bIZAPTtR0Zqxx48wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwNzNhY2UtYTY5MS00ODYzLTljMWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5 QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5QUIxQzc4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTJDMTJBQjlCMTM1OUI5M0M2Qzg2NDAzRDNCNTFEMTlBQjFD NzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUx RDE5QUIxQzc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX4vnK2CrFwjv2oooNWE7Y9JJj6DAY4vJM5 QPaIgeJD+pJuGSnDGJxdiLtcA2gfWwgpnnT8Zqvg59sVMzSV4ny9usuWXbBAd4/+ VFYmxK8jqr/NTIO0UUTp0uemGNlT8fe0sB8yUvD2GqG+O6sqoJU79mprcIsF6oXV SPUjTQG0pOWErRd8Q/joyK6rAxY2Uyskv6EDNSf3sjVmxdrW7eLIQgPL/F/zm4EB YmNS/LmLLKZBmSPC8YWAkOEd+8xqM0N/9fGr2NYUTDnZcmpTEKgTiUmUfxDDTuPk hItjyu+7GV0pKR2bQzDul2o87PtMT3Ijc2fXvtMvM2OiAdGMqPc= -----END CERTIFICATE-----Generated at Thu Sep 3 07:59:40 2026 by rpki-client