
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
File: 252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft (raw, json)
Hash identifier: 2xcqxAQQK/VI3dVYEykj62X1l6/Nacz9kQS2ag/mbAQ=
Subject key identifier: 9A:8D:38:87:8D:5E:8D:A3:6E:43:B5:DF:E4:02:D2:FA:C5:AE:C7:30
Authority key identifier: 25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
Certificate issuer: /CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Certificate serial: 492D5662C5A1031A227ABC9B182C8B77C5A025B8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
Manifest number: 9D
Signing time: Wed 26 Aug 2026 12:36:50 +0000
Manifest this update: Wed 26 Aug 2026 12:31:50 +0000
Manifest next update: Thu 27 Aug 2026 14:34:50 +0000
Files and hashes: 1: 3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (hash: DCPg6Ceyq9c+k2hdqM6DEY3nNAcqnqv/oWZOgjUDo90=)
2: 3230322e39332e3133372e302f32342d3234203d3e2034333832.roa (hash: yX0AHZ6vh/yAq73HA0k0VP+xBtvvK38tr+ZxhA31lsU=)
3: 3230322e39332e3133342e302f32342d3234203d3e2034333832.roa (hash: T4u7/Nxiv77dyzQ5TjQIDrnfM70wI1Uq+rGxmxLYoAE=)
4: 3230322e39332e3133302e302f32342d3234203d3e2034333832.roa (hash: MQr9cSgps4LHbGDJz9c4lbY3OsWW8+f0/YtOH610fL8=)
5: 3130332e3234362e3131372e302f32342d3234203d3e203536323433.roa (hash: +gv7mshFwG91guPNffeDqFP8VhtlPTdkF38Mrqjvafw=)
6: 3230322e39332e3134332e302f32342d3234203d3e2034333832.roa (hash: bSG6QHsujRPX+Uc294mdpRp76mW3JciOY0a15lJ+VVw=)
7: 3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (hash: mha8gB43Q52dsFp/n7sRBfxP/9miPkjrCifPwwjXt6U=)
8: 3230322e39332e3134302e302f32342d3234203d3e2034333832.roa (hash: +ksoHoQYPmnvJLnhpxWFWjlrA5368fIleRTPmBuQhGA=)
9: 3230322e39332e3132392e302f32342d3234203d3e2034333832.roa (hash: DkW9L5+PRdqINtmxFS5yNgiVWSBo+5OuUsw7BGLvYSk=)
10: 3230322e39332e3133332e302f32342d3234203d3e2034333832.roa (hash: oJFtmwsSoFHyiQKa+hhNclMhUfKj2vrKOCFlonKmBY8=)
11: 3230322e39332e3134312e302f32342d3234203d3e2034333832.roa (hash: WBBveR8OOQyEDRNcy74ITNE5Qj9H1E1tJp48zRmuwlY=)
12: 252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl (hash: HHHIrVaYbBQDA++hn/bO/bsa0mISz686gQhrFUGq33Q=)
13: 323430333a623930303a3a2f33322d3332203d3e2034333832.roa (hash: Y7pYu6uoU6Wtor/glKejJAeG037qTauUcrlHaByRYu8=)
14: 3230322e39332e3132382e302f32342d3234203d3e2034333832.roa (hash: JR5H0hn3DWJHrXV20lfY1slEZAl4SEHjqDKtqBHNcqI=)
15: 323430333a623930303a323032303a3a2f34382d3438203d3e2034333832.roa (hash: xHTM4Dl9Q5HuRM0LLQTU8e9mpsnqdL1Szb5p9XaOS1U=)
16: 3230322e39332e3133322e302f32342d3234203d3e2034333832.roa (hash: yogqlIBUcGwqvPyK5arWetAJIbHveLQtDXqk1GIkHHk=)
17: 3230322e39332e3134322e302f32342d3234203d3e2034333832.roa (hash: 1GOi0KPMqFlJFa1xPEu/J6WGo/8YFfXReaWdo3rhMrk=)
18: 3230322e39332e3133382e302f32342d3234203d3e2034333832.roa (hash: bDJ0M8WfLVWpZjcMwek+H+ZptXQ/czkZxGTFLt1V65s=)
19: 323430333a623930303a313531663a3a2f34382d3438203d3e2034333832.roa (hash: gAp0kb05Si/jPjD4eeDDJSuwWKLzwojxc9RQ2S/bgmM=)
20: 3130332e3234362e3131392e302f32342d3234203d3e203536323433.roa (hash: qX0vHaktqrz7m71UxdI7W17RvwKo2V0MxJaJkQs2PQQ=)
21: 3230322e39332e3133312e302f32342d3234203d3e2034333832.roa (hash: TMqEA7J0ys9Jdhs2856BZEmIfYAozAOdr0iBxVxAx0g=)
22: 3130332e3234362e3131362e302f32342d3234203d3e203536323433.roa (hash: bBy/kH9ORj5HD9m2tQaWWAzIRLY2ViIAnPDxIlu81f0=)
23: 3230322e39332e3133362e302f32342d3234203d3e2034333832.roa (hash: YPUqXiKd2hAz2pX0+rgtSnv5w4BDn1Ero1nRv8u6wqI=)
24: 3230322e39332e3133392e302f32342d3234203d3e2034333832.roa (hash: rmV7MY4FaBL6o6ZE4wLzlBfjsWL4ecrBXmGTlIU19+k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2d:56:62:c5:a1:03:1a:22:7a:bc:9b:18:2c:8b:77:c5:a0:25:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252837CA144B3EE7DB243EBCB0C10F818A4EE404
Validity
Not Before: Aug 26 12:31:50 2026 GMT
Not After : Aug 27 14:34:50 2026 GMT
Subject: CN=9A8D38878D5E8DA36E43B5DFE402D2FAC5AEC730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:da:0d:b3:51:59:e5:f8:2c:d0:bb:54:c7:
ee:78:13:8e:61:ca:cb:f2:d7:c7:97:ee:23:21:f9:
68:12:73:af:7a:b3:72:c5:20:68:42:cf:08:af:96:
34:d1:d8:1b:31:1f:ee:e7:b9:04:39:45:e1:b4:3d:
37:82:a1:fc:66:63:f3:37:21:c8:58:c3:82:af:65:
72:38:70:4b:da:52:2a:d0:af:d2:99:be:b4:4e:db:
2d:34:25:0b:83:b7:6b:68:01:d5:34:24:00:a1:fe:
24:23:93:20:44:5c:0c:48:24:2d:3e:f1:67:c9:96:
ea:9a:7c:a5:12:bf:51:66:e2:4c:ab:81:ba:d9:90:
1f:e6:94:92:8c:16:5b:7a:e6:04:b4:6e:37:46:0b:
cf:3f:f5:69:9d:df:29:db:22:86:4c:28:da:2f:9a:
6c:0d:f9:df:67:6f:0c:34:ed:f7:e6:08:26:e3:b2:
ac:90:4b:00:11:03:0c:ed:d3:2f:43:8b:c7:c7:79:
1b:66:24:7c:7a:17:fd:5a:62:6b:77:f7:75:bd:47:
71:5e:ab:39:2c:47:21:23:c6:79:d2:14:19:fe:84:
9d:8f:0d:d5:07:8b:9b:6d:17:6e:4c:e5:73:62:35:
9a:3c:44:0f:a2:f4:49:d0:4e:59:53:c9:ed:26:84:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8D:38:87:8D:5E:8D:A3:6E:43:B5:DF:E4:02:D2:FA:C5:AE:C7:30
X509v3 Authority Key Identifier:
keyid:25:28:37:CA:14:4B:3E:E7:DB:24:3E:BC:B0:C1:0F:81:8A:4E:E4:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/252837CA144B3EE7DB243EBCB0C10F818A4EE404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/252837CA144B3EE7DB243EBCB0C10F818A4EE404.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3b:b8:c0:8a:a0:7f:e0:7b:5a:0b:81:f4:52:7b:e1:e7:b7:
bb:ae:1b:d7:4d:4b:6e:56:12:6f:03:f8:05:15:ea:ee:40:2b:
b8:4c:6b:a2:87:21:75:46:31:4f:61:4b:c3:51:c7:65:ca:68:
7a:e8:50:d4:43:e6:2d:cd:c4:e8:0c:91:8a:f8:88:f9:54:1e:
b9:f3:1b:3f:5d:ae:e7:e6:c8:13:2a:37:a5:23:fd:b2:5f:6f:
a1:81:cd:44:da:9d:52:cb:7f:5f:ce:8d:50:2d:83:ae:fb:3a:
11:fa:7a:7b:84:c7:9a:22:bd:0f:6e:f3:15:18:b2:f7:7b:bd:
9d:5c:dd:17:75:0a:4c:2e:b1:99:99:82:15:2b:5a:1e:92:46:
65:34:3a:bb:00:90:14:79:aa:28:1d:1f:a2:bf:86:be:10:b7:
f4:cf:89:0d:40:33:25:1c:c7:90:c2:86:52:05:ec:22:32:5c:
d8:87:e4:48:39:63:54:ce:f7:c4:d0:33:9d:87:b5:2c:03:43:
ce:c6:3e:18:80:2e:f9:e4:bf:81:1f:4e:c2:eb:fa:3f:1c:5a:
39:90:68:82:f2:1a:db:6a:f2:90:a1:2e:57:bc:40:a9:2c:00:
f3:ea:db:de:87:74:43:06:b9:05:0c:12:ba:29:8a:03:55:b7:
04:fb:7c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:05 2026 by rpki-client