$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft File: 9252F14B5E62941E764268BF539EE9FAD5793555.mft (raw, json) Hash identifier: t7yuRXEvcOnr8UOkvw1jXCx4CzirV2kkAKQPrRfF+Oc= Subject key identifier: B3:11:56:A2:DA:94:07:0C:E2:B7:F6:21:30:DE:9B:53:BE:DB:54:64 Authority key identifier: 92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 Certificate issuer: /CN=9252F14B5E62941E764268BF539EE9FAD5793555 Certificate serial: 2030EB3CF36C744114D1429295B5A6BB6E4E547A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft Manifest number: EC Signing time: Sun 25 Oct 2026 01:36:07 +0000 Manifest this update: Sun 25 Oct 2026 01:31:07 +0000 Manifest next update: Mon 26 Oct 2026 03:03:07 +0000 Files and hashes: 1: 9252F14B5E62941E764268BF539EE9FAD5793555.crl (hash: Haill1d/cR91hDFdPjwZbV8zaFy9axITakeQo/aje3k=) 2: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: R1vSVJ/Nz5OcbojEfZoeEbcVestRrx2t/NOOXCARjrw=) 3: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: 3WGbhArGVCFic0aSX1S3lij1MSx+kgEOwyaBXRAdn6M=) 4: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: CB5Hkvl40RneZnJWQYmd3LsRBOc9YvGv7ZABsi2oGuk=) 5: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: 0HIhYv7U8gSbWNjqp3fbuBBjmpsISLCZzYGihcy9xas=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 03:03:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:30:eb:3c:f3:6c:74:41:14:d1:42:92:95:b5:a6:bb:6e:4e:54:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9252F14B5E62941E764268BF539EE9FAD5793555 Validity Not Before: Oct 25 01:31:07 2026 GMT Not After : Oct 26 03:03:07 2026 GMT Subject: CN=B31156A2DA94070CE2B7F62130DE9B53BEDB5464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a3:e4:6e:ef:1d:51:cf:43:d7:db:23:38:4b: 83:59:e5:ba:81:b4:10:95:bd:a0:02:58:94:67:42: a2:03:d5:33:04:7a:4f:64:88:7a:bf:03:b3:e5:40: 61:f7:35:e3:f5:bf:28:3d:33:97:96:36:b5:7e:b9: 21:66:30:9c:8b:75:6d:da:b5:c5:2b:52:7a:ab:f7: 4f:f2:17:55:32:c5:02:41:39:8f:ba:83:6b:e9:78: 5c:72:57:e3:32:46:a2:83:ed:1d:42:4b:ac:dd:c7: 52:9e:b5:24:e8:a9:53:f4:ad:63:78:f7:74:80:51: 95:83:d6:16:fe:07:b9:64:86:30:11:2d:c1:16:13: 36:68:1d:a2:85:03:da:e8:4d:99:a7:c1:a9:b7:eb: 8d:37:e7:ad:67:77:94:18:ae:49:ec:e9:06:19:b4: ef:1e:43:db:91:65:89:73:f8:14:7c:07:e2:62:6d: 37:05:a9:b9:76:01:7e:2c:ee:99:57:af:61:99:4d: 3c:f1:f4:b0:a7:77:98:69:0c:bb:67:0a:da:fb:9a: 77:25:e7:05:af:89:3b:ee:20:96:fd:14:ea:aa:8c: 88:e8:92:72:83:38:fb:a2:9b:47:87:58:10:e0:89: f6:86:5a:4f:42:cc:ad:f8:79:cf:b0:6d:6a:f2:aa: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:11:56:A2:DA:94:07:0C:E2:B7:F6:21:30:DE:9B:53:BE:DB:54:64 X509v3 Authority Key Identifier: keyid:92:52:F1:4B:5E:62:94:1E:76:42:68:BF:53:9E:E9:FA:D5:79:35:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9252F14B5E62941E764268BF539EE9FAD5793555.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/9252F14B5E62941E764268BF539EE9FAD5793555.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:74:2a:05:fd:89:cd:b3:b9:e8:88:06:b6:08:29:97:93:06: ba:4f:83:aa:01:0f:50:dc:0a:1c:e3:46:ff:9e:05:5a:1a:b9: 39:2d:3b:60:e5:df:d9:36:08:79:39:64:80:bc:d5:6e:69:45: 62:12:0d:c5:a6:de:78:7f:29:86:89:15:0a:28:ad:80:37:15: da:82:7f:9c:43:32:e1:7c:76:78:13:12:76:1f:b0:b2:c9:34: ec:96:e3:c7:7e:97:47:fb:b4:cc:56:c8:db:34:10:92:3a:84: 82:f5:05:1d:e6:2c:bd:72:16:56:fe:bd:e8:7c:9b:f6:ed:e6: 44:56:92:23:95:84:9b:9c:e6:9c:ca:64:16:e0:11:84:6a:6f: bc:e2:55:fe:34:cc:86:7d:3d:79:a9:78:1d:75:94:db:13:18: f5:9f:32:b2:48:2b:ca:d8:5c:8e:1b:4a:86:ab:e1:9c:b1:78: 7b:c4:4b:da:c8:bd:1a:aa:6b:74:4c:3b:95:8e:b7:bd:7e:b6: 15:a9:a4:7d:a4:1c:d1:91:e3:2b:68:ea:33:9d:fe:aa:bf:f1: df:02:18:64:f0:28:a3:35:a2:53:73:b0:65:0e:25:ed:6d:63: b0:8d:84:53:0d:a3:00:4a:52:ba:1b:e9:f6:ec:82:14:b6:41: 7e:b8:3b:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDDrPPNsdEEU0UKSlbWmu25OVHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFE NTc5MzU1NTAeFw0yNjEwMjUwMTMxMDdaFw0yNjEwMjYwMzAzMDdaMDMxMTAvBgNV BAMTKEIzMTE1NkEyREE5NDA3MENFMkI3RjYyMTMwREU5QjUzQkVEQjU0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQo+Ru7x1Rz0PX2yM4S4NZ5bqB tBCVvaACWJRnQqID1TMEek9kiHq/A7PlQGH3NeP1vyg9M5eWNrV+uSFmMJyLdW3a tcUrUnqr90/yF1UyxQJBOY+6g2vpeFxyV+MyRqKD7R1CS6zdx1KetSToqVP0rWN4 93SAUZWD1hb+B7lkhjARLcEWEzZoHaKFA9roTZmnwam36403561nd5QYrkns6QYZ tO8eQ9uRZYlz+BR8B+JibTcFqbl2AX4s7plXr2GZTTzx9LCnd5hpDLtnCtr7mncl 5wWviTvuIJb9FOqqjIjoknKDOPuim0eHWBDgifaGWk9CzK34ec+wbWryqlmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsxFWotqUBwzit/YhMN6bU77bVGQwHwYDVR0j BBgwFoAUklLxS15ilB52Qmi/U57p+tV5NVUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWVkNDZmODItY2YxMS00ZTMyLWIwNTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1 RTYyOTQxRTc2NDI2OEJGNTM5RUU5RkFENTc5MzU1NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MjUyRjE0QjVFNjI5NDFFNzY0MjY4QkY1MzlFRTlGQUQ1Nzkz NTU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvOTI1MkYxNEI1RTYyOTQxRTc2NDI2OEJGNTM5RUU5 RkFENTc5MzU1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF0KgX9ic2zueiIBrYIKZeTBrpPg6oBD1Dc ChzjRv+eBVoauTktO2Dl39k2CHk5ZIC81W5pRWISDcWm3nh/KYaJFQoorYA3FdqC f5xDMuF8dngTEnYfsLLJNOyW48d+l0f7tMxWyNs0EJI6hIL1BR3mLL1yFlb+veh8 m/bt5kRWkiOVhJuc5pzKZBbgEYRqb7ziVf40zIZ9PXmpeB11lNsTGPWfMrJIK8rY XI4bSoar4ZyxeHvES9rIvRqqa3RMO5WOt71+thWppH2kHNGR4yto6jOd/qq/8d8C GGTwKKM1olNzsGUOJe1tY7CNhFMNowBKUrob6fbsghS2QX64O5I= -----END CERTIFICATE-----Generated at Sun Oct 25 20:04:57 2026 by rpki-client