$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft File: A952A58DE132E26886D9A077713042EADBA3C178.mft (raw, json) Hash identifier: hU9hsZml1LAJE+R7/2mk4Tt2sYumMSRm+61ZFAWVjPc= Subject key identifier: 02:59:D8:37:35:CF:1B:00:F2:14:53:37:05:1E:0B:FE:0B:57:25:78 Authority key identifier: A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 Certificate issuer: /CN=A952A58DE132E26886D9A077713042EADBA3C178 Certificate serial: 4B1F44C45DD04CC13A7EFA96DD6DD45EEEABE5CA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft Manifest number: BA Signing time: Thu 17 Sep 2026 08:44:19 +0000 Manifest this update: Thu 17 Sep 2026 08:39:19 +0000 Manifest next update: Fri 18 Sep 2026 10:20:19 +0000 Files and hashes: 1: A952A58DE132E26886D9A077713042EADBA3C178.crl (hash: wVoUpK4gFaiRkv7MYP1AOINa8HIPgmOTCiWRaWs0wMw=) 2: 3130332e3137352e3233382e302f32342d3234203d3e20313437313232.roa (hash: I9P+22XUrYqfAeG+s4HEGC5b6efFAbm0WVpCZy5OhYk=) 3: 3130332e3137352e3233392e302f32342d3234203d3e20313437313232.roa (hash: j2rPBHDu8altdMacoto0CdEJNfbZiyRNmXyQ2rZHa2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1f:44:c4:5d:d0:4c:c1:3a:7e:fa:96:dd:6d:d4:5e:ee:ab:e5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A952A58DE132E26886D9A077713042EADBA3C178 Validity Not Before: Sep 17 08:39:19 2026 GMT Not After : Sep 18 10:20:19 2026 GMT Subject: CN=0259D83735CF1B00F2145337051E0BFE0B572578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:fd:8c:cc:cd:be:a6:ad:8a:e2:db:67:8c: e2:9f:06:7a:62:0f:e4:6a:15:8c:4f:14:28:58:a0: 97:82:04:73:d8:ef:f3:f4:32:4f:bb:b3:6e:a6:67: 64:25:56:79:2d:32:19:fb:f1:d0:07:c3:10:71:fe: 38:43:a0:2c:4a:a8:20:43:d3:57:4d:34:b7:66:0a: 96:db:ee:92:b1:14:4f:7a:b4:97:78:54:3c:fc:5a: 43:61:d5:c0:dc:08:64:82:5b:09:5b:87:11:3b:62: fc:27:70:04:3f:33:c5:09:e7:0c:f0:61:ef:f9:65: 85:37:4c:35:f9:f1:1e:a5:c0:f8:b0:7c:89:d1:50: 5a:d0:4f:41:ea:90:4d:3e:a7:12:17:a6:ab:83:f4: b5:d9:58:c8:d6:6c:e0:d2:e5:b8:38:d9:b6:68:aa: 6c:f8:d4:fb:35:fc:0c:13:78:a2:da:c9:69:5d:bd: 0e:f7:0f:9a:70:41:6f:41:07:3c:71:63:75:39:71: f0:10:88:10:40:0c:c5:c7:eb:f1:54:2b:7d:fc:24: 34:f7:8d:92:17:2d:61:20:ba:26:b4:68:ab:ab:89: e0:db:3b:85:8e:4c:94:96:a7:3e:4b:f1:82:1d:b7: 4a:1e:ae:f0:09:9b:7f:87:c2:ea:e3:23:a0:08:64: 36:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:59:D8:37:35:CF:1B:00:F2:14:53:37:05:1E:0B:FE:0B:57:25:78 X509v3 Authority Key Identifier: keyid:A9:52:A5:8D:E1:32:E2:68:86:D9:A0:77:71:30:42:EA:DB:A3:C1:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A952A58DE132E26886D9A077713042EADBA3C178.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8957a3bf-4823-4609-85cd-77570bf18580/0/A952A58DE132E26886D9A077713042EADBA3C178.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:82:a6:99:fd:4c:50:32:a8:46:39:67:8f:cf:b6:5f:34:35: 01:0e:ee:6a:e8:f4:69:72:fa:85:1b:60:ca:fc:42:2f:19:d9: 02:11:0e:6b:d6:b8:79:0a:b8:e6:84:08:9b:d6:03:3e:4d:51: b1:8c:99:19:e0:21:d2:94:8c:bf:5c:06:9c:c6:a6:bc:f4:3e: 99:9d:1a:ec:7c:3e:b6:fb:21:4d:b9:8e:b5:75:75:5e:51:eb: df:8f:32:f7:6e:2b:8e:7f:7d:00:c6:6b:4b:16:1f:bc:c0:49: 35:17:01:51:5c:a6:fc:5e:6b:77:8d:1e:5a:fe:47:64:88:09: f6:66:d3:39:21:d5:fb:12:c0:19:f2:9b:6e:42:0d:c5:c0:95: 1c:1c:09:54:2a:08:27:00:bb:c1:d3:f0:c9:27:66:fe:5b:2e: 71:b3:89:58:12:5c:07:a0:33:c0:c1:50:01:b6:34:69:67:a3: 18:15:a0:35:dc:b3:09:9d:8f:e5:8f:5c:61:d6:ea:b5:af:f5: f8:37:c6:48:44:dd:a6:57:0f:ee:8f:2e:3b:d1:1a:d4:fd:98: 7d:ba:05:0c:fc:79:a5:8d:b0:33:35:74:d8:1b:3b:44:de:6e: d0:97:e0:61:69:e0:bc:ab:45:12:8d:c5:25:bb:a0:c0:ab:b1: 41:8a:71:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSx9ExF3QTME6fvqW3W3UXu6r5cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFE QkEzQzE3ODAeFw0yNjA5MTcwODM5MTlaFw0yNjA5MTgxMDIwMTlaMDMxMTAvBgNV BAMTKDAyNTlEODM3MzVDRjFCMDBGMjE0NTMzNzA1MUUwQkZFMEI1NzI1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCye/2MzM2+pq2K4ttnjOKfBnpi D+RqFYxPFChYoJeCBHPY7/P0Mk+7s26mZ2QlVnktMhn78dAHwxBx/jhDoCxKqCBD 01dNNLdmCpbb7pKxFE96tJd4VDz8WkNh1cDcCGSCWwlbhxE7YvwncAQ/M8UJ5wzw Ye/5ZYU3TDX58R6lwPiwfInRUFrQT0HqkE0+pxIXpquD9LXZWMjWbODS5bg42bZo qmz41Ps1/AwTeKLayWldvQ73D5pwQW9BBzxxY3U5cfAQiBBADMXH6/FUK338JDT3 jZIXLWEguia0aKurieDbO4WOTJSWpz5L8YIdt0oervAJm3+HwurjI6AIZDZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAlnYNzXPGwDyFFM3BR4L/gtXJXgwHwYDVR0j BBgwFoAUqVKljeEy4miG2aB3cTBC6tujwXgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODk1N2EzYmYtNDgyMy00NjA5LTg1Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERF MTMyRTI2ODg2RDlBMDc3NzEzMDQyRUFEQkEzQzE3OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BOTUyQTU4REUxMzJFMjY4ODZEOUEwNzc3MTMwNDJFQURCQTND MTc4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODk1N2EzYmYtNDgyMy00NjA5LTg1 Y2QtNzc1NzBiZjE4NTgwLzAvQTk1MkE1OERFMTMyRTI2ODg2RDlBMDc3NzEzMDQy RUFEQkEzQzE3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeCppn9TFAyqEY5Z4/Ptl80NQEO7mro9Gly +oUbYMr8Qi8Z2QIRDmvWuHkKuOaECJvWAz5NUbGMmRngIdKUjL9cBpzGprz0Ppmd Gux8Prb7IU25jrV1dV5R69+PMvduK45/fQDGa0sWH7zASTUXAVFcpvxea3eNHlr+ R2SICfZm0zkh1fsSwBnym25CDcXAlRwcCVQqCCcAu8HT8MknZv5bLnGziVgSXAeg M8DBUAG2NGlnoxgVoDXcswmdj+WPXGHW6rWv9fg3xkhE3aZXD+6PLjvRGtT9mH26 BQz8eaWNsDM1dNgbO0TebtCX4GFp4LyrRRKNxSW7oMCrsUGKcZQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:06:20 2026 by rpki-client