$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft File: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft (raw, json) Hash identifier: IrldQp43BWiC0Kb+NJYrkCC3i/4+8i3dY/VLCtaDg74= Subject key identifier: E9:34:54:02:B7:2B:5F:86:58:F2:D4:DE:ED:B3:C0:C3:8D:06:AC:AA Authority key identifier: 01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 Certificate issuer: /CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Certificate serial: 7A67CB9291D4D5930E5FC737377F772FD1D6860B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:29:08 +0000 Manifest this update: Thu 17 Sep 2026 00:24:08 +0000 Manifest next update: Fri 18 Sep 2026 04:26:08 +0000 Files and hashes: 1: 0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl (hash: vTL04+A0AL+H2O0YDOS7OQa6Kj5+F1g5XeXPw11Ao7A=) 2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: OvoWtyj+yRizvm8CdcOpOPom/9HPHlWTkmE0eRJkAww=) 3: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: mPVDpClyc+EXYxrQu2c3VY1E3eKpZXve7tc3ve723GM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:26:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:67:cb:92:91:d4:d5:93:0e:5f:c7:37:37:7f:77:2f:d1:d6:86:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0152D8E77FF4F913313ABBED8BB2EAF3F539A912 Validity Not Before: Sep 17 00:24:08 2026 GMT Not After : Sep 18 04:26:08 2026 GMT Subject: CN=E9345402B72B5F8658F2D4DEEDB3C0C38D06ACAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dd:14:63:06:53:66:17:63:10:ce:d6:5c:93: 6c:74:66:8a:f9:d8:57:6a:1c:55:62:b6:ad:47:9a: 45:c4:4c:db:e3:26:90:92:3d:90:1d:bd:52:93:e0: 9a:7d:69:b4:0c:5b:53:64:f9:58:3c:4e:77:3f:d4: 4e:ba:a5:99:08:26:43:66:9d:12:d3:c2:f6:df:d2: 66:4d:1c:d3:5c:01:78:67:99:bd:6c:61:d5:d0:f2: a4:1c:ea:c8:0e:52:61:b4:f3:2e:8d:e2:53:ac:df: ff:40:84:ea:76:1f:cb:17:8b:9c:d1:75:6f:9b:c4: 90:fd:98:d7:3d:fc:24:6d:58:0e:10:50:a5:6d:c3: 65:b4:47:6a:a2:b9:68:3f:51:f7:af:99:7f:71:09: 8d:86:75:ac:82:84:33:b7:d8:24:0b:70:50:50:c8: 14:16:d5:43:6c:a3:05:c2:60:8a:39:3a:27:12:35: 4a:5b:db:41:80:b2:bd:12:08:9f:fb:bd:2c:9d:7d: 77:9f:f6:de:e2:11:25:cf:81:c2:69:d2:12:f6:cf: 0a:c8:19:c1:66:79:5d:9b:75:87:13:90:63:59:4e: 17:06:74:0c:af:8f:03:65:49:18:78:5a:4a:a0:81: 9e:2d:89:44:09:8a:fb:7d:16:68:40:2c:4f:d4:eb: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:34:54:02:B7:2B:5F:86:58:F2:D4:DE:ED:B3:C0:C3:8D:06:AC:AA X509v3 Authority Key Identifier: keyid:01:52:D8:E7:7F:F4:F9:13:31:3A:BB:ED:8B:B2:EA:F3:F5:39:A9:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/0152D8E77FF4F913313ABBED8BB2EAF3F539A912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:c1:fa:f9:cf:3d:ef:22:ec:76:49:f8:ed:7c:ca:42:a2:b5: 38:1a:60:fe:d8:98:f0:2d:50:ff:92:18:22:5b:b5:64:96:e8: 35:a1:5b:6c:77:cf:6a:cc:46:00:93:af:05:46:f3:ea:7a:19: b8:d9:81:1f:cb:62:e4:ce:1d:b9:f5:c6:55:1c:27:dc:e0:8b: 58:8b:5f:88:19:93:f0:18:ca:cb:bc:28:cc:a4:95:2c:38:36: 9a:44:aa:9e:a3:66:f6:ac:88:bb:e3:be:bf:4c:92:52:ed:6e: 7e:d9:9a:9e:bd:c0:7b:2f:e6:bf:7d:0d:c1:b5:7d:7d:93:d8: 41:47:a1:b5:d2:cd:1c:ab:55:91:05:a0:65:33:d9:49:ae:75: c2:eb:3a:39:e5:fe:e6:f9:ef:dc:ee:9d:0a:62:44:f1:33:b4: 7a:93:dc:53:55:3b:a4:07:00:86:e7:18:a8:7e:6e:95:16:55: 7b:72:63:3f:4d:b0:ff:d3:1d:42:44:e1:00:eb:f7:8a:11:8c: d1:ad:c0:bc:4f:a4:c8:a8:49:b0:cd:8f:5c:73:cc:4f:cc:1e: 42:40:ad:19:b7:49:25:26:db:8d:eb:bd:a1:ab:52:5e:c4:0f: e4:21:c5:8d:bf:78:6b:fe:86:b8:49:d7:c9:d3:b4:48:22:e1: b0:b6:1f:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemfLkpHU1ZMOX8c3N393L9HWhgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNG NTM5QTkxMjAeFw0yNjA5MTcwMDI0MDhaFw0yNjA5MTgwNDI2MDhaMDMxMTAvBgNV BAMTKEU5MzQ1NDAyQjcyQjVGODY1OEYyRDRERUVEQjNDMEMzOEQwNkFDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3RRjBlNmF2MQztZck2x0Zor5 2FdqHFVitq1HmkXETNvjJpCSPZAdvVKT4Jp9abQMW1Nk+Vg8Tnc/1E66pZkIJkNm nRLTwvbf0mZNHNNcAXhnmb1sYdXQ8qQc6sgOUmG08y6N4lOs3/9AhOp2H8sXi5zR dW+bxJD9mNc9/CRtWA4QUKVtw2W0R2qiuWg/UfevmX9xCY2GdayChDO32CQLcFBQ yBQW1UNsowXCYIo5OicSNUpb20GAsr0SCJ/7vSydfXef9t7iESXPgcJp0hL2zwrI GcFmeV2bdYcTkGNZThcGdAyvjwNlSRh4WkqggZ4tiUQJivt9FmhALE/U6/THAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6TRUArcrX4ZY8tTe7bPAw40GrKowHwYDVR0j BBgwFoAUAVLY53/0+RMxOrvti7Lq8/U5qRIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzMwYzhmODYtYmNkNS00YjdhLWE5YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3 RkY0RjkxMzMxM0FCQkVEOEJCMkVBRjNGNTM5QTkxMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wMTUyRDhFNzdGRjRGOTEzMzEzQUJCRUQ4QkIyRUFGM0Y1MzlB OTEyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMDE1MkQ4RTc3RkY0RjkxMzMxM0FCQkVEOEJCMkVB RjNGNTM5QTkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrB+vnPPe8i7HZJ+O18ykKitTgaYP7YmPAt UP+SGCJbtWSW6DWhW2x3z2rMRgCTrwVG8+p6GbjZgR/LYuTOHbn1xlUcJ9zgi1iL X4gZk/AYysu8KMyklSw4NppEqp6jZvasiLvjvr9MklLtbn7Zmp69wHsv5r99DcG1 fX2T2EFHobXSzRyrVZEFoGUz2UmudcLrOjnl/ub579zunQpiRPEztHqT3FNVO6QH AIbnGKh+bpUWVXtyYz9NsP/THUJE4QDr94oRjNGtwLxPpMioSbDNj1xzzE/MHkJA rRm3SSUm243rvaGrUl7ED+QhxY2/eGv+hrhJ18nTtEgi4bC2H7U= -----END CERTIFICATE-----Generated at Thu Sep 17 06:38:33 2026 by rpki-client