$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: +NdNrtK/a7+UihCPGTJovDUCi2FHyCJW3DwPFNX5O3g= Subject key identifier: 12:75:8B:F2:0B:65:5E:61:B7:DB:D9:EE:00:23:8E:B6:5B:A0:9D:13 Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 378994C7E887586763115630A1D63219380A69F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: EC Signing time: Thu 26 Mar 2026 00:03:15 +0000 Manifest this update: Wed 25 Mar 2026 23:58:15 +0000 Manifest next update: Sun 29 Mar 2026 07:43:15 +0000 Files and hashes: 1: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: CR0MsS5WW9dAea0sFZ7dbhOW3kkOvNEt+JiMr0Hyvyo=) 2: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: pR6eogbZvQzPFnI0kZLcItGmRoYFBBreikW5pxdST7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:89:94:c7:e8:87:58:67:63:11:56:30:a1:d6:32:19:38:0a:69:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Mar 25 23:58:15 2026 GMT Not After : Mar 29 07:43:15 2026 GMT Subject: CN=12758BF20B655E61B7DBD9EE00238EB65BA09D13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:01:c1:b3:80:a6:7b:20:53:0d:6e:0c:0a: 63:73:67:2c:25:eb:d9:71:38:cf:5a:cd:71:8c:3e: fb:b8:86:75:da:a2:2d:12:c4:b7:4d:2e:7c:dc:a0: 48:b5:4a:dc:65:7c:be:d5:ac:df:1f:a7:94:3d:25: 0c:12:8b:f9:29:db:20:ed:2a:cf:01:95:e6:f8:b5: ba:0e:12:b2:5b:94:97:d5:b0:89:5f:d7:dc:8b:51: 20:b3:3c:4a:e0:fa:ab:80:4c:21:fd:fa:4b:46:10: 52:2a:29:61:ca:93:90:bb:ba:c7:ff:00:b9:07:cd: 46:dc:5e:3e:85:d2:59:cc:ca:2a:39:e2:09:14:2c: 15:3c:16:b2:61:8e:ca:3b:1c:3d:b1:7d:57:a6:f0: 38:59:ba:b7:4e:94:de:c9:b3:d5:25:21:e6:6b:00: bb:f2:5b:e7:cd:1a:fe:93:08:01:de:77:76:9e:22: 7a:59:09:f9:35:ab:fb:97:44:72:ea:d6:4c:cf:90: 7f:0b:2e:09:42:cb:6e:47:fe:6e:87:2c:dd:da:11: 9b:09:45:8a:25:e9:ec:20:7c:81:e7:0a:c4:aa:4c: 91:36:76:0e:4c:4a:55:af:af:50:a1:ad:aa:0d:a6: 2d:ca:6f:ae:47:ff:cb:76:eb:2b:74:81:3f:86:39: c7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:75:8B:F2:0B:65:5E:61:B7:DB:D9:EE:00:23:8E:B6:5B:A0:9D:13 X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:20:e5:e9:19:06:81:27:6c:ad:ca:79:86:33:bd:ce:46:bd: 0a:df:19:d4:6d:80:80:71:19:35:c6:2a:20:4c:2e:50:2a:b0: 3e:13:10:fc:fd:3b:68:5f:b5:22:67:cc:35:48:09:20:3c:25: d5:09:14:a6:86:c9:d1:8c:c2:05:65:2b:0e:32:f2:12:fb:eb: 14:12:f7:a2:f2:b5:fe:08:46:36:5e:00:cc:bd:79:1c:15:14: 82:14:df:2a:bb:77:19:89:2e:ba:4f:14:ee:a6:d5:c0:3a:af: 3e:d7:35:f6:bd:f2:1d:a8:11:f2:49:91:e3:7d:94:03:db:41: bf:78:40:37:82:7f:70:35:80:d8:9e:cf:fc:07:b5:f9:1a:1b: 9c:79:e4:6d:76:7c:39:13:f8:0f:97:dc:c4:35:e5:ec:8b:2a: 46:6c:50:d7:22:fa:25:aa:20:fa:81:27:00:65:e1:ed:b4:2f: 67:53:6f:ac:9d:76:42:f3:bb:8e:3b:45:a3:a7:1a:1a:ac:ae: 4a:98:2f:ef:f9:84:e7:85:ef:a5:aa:4a:7e:81:22:4b:74:91: 27:82:26:42:ff:11:93:cd:3e:1f:1c:a9:87:35:f1:73:5f:2f: 06:22:ff:62:eb:da:63:7b:b3:65:bc:15:13:0e:02:65:b9:51: bb:13:69:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4mUx+iHWGdjEVYwodYyGTgKafAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNjAzMjUyMzU4MTVaFw0yNjAzMjkwNzQzMTVaMDMxMTAvBgNV BAMTKDEyNzU4QkYyMEI2NTVFNjFCN0RCRDlFRTAwMjM4RUI2NUJBMDlEMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIAHBs4CmeyBTDW4MCmNzZywl 69lxOM9azXGMPvu4hnXaoi0SxLdNLnzcoEi1StxlfL7VrN8fp5Q9JQwSi/kp2yDt Ks8Bleb4tboOErJblJfVsIlf19yLUSCzPErg+quATCH9+ktGEFIqKWHKk5C7usf/ ALkHzUbcXj6F0lnMyio54gkULBU8FrJhjso7HD2xfVem8DhZurdOlN7Js9UlIeZr ALvyW+fNGv6TCAHed3aeInpZCfk1q/uXRHLq1kzPkH8LLglCy25H/m6HLN3aEZsJ RYol6ewgfIHnCsSqTJE2dg5MSlWvr1ChraoNpi3Kb65H/8t26yt0gT+GOccRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEnWL8gtlXmG329nuACOOtlugnRMwHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMg5ekZBoEnbK3KeYYzvc5GvQrfGdRtgIBx GTXGKiBMLlAqsD4TEPz9O2hftSJnzDVICSA8JdUJFKaGydGMwgVlKw4y8hL76xQS 96Lytf4IRjZeAMy9eRwVFIIU3yq7dxmJLrpPFO6m1cA6rz7XNfa98h2oEfJJkeN9 lAPbQb94QDeCf3A1gNiez/wHtfkaG5x55G12fDkT+A+X3MQ15eyLKkZsUNci+iWq IPqBJwBl4e20L2dTb6yddkLzu447RaOnGhqsrkqYL+/5hOeF76WqSn6BIkt0kSeC JkL/EZPNPh8cqYc18XNfLwYi/2Lr2mN7s2W8FRMOAmW5UbsTadg= -----END CERTIFICATE-----Generated at Thu Mar 26 12:16:57 2026 by rpki-client