$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: 2BjzmDp+INCwYqtCw1IRje7uCKL0mGlleHay8qw7qek= Subject key identifier: BE:E4:B3:BB:C0:2D:E7:65:17:45:5F:38:86:DA:E2:29:9C:B3:E7:41 Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 61AF144FC4CB26C9B800445613966AD38EB2B602 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: 011C Signing time: Tue 24 Mar 2026 21:12:26 +0000 Manifest this update: Tue 24 Mar 2026 21:07:26 +0000 Manifest next update: Fri 27 Mar 2026 22:51:26 +0000 Files and hashes: 1: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: bcgcx+uFZayZyFriZ8C5FhgQCxm4WmGY7+QtUfxv4mM=) 2: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:af:14:4f:c4:cb:26:c9:b8:00:44:56:13:96:6a:d3:8e:b2:b6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Mar 24 21:07:26 2026 GMT Not After : Mar 27 22:51:26 2026 GMT Subject: CN=BEE4B3BBC02DE76517455F3886DAE2299CB3E741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:38:4f:65:77:37:23:25:11:f6:84:71:8c:91: c3:85:1c:cd:bc:b9:a6:d7:71:75:4c:12:e9:51:8e: a1:6d:a9:d4:e4:00:10:62:4b:81:b3:13:6d:d9:2b: 19:58:e4:37:b5:c2:76:0f:09:66:d4:9f:bd:c9:d0: 39:1f:cf:34:49:41:b3:e8:78:a0:ee:07:40:72:41: bd:2d:86:a7:66:cd:4b:ab:6e:76:37:35:12:a0:0d: fb:3c:89:2a:74:1e:dc:0a:1d:8d:91:13:c2:f4:f4: a6:e1:f6:8b:f2:37:4c:d5:f1:a2:e6:88:c3:77:b9: f3:02:8e:2d:d2:47:34:49:14:7e:1e:cb:db:bc:d6: 26:6a:61:0c:42:b6:0d:1c:fe:aa:11:94:e6:23:9f: 68:75:e6:8b:2c:17:ea:bb:fa:97:9d:2f:9d:12:54: 98:77:c0:2f:4c:98:25:b9:de:22:dc:33:98:42:97: e3:60:11:58:1c:32:3c:db:95:b2:9e:8a:3d:a9:c5: fe:a9:6f:19:96:0b:e4:ff:8a:ca:db:85:21:ef:cf: 41:69:9f:77:2e:5a:76:3e:b7:b0:ca:f0:81:3e:6d: 0b:a0:a2:f2:9d:5c:f1:34:aa:58:26:6b:41:87:08: a6:e3:93:5c:35:4e:65:dc:85:51:4c:2f:23:a4:33: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E4:B3:BB:C0:2D:E7:65:17:45:5F:38:86:DA:E2:29:9C:B3:E7:41 X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:24:1b:52:a0:19:0f:ca:f7:0b:eb:cf:ef:15:ae:03:df:d9: 5a:9b:17:0b:65:ca:07:05:c4:cd:15:99:ff:7a:f7:3a:7b:9e: 61:0a:bd:48:a1:5b:39:a7:59:04:db:4a:96:bf:9e:d2:c6:09: 0c:1f:22:08:ec:9c:b1:cc:39:2a:d5:00:06:bc:56:10:79:e4: 99:57:68:19:12:2c:54:fb:c7:21:25:aa:ac:f1:b0:ae:50:cb: 58:23:b9:1f:2e:84:6f:4a:b3:77:91:95:51:14:38:9b:96:b9: 1b:0f:58:31:22:81:e5:ea:17:66:a2:b8:0e:05:b1:1c:5f:60: f5:e5:45:e9:7a:01:e0:ea:10:60:cc:db:80:05:40:62:fe:26: 08:3f:e9:bb:19:b8:fb:79:59:61:08:48:97:b0:ec:66:e4:76: b9:17:81:5e:76:c5:d1:bf:8d:d6:e8:22:95:9d:5d:d8:d1:be: 73:6a:4d:56:91:c9:39:04:c5:73:ae:2a:ac:f6:e9:4f:d8:67: 27:c6:7a:03:8c:a6:72:00:77:89:31:75:2d:92:b1:27:c3:60: a8:01:54:c8:86:65:35:83:4b:ee:48:43:1e:e5:a9:c5:ab:61: 5d:a4:e5:9b:42:3c:0f:87:5f:63:99:34:f8:e2:a3:c6:99:8a: 26:33:c9:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYa8UT8TLJsm4AERWE5Zq046ytgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNjAzMjQyMTA3MjZaFw0yNjAzMjcyMjUxMjZaMDMxMTAvBgNV BAMTKEJFRTRCM0JCQzAyREU3NjUxNzQ1NUYzODg2REFFMjI5OUNCM0U3NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhOE9ldzcjJRH2hHGMkcOFHM28 uabXcXVMEulRjqFtqdTkABBiS4GzE23ZKxlY5De1wnYPCWbUn73J0DkfzzRJQbPo eKDuB0ByQb0thqdmzUurbnY3NRKgDfs8iSp0HtwKHY2RE8L09Kbh9ovyN0zV8aLm iMN3ufMCji3SRzRJFH4ey9u81iZqYQxCtg0c/qoRlOYjn2h15ossF+q7+pedL50S VJh3wC9MmCW53iLcM5hCl+NgEVgcMjzblbKeij2pxf6pbxmWC+T/isrbhSHvz0Fp n3cuWnY+t7DK8IE+bQugovKdXPE0qlgma0GHCKbjk1w1TmXchVFMLyOkM59LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvuSzu8At52UXRV84htriKZyz50EwHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAskG1KgGQ/K9wvrz+8VrgPf2VqbFwtlygcF xM0Vmf969zp7nmEKvUihWzmnWQTbSpa/ntLGCQwfIgjsnLHMOSrVAAa8VhB55JlX aBkSLFT7xyElqqzxsK5Qy1gjuR8uhG9Ks3eRlVEUOJuWuRsPWDEigeXqF2aiuA4F sRxfYPXlRel6AeDqEGDM24AFQGL+Jgg/6bsZuPt5WWEISJew7GbkdrkXgV52xdG/ jdboIpWdXdjRvnNqTVaRyTkExXOuKqz26U/YZyfGegOMpnIAd4kxdS2SsSfDYKgB VMiGZTWDS+5IQx7lqcWrYV2k5ZtCPA+HX2OZNPjio8aZiiYzyVI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:54:50 2026 by rpki-client