$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: /EI928BJL1ExWUwSnd3HsVWYypk9v0IPF66GsFHYaGo= Subject key identifier: 5C:DE:68:E0:4F:C6:FC:16:D3:B3:83:07:3D:0C:D5:28:AE:DA:86:56 Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 7F5293E6246D5BBA72C72FA6E6884B44121CFE44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 043D Signing time: Wed 25 Mar 2026 13:32:01 +0000 Manifest this update: Wed 25 Mar 2026 13:27:01 +0000 Manifest next update: Sat 28 Mar 2026 14:58:01 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: FUKvAzvbfmPcy3gZnM61nhMQtqt/5es1X2yQFgs9lBY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:52:93:e6:24:6d:5b:ba:72:c7:2f:a6:e6:88:4b:44:12:1c:fe:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Mar 25 13:27:01 2026 GMT Not After : Mar 28 14:58:01 2026 GMT Subject: CN=5CDE68E04FC6FC16D3B383073D0CD528AEDA8656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:29:d5:a4:12:8f:bc:d1:88:65:86:c0:20: cc:b1:65:ff:f4:e2:4d:21:9d:a6:7d:9d:d8:b1:c9: 51:56:a4:12:eb:9a:7b:22:f3:b2:87:2f:6c:f3:c4: c4:8d:35:a3:24:a2:84:ba:94:e8:54:74:35:e7:43: 5a:b6:31:0a:fe:e7:17:a7:25:b0:fd:b4:28:50:02: 99:18:b1:8a:90:7d:37:9a:8c:af:f7:e0:a2:cd:8f: 50:4a:c0:dc:77:4d:b3:60:79:c6:a6:0d:58:bf:c9: 91:05:63:cb:7f:ff:f7:ee:9b:cc:05:74:f7:32:99: c3:09:e9:02:68:03:46:62:e7:79:4a:80:49:fe:02: bd:82:ef:6a:3a:c6:d8:e4:84:60:9a:4b:32:7a:c1: 91:92:48:17:2c:09:03:5e:6d:3e:ab:84:e0:3d:6a: 90:63:72:12:fe:60:92:c7:9e:bc:8a:15:80:fb:bd: 9b:9e:c7:06:3d:cc:ad:17:e0:bb:1c:c4:44:83:3f: b9:ac:b2:11:4b:29:0a:7a:44:80:ae:52:4f:ff:09: c3:e1:9b:f8:82:43:b0:a7:c6:32:82:61:e6:40:a1: c2:0e:6e:77:a5:0b:69:88:a7:fa:a2:bb:7a:8f:58: 34:27:7e:6f:bf:b4:e1:2c:6a:df:60:bb:66:e4:49: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DE:68:E0:4F:C6:FC:16:D3:B3:83:07:3D:0C:D5:28:AE:DA:86:56 X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ff:fb:48:4d:2a:a1:e5:18:26:95:be:b5:65:75:51:9c:40: fe:b5:5c:bb:d3:af:e9:04:8b:7e:65:8e:39:70:f9:e0:f1:e9: c2:67:0f:c1:85:59:89:6a:f8:bd:01:8b:53:8e:ba:b9:12:94: d7:aa:74:c1:8b:a9:ab:42:e2:ee:aa:67:8c:cc:09:78:6f:f6: e0:02:da:7e:22:13:68:5b:82:af:f8:d6:6e:d3:bb:ee:99:ea: e4:74:82:ee:55:66:58:5f:9f:1e:b4:aa:6c:f8:9c:ab:ef:e1: f8:08:9a:63:b8:8d:7e:29:76:1e:92:cc:3d:2d:6c:2c:85:58: 58:c3:ba:fe:d3:b4:0f:41:77:e5:23:b5:d5:e0:96:f2:f6:42: 43:e8:53:2c:ca:8a:91:0a:1f:92:3d:ad:0c:38:a9:4c:49:fb: 2a:44:46:74:d6:c8:ea:67:f7:62:9f:b7:3c:0d:f6:e5:5e:2f: da:59:f1:23:08:5e:4c:a1:63:56:96:c1:d5:ad:af:e9:d9:28: bf:13:9d:9d:1c:4b:e5:0a:5b:a5:f2:70:59:b7:85:aa:90:d3: 5f:b2:fe:a1:f7:1a:67:03:da:89:31:fd:e3:94:90:7d:d1:13: da:c4:24:73:46:f5:64:da:60:fb:d6:44:c8:0f:b9:d9:4f:31: b5:14:4a:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf1KT5iRtW7pyxy+m5ohLRBIc/kQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNjAzMjUxMzI3MDFaFw0yNjAzMjgxNDU4MDFaMDMxMTAvBgNV BAMTKDVDREU2OEUwNEZDNkZDMTZEM0IzODMwNzNEMENENTI4QUVEQTg2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTynVpBKPvNGIZYbAIMyxZf/0 4k0hnaZ9ndixyVFWpBLrmnsi87KHL2zzxMSNNaMkooS6lOhUdDXnQ1q2MQr+5xen JbD9tChQApkYsYqQfTeajK/34KLNj1BKwNx3TbNgecamDVi/yZEFY8t///fum8wF dPcymcMJ6QJoA0Zi53lKgEn+Ar2C72o6xtjkhGCaSzJ6wZGSSBcsCQNebT6rhOA9 apBjchL+YJLHnryKFYD7vZuexwY9zK0X4LscxESDP7msshFLKQp6RICuUk//CcPh m/iCQ7CnxjKCYeZAocIObnelC2mIp/qiu3qPWDQnfm+/tOEsat9gu2bkSfX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXN5o4E/G/BbTs4MHPQzVKK7ahlYwHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHv/+0hNKqHlGCaVvrVldVGcQP61XLvTr+kE i35ljjlw+eDx6cJnD8GFWYlq+L0Bi1OOurkSlNeqdMGLqatC4u6qZ4zMCXhv9uAC 2n4iE2hbgq/41m7Tu+6Z6uR0gu5VZlhfnx60qmz4nKvv4fgImmO4jX4pdh6SzD0t bCyFWFjDuv7TtA9Bd+UjtdXglvL2QkPoUyzKipEKH5I9rQw4qUxJ+ypERnTWyOpn 92KftzwN9uVeL9pZ8SMIXkyhY1aWwdWtr+nZKL8TnZ0cS+UKW6XycFm3haqQ01+y /qH3GmcD2okx/eOUkH3RE9rEJHNG9WTaYPvWRMgPudlPMbUUSjY= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:58 2026 by rpki-client