$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: 6Q55rR8KigWZLTVJ5TAncFdCnrRYioM/gC2lHltFWxs= Subject key identifier: 6A:15:3A:8D:02:9E:7A:70:DF:6B:96:E4:58:38:1C:1F:7D:C2:EC:EE Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 6FCF6D46EE6FCA8C5276014C744CAD8DE59F873E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: 0153 Signing time: Wed 25 Mar 2026 06:51:12 +0000 Manifest this update: Wed 25 Mar 2026 06:46:12 +0000 Manifest next update: Sat 28 Mar 2026 14:08:12 +0000 Files and hashes: 1: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: MfOMH8pyeWOb33eVj5lGJlXFgGJnVY97tpbaPDlGeZk=) 2: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: rfj0zqQetDqcEggNTJsySHZCU6TxGgjfbp4rDNBshT4=) 3: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: 4v43iD9DKTufMtXesf51VzAOv6Cm6ifyUjKOJHeSXSw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:cf:6d:46:ee:6f:ca:8c:52:76:01:4c:74:4c:ad:8d:e5:9f:87:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Mar 25 06:46:12 2026 GMT Not After : Mar 28 14:08:12 2026 GMT Subject: CN=6A153A8D029E7A70DF6B96E458381C1F7DC2ECEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:44:e1:3f:4c:12:0c:f3:56:6f:fc:07:f1:33: b9:5a:5f:dc:55:50:1e:8e:b3:b4:4d:e6:b8:b5:30: 40:c3:51:39:a4:98:cc:a8:84:8f:76:72:ec:2a:f6: 5e:0d:7c:5f:f1:79:c7:be:9f:27:91:6b:45:bd:87: 86:52:00:54:13:7b:12:49:39:7d:2e:38:40:09:9f: a9:67:44:ad:47:67:9e:c1:a0:f3:d0:87:db:74:e6: e5:fe:24:67:4f:7b:22:6d:1d:3a:0a:43:a8:f4:83: be:22:6f:0c:c7:a5:01:1a:98:e1:06:f5:e0:32:72: b5:c5:ad:6e:73:39:6f:66:fe:ff:1a:52:cc:ea:7e: 2a:99:a0:e0:5d:94:30:c1:8c:b0:ae:3f:a4:f3:8e: ba:c2:97:85:9c:e2:e1:70:05:f2:8a:a2:41:e1:f5: 33:61:34:0a:e3:0c:d9:a3:94:54:ad:ec:01:24:29: d5:a1:e2:52:40:36:77:9b:5e:f5:ba:02:22:ba:36: 52:09:e2:9a:9c:89:80:55:a3:55:da:a4:e8:9d:00: 7c:e3:3d:d7:d9:19:57:56:af:39:7a:13:ca:5e:58: 16:81:5c:d2:80:37:88:43:a9:4c:ac:23:4a:ec:91: 66:90:e2:88:7c:b3:cb:43:82:89:41:eb:b2:cf:ef: 15:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:15:3A:8D:02:9E:7A:70:DF:6B:96:E4:58:38:1C:1F:7D:C2:EC:EE X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:21:3e:40:c9:43:c4:3a:bf:48:9d:88:3d:57:fa:0d:2e:0d: 5b:92:14:c9:b5:77:e0:93:35:3e:f0:0a:a4:e2:6a:ee:31:fb: ec:ca:ad:8e:bb:aa:3d:6d:69:53:ec:a6:25:3c:07:f4:3c:e8: 35:00:76:b3:7f:76:a9:22:a9:f7:9a:eb:d0:f8:f4:99:14:e7: e9:1d:d6:54:01:75:f2:49:3e:a4:56:11:f1:17:a0:89:aa:90: 31:cb:e8:40:48:77:e8:45:c0:3e:22:ae:95:63:62:44:d0:f9: eb:81:bf:3d:c1:ae:70:34:c2:c1:76:eb:8e:6d:68:11:d5:07: a6:74:d3:2f:88:36:0d:26:90:ac:36:66:01:79:f3:9f:24:a1: fc:ec:fe:7c:67:17:2c:e6:7e:ce:c6:26:9c:e0:e6:5c:12:20: 80:05:ea:c0:32:8f:0c:f6:4d:0a:37:65:a6:98:7f:39:ae:7f: f2:e7:0c:1e:75:08:f9:dd:3a:db:73:ea:44:3d:07:a9:0c:5e: f4:bd:85:4b:e9:0b:17:2d:fc:50:e9:95:6f:dc:77:03:c1:b4: a6:82:af:de:3a:71:b6:e6:0f:68:46:ef:f9:88:3d:80:16:ef: 15:b7:bb:2f:73:fd:f1:97:7e:2d:fd:ab:e2:1b:f4:c8:9b:19: 7f:25:b7:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb89tRu5vyoxSdgFMdEytjeWfhz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNjAzMjUwNjQ2MTJaFw0yNjAzMjgxNDA4MTJaMDMxMTAvBgNV BAMTKDZBMTUzQThEMDI5RTdBNzBERjZCOTZFNDU4MzgxQzFGN0RDMkVDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnROE/TBIM81Zv/AfxM7laX9xV UB6Os7RN5ri1MEDDUTmkmMyohI92cuwq9l4NfF/xece+nyeRa0W9h4ZSAFQTexJJ OX0uOEAJn6lnRK1HZ57BoPPQh9t05uX+JGdPeyJtHToKQ6j0g74ibwzHpQEamOEG 9eAycrXFrW5zOW9m/v8aUszqfiqZoOBdlDDBjLCuP6TzjrrCl4Wc4uFwBfKKokHh 9TNhNArjDNmjlFSt7AEkKdWh4lJANnebXvW6AiK6NlIJ4pqciYBVo1XapOidAHzj PdfZGVdWrzl6E8peWBaBXNKAN4hDqUysI0rskWaQ4oh8s8tDgolB67LP7xVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUahU6jQKeenDfa5bkWDgcH33C7O4wHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALohPkDJQ8Q6v0idiD1X+g0uDVuSFMm1d+CT NT7wCqTiau4x++zKrY67qj1taVPspiU8B/Q86DUAdrN/dqkiqfea69D49JkU5+kd 1lQBdfJJPqRWEfEXoImqkDHL6EBId+hFwD4irpVjYkTQ+euBvz3BrnA0wsF2645t aBHVB6Z00y+INg0mkKw2ZgF5858kofzs/nxnFyzmfs7GJpzg5lwSIIAF6sAyjwz2 TQo3ZaaYfzmuf/LnDB51CPndOttz6kQ9B6kMXvS9hUvpCxct/FDplW/cdwPBtKaC r946cbbmD2hG7/mIPYAW7xW3uy9z/fGXfi39q+Ib9MibGX8ltxg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:32:49 2026 by rpki-client