$ rpki-client -vvf repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft File: 52D962F5A9CABE2F4089548951269E5BD5F3249D.mft (raw, json) Hash identifier: g0G86GH5rAItDk8gHDNuqnf2LgXDJVTs8FnIWyUtV2k= Subject key identifier: 7A:98:44:15:26:98:9F:38:17:F1:B5:F3:D2:77:36:8A:45:CF:45:46 Authority key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Certificate issuer: /CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Certificate serial: 53D6B8FC4D779F37898E360228C5D5A46171E2BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft Manifest number: E7 Signing time: Tue 24 Mar 2026 17:10:01 +0000 Manifest this update: Tue 24 Mar 2026 17:05:01 +0000 Manifest next update: Sat 28 Mar 2026 01:01:01 +0000 Files and hashes: 1: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: c4ofB5VSDY4XXKhWxq0LhNmllp1P3fen4sP7Y+RjYTk=) 2: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: vIF48KMANXIGE+Lk+ZdIeOLTYmbNmfa3MrBKBvJQqmE=) 3: 52D962F5A9CABE2F4089548951269E5BD5F3249D.crl (hash: oyqoCQXOmFlguCyvV8X7mYizOsoQa3eJ46I4dCcZ9CU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d6:b8:fc:4d:77:9f:37:89:8e:36:02:28:c5:d5:a4:61:71:e2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Validity Not Before: Mar 24 17:05:01 2026 GMT Not After : Mar 28 01:01:01 2026 GMT Subject: CN=7A98441526989F3817F1B5F3D277368A45CF4546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:04:80:e5:64:90:09:57:88:69:68:2a:78: 44:5b:6c:26:a4:ad:70:46:1c:14:44:ad:ce:86:1a: 96:27:43:68:5a:a3:74:4e:e8:a1:8d:68:d5:db:5f: 9b:cc:a5:f5:6a:1e:cd:e5:d6:e5:bd:a4:6b:71:56: 57:6c:65:23:64:40:78:2d:d3:87:58:51:65:4b:f0: d1:c6:9f:83:8c:a4:81:14:e5:18:77:7b:c5:cf:45: 6f:e7:66:29:9a:0e:42:8b:85:a7:1e:47:d8:b3:c9: db:9f:83:39:bb:45:5b:09:e0:b3:4e:29:97:a3:c7: d2:c3:40:5c:5f:81:81:42:ad:e7:0c:d7:b8:f5:c9: 85:60:5e:24:d4:2d:84:d4:50:de:4e:ed:88:78:66: c1:28:47:b5:d3:55:e2:bc:76:81:8f:26:61:8c:7c: 4d:4d:9a:3c:cd:bb:82:ad:eb:60:3b:22:f0:dc:97: e5:28:9b:5c:b4:90:fb:a1:af:1b:3e:16:2e:a3:32: b5:2b:91:39:0d:75:00:e0:f8:07:8d:fd:ac:25:8b: 1e:58:95:5b:5c:a4:02:b0:85:13:f6:12:4a:cd:e6: ab:91:5b:5d:31:82:dd:0a:2e:bd:7d:c7:12:33:d3: 16:dc:0e:d4:b8:a5:05:ff:5f:c3:a3:74:42:79:b6: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:98:44:15:26:98:9F:38:17:F1:B5:F3:D2:77:36:8A:45:CF:45:46 X509v3 Authority Key Identifier: keyid:52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:61:8a:21:24:11:b2:1a:c1:4f:3f:21:ac:79:7e:76:0b:0a: c5:bb:c7:fb:53:4b:83:4e:3f:4a:19:57:20:8e:74:d8:85:92: a8:71:42:a6:10:03:40:39:93:82:a8:06:22:fb:fa:fe:f6:73: b8:af:9a:0d:54:1a:6e:0c:c8:01:aa:4d:be:4c:64:34:ef:48: 10:d2:a7:e3:c2:57:1a:9c:a6:d9:13:07:5b:ce:86:41:84:ed: 4d:66:45:ca:cc:a7:3c:de:63:83:6b:2e:b2:91:61:75:b7:9a: fd:09:62:43:3a:fd:2c:4f:7f:07:3d:37:b5:ff:e6:d6:4a:9c: f7:b6:a3:40:12:3c:23:52:cf:e9:01:66:75:38:ef:5c:75:35: 4e:e7:75:fd:46:d4:03:4f:e4:bc:9c:d6:88:4d:f2:4d:99:f9: 43:e9:8d:31:d3:86:d4:30:5d:12:be:18:49:d9:b7:91:53:b1: 3c:c8:1c:2d:11:a8:fc:5e:62:68:bb:26:a8:2a:e4:c7:62:da: ce:b2:06:80:17:ff:73:63:c1:cd:be:67:37:0e:4c:63:c9:c9: ce:f8:ed:f1:7d:ff:ef:6f:b4:c4:95:62:d6:e2:e4:8b:71:53: cf:7a:4a:02:d9:f3:10:21:e0:22:ef:9e:bd:89:bf:a8:e1:ee: 89:13:ce:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9a4/E13nzeJjjYCKMXVpGFx4r4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJE NUYzMjQ5RDAeFw0yNjAzMjQxNzA1MDFaFw0yNjAzMjgwMTAxMDFaMDMxMTAvBgNV BAMTKDdBOTg0NDE1MjY5ODlGMzgxN0YxQjVGM0QyNzczNjhBNDVDRjQ1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXwSA5WSQCVeIaWgqeERbbCak rXBGHBRErc6GGpYnQ2hao3RO6KGNaNXbX5vMpfVqHs3l1uW9pGtxVldsZSNkQHgt 04dYUWVL8NHGn4OMpIEU5Rh3e8XPRW/nZimaDkKLhaceR9izydufgzm7RVsJ4LNO KZejx9LDQFxfgYFCrecM17j1yYVgXiTULYTUUN5O7Yh4ZsEoR7XTVeK8doGPJmGM fE1NmjzNu4Kt62A7IvDcl+Uom1y0kPuhrxs+Fi6jMrUrkTkNdQDg+AeN/awlix5Y lVtcpAKwhRP2EkrN5quRW10xgt0KLr19xxIz0xbcDtS4pQX/X8OjdEJ5tiWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUephEFSaYnzgX8bXz0nc2ikXPRUYwHwYDVR0j BBgwFoAUUtli9anKvi9AiVSJUSaeW9XzJJ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMC81MkQ5NjJGNUE5 Q0FCRTJGNDA4OTU0ODk1MTI2OUU1QkQ1RjMyNDlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJENUYz MjQ5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlF NUJENUYzMjQ5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZhiiEkEbIawU8/Iax5fnYLCsW7x/tTS4NO P0oZVyCOdNiFkqhxQqYQA0A5k4KoBiL7+v72c7ivmg1UGm4MyAGqTb5MZDTvSBDS p+PCVxqcptkTB1vOhkGE7U1mRcrMpzzeY4NrLrKRYXW3mv0JYkM6/SxPfwc9N7X/ 5tZKnPe2o0ASPCNSz+kBZnU471x1NU7ndf1G1ANP5Lyc1ohN8k2Z+UPpjTHThtQw XRK+GEnZt5FTsTzIHC0RqPxeYmi7Jqgq5Mdi2s6yBoAX/3Njwc2+ZzcOTGPJyc74 7fF9/+9vtMSVYtbi5ItxU896SgLZ8xAh4CLvnr2Jv6jh7okTzjE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:48 2026 by rpki-client