$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: EbzcAMTPOdgWT35n54YtSAjnNo0vJVGkVY1zGa2EPVo= Subject key identifier: 42:C6:15:08:47:91:63:11:93:BA:9E:97:DD:FF:38:0C:B4:B0:8A:C5 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: A6DC0B99B9DECBA2F5C59C5D77FCB24B2E584C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 01BD Signing time: Thu 26 Mar 2026 18:22:36 +0000 Manifest this update: Thu 26 Mar 2026 18:17:36 +0000 Manifest next update: Mon 30 Mar 2026 06:05:36 +0000 Files and hashes: 1: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: CWjYFsyAALaBAaHPgleCWO537OFQtAGPJQ0sZHYSmwE=) 2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 06:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a6:dc:0b:99:b9:de:cb:a2:f5:c5:9c:5d:77:fc:b2:4b:2e:58:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Mar 26 18:17:36 2026 GMT Not After : Mar 30 06:05:36 2026 GMT Subject: CN=42C615084791631193BA9E97DDFF380CB4B08AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:38:db:12:a1:f1:2f:56:40:43:92:3b:e2:7a: 2b:93:50:c8:de:c0:35:40:11:11:3d:41:ec:3b:93: 59:cf:5d:8c:08:a9:02:e5:15:f3:f4:9c:22:8b:9b: b7:c1:84:80:33:66:44:c6:5d:7b:d7:39:78:c6:d4: 53:fa:77:e2:87:67:3e:22:e6:da:d6:70:78:05:fd: 56:d1:a9:a6:0b:d0:80:95:ce:0d:fc:0e:12:c7:8c: 0b:78:3f:1e:6c:63:fb:a0:e4:6e:5d:6d:6e:f8:26: d3:19:7e:6d:17:b0:6a:c9:b8:76:c8:d6:f7:7b:29: aa:8e:63:ad:3e:6d:e7:92:df:b2:a2:a8:d2:27:42: cd:fd:e9:a6:47:44:c2:13:d9:9e:20:cc:e1:73:53: 58:83:3f:d2:03:96:22:d2:b4:5e:e6:c1:df:4c:25: 12:b1:56:57:b0:09:9c:22:53:c2:a5:09:d1:76:1a: 58:f4:43:f0:d3:39:fd:dd:7a:07:93:73:db:42:89: 14:ce:ea:82:4b:28:9f:7c:e3:a6:20:a4:03:7f:16: 66:79:de:d8:07:62:0e:af:3e:c0:68:ad:d1:ac:af: c4:c7:77:f5:3d:cb:27:7d:e6:c8:2c:30:9c:fd:8e: 50:00:6b:c0:d3:ba:5c:fa:87:21:fb:61:f7:0f:b9: 4a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C6:15:08:47:91:63:11:93:BA:9E:97:DD:FF:38:0C:B4:B0:8A:C5 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:5a:d8:8f:9c:48:1c:bb:2b:79:1e:0a:8c:c0:f4:8a:da:e0: 55:fb:41:64:a0:b4:b7:82:fb:e1:07:87:86:8a:65:ff:5d:b4: 76:6d:4f:10:36:86:09:1b:e5:dc:f5:69:e9:f1:f5:0b:5a:cb: 30:03:54:e4:84:26:be:6f:2a:97:1b:c9:16:84:04:ed:ac:3e: bd:f2:5e:f9:f1:4a:68:51:b0:ce:b0:bc:f2:80:05:8e:25:4a: 92:e1:f6:6d:a0:ae:32:af:5f:2f:56:76:88:d5:d8:8f:ea:5a: f4:2b:c9:6b:f1:c3:70:64:89:42:13:94:b7:b8:99:77:30:d8: 98:76:11:be:0f:8d:4b:0e:4c:b5:60:96:ff:0a:a5:f5:6c:ae: 2f:de:67:72:d1:21:34:97:d7:57:5f:c8:31:56:19:31:5c:10: db:27:34:a1:ef:c4:8e:5f:29:b8:74:48:bf:ea:4b:0d:fe:d8: 0e:d2:d7:77:0e:58:39:f8:bb:f6:5c:48:49:78:7d:6a:b0:c2: 1d:b4:b2:70:5d:b6:e0:2a:ac:61:e1:0e:b7:1c:5b:90:08:49: c5:35:ba:f5:22:91:d6:59:96:33:63:a0:2c:65:37:92:bb:9a: 09:0a:ec:16:54:11:98:0a:87:bb:8d:2b:f8:bd:40:f5:ed:ec: 74:0a:88:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKbcC5m53sui9cWcXXf8sksuWEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNjAzMjYxODE3MzZaFw0yNjAzMzAwNjA1MzZaMDMxMTAvBgNV BAMTKDQyQzYxNTA4NDc5MTYzMTE5M0JBOUU5N0RERkYzODBDQjRCMDhBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjONsSofEvVkBDkjvieiuTUMje wDVAERE9Qew7k1nPXYwIqQLlFfP0nCKLm7fBhIAzZkTGXXvXOXjG1FP6d+KHZz4i 5trWcHgF/VbRqaYL0ICVzg38DhLHjAt4Px5sY/ug5G5dbW74JtMZfm0XsGrJuHbI 1vd7KaqOY60+beeS37KiqNInQs396aZHRMIT2Z4gzOFzU1iDP9IDliLStF7mwd9M JRKxVlewCZwiU8KlCdF2Glj0Q/DTOf3degeTc9tCiRTO6oJLKJ9846YgpAN/FmZ5 3tgHYg6vPsBordGsr8THd/U9yyd95sgsMJz9jlAAa8DTulz6hyH7YfcPuUqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQsYVCEeRYxGTup6X3f84DLSwisUwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpa2I+cSBy7K3keCozA9Ira4FX7QWSgtLeC ++EHh4aKZf9dtHZtTxA2hgkb5dz1aenx9QtayzADVOSEJr5vKpcbyRaEBO2sPr3y XvnxSmhRsM6wvPKABY4lSpLh9m2grjKvXy9WdojV2I/qWvQryWvxw3BkiUITlLe4 mXcw2Jh2Eb4PjUsOTLVglv8KpfVsri/eZ3LRITSX11dfyDFWGTFcENsnNKHvxI5f Kbh0SL/qSw3+2A7S13cOWDn4u/ZcSEl4fWqwwh20snBdtuAqrGHhDrccW5AIScU1 uvUikdZZljNjoCxlN5K7mgkK7BZUEZgKh7uNK/i9QPXt7HQKiIU= -----END CERTIFICATE-----Generated at Thu Mar 26 23:50:10 2026 by rpki-client