$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: 8PeXLhpmgYozr3RLxrSz/NXYHIChE8ZngJA3VpdvdwM= Subject key identifier: D2:C8:C7:E6:47:04:D2:69:2D:F7:91:FA:36:57:55:A5:A1:61:F7:17 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 428E38B42F086DA0CC840FA9C4C10DE98C5F9109 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 01BC Signing time: Tue 24 Mar 2026 10:52:35 +0000 Manifest this update: Tue 24 Mar 2026 10:47:35 +0000 Manifest next update: Fri 27 Mar 2026 18:15:35 +0000 Files and hashes: 1: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: /l65mmFC/9Z8h9KH8bMMWtJs+uCPfwYW/M2TMorMXDs=) 2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8e:38:b4:2f:08:6d:a0:cc:84:0f:a9:c4:c1:0d:e9:8c:5f:91:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Mar 24 10:47:35 2026 GMT Not After : Mar 27 18:15:35 2026 GMT Subject: CN=D2C8C7E64704D2692DF791FA365755A5A161F717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:80:77:4d:17:e8:60:e8:1c:6c:ff:f6:92: 47:87:d5:00:13:e5:9e:08:83:6c:6a:c3:37:eb:03: 91:c4:f7:a5:fa:a3:50:09:fd:dc:ea:7c:36:84:f1: 9d:15:79:bc:65:a8:fe:50:41:3e:66:fb:19:23:61: 46:f5:13:3f:70:9f:3f:ee:84:46:95:d6:40:a6:93: 98:70:9b:55:da:43:92:0d:0c:3b:27:14:08:1d:77: 83:bc:85:e3:f5:94:15:b4:c5:9d:60:06:b6:80:ae: 9d:08:54:75:7b:a4:ca:47:94:ae:4e:e0:a1:8f:14: 4d:70:cc:ed:d3:8c:cc:92:3e:79:e1:55:31:4f:d7: c7:3b:d1:97:31:47:0c:aa:ea:23:10:7e:22:bb:6c: 9b:83:38:0f:77:07:3c:91:97:a9:74:d3:20:4d:03: f1:86:0b:5d:5c:0f:07:b5:c5:86:bc:3e:67:be:44: 56:a1:f2:33:08:0a:ac:29:12:99:05:4c:73:3b:3d: bc:56:01:c6:ee:42:d2:e4:da:60:a1:44:3d:26:0d: 72:74:e3:71:d0:5f:3a:05:16:53:b9:d8:e1:1c:97: 0f:28:94:b9:ef:30:54:5f:28:c5:21:5d:18:4b:2a: 34:74:0d:fd:57:7f:fe:f9:c8:3f:00:e0:14:43:ce: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C8:C7:E6:47:04:D2:69:2D:F7:91:FA:36:57:55:A5:A1:61:F7:17 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:f5:b2:4e:0d:64:99:30:ba:7e:b4:94:bf:00:03:0a:4d:25: 24:02:b9:75:ef:0d:f8:4f:18:db:f0:81:c4:59:49:62:d9:bd: 6d:ef:ae:ab:3b:48:39:a9:47:46:fb:0f:eb:76:ce:11:f6:bb: 7f:00:16:84:65:ee:52:26:61:4f:43:54:77:90:8b:45:0d:7b: e5:75:04:ab:16:f6:d2:67:77:c9:3f:3d:2c:a1:ec:0a:35:25: 72:39:23:46:ab:68:a5:da:9c:07:99:89:d5:67:f5:fc:ba:c2: 96:f1:9b:e8:70:e1:39:2b:c5:7d:a6:de:3a:ba:31:b9:8b:bf: 9e:ac:bd:fe:cb:d6:3e:2f:79:d3:64:1e:a8:05:7f:d0:0b:0d: 49:c5:ae:b1:7b:8f:68:c8:bb:63:52:47:d0:83:d6:e7:35:39: 32:a7:83:8f:4c:95:da:6e:f3:4d:af:d4:23:4a:02:ee:bf:d7: 83:5c:58:37:03:31:21:19:f5:79:a3:28:42:f6:e6:d9:7d:f2: c0:07:72:db:00:7f:7e:68:23:83:18:47:00:20:56:00:75:b1: 5d:f1:06:12:35:3b:60:fd:01:2c:ae:b0:3f:ac:07:e0:fb:93: b2:3e:48:16:db:55:e0:0c:12:1a:7f:5b:5a:5d:be:0e:51:35: 0b:31:78:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQo44tC8IbaDMhA+pxMEN6YxfkQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNjAzMjQxMDQ3MzVaFw0yNjAzMjcxODE1MzVaMDMxMTAvBgNV BAMTKEQyQzhDN0U2NDcwNEQyNjkyREY3OTFGQTM2NTc1NUE1QTE2MUY3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhYoB3TRfoYOgcbP/2kkeH1QAT 5Z4Ig2xqwzfrA5HE96X6o1AJ/dzqfDaE8Z0VebxlqP5QQT5m+xkjYUb1Ez9wnz/u hEaV1kCmk5hwm1XaQ5INDDsnFAgdd4O8heP1lBW0xZ1gBraArp0IVHV7pMpHlK5O 4KGPFE1wzO3TjMySPnnhVTFP18c70ZcxRwyq6iMQfiK7bJuDOA93BzyRl6l00yBN A/GGC11cDwe1xYa8Pme+RFah8jMICqwpEpkFTHM7PbxWAcbuQtLk2mChRD0mDXJ0 43HQXzoFFlO52OEclw8olLnvMFRfKMUhXRhLKjR0Df1Xf/75yD8A4BRDzs1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0sjH5kcE0mkt95H6NldVpaFh9xcwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAH1sk4NZJkwun60lL8AAwpNJSQCuXXvDfhP GNvwgcRZSWLZvW3vrqs7SDmpR0b7D+t2zhH2u38AFoRl7lImYU9DVHeQi0UNe+V1 BKsW9tJnd8k/PSyh7Ao1JXI5I0araKXanAeZidVn9fy6wpbxm+hw4TkrxX2m3jq6 MbmLv56svf7L1j4vedNkHqgFf9ALDUnFrrF7j2jIu2NSR9CD1uc1OTKng49Mldpu 802v1CNKAu6/14NcWDcDMSEZ9XmjKEL25tl98sAHctsAf35oI4MYRwAgVgB1sV3x BhI1O2D9ASyusD+sB+D7k7I+SBbbVeAMEhp/W1pdvg5RNQsxeNY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:34:14 2026 by rpki-client