
$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft
File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json)
Hash identifier: EbzcAMTPOdgWT35n54YtSAjnNo0vJVGkVY1zGa2EPVo=
Subject key identifier: 42:C6:15:08:47:91:63:11:93:BA:9E:97:DD:FF:38:0C:B4:B0:8A:C5
Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45
Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145
Certificate serial: A6DC0B99B9DECBA2F5C59C5D77FCB24B2E584C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft
Manifest number: 01BD
Signing time: Thu 26 Mar 2026 18:22:36 +0000
Manifest this update: Thu 26 Mar 2026 18:17:36 +0000
Manifest next update: Mon 30 Mar 2026 06:05:36 +0000
Files and hashes: 1: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: CWjYFsyAALaBAaHPgleCWO537OFQtAGPJQ0sZHYSmwE=)
2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl
rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 30 Mar 2026 06:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a6:dc:0b:99:b9:de:cb:a2:f5:c5:9c:5d:77:fc:b2:4b:2e:58:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145
Validity
Not Before: Mar 26 18:17:36 2026 GMT
Not After : Mar 30 06:05:36 2026 GMT
Subject: CN=42C615084791631193BA9E97DDFF380CB4B08AC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:db:12:a1:f1:2f:56:40:43:92:3b:e2:7a:
2b:93:50:c8:de:c0:35:40:11:11:3d:41:ec:3b:93:
59:cf:5d:8c:08:a9:02:e5:15:f3:f4:9c:22:8b:9b:
b7:c1:84:80:33:66:44:c6:5d:7b:d7:39:78:c6:d4:
53:fa:77:e2:87:67:3e:22:e6:da:d6:70:78:05:fd:
56:d1:a9:a6:0b:d0:80:95:ce:0d:fc:0e:12:c7:8c:
0b:78:3f:1e:6c:63:fb:a0:e4:6e:5d:6d:6e:f8:26:
d3:19:7e:6d:17:b0:6a:c9:b8:76:c8:d6:f7:7b:29:
aa:8e:63:ad:3e:6d:e7:92:df:b2:a2:a8:d2:27:42:
cd:fd:e9:a6:47:44:c2:13:d9:9e:20:cc:e1:73:53:
58:83:3f:d2:03:96:22:d2:b4:5e:e6:c1:df:4c:25:
12:b1:56:57:b0:09:9c:22:53:c2:a5:09:d1:76:1a:
58:f4:43:f0:d3:39:fd:dd:7a:07:93:73:db:42:89:
14:ce:ea:82:4b:28:9f:7c:e3:a6:20:a4:03:7f:16:
66:79:de:d8:07:62:0e:af:3e:c0:68:ad:d1:ac:af:
c4:c7:77:f5:3d:cb:27:7d:e6:c8:2c:30:9c:fd:8e:
50:00:6b:c0:d3:ba:5c:fa:87:21:fb:61:f7:0f:b9:
4a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C6:15:08:47:91:63:11:93:BA:9E:97:DD:FF:38:0C:B4:B0:8A:C5
X509v3 Authority Key Identifier:
keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:5a:d8:8f:9c:48:1c:bb:2b:79:1e:0a:8c:c0:f4:8a:da:e0:
55:fb:41:64:a0:b4:b7:82:fb:e1:07:87:86:8a:65:ff:5d:b4:
76:6d:4f:10:36:86:09:1b:e5:dc:f5:69:e9:f1:f5:0b:5a:cb:
30:03:54:e4:84:26:be:6f:2a:97:1b:c9:16:84:04:ed:ac:3e:
bd:f2:5e:f9:f1:4a:68:51:b0:ce:b0:bc:f2:80:05:8e:25:4a:
92:e1:f6:6d:a0:ae:32:af:5f:2f:56:76:88:d5:d8:8f:ea:5a:
f4:2b:c9:6b:f1:c3:70:64:89:42:13:94:b7:b8:99:77:30:d8:
98:76:11:be:0f:8d:4b:0e:4c:b5:60:96:ff:0a:a5:f5:6c:ae:
2f:de:67:72:d1:21:34:97:d7:57:5f:c8:31:56:19:31:5c:10:
db:27:34:a1:ef:c4:8e:5f:29:b8:74:48:bf:ea:4b:0d:fe:d8:
0e:d2:d7:77:0e:58:39:f8:bb:f6:5c:48:49:78:7d:6a:b0:c2:
1d:b4:b2:70:5d:b6:e0:2a:ac:61:e1:0e:b7:1c:5b:90:08:49:
c5:35:ba:f5:22:91:d6:59:96:33:63:a0:2c:65:37:92:bb:9a:
09:0a:ec:16:54:11:98:0a:87:bb:8d:2b:f8:bd:40:f5:ed:ec:
74:0a:88:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:10 2026 by rpki-client