$ rpki-client -vvf rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft File: 52D9A1099AA71A2F408409BE12B3031B5511AE20.mft (raw, json) Hash identifier: Hb4rhZfvTz3AOqr26BqNQgvm46x9pMUSQVV5Fea7SSg= Subject key identifier: 0F:CF:82:2F:DA:4E:41:08:25:EF:F7:C7:A6:05:E1:68:66:23:96:BF Authority key identifier: 52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 Certificate issuer: /CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Certificate serial: 47F29726D082C4D35843A555E29CEFBB94B88417 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 06:06:53 +0000 Manifest this update: Fri 24 Jul 2026 06:01:53 +0000 Manifest next update: Sat 25 Jul 2026 08:07:53 +0000 Files and hashes: 1: 52D9A1099AA71A2F408409BE12B3031B5511AE20.crl (hash: cGzTiPAKzS/X/xVbsn4lGFpbhf9vvn7erMoH/BpWf3c=) 2: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: XTZIiTgv/n33Q5JYlr7SxuQOT3cziTd7vm76FG24Z3Y=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: eCOHpaJr3e3g+S1j1WgdBSHj+x6BIYHKOcTVf2mib5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f2:97:26:d0:82:c4:d3:58:43:a5:55:e2:9c:ef:bb:94:b8:84:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Validity Not Before: Jul 24 06:01:53 2026 GMT Not After : Jul 25 08:07:53 2026 GMT Subject: CN=0FCF822FDA4E410825EFF7C7A605E168662396BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:78:57:e3:9a:b7:a9:c2:77:dc:9a:24:96:b2: 88:ed:cd:69:8b:f5:77:b0:53:1d:44:db:a3:72:6b: c4:2d:9a:a0:02:de:8d:d7:c3:cf:5c:76:d2:dc:67: 8c:b6:ae:44:82:dd:33:35:71:35:66:21:2b:1c:76: 1a:b1:6c:0c:fa:46:bb:9c:99:d2:29:c7:24:23:3b: 22:ee:be:8f:f0:51:0d:fc:b5:df:09:1d:84:42:85: 20:14:3c:73:92:21:b3:46:c0:f1:24:47:05:0a:3c: f3:4b:35:06:f1:f4:f5:99:57:36:89:88:6f:d3:9a: de:3a:6c:46:55:86:f4:5f:25:6d:8f:6c:39:a5:f2: 02:ee:e9:df:9e:f8:bc:2f:5f:8b:a1:f0:a6:d3:3f: ce:4d:00:b8:32:97:eb:43:e2:6d:f9:41:4c:82:ea: d8:3a:9a:0c:33:4a:23:d0:c5:ab:df:cb:90:28:e1: 3b:2f:82:95:5d:71:dd:7c:5a:5c:10:3e:ae:b8:59: f6:fe:c1:62:1f:d8:a9:84:61:2e:e9:7e:64:c9:ea: dd:68:18:db:c0:29:0a:f6:9c:36:36:1c:1d:da:4c: 8b:bf:d8:cf:75:79:a2:1c:10:30:c7:d2:38:4f:c9: 60:f3:5b:9f:8e:4f:8d:37:5f:ee:0e:1c:36:bd:3e: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:CF:82:2F:DA:4E:41:08:25:EF:F7:C7:A6:05:E1:68:66:23:96:BF X509v3 Authority Key Identifier: keyid:52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c8:cb:3f:b7:72:e2:bb:07:53:ee:4f:13:c5:4b:40:78:07: 10:79:cb:ef:21:65:53:3f:e9:18:b1:2d:7f:dd:4e:ad:fe:59: 7f:92:71:4a:3e:97:28:fd:d6:b6:1a:36:67:2e:32:84:df:96: 48:fa:b4:e6:fd:7c:2c:11:a5:05:be:c2:69:27:8e:15:c4:5b: cb:4e:99:0a:0f:fa:e8:41:e9:b5:ff:11:51:43:e0:32:a3:a8: c4:68:00:3b:db:e6:b9:b7:5d:d5:cd:83:95:9d:15:ed:80:6d: c2:e6:a5:55:d7:8b:cc:a6:8f:41:45:97:70:52:29:21:d2:34: 64:3f:3c:ef:d5:8d:b9:6e:af:75:a5:19:61:3b:11:d6:a1:e3: b0:ea:e9:f9:eb:9b:03:ea:73:0d:cd:61:5e:b6:ca:c8:4b:ff: 22:5d:1f:ba:36:23:f6:98:4b:40:2b:7e:15:77:e0:c5:06:35: d6:5b:00:a4:7e:53:a2:97:d2:33:bf:d4:6d:fb:1d:3e:05:44: 7b:27:9a:73:7f:dd:31:6a:c5:97:ad:4d:08:1f:56:e9:45:17: 3f:37:47:66:23:fb:a1:94:14:0d:85:f3:33:4a:8f:ff:b2:a9: 79:2c:b9:c1:3a:7c:f9:ed:37:b0:4c:9f:b0:3b:c7:c1:08:cc: f0:c0:b6:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/KXJtCCxNNYQ6VV4pzvu5S4hBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1 NTExQUUyMDAeFw0yNjA3MjQwNjAxNTNaFw0yNjA3MjUwODA3NTNaMDMxMTAvBgNV BAMTKDBGQ0Y4MjJGREE0RTQxMDgyNUVGRjdDN0E2MDVFMTY4NjYyMzk2QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfeFfjmrepwnfcmiSWsojtzWmL 9XewUx1E26Nya8QtmqAC3o3Xw89cdtLcZ4y2rkSC3TM1cTVmISscdhqxbAz6Rruc mdIpxyQjOyLuvo/wUQ38td8JHYRChSAUPHOSIbNGwPEkRwUKPPNLNQbx9PWZVzaJ iG/Tmt46bEZVhvRfJW2PbDml8gLu6d+e+LwvX4uh8KbTP85NALgyl+tD4m35QUyC 6tg6mgwzSiPQxavfy5Ao4TsvgpVdcd18WlwQPq64Wfb+wWIf2KmEYS7pfmTJ6t1o GNvAKQr2nDY2HB3aTIu/2M91eaIcEDDH0jhPyWDzW5+OT403X+4OHDa9PntRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD8+CL9pOQQgl7/fHpgXhaGYjlr8wHwYDVR0j BBgwFoAUUtmhCZqnGi9AhAm+ErMDG1URriAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdmNmU1N2ItNGMyNi00NDJiLThhZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5 QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1NTExQUUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MkQ5QTEwOTlBQTcxQTJGNDA4NDA5QkUxMkIzMDMxQjU1MTFB RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAz MUI1NTExQUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3Iyz+3cuK7B1PuTxPFS0B4BxB5y+8hZVM/ 6RixLX/dTq3+WX+ScUo+lyj91rYaNmcuMoTflkj6tOb9fCwRpQW+wmknjhXEW8tO mQoP+uhB6bX/EVFD4DKjqMRoADvb5rm3XdXNg5WdFe2AbcLmpVXXi8ymj0FFl3BS KSHSNGQ/PO/Vjblur3WlGWE7Edah47Dq6fnrmwPqcw3NYV62yshL/yJdH7o2I/aY S0ArfhV34MUGNdZbAKR+U6KX0jO/1G37HT4FRHsnmnN/3TFqxZetTQgfVulFFz83 R2Yj+6GUFA2F8zNKj/+yqXksucE6fPntN7BMn7A7x8EIzPDAtgA= -----END CERTIFICATE-----Generated at Fri Jul 24 10:15:59 2026 by rpki-client