$ rpki-client -vvf rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft File: 52D9A1099AA71A2F408409BE12B3031B5511AE20.mft (raw, json) Hash identifier: yVmMycmq6XqezXm86CUYywgHMjzfFxtCKGgOS/2MByI= Subject key identifier: B8:54:5A:35:BB:B3:18:B2:29:BD:F2:7D:3F:1E:8F:BC:AC:97:13:77 Authority key identifier: 52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 Certificate issuer: /CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Certificate serial: 2BD24E829A669685B09D63FE600873C1F2A30365 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:18:57 +0000 Manifest this update: Wed 13 May 2026 00:13:57 +0000 Manifest next update: Thu 14 May 2026 00:50:57 +0000 Files and hashes: 1: 52D9A1099AA71A2F408409BE12B3031B5511AE20.crl (hash: ZVf+whsPDHVWOgz71bMI3s0fQEa6NTbs5bc6pp1gWCc=) 2: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: XTZIiTgv/n33Q5JYlr7SxuQOT3cziTd7vm76FG24Z3Y=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: eCOHpaJr3e3g+S1j1WgdBSHj+x6BIYHKOcTVf2mib5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d2:4e:82:9a:66:96:85:b0:9d:63:fe:60:08:73:c1:f2:a3:03:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Validity Not Before: May 13 00:13:57 2026 GMT Not After : May 14 00:50:57 2026 GMT Subject: CN=B8545A35BBB318B229BDF27D3F1E8FBCAC971377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:a4:9f:82:38:09:c9:7a:eb:67:8c:d0:a8: 82:a4:78:50:93:ce:54:81:b2:e9:1f:85:ae:ad:b3: 69:c3:ef:85:41:f6:d9:71:a4:0b:83:c3:eb:58:6a: 2d:32:dc:ff:9e:eb:fd:d6:23:22:91:99:9c:75:f9: ed:9e:4c:a1:df:07:53:dd:d3:08:c2:b6:d0:c7:fd: 0b:86:da:62:e2:e4:9f:5b:48:69:5c:45:c5:18:1c: 08:4b:0b:34:de:80:ff:dc:a2:d2:b0:08:f7:15:0d: 48:43:6e:aa:60:7d:74:9d:c5:a0:1a:44:c8:88:cd: 01:35:e6:e0:16:65:48:6c:66:ec:64:70:59:7a:30: 5f:ee:7b:77:6e:a3:34:31:fe:76:35:13:c7:7e:93: ba:61:f1:80:11:6a:a2:90:c8:f2:d0:52:fe:ec:00: f0:d2:5c:6c:75:e2:36:b2:af:56:5c:ac:d6:7c:c3: 84:6c:08:97:cf:7c:44:0f:1e:f9:ac:61:a1:ff:3a: b3:63:21:46:65:c2:77:9a:bd:c4:94:e5:17:1e:cf: 72:99:6f:cd:b4:c9:bd:50:84:e2:16:cf:67:11:01: e7:df:dc:83:8a:34:85:0f:bc:9c:4c:c0:43:39:f0: f9:cb:59:45:a2:0c:8f:90:7a:97:6e:05:ce:7b:06: 12:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:54:5A:35:BB:B3:18:B2:29:BD:F2:7D:3F:1E:8F:BC:AC:97:13:77 X509v3 Authority Key Identifier: keyid:52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e4:e8:c6:09:ce:61:b9:02:1b:c7:b5:57:ad:02:e6:7a:d6: a2:e9:ec:32:fd:42:45:65:e7:5f:77:10:62:be:02:b9:e2:82: 2f:76:5c:32:0c:0e:2b:33:31:ff:73:bc:da:f6:2a:34:d9:e9: 44:22:7a:ae:a0:6b:91:32:df:4f:59:7c:f0:d5:41:f1:e0:c4: e6:f9:25:23:ed:0a:69:d3:2b:23:77:6f:37:cf:44:6a:f2:90: ab:30:1a:84:b9:51:c8:6d:90:f3:f5:1e:a6:18:42:bc:52:fc: 9f:c7:46:9c:b8:1a:55:39:52:2d:76:08:2e:fe:1c:8f:da:e0: bf:4b:12:fe:c1:e2:65:15:aa:99:b6:ea:44:6c:34:a3:b7:c7: 7d:7b:1b:77:97:a6:3a:ef:47:d0:c5:bd:bc:c7:77:b9:df:46: 2b:6f:5f:6c:1b:f6:79:b8:eb:e4:43:9d:b2:96:58:c8:cc:be: e7:95:5f:a0:78:e3:87:4c:69:d6:63:bc:ac:95:0c:c8:a5:5b: 20:eb:af:24:30:11:28:21:b8:dc:0b:df:a2:59:d6:2e:92:55: 0a:a7:fb:c8:eb:be:7b:2a:c7:b7:e5:60:89:6c:39:3f:c6:75: 33:9e:eb:82:db:a4:35:ec:64:c9:35:3b:76:e1:60:21:5e:09: 69:cb:d9:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9JOgppmloWwnWP+YAhzwfKjA2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1 NTExQUUyMDAeFw0yNjA1MTMwMDEzNTdaFw0yNjA1MTQwMDUwNTdaMDMxMTAvBgNV BAMTKEI4NTQ1QTM1QkJCMzE4QjIyOUJERjI3RDNGMUU4RkJDQUM5NzEzNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8CKSfgjgJyXrrZ4zQqIKkeFCT zlSBsukfha6ts2nD74VB9tlxpAuDw+tYai0y3P+e6/3WIyKRmZx1+e2eTKHfB1Pd 0wjCttDH/QuG2mLi5J9bSGlcRcUYHAhLCzTegP/cotKwCPcVDUhDbqpgfXSdxaAa RMiIzQE15uAWZUhsZuxkcFl6MF/ue3duozQx/nY1E8d+k7ph8YARaqKQyPLQUv7s APDSXGx14jayr1ZcrNZ8w4RsCJfPfEQPHvmsYaH/OrNjIUZlwneavcSU5Rcez3KZ b820yb1QhOIWz2cRAeff3IOKNIUPvJxMwEM58PnLWUWiDI+QepduBc57BhL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuFRaNbuzGLIpvfJ9Px6PvKyXE3cwHwYDVR0j BBgwFoAUUtmhCZqnGi9AhAm+ErMDG1URriAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdmNmU1N2ItNGMyNi00NDJiLThhZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5 QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1NTExQUUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MkQ5QTEwOTlBQTcxQTJGNDA4NDA5QkUxMkIzMDMxQjU1MTFB RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAz MUI1NTExQUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3k6MYJzmG5AhvHtVetAuZ61qLp7DL9QkVl 5193EGK+Arnigi92XDIMDiszMf9zvNr2KjTZ6UQieq6ga5Ey309ZfPDVQfHgxOb5 JSPtCmnTKyN3bzfPRGrykKswGoS5UchtkPP1HqYYQrxS/J/HRpy4GlU5Ui12CC7+ HI/a4L9LEv7B4mUVqpm26kRsNKO3x317G3eXpjrvR9DFvbzHd7nfRitvX2wb9nm4 6+RDnbKWWMjMvueVX6B444dMadZjvKyVDMilWyDrryQwESghuNwL36JZ1i6SVQqn +8jrvnsqx7flYIlsOT/GdTOe64LbpDXsZMk1O3bhYCFeCWnL2fU= -----END CERTIFICATE-----Generated at Wed May 13 08:28:34 2026 by rpki-client