$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft File: 52D9A1099AA71A2F408409BE12B3031B5511AE20.mft (raw, json) Hash identifier: FrJEywszvB8QARHgAmsQ3hJqVw3O61nkMACV7BzvFck= Subject key identifier: 3A:70:6E:7C:CC:55:CC:8D:B0:DA:C0:C4:0A:B8:8C:F5:11:49:B2:C4 Authority key identifier: 52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 Certificate issuer: /CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Certificate serial: 3EDB76B9C8E86EC18BEEDE9830DFD665E1DCD667 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft Manifest number: C9 Signing time: Tue 29 Sep 2026 07:23:32 +0000 Manifest this update: Tue 29 Sep 2026 07:18:32 +0000 Manifest next update: Wed 30 Sep 2026 11:07:32 +0000 Files and hashes: 1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: XTZIiTgv/n33Q5JYlr7SxuQOT3cziTd7vm76FG24Z3Y=) 2: 52D9A1099AA71A2F408409BE12B3031B5511AE20.crl (hash: A81234H7aX9Acy+Bk0c2fcz5OkaKDr5BBmZmsJvDKew=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: eCOHpaJr3e3g+S1j1WgdBSHj+x6BIYHKOcTVf2mib5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:db:76:b9:c8:e8:6e:c1:8b:ee:de:98:30:df:d6:65:e1:dc:d6:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Validity Not Before: Sep 29 07:18:32 2026 GMT Not After : Sep 30 11:07:32 2026 GMT Subject: CN=3A706E7CCC55CC8DB0DAC0C40AB88CF51149B2C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:2a:79:8f:62:2a:75:f7:96:54:fe:b8:c4: d9:73:3a:e9:8f:e0:3f:3c:e5:3d:f6:ce:3a:bc:00: d2:1c:d8:db:33:10:fa:87:c6:59:88:48:f3:0e:0a: 55:78:19:06:de:eb:b2:e5:f4:01:09:e5:89:65:e4: 79:c7:a5:67:23:04:f3:f1:0f:9a:23:93:69:3f:9e: d3:ef:64:3d:16:cb:16:f5:c0:dc:b5:d0:d2:9e:6e: 39:bc:c6:08:fc:51:76:8f:78:3a:bd:12:11:96:53: 96:6c:e8:44:0f:3c:db:68:45:47:5c:4f:d9:f6:52: 2f:e3:87:66:61:4d:27:1d:aa:49:ee:f7:45:09:a0: a9:07:28:53:1f:ad:e2:c5:e8:f7:7b:56:e7:48:c7: 88:0d:40:18:65:49:9a:54:d3:82:e6:c9:83:4e:e1: 4f:c9:a6:d1:10:e7:2e:2b:59:84:52:96:73:b6:e4: 90:d0:11:e0:21:56:31:87:01:02:ad:00:6c:74:49: ec:eb:89:38:49:de:d9:f3:8c:ce:6b:82:40:a4:e0: 6e:e3:11:0c:94:41:dc:f5:3d:99:d5:3b:c5:89:79: 9d:dc:ce:3e:c9:87:b2:5e:76:1e:98:8d:e6:a4:e6: 47:55:5e:e1:48:1d:ee:ed:73:e1:a2:ff:2f:29:0f: e5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:70:6E:7C:CC:55:CC:8D:B0:DA:C0:C4:0A:B8:8C:F5:11:49:B2:C4 X509v3 Authority Key Identifier: keyid:52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5e:4f:77:00:74:c4:f3:d3:02:98:c0:e5:15:8b:83:1a:e1: 80:a7:fa:0a:b0:b8:d1:ab:07:b1:5f:96:fb:ec:41:62:7f:b9: 25:37:c2:5a:f7:aa:f1:54:2c:f4:65:6f:b8:ef:67:49:92:f4: 86:f0:0f:58:26:39:a4:ec:71:71:e6:63:bb:97:8d:49:02:68: f6:90:94:d0:88:f5:b9:b1:db:5b:46:78:0b:c5:2a:61:83:74: 52:43:8d:c3:fc:56:be:b9:41:e8:50:da:c4:89:21:f1:e2:11: d5:83:8c:39:8e:e6:2f:e8:2c:13:0c:fd:52:9b:63:e2:b8:13: 52:fc:39:3c:5e:b1:7c:84:04:9a:0e:24:c1:84:fb:55:f8:4a: 0c:a0:44:ac:70:47:01:c3:57:9c:23:41:38:3a:d0:41:f5:ed: cc:e0:08:2e:78:11:39:7d:72:e1:8f:85:ff:10:37:9a:b5:28: 5f:34:6f:14:eb:d7:4f:32:f9:30:80:7a:b2:ed:92:af:7e:c1: 40:c4:17:69:5e:d6:5f:74:48:e7:5e:28:6a:90:62:75:48:e5: 29:56:29:42:75:4b:6d:86:99:0f:70:62:47:ab:23:3b:94:83: 6a:80:1d:75:6a:6b:c0:a5:a8:1b:c3:d6:93:68:be:4e:93:6e: 64:05:63:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtt2ucjobsGL7t6YMN/WZeHc1mcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1 NTExQUUyMDAeFw0yNjA5MjkwNzE4MzJaFw0yNjA5MzAxMTA3MzJaMDMxMTAvBgNV BAMTKDNBNzA2RTdDQ0M1NUNDOERCMERBQzBDNDBBQjg4Q0Y1MTE0OUIyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkDyp5j2IqdfeWVP64xNlzOumP 4D885T32zjq8ANIc2NszEPqHxlmISPMOClV4GQbe67Ll9AEJ5Yll5HnHpWcjBPPx D5ojk2k/ntPvZD0Wyxb1wNy10NKebjm8xgj8UXaPeDq9EhGWU5Zs6EQPPNtoRUdc T9n2Ui/jh2ZhTScdqknu90UJoKkHKFMfreLF6Pd7VudIx4gNQBhlSZpU04LmyYNO 4U/JptEQ5y4rWYRSlnO25JDQEeAhVjGHAQKtAGx0SezriThJ3tnzjM5rgkCk4G7j EQyUQdz1PZnVO8WJeZ3czj7Jh7Jedh6Yjeak5kdVXuFIHe7tc+Gi/y8pD+WXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOnBufMxVzI2w2sDECriM9RFJssQwHwYDVR0j BBgwFoAUUtmhCZqnGi9AhAm+ErMDG1URriAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdmNmU1N2ItNGMyNi00NDJiLThhZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5 QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1NTExQUUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MkQ5QTEwOTlBQTcxQTJGNDA4NDA5QkUxMkIzMDMxQjU1MTFB RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAz MUI1NTExQUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAteT3cAdMTz0wKYwOUVi4Ma4YCn+gqwuNGr B7FflvvsQWJ/uSU3wlr3qvFULPRlb7jvZ0mS9IbwD1gmOaTscXHmY7uXjUkCaPaQ lNCI9bmx21tGeAvFKmGDdFJDjcP8Vr65QehQ2sSJIfHiEdWDjDmO5i/oLBMM/VKb Y+K4E1L8OTxesXyEBJoOJMGE+1X4SgygRKxwRwHDV5wjQTg60EH17czgCC54ETl9 cuGPhf8QN5q1KF80bxTr108y+TCAerLtkq9+wUDEF2le1l90SOdeKGqQYnVI5SlW KUJ1S22GmQ9wYkerIzuUg2qAHXVqa8ClqBvD1pNovk6TbmQFYxQ= -----END CERTIFICATE-----Generated at Tue Sep 29 15:43:40 2026 by rpki-client