$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft File: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft (raw, json) Hash identifier: Sjv/E4UNsTuUj5MgP8G77y2kwwxPBYEW/H43fTu02k8= Subject key identifier: 08:68:EF:96:23:79:6A:57:D4:28:E8:C9:75:75:AE:7D:54:00:CA:E8 Authority key identifier: C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F Certificate issuer: /CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Certificate serial: 7EFF3369591864F55FC9365384BCDEB470F0D87C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:25:59 +0000 Manifest this update: Tue 12 May 2026 16:20:59 +0000 Manifest next update: Wed 13 May 2026 19:24:59 +0000 Files and hashes: 1: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: yAZGzCFckEolEtkEocUhLNSw4BV4DJZdNzdA0tVkGtA=) 2: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: 5StnOeqZ96buXCGi/ZTPekGCsI1j8G00cwvVyv/D23k=) 3: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl (hash: O1/mT/pT4SXINU5qlB/ACJTD8QUxkzPxXltM71BRY/Q=) 4: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: 3sTXjzHUOLPeEyAojCjuo6mjJbiX0Eb7eAu+BmtWebk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ff:33:69:59:18:64:f5:5f:c9:36:53:84:bc:de:b4:70:f0:d8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Validity Not Before: May 12 16:20:59 2026 GMT Not After : May 13 19:24:59 2026 GMT Subject: CN=0868EF9623796A57D428E8C97575AE7D5400CAE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:38:11:9a:ec:b4:2f:f6:92:f3:85:c2:2c:df: 27:a7:89:91:7e:d3:17:dd:67:8f:a4:0b:07:e1:b4: b1:48:ed:22:8a:f5:c8:41:2d:ca:a7:f0:c4:af:6a: 08:b7:30:0c:c8:a8:6b:1d:4d:f6:65:80:75:cc:21: 8f:ea:05:ab:82:d8:69:88:cc:4d:74:a9:76:b9:f8: 87:e9:57:73:95:91:ac:4c:6a:6d:c2:a3:1d:15:4f: bc:37:5a:b1:b9:c5:1e:b2:1a:05:72:cf:9e:7a:c5: f8:09:8d:81:98:5d:e3:58:0f:0f:9f:af:67:8a:8e: f7:a5:83:2b:0d:b8:e3:f3:f3:5d:fc:b4:83:8f:9d: cb:b0:7f:2c:57:f5:a2:29:db:27:ed:5d:56:65:f9: b1:a4:ad:47:7e:32:29:69:5b:aa:0b:76:03:42:88: f5:7d:9e:2b:34:2f:bc:e0:1e:80:c1:d5:e1:4e:57: 72:e0:a7:45:1c:b0:e0:31:7e:85:7b:00:f1:e9:47: d3:87:8d:de:12:78:36:ca:83:26:18:2c:f2:b6:61: ff:a7:5f:30:6d:aa:f4:ec:65:60:73:8d:a7:54:f6: aa:50:18:a1:e0:af:e3:a8:95:5e:07:d3:35:c0:97: fe:2d:94:ea:a1:f6:ba:c3:7d:d9:75:d8:d2:ac:f5: 62:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:68:EF:96:23:79:6A:57:D4:28:E8:C9:75:75:AE:7D:54:00:CA:E8 X509v3 Authority Key Identifier: keyid:C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:54:69:09:84:40:ba:7c:72:34:7e:d9:9d:15:44:78:3f:ca: a0:e8:00:ec:55:38:3e:88:5a:64:b1:74:9d:4d:8d:5d:f7:36: e9:6c:18:63:6a:4f:cc:99:61:85:b4:ee:1d:c4:21:f2:8d:a2: 01:97:69:bd:b4:ad:df:b8:b1:a9:9a:44:15:8e:51:e0:f2:72: dc:13:81:48:c6:7d:81:ce:3c:58:84:6a:ba:98:1f:31:eb:40: b1:55:5d:9e:c1:74:ab:df:04:9b:0e:3e:99:63:7c:c0:3e:de: 70:be:6b:58:83:b5:06:d4:d9:d7:37:7f:a7:27:a4:d7:35:30: 84:80:a5:cd:03:01:b9:20:e3:5f:7b:6a:b0:e8:b3:95:d1:1c: 20:cc:af:a5:53:a4:a6:19:36:1c:13:ca:b1:cd:47:33:2e:54: 42:4a:05:a5:39:4a:df:b4:03:f3:a4:28:ca:7b:17:e6:46:72: 3b:9f:0a:55:d6:4c:9f:d9:19:dc:b3:77:ee:0e:3a:40:e9:7f: 92:0a:b4:2a:22:35:a9:38:e1:0c:16:69:25:cd:aa:2c:0b:8e: 68:3b:8b:e4:f8:33:49:1a:65:18:5a:1a:a8:65:4e:e4:e0:11: f4:c0:bd:b1:d7:86:b2:dd:47:cd:cd:9a:62:7a:49:f8:e7:71: f3:80:95:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfv8zaVkYZPVfyTZThLzetHDw2HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5 QUIxQzc4RjAeFw0yNjA1MTIxNjIwNTlaFw0yNjA1MTMxOTI0NTlaMDMxMTAvBgNV BAMTKDA4NjhFRjk2MjM3OTZBNTdENDI4RThDOTc1NzVBRTdENTQwMENBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCROBGa7LQv9pLzhcIs3yeniZF+ 0xfdZ4+kCwfhtLFI7SKK9chBLcqn8MSvagi3MAzIqGsdTfZlgHXMIY/qBauC2GmI zE10qXa5+IfpV3OVkaxMam3Cox0VT7w3WrG5xR6yGgVyz556xfgJjYGYXeNYDw+f r2eKjvelgysNuOPz8138tIOPncuwfyxX9aIp2yftXVZl+bGkrUd+MilpW6oLdgNC iPV9nis0L7zgHoDB1eFOV3Lgp0UcsOAxfoV7APHpR9OHjd4SeDbKgyYYLPK2Yf+n XzBtqvTsZWBzjadU9qpQGKHgr+OolV4H0zXAl/4tlOqh9rrDfdl12NKs9WJnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCGjvliN5alfUKOjJdXWufVQAyugwHwYDVR0j BBgwFoAUxSwSq5sTWbk8bIZAPTtR0Zqxx48wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwNzNhY2UtYTY5MS00ODYzLTljMWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5 QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5QUIxQzc4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTJDMTJBQjlCMTM1OUI5M0M2Qzg2NDAzRDNCNTFEMTlBQjFD NzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUx RDE5QUIxQzc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVUaQmEQLp8cjR+2Z0VRHg/yqDoAOxVOD6I WmSxdJ1NjV33NulsGGNqT8yZYYW07h3EIfKNogGXab20rd+4samaRBWOUeDyctwT gUjGfYHOPFiEarqYHzHrQLFVXZ7BdKvfBJsOPpljfMA+3nC+a1iDtQbU2dc3f6cn pNc1MISApc0DAbkg4197arDos5XRHCDMr6VTpKYZNhwTyrHNRzMuVEJKBaU5St+0 A/OkKMp7F+ZGcjufClXWTJ/ZGdyzd+4OOkDpf5IKtCoiNak44QwWaSXNqiwLjmg7 i+T4M0kaZRhaGqhlTuTgEfTAvbHXhrLdR83NmmJ6SfjncfOAlXE= -----END CERTIFICATE-----Generated at Wed May 13 02:13:13 2026 by rpki-client