$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: UFP1vYHL0FRP3vWfytLpKuWS4IMTZZIT7k22NIYPGVE= Subject key identifier: 9B:5C:0D:C1:0B:69:D2:A9:87:6C:AA:D9:EE:54:29:BF:8C:4A:11:C8 Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 7286E8B35BD666B347CCE0B5ECFA6110967267C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: E3 Signing time: Fri 06 Mar 2026 04:40:54 +0000 Manifest this update: Fri 06 Mar 2026 04:35:54 +0000 Manifest next update: Mon 09 Mar 2026 06:59:54 +0000 Files and hashes: 1: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: W9V+w2yKppP+6rF/fizvnUTRtC8CPB7EYR5XG3srZFk=) 2: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: pR6eogbZvQzPFnI0kZLcItGmRoYFBBreikW5pxdST7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 06:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:86:e8:b3:5b:d6:66:b3:47:cc:e0:b5:ec:fa:61:10:96:72:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Mar 6 04:35:54 2026 GMT Not After : Mar 9 06:59:54 2026 GMT Subject: CN=9B5C0DC10B69D2A9876CAAD9EE5429BF8C4A11C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:d3:27:db:49:44:9f:ae:4e:8a:ee:49:96: 30:65:8a:22:64:24:90:8f:ee:e5:3c:7c:66:87:8f: 5a:52:ab:b6:8e:b9:e6:91:5e:95:f0:ba:0d:13:c5: 05:61:7d:9e:9e:b7:68:34:75:a3:0c:4d:e6:92:a9: 1f:53:c3:6d:79:d8:2b:90:85:20:b6:56:9e:e0:72: f7:6a:e3:e8:f7:72:5b:f0:55:69:92:17:b5:d8:85: d4:79:81:e1:a9:0e:fb:1c:a3:14:65:fc:81:ea:2e: 19:11:37:c7:b7:ea:3d:d9:82:34:d0:b6:61:8a:65: 72:ff:fa:1d:07:24:c2:4c:66:1a:fd:ec:5c:72:2c: 54:53:f9:3d:91:9c:83:67:7e:f4:09:ce:cb:3d:96: 41:71:e2:99:5a:f6:9b:db:20:a8:94:17:5a:cf:7c: 4f:ab:9d:03:0d:eb:22:b6:24:eb:94:66:4b:af:f3: 53:3c:e9:c7:02:c5:3a:b1:11:15:32:64:40:0b:03: bb:83:81:a6:ee:19:5e:78:fd:ea:22:5b:61:40:9a: 49:66:06:44:d7:0e:41:bc:4b:38:9a:1d:f6:12:0e: 4e:79:78:22:d0:2a:06:17:96:65:2e:a8:94:75:27: 2f:11:48:d9:d4:04:5d:74:77:f7:6b:a0:9b:cd:31: 74:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5C:0D:C1:0B:69:D2:A9:87:6C:AA:D9:EE:54:29:BF:8C:4A:11:C8 X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a5:28:e0:29:88:14:ce:6d:ef:c3:c5:71:00:05:9b:b6:ed: 50:92:4f:bb:f7:e8:68:8f:1c:31:cd:e8:7a:c7:88:0b:57:ac: 54:cb:05:86:89:d1:ff:dd:fd:e2:d4:73:e7:6c:75:6b:a9:18: 14:09:9e:5c:9f:24:c1:a5:5d:d1:56:c9:24:55:0a:7b:54:a7: f1:fa:6d:93:90:a4:ff:39:fb:d6:c8:b5:4f:81:ff:50:73:3d: 90:2a:89:06:ea:73:4d:8b:72:04:b8:df:ae:99:d9:da:95:8a: 23:b0:0b:bc:8f:94:cc:b1:1d:55:d3:05:f3:44:62:97:14:84: 2a:1f:72:f2:86:69:43:3f:23:7a:19:60:88:3f:1b:cd:0d:b9: 55:6f:cc:0f:5a:e1:78:39:75:0c:67:84:c8:24:87:b4:07:29: 4d:ef:c8:73:7f:49:0c:21:ca:a8:8d:05:cd:37:bc:d6:15:a2: 9f:25:ee:9f:0c:d1:a4:8d:c9:54:a5:72:18:0a:bd:41:b1:7a: d0:38:52:06:e1:b1:ad:c6:bd:bf:d3:b2:e0:b4:42:f8:32:b6: 60:be:89:48:04:53:44:45:39:10:04:37:98:d9:8e:5d:7f:da: 45:f8:ae:c5:6c:52:79:3e:04:62:67:36:74:37:5e:5b:c0:a4: 42:6b:4f:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcobos1vWZrNHzOC17PphEJZyZ8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNjAzMDYwNDM1NTRaFw0yNjAzMDkwNjU5NTRaMDMxMTAvBgNV BAMTKDlCNUMwREMxMEI2OUQyQTk4NzZDQUFEOUVFNTQyOUJGOEM0QTExQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEP9Mn20lEn65Oiu5JljBliiJk JJCP7uU8fGaHj1pSq7aOueaRXpXwug0TxQVhfZ6et2g0daMMTeaSqR9Tw2152CuQ hSC2Vp7gcvdq4+j3clvwVWmSF7XYhdR5geGpDvscoxRl/IHqLhkRN8e36j3ZgjTQ tmGKZXL/+h0HJMJMZhr97FxyLFRT+T2RnINnfvQJzss9lkFx4pla9pvbIKiUF1rP fE+rnQMN6yK2JOuUZkuv81M86ccCxTqxERUyZEALA7uDgabuGV54/eoiW2FAmklm BkTXDkG8SziaHfYSDk55eCLQKgYXlmUuqJR1Jy8RSNnUBF10d/droJvNMXSNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm1wNwQtp0qmHbKrZ7lQpv4xKEcgwHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2lKOApiBTObe/DxXEABZu27VCST7v36GiP HDHN6HrHiAtXrFTLBYaJ0f/d/eLUc+dsdWupGBQJnlyfJMGlXdFWySRVCntUp/H6 bZOQpP85+9bItU+B/1BzPZAqiQbqc02LcgS4366Z2dqViiOwC7yPlMyxHVXTBfNE YpcUhCofcvKGaUM/I3oZYIg/G80NuVVvzA9a4Xg5dQxnhMgkh7QHKU3vyHN/SQwh yqiNBc03vNYVop8l7p8M0aSNyVSlchgKvUGxetA4Ugbhsa3Gvb/TsuC0QvgytmC+ iUgEU0RFORAEN5jZjl1/2kX4rsVsUnk+BGJnNnQ3XlvApEJrTzs= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:19 2026 by rpki-client