$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: 7aeK8ANF+HovonzvqkMUKV9GN1hHpIyZrRPwsjUm9tk= Subject key identifier: D0:2A:6B:3A:28:BB:7C:8A:2D:22:7B:2B:AE:99:BE:9D:B5:20:45:7D Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 280E76979EE474E293693BDD284EE1500BDC9236 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: F8 Signing time: Tue 21 Apr 2026 15:00:56 +0000 Manifest this update: Tue 21 Apr 2026 14:55:56 +0000 Manifest next update: Fri 24 Apr 2026 18:12:56 +0000 Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: pR6eogbZvQzPFnI0kZLcItGmRoYFBBreikW5pxdST7Q=) 2: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: lsFXwp6lL64nA1/lDl6MsWZK96h9CD8RrO50tLZP7Os=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0e:76:97:9e:e4:74:e2:93:69:3b:dd:28:4e:e1:50:0b:dc:92:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Apr 21 14:55:56 2026 GMT Not After : Apr 24 18:12:56 2026 GMT Subject: CN=D02A6B3A28BB7C8A2D227B2BAE99BE9DB520457D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:43:8c:e9:15:eb:ff:f1:93:8a:89:62:48:82: 88:61:a0:8d:fd:aa:58:2a:be:e6:61:a4:fd:c1:48: cf:e2:4f:ac:95:a6:e5:90:75:40:27:52:5d:da:d0: 75:51:31:d9:32:ff:a2:64:f7:85:b7:df:63:35:d0: 66:6f:4d:5d:d2:bd:3e:6a:9d:24:05:e3:81:40:27: 46:42:27:4d:9a:79:d0:61:b3:a7:df:e9:d9:a6:13: ff:30:99:a2:61:f6:1a:81:ae:59:37:86:40:e6:cf: 43:3b:32:d7:6a:0e:b1:9d:b7:1a:75:e6:84:a5:1b: 6c:39:50:3f:6c:01:03:15:1a:c8:0c:63:98:22:c2: 6c:d1:93:52:a5:89:3b:9a:f2:ce:42:d9:7e:79:c6: d0:cc:83:b3:09:72:45:49:91:6e:15:6e:95:a6:ea: bd:44:2b:12:c5:b1:f8:c8:af:b5:5c:4b:43:6f:64: a3:ff:86:58:0c:19:fb:df:23:57:88:a2:19:85:4c: 40:cf:c6:f5:2f:9b:11:e7:40:52:0f:0e:36:a9:02: 72:7a:12:d5:01:08:1d:8a:b2:92:25:23:d8:2f:54: 59:02:fa:6b:ad:67:de:e4:a7:ea:ae:85:e0:ef:bc: 88:ba:f6:cb:d3:cf:13:b9:59:bd:c4:55:4e:cf:35: 5e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:2A:6B:3A:28:BB:7C:8A:2D:22:7B:2B:AE:99:BE:9D:B5:20:45:7D X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:79:00:ea:ec:0f:a1:09:b5:70:ac:67:23:b9:54:62:8f:48: 4b:b3:66:93:aa:c5:f1:11:05:d8:b8:1d:20:2c:4b:b9:5e:e1: 9c:3e:8d:3a:ce:98:6b:24:e9:09:15:27:b5:a9:08:30:a0:f0: 32:81:1e:04:f2:56:3b:5e:48:90:67:57:b4:aa:4a:c3:7f:9b: 5c:e6:f8:4a:7f:75:7d:00:e7:66:59:ae:89:13:d1:f5:aa:93: 8c:c5:0c:5e:b3:f8:68:23:98:df:ba:84:c7:75:4e:81:f6:6a: c8:7c:1f:d7:62:63:4d:3b:6f:62:59:1d:cb:57:37:aa:14:e2: 75:99:78:e6:64:86:fe:71:44:76:cd:a2:02:cb:f2:fd:c5:7d: ca:8c:37:ab:22:ab:7f:46:7b:bf:25:e0:3d:f4:28:74:6e:b8: 78:b8:72:98:b3:8b:08:89:75:a3:7c:cc:a1:28:08:ef:36:e2: 74:0f:30:e4:1f:33:24:1a:d4:8e:86:36:04:f7:cf:a4:82:ef: db:38:be:96:07:3b:d0:8f:c7:17:fb:86:21:0a:96:5e:d3:17: 99:e2:5b:90:7e:d9:1d:b9:b8:76:74:13:e0:31:30:c1:a6:e6: 60:2e:54:d0:b1:43:22:2b:ca:3c:1a:47:55:af:f1:e5:af:8b: f9:0c:63:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKA52l57kdOKTaTvdKE7hUAvckjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNjA0MjExNDU1NTZaFw0yNjA0MjQxODEyNTZaMDMxMTAvBgNV BAMTKEQwMkE2QjNBMjhCQjdDOEEyRDIyN0IyQkFFOTlCRTlEQjUyMDQ1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgQ4zpFev/8ZOKiWJIgohhoI39 qlgqvuZhpP3BSM/iT6yVpuWQdUAnUl3a0HVRMdky/6Jk94W332M10GZvTV3SvT5q nSQF44FAJ0ZCJ02aedBhs6ff6dmmE/8wmaJh9hqBrlk3hkDmz0M7MtdqDrGdtxp1 5oSlG2w5UD9sAQMVGsgMY5giwmzRk1KliTua8s5C2X55xtDMg7MJckVJkW4VbpWm 6r1EKxLFsfjIr7VcS0NvZKP/hlgMGfvfI1eIohmFTEDPxvUvmxHnQFIPDjapAnJ6 EtUBCB2KspIlI9gvVFkC+mutZ97kp+quheDvvIi69svTzxO5Wb3EVU7PNV6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0CprOii7fIotInsrrpm+nbUgRX0wHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG15AOrsD6EJtXCsZyO5VGKPSEuzZpOqxfER Bdi4HSAsS7le4Zw+jTrOmGsk6QkVJ7WpCDCg8DKBHgTyVjteSJBnV7SqSsN/m1zm +Ep/dX0A52ZZrokT0fWqk4zFDF6z+GgjmN+6hMd1ToH2ash8H9diY007b2JZHctX N6oU4nWZeOZkhv5xRHbNogLL8v3FfcqMN6siq39Ge78l4D30KHRuuHi4cpiziwiJ daN8zKEoCO824nQPMOQfMyQa1I6GNgT3z6SC79s4vpYHO9CPxxf7hiEKll7TF5ni W5B+2R25uHZ0E+AxMMGm5mAuVNCxQyIryjwaR1Wv8eWvi/kMY6g= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:14 2026 by rpki-client