$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft File: 52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json) Hash identifier: OabDwLP0U+bvMpUg+jAthQGZsROwqOmPVby0Q9kZgPs= Subject key identifier: 75:E4:3F:BE:CB:8C:D2:B3:56:8D:8B:37:5A:FF:D6:04:79:5C:5F:21 Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86 Certificate issuer: /CN=52145183B5BE1A663FBC5C228102541AC61F9F86 Certificate serial: 14B12A8FDFCC750166B43BD153C692CB8F8C16DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft Manifest number: 0519 Signing time: Mon 23 Mar 2026 05:21:57 +0000 Manifest this update: Mon 23 Mar 2026 05:16:57 +0000 Manifest next update: Thu 26 Mar 2026 10:17:57 +0000 Files and hashes: 1: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: I8J+VKjZlzAYUjuoXbFTNBgkY4GMxQkjdom4zb/4W0c=) 2: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: ejH4Jptb2+nXxwdyhxr2eLVcxmTdzu5eDGJeQynArtM=) 3: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: fon5ouJBtFIaX0z/wzT4hWv6G93kGR3k6i3vPWjBerk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 10:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b1:2a:8f:df:cc:75:01:66:b4:3b:d1:53:c6:92:cb:8f:8c:16:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86 Validity Not Before: Mar 23 05:16:57 2026 GMT Not After : Mar 26 10:17:57 2026 GMT Subject: CN=75E43FBECB8CD2B3568D8B375AFFD604795C5F21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:0d:4f:df:6e:09:20:a3:35:66:de:c9:db: b0:31:fc:2c:61:87:57:bf:e1:4c:71:5d:51:69:35: d3:32:96:bd:1c:62:8f:dc:73:cf:34:86:2f:4d:12: ba:7b:ae:eb:c8:55:fc:63:e5:48:c4:9c:1f:cc:f9: 02:59:df:48:8d:47:35:92:c8:80:6e:f7:32:e1:1f: c7:78:27:49:27:2f:9e:83:51:55:9c:86:d6:0c:19: 55:cc:fa:44:d8:22:f9:8e:fe:6d:55:d6:4c:fd:5c: d2:03:05:82:2f:b6:03:29:1b:d2:08:a3:1f:59:d7: 0c:66:47:57:dc:d0:29:55:0b:37:0c:d7:f3:f2:92: e1:0f:97:94:d5:25:6b:f2:6a:0e:33:96:fd:20:c9: 42:68:eb:12:7f:1c:28:8e:17:d0:4e:c7:0a:bb:4d: 7a:0e:02:2f:3f:b5:b4:df:0e:5c:f8:74:31:ac:42: 89:a0:e9:f1:6d:b5:13:e0:0a:af:49:3b:78:58:a7: 66:ad:9b:8a:21:3f:c6:d8:bd:c4:ab:e1:44:3b:23: 11:7a:93:6c:9b:79:31:7c:66:49:c5:aa:21:98:fb: 45:e9:e0:b1:f7:ba:4b:1f:c3:9b:07:80:ab:be:a4: 6f:d2:8c:bc:75:29:cc:a2:0d:01:cb:8f:d0:bd:6c: 36:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E4:3F:BE:CB:8C:D2:B3:56:8D:8B:37:5A:FF:D6:04:79:5C:5F:21 X509v3 Authority Key Identifier: keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a2:6a:0b:cb:c6:55:d4:18:6c:c2:b8:ac:8c:f7:d5:58:8d: 52:a6:7b:55:e3:40:19:66:16:b2:c3:9e:e0:52:37:48:88:10: 51:fb:47:02:74:e8:5c:12:fd:f0:6c:4d:dc:56:c2:d6:23:fe: 48:6b:37:16:ac:bf:0a:f3:1a:50:80:d9:81:37:2e:a0:21:13: b6:1c:0d:38:9d:f9:ae:5c:b4:0c:9f:12:ae:e2:74:33:73:f6: ca:bc:f1:45:6c:b3:55:2e:45:b3:87:75:79:59:dc:58:5e:46: a0:0d:08:10:d7:c3:58:3e:5d:25:14:7a:5c:de:ab:92:36:7c: 1d:4f:76:38:81:84:6f:cb:6e:df:c6:5e:e2:0d:68:28:7c:03: 60:f9:09:0f:7c:50:ce:bf:67:81:32:58:cb:2d:3a:8b:8f:46: d4:88:7e:15:83:a8:e6:f0:55:0f:08:c5:3c:fd:27:51:92:dd: 21:8a:39:53:c6:8e:59:b7:4c:07:97:83:7e:ac:b4:0f:dc:ea: 10:cd:e1:01:9f:0c:3e:f3:ab:b0:bd:4a:8c:5b:f6:59:a0:fc: 62:df:2d:e2:65:ca:16:cf:61:b7:d6:34:b2:d4:21:d6:a0:fe: 29:f7:88:6f:7f:c4:ad:d8:c3:0c:57:a5:c5:8a:50:e4:eb:6f: e2:19:ad:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLEqj9/MdQFmtDvRU8aSy4+MFtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFD NjFGOUY4NjAeFw0yNjAzMjMwNTE2NTdaFw0yNjAzMjYxMDE3NTdaMDMxMTAvBgNV BAMTKDc1RTQzRkJFQ0I4Q0QyQjM1NjhEOEIzNzVBRkZENjA0Nzk1QzVGMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpw1P324JIKM1Zt7J27Ax/Cxh h1e/4UxxXVFpNdMylr0cYo/cc880hi9NErp7ruvIVfxj5UjEnB/M+QJZ30iNRzWS yIBu9zLhH8d4J0knL56DUVWchtYMGVXM+kTYIvmO/m1V1kz9XNIDBYIvtgMpG9II ox9Z1wxmR1fc0ClVCzcM1/PykuEPl5TVJWvyag4zlv0gyUJo6xJ/HCiOF9BOxwq7 TXoOAi8/tbTfDlz4dDGsQomg6fFttRPgCq9JO3hYp2atm4ohP8bYvcSr4UQ7IxF6 k2ybeTF8ZknFqiGY+0Xp4LH3uksfw5sHgKu+pG/SjLx1KcyiDQHLj9C9bDaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdeQ/vsuM0rNWjYs3Wv/WBHlcXyEwHwYDVR0j BBgwFoAUUhRRg7W+GmY/vFwigQJUGsYfn4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdlODllOC01M2FhLTQ0ZjYtYjZkOC01ODc5MDc4YmY2NjQvMC81MjE0NTE4M0I1 QkUxQTY2M0ZCQzVDMjI4MTAyNTQxQUM2MUY5Rjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFDNjFG OUY4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0 MUFDNjFGOUY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGiagvLxlXUGGzCuKyM99VYjVKme1XjQBlm FrLDnuBSN0iIEFH7RwJ06FwS/fBsTdxWwtYj/khrNxasvwrzGlCA2YE3LqAhE7Yc DTid+a5ctAyfEq7idDNz9sq88UVss1UuRbOHdXlZ3FheRqANCBDXw1g+XSUUelze q5I2fB1PdjiBhG/Lbt/GXuINaCh8A2D5CQ98UM6/Z4EyWMstOouPRtSIfhWDqObw VQ8IxTz9J1GS3SGKOVPGjlm3TAeXg36stA/c6hDN4QGfDD7zq7C9Soxb9lmg/GLf LeJlyhbPYbfWNLLUIdag/in3iG9/xK3YwwxXpcWKUOTrb+IZrV0= -----END CERTIFICATE-----Generated at Tue Mar 24 23:12:42 2026 by rpki-client