$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft File: 52D9A1099AA71A2F408409BE12B3031B5511AE20.mft (raw, json) Hash identifier: PZY4UU7YK/91nr233/XmhSP9H7cYUEcqA4JGg8CVlk4= Subject key identifier: E1:77:8D:26:2F:5A:7E:1E:2F:D8:43:80:4B:92:73:2E:D3:1E:DB:B7 Authority key identifier: 52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 Certificate issuer: /CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Certificate serial: 1A675FB58E182F971608FADF568DCDD0105AEF5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft Manifest number: EC Signing time: Sun 25 Oct 2026 21:23:32 +0000 Manifest this update: Sun 25 Oct 2026 21:18:32 +0000 Manifest next update: Mon 26 Oct 2026 22:58:32 +0000 Files and hashes: 1: 52D9A1099AA71A2F408409BE12B3031B5511AE20.crl (hash: TwxQ1epnWHYUcOprLt9tUk1YuM3IBfJoq+g1geS1hTQ=) 2: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: XTZIiTgv/n33Q5JYlr7SxuQOT3cziTd7vm76FG24Z3Y=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: eCOHpaJr3e3g+S1j1WgdBSHj+x6BIYHKOcTVf2mib5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 22:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:67:5f:b5:8e:18:2f:97:16:08:fa:df:56:8d:cd:d0:10:5a:ef:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Validity Not Before: Oct 25 21:18:32 2026 GMT Not After : Oct 26 22:58:32 2026 GMT Subject: CN=E1778D262F5A7E1E2FD843804B92732ED31EDBB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:d9:ea:13:e3:c7:8a:5b:0c:5d:b0:88:93: eb:52:9b:ef:cc:92:ce:1a:19:4b:ba:63:f0:e6:2e: 7d:01:4c:92:15:52:39:9d:b9:a9:5f:7c:e5:08:7a: 9f:a9:64:78:e0:2e:9c:7f:0a:73:d5:99:c0:fe:ab: 8f:92:38:2b:1c:bf:b5:cf:18:8d:8d:55:d1:d6:37: 5d:b7:5e:19:de:3a:f0:b1:9b:82:d4:c5:d9:5e:87: 98:2b:91:03:ad:97:92:27:7d:99:17:cf:94:ec:8b: 31:b7:a3:1e:8e:aa:87:f7:e2:5a:94:44:1e:30:ed: 8a:31:8b:2a:31:b5:0e:39:ff:fc:5a:d5:71:e9:88: 82:29:ad:4b:62:97:b9:2c:55:bb:3c:b3:f4:9f:bb: 37:4e:70:13:4d:09:a4:72:7d:a5:76:66:20:5e:29: 0a:37:8f:0e:e0:93:40:6d:d0:95:21:da:db:ae:01: a3:55:9f:c2:ac:be:83:48:b9:a4:14:ec:20:36:ed: c3:0b:58:cc:33:1d:bc:bd:16:b4:14:23:b9:0f:bc: 84:61:01:e2:28:c6:54:0a:5f:1b:d2:91:a1:4e:d6: 30:67:14:bd:6a:13:76:ea:32:a4:8b:44:e9:96:55: 38:c1:db:49:b7:fb:b8:31:ee:56:04:6d:02:be:bd: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:77:8D:26:2F:5A:7E:1E:2F:D8:43:80:4B:92:73:2E:D3:1E:DB:B7 X509v3 Authority Key Identifier: keyid:52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:52:87:a1:d2:70:00:d2:c0:a7:b7:4d:36:29:2c:94:14:f9: 73:45:7e:1b:9c:1a:c9:f9:d4:43:d5:10:fd:a6:72:3c:58:71: 6c:09:51:3d:21:6e:f8:8b:15:4f:1b:50:9c:1e:ca:32:8b:b9: f6:0f:37:ce:7e:c5:b6:f9:25:41:14:b1:fa:7f:bc:59:91:42: 33:8f:d8:41:73:46:a7:07:21:c4:a1:8d:b1:48:1d:a3:b2:be: d1:94:c4:75:23:7e:a8:ae:2f:c0:02:01:bd:59:e4:6d:0f:71: 6a:9b:74:e2:ee:31:96:64:d6:7d:80:a6:54:ef:de:0b:25:a3: cd:89:a8:48:7d:e3:50:7d:c3:81:6b:7a:28:2e:2e:cb:1c:9f: cb:f2:f5:8b:05:1c:74:34:50:72:38:23:5e:96:df:9d:f5:38: 39:d5:f4:72:00:37:04:d0:f2:c4:15:52:11:71:12:43:40:1d: 0b:72:61:55:10:ec:aa:ac:5f:28:47:d0:df:0e:53:d5:c2:4b: 0e:a3:16:1d:5e:40:04:37:60:da:b6:76:15:f8:d8:ad:9f:4c: 5a:be:14:f0:47:8b:cb:0a:5e:0e:28:08:3c:40:f1:1d:b7:92: 3d:74:c2:95:33:12:c3:76:e1:1b:29:6a:27:db:ad:74:84:6f: b9:df:7f:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmdftY4YL5cWCPrfVo3N0BBa71swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1 NTExQUUyMDAeFw0yNjEwMjUyMTE4MzJaFw0yNjEwMjYyMjU4MzJaMDMxMTAvBgNV BAMTKEUxNzc4RDI2MkY1QTdFMUUyRkQ4NDM4MDRCOTI3MzJFRDMxRURCQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEpNnqE+PHilsMXbCIk+tSm+/M ks4aGUu6Y/DmLn0BTJIVUjmdualffOUIep+pZHjgLpx/CnPVmcD+q4+SOCscv7XP GI2NVdHWN123XhneOvCxm4LUxdleh5grkQOtl5InfZkXz5TsizG3ox6Oqof34lqU RB4w7YoxiyoxtQ45//xa1XHpiIIprUtil7ksVbs8s/SfuzdOcBNNCaRyfaV2ZiBe KQo3jw7gk0Bt0JUh2tuuAaNVn8KsvoNIuaQU7CA27cMLWMwzHby9FrQUI7kPvIRh AeIoxlQKXxvSkaFO1jBnFL1qE3bqMqSLROmWVTjB20m3+7gx7lYEbQK+veAJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4XeNJi9afh4v2EOAS5JzLtMe27cwHwYDVR0j BBgwFoAUUtmhCZqnGi9AhAm+ErMDG1URriAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdmNmU1N2ItNGMyNi00NDJiLThhZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5 QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1NTExQUUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MkQ5QTEwOTlBQTcxQTJGNDA4NDA5QkUxMkIzMDMxQjU1MTFB RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAz MUI1NTExQUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9Sh6HScADSwKe3TTYpLJQU+XNFfhucGsn5 1EPVEP2mcjxYcWwJUT0hbviLFU8bUJweyjKLufYPN85+xbb5JUEUsfp/vFmRQjOP 2EFzRqcHIcShjbFIHaOyvtGUxHUjfqiuL8ACAb1Z5G0PcWqbdOLuMZZk1n2AplTv 3gslo82JqEh941B9w4FreiguLsscn8vy9YsFHHQ0UHI4I16W3531ODnV9HIANwTQ 8sQVUhFxEkNAHQtyYVUQ7KqsXyhH0N8OU9XCSw6jFh1eQAQ3YNq2dhX42K2fTFq+ FPBHi8sKXg4oCDxA8R23kj10wpUzEsN24RspaifbrXSEb7nff+A= -----END CERTIFICATE-----Generated at Mon Oct 26 13:57:11 2026 by rpki-client