$ rpki-client -vvf rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft File: 52D9A1099AA71A2F408409BE12B3031B5511AE20.mft (raw, json) Hash identifier: N+MRvNQN602+JqQkhbNNYI4Fx/rzPobmXUnxgJa75oA= Subject key identifier: 92:4F:25:A9:37:2F:76:B4:1B:C5:21:48:27:06:B4:17:DF:EA:8E:E4 Authority key identifier: 52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 Certificate issuer: /CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Certificate serial: 53902178748B535DE463F5A47E971392E7F29B42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 16:35:49 +0000 Manifest this update: Fri 19 Jun 2026 16:30:49 +0000 Manifest next update: Sat 20 Jun 2026 17:06:49 +0000 Files and hashes: 1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: XTZIiTgv/n33Q5JYlr7SxuQOT3cziTd7vm76FG24Z3Y=) 2: 52D9A1099AA71A2F408409BE12B3031B5511AE20.crl (hash: K7xDJ7HZdUfIwsWkXWCKP7TNjFkXgjAIKIUW0FKwRKA=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: eCOHpaJr3e3g+S1j1WgdBSHj+x6BIYHKOcTVf2mib5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:90:21:78:74:8b:53:5d:e4:63:f5:a4:7e:97:13:92:e7:f2:9b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Validity Not Before: Jun 19 16:30:49 2026 GMT Not After : Jun 20 17:06:49 2026 GMT Subject: CN=924F25A9372F76B41BC521482706B417DFEA8EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:90:01:8f:d4:47:26:5b:74:e2:02:a3:c9: 10:5c:99:03:1b:5a:0e:6d:b2:97:73:a7:a4:d1:71: be:0e:b1:ab:69:f3:b9:03:e8:c9:7f:5d:65:02:c2: fe:c8:7e:da:b2:c9:16:14:af:dc:d6:07:01:90:ac: ea:5c:fd:f7:f0:6c:b0:cc:e6:0e:62:0b:2b:4a:1e: 7b:6d:c4:fa:67:c8:3b:c4:ba:2b:82:20:8c:4c:1c: f7:d2:02:07:f7:86:61:31:71:ca:f4:3e:4f:23:00: c3:4f:83:7c:2b:00:7b:ca:9c:1d:f1:e2:cc:c0:29: 1b:82:12:af:df:61:9c:34:51:5b:46:27:5c:88:03: 10:05:0d:7b:90:ea:d6:67:d8:87:77:f3:7c:99:09: d2:f4:90:7c:bd:7b:67:d1:38:f3:a1:07:ad:54:16: 66:a9:28:6f:14:9e:de:fb:62:36:56:c7:5a:79:9b: 2a:de:46:3b:ff:3f:cd:de:8a:94:a7:4a:fd:ca:8e: dd:4f:9a:dc:d1:60:1c:57:66:93:29:dc:79:dc:ea: 5a:31:20:10:10:a7:58:70:c5:f6:24:6d:e2:0f:b8: 4d:5e:10:3b:d2:20:56:31:12:8b:f5:64:2a:fe:74: 24:37:04:bf:84:f6:38:9e:39:03:b8:d8:4e:88:23: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4F:25:A9:37:2F:76:B4:1B:C5:21:48:27:06:B4:17:DF:EA:8E:E4 X509v3 Authority Key Identifier: keyid:52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8a:2e:fd:1e:bc:68:ca:8d:b1:87:f2:74:bc:ad:07:4c:ad: 30:a3:be:8e:d0:0e:d7:79:b6:00:e1:c6:04:62:61:62:67:88: 8b:bf:71:7a:bc:64:38:4b:98:60:1c:9d:9b:2b:e1:d6:94:0a: d2:6e:c5:ca:40:65:22:ab:8c:42:c8:8c:ba:da:e3:f4:0b:24: 9c:9a:c6:38:9a:e3:9a:a6:c4:76:68:65:f1:3d:8b:2e:51:7c: 98:6e:b2:7d:2a:dc:a7:3f:4a:01:33:71:57:da:c8:10:96:9e: bf:d0:58:75:5d:8a:cd:67:f9:26:3e:82:a1:25:41:ba:61:fd: 2a:dd:f8:6b:df:f0:c3:28:1a:3a:76:a7:e5:97:c4:d5:32:be: f5:2d:92:15:d9:28:b8:a7:f2:80:98:8c:24:21:24:cb:66:26: ea:da:c0:5e:c9:34:e7:0f:de:93:b0:53:51:90:4d:5c:3d:fe: c5:e8:eb:ea:5b:85:0b:40:02:f4:a5:fc:95:16:85:51:8e:02: 0d:c1:eb:fd:40:9d:5e:17:80:d9:5b:a4:a5:03:0f:e7:74:dd: e8:a3:70:a8:49:9c:83:b9:30:14:79:38:b9:94:b8:b2:00:3d: 37:20:29:76:5c:e9:b9:79:67:21:4e:dc:20:f2:a0:36:92:79: 6b:5e:f1:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5AheHSLU13kY/WkfpcTkufym0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1 NTExQUUyMDAeFw0yNjA2MTkxNjMwNDlaFw0yNjA2MjAxNzA2NDlaMDMxMTAvBgNV BAMTKDkyNEYyNUE5MzcyRjc2QjQxQkM1MjE0ODI3MDZCNDE3REZFQThFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa/ZABj9RHJlt04gKjyRBcmQMb Wg5tspdzp6TRcb4Osatp87kD6Ml/XWUCwv7IftqyyRYUr9zWBwGQrOpc/ffwbLDM 5g5iCytKHnttxPpnyDvEuiuCIIxMHPfSAgf3hmExccr0Pk8jAMNPg3wrAHvKnB3x 4szAKRuCEq/fYZw0UVtGJ1yIAxAFDXuQ6tZn2Id383yZCdL0kHy9e2fROPOhB61U FmapKG8Unt77YjZWx1p5myreRjv/P83eipSnSv3Kjt1PmtzRYBxXZpMp3Hnc6lox IBAQp1hwxfYkbeIPuE1eEDvSIFYxEov1ZCr+dCQ3BL+E9jieOQO42E6II1PlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkk8lqTcvdrQbxSFIJwa0F9/qjuQwHwYDVR0j BBgwFoAUUtmhCZqnGi9AhAm+ErMDG1URriAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdmNmU1N2ItNGMyNi00NDJiLThhZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5 QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1NTExQUUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MkQ5QTEwOTlBQTcxQTJGNDA4NDA5QkUxMkIzMDMxQjU1MTFB RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAz MUI1NTExQUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6KLv0evGjKjbGH8nS8rQdMrTCjvo7QDtd5 tgDhxgRiYWJniIu/cXq8ZDhLmGAcnZsr4daUCtJuxcpAZSKrjELIjLra4/QLJJya xjia45qmxHZoZfE9iy5RfJhusn0q3Kc/SgEzcVfayBCWnr/QWHVdis1n+SY+gqEl Qbph/Srd+Gvf8MMoGjp2p+WXxNUyvvUtkhXZKLin8oCYjCQhJMtmJurawF7JNOcP 3pOwU1GQTVw9/sXo6+pbhQtAAvSl/JUWhVGOAg3B6/1AnV4XgNlbpKUDD+d03eij cKhJnIO5MBR5OLmUuLIAPTcgKXZc6bl5ZyFO3CDyoDaSeWte8RI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:56 2026 by rpki-client