$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft File: 52D9A1099AA71A2F408409BE12B3031B5511AE20.mft (raw, json) Hash identifier: ba0JUc3uIDjTr1ttBXh7NOuPUfTHx3+w/IBVkNlymu0= Subject key identifier: D3:DE:DD:F8:35:4C:C9:9A:7E:ED:46:0C:CF:11:B9:84:0E:01:67:19 Authority key identifier: 52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 Certificate issuer: /CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Certificate serial: 70942917E72C81ED82BC4E2FC4490DB1A4988B7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft Manifest number: 9D Signing time: Thu 27 Aug 2026 07:19:32 +0000 Manifest this update: Thu 27 Aug 2026 07:14:32 +0000 Manifest next update: Fri 28 Aug 2026 09:53:32 +0000 Files and hashes: 1: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: eCOHpaJr3e3g+S1j1WgdBSHj+x6BIYHKOcTVf2mib5Y=) 2: 52D9A1099AA71A2F408409BE12B3031B5511AE20.crl (hash: xzqxkhDU7b3NWumAuVxGiL4oMuCZYakItoJr2CjW0qk=) 3: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: XTZIiTgv/n33Q5JYlr7SxuQOT3cziTd7vm76FG24Z3Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Aug 2026 02:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:94:29:17:e7:2c:81:ed:82:bc:4e:2f:c4:49:0d:b1:a4:98:8b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Validity Not Before: Aug 27 07:14:32 2026 GMT Not After : Aug 28 09:53:32 2026 GMT Subject: CN=D3DEDDF8354CC99A7EED460CCF11B9840E016719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:88:95:1d:59:c4:47:b5:38:f5:fb:74:91: 11:d0:75:cd:3b:ea:6a:0e:b5:a1:45:ac:cb:db:e4: 90:05:bb:21:17:9b:6f:03:78:93:20:d6:56:20:79: 22:43:9a:a5:cc:50:2a:86:f2:bd:d2:6f:ec:33:4f: 71:d4:aa:fd:21:fb:78:ac:af:96:49:90:f3:f8:9b: 72:87:df:3b:aa:51:b8:9b:28:cc:c3:ec:cc:91:be: 25:14:b1:e6:d0:26:e5:4d:98:eb:13:5b:be:00:a7: 50:ea:f3:93:16:cc:98:ba:75:be:ad:8a:79:44:d8: b2:23:cc:bb:90:88:db:dd:29:24:e7:4d:20:08:5c: be:64:fa:71:18:4b:98:ed:46:69:c0:ee:30:3a:47: d5:e3:db:7d:f7:8e:4a:9b:46:28:a5:9a:cb:39:84: 91:23:98:8f:ac:4d:0c:97:32:31:7c:89:25:51:ff: e7:3e:54:e6:8d:ed:37:45:62:39:b9:f8:2f:ce:29: da:d9:a3:aa:e9:ba:54:f7:20:69:e6:75:f0:83:31: 3c:0d:b1:5b:69:c9:72:c3:08:93:fa:ef:b5:4d:49: de:e9:15:4b:de:4c:d2:ad:4d:4a:88:f2:41:99:ea: 52:b4:89:cb:3c:e5:63:9b:50:ef:ba:22:b5:e1:12: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DE:DD:F8:35:4C:C9:9A:7E:ED:46:0C:CF:11:B9:84:0E:01:67:19 X509v3 Authority Key Identifier: keyid:52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d5:3c:2d:3b:89:d2:8a:0b:b2:08:da:b9:6e:f2:4b:5a:23: 6f:5e:15:df:66:df:b8:a4:ed:ae:90:6f:41:03:7b:3f:36:56: 8d:1e:e1:bb:32:2d:4d:45:83:70:64:7f:04:67:c4:6f:20:f6: 4a:b3:33:b7:bd:25:ec:b5:21:4c:e7:26:3c:25:56:06:36:84: fa:79:12:c8:5e:99:5d:58:ee:55:11:d9:e0:6e:fc:55:46:7e: 58:d8:15:15:d8:bd:19:cc:1b:8d:8d:00:34:40:4d:b5:9a:0a: fc:a0:b9:c9:1d:b0:39:6b:f3:74:b4:66:32:6d:39:d3:7d:7e: ea:55:d1:3b:e2:a3:6f:f2:3c:34:2e:67:08:5b:56:c1:b5:a2: c6:ab:bf:31:8b:96:58:72:19:bf:75:f1:50:2d:73:bb:dd:59: 41:74:51:46:c2:1d:dc:e4:a8:fc:bf:fc:46:93:ae:7e:55:29: 7c:da:3f:7f:25:e6:cd:c6:d5:17:a8:d2:9a:76:a4:34:eb:dc: 41:20:34:d3:73:97:a6:a3:46:59:ef:95:29:89:71:89:8f:48: 60:a0:a2:dc:d4:ec:33:a7:f4:a8:ee:c5:7c:30:ab:84:9c:52: e5:bb:fb:ab:32:65:45:e1:35:85:f6:31:1e:a5:15:0a:60:ad: 21:07:8d:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJQpF+csge2CvE4vxEkNsaSYi3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1 NTExQUUyMDAeFw0yNjA4MjcwNzE0MzJaFw0yNjA4MjgwOTUzMzJaMDMxMTAvBgNV BAMTKEQzREVEREY4MzU0Q0M5OUE3RUVENDYwQ0NGMTFCOTg0MEUwMTY3MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmboiVHVnER7U49ft0kRHQdc07 6moOtaFFrMvb5JAFuyEXm28DeJMg1lYgeSJDmqXMUCqG8r3Sb+wzT3HUqv0h+3is r5ZJkPP4m3KH3zuqUbibKMzD7MyRviUUsebQJuVNmOsTW74Ap1Dq85MWzJi6db6t inlE2LIjzLuQiNvdKSTnTSAIXL5k+nEYS5jtRmnA7jA6R9Xj2333jkqbRiilmss5 hJEjmI+sTQyXMjF8iSVR/+c+VOaN7TdFYjm5+C/OKdrZo6rpulT3IGnmdfCDMTwN sVtpyXLDCJP677VNSd7pFUveTNKtTUqI8kGZ6lK0ics85WObUO+6IrXhEqDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU097d+DVMyZp+7UYMzxG5hA4BZxkwHwYDVR0j BBgwFoAUUtmhCZqnGi9AhAm+ErMDG1URriAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdmNmU1N2ItNGMyNi00NDJiLThhZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5 QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1NTExQUUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MkQ5QTEwOTlBQTcxQTJGNDA4NDA5QkUxMkIzMDMxQjU1MTFB RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAz MUI1NTExQUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnVPC07idKKC7II2rlu8ktaI29eFd9m37ik 7a6Qb0EDez82Vo0e4bsyLU1Fg3BkfwRnxG8g9kqzM7e9Jey1IUznJjwlVgY2hPp5 EshemV1Y7lUR2eBu/FVGfljYFRXYvRnMG42NADRATbWaCvyguckdsDlr83S0ZjJt OdN9fupV0Tvio2/yPDQuZwhbVsG1osarvzGLllhyGb918VAtc7vdWUF0UUbCHdzk qPy//EaTrn5VKXzaP38l5s3G1Reo0pp2pDTr3EEgNNNzl6ajRlnvlSmJcYmPSGCg otzU7DOn9KjuxXwwq4ScUuW7+6syZUXhNYX2MR6lFQpgrSEHjT0= -----END CERTIFICATE-----Generated at Thu Aug 27 17:40:45 2026 by rpki-client