$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft File: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft (raw, json) Hash identifier: jyfLWqtciJyojmfOOowIEOIPUOo9WCySVyRCoKF0+7w= Subject key identifier: E2:C6:C1:9B:89:AE:12:C6:DB:37:C6:D1:21:47:52:60:09:AD:32:71 Authority key identifier: C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F Certificate issuer: /CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Certificate serial: 142A30FF7D9E30A61CD34932F293B2A7E08C1B4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft Manifest number: EE Signing time: Sun 25 Oct 2026 21:33:41 +0000 Manifest this update: Sun 25 Oct 2026 21:28:41 +0000 Manifest next update: Tue 27 Oct 2026 01:08:41 +0000 Files and hashes: 1: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: 5StnOeqZ96buXCGi/ZTPekGCsI1j8G00cwvVyv/D23k=) 2: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: yAZGzCFckEolEtkEocUhLNSw4BV4DJZdNzdA0tVkGtA=) 3: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl (hash: D/v8QQqmS8BtJkzbwmwjD6FNZ8qb3zxdf7q7VCvOkbU=) 4: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: 3sTXjzHUOLPeEyAojCjuo6mjJbiX0Eb7eAu+BmtWebk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 01:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:2a:30:ff:7d:9e:30:a6:1c:d3:49:32:f2:93:b2:a7:e0:8c:1b:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Validity Not Before: Oct 25 21:28:41 2026 GMT Not After : Oct 27 01:08:41 2026 GMT Subject: CN=E2C6C19B89AE12C6DB37C6D12147526009AD3271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5a:6a:72:83:af:7f:0e:e1:e8:87:2e:57:e8: 92:39:a6:63:6f:db:4a:5e:86:0c:66:4c:c6:a1:a2: a7:af:78:d4:f9:e4:ac:ae:9f:e3:c0:47:19:59:cc: 81:a9:ef:d5:17:0b:32:28:cd:7b:17:11:86:65:11: e6:18:5b:56:a7:a4:11:9a:68:85:e6:d3:3b:62:d5: e1:61:1a:f0:8f:00:ac:6c:d7:0e:d9:62:e6:06:20: 21:2b:5b:6b:5a:3e:76:bf:cc:73:a0:75:8d:eb:ca: 18:2b:28:d2:fb:dc:14:d7:07:5b:11:2a:00:67:56: 8f:32:31:7e:9b:a2:d7:38:f8:38:23:11:77:62:a1: 6c:23:08:ed:54:03:1d:03:f5:c3:4d:f6:6b:f1:73: 39:4c:d9:a5:76:cd:bf:94:18:fa:36:43:4a:4a:7e: c6:6a:df:8b:53:04:8f:d5:a8:ab:c8:c3:ea:f7:b2: 49:f6:d9:af:31:26:8b:37:c5:be:0b:8a:f6:ca:33: ad:a3:64:92:13:89:5b:3d:46:c0:10:92:f4:9a:ec: e2:ad:c8:b0:93:41:36:6e:99:54:8b:48:46:f7:82: da:f8:41:9d:9a:0e:a0:2b:98:c4:0b:72:96:8c:37: 0b:4c:29:b3:92:db:9a:73:f2:71:ea:d4:4e:15:f6: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C6:C1:9B:89:AE:12:C6:DB:37:C6:D1:21:47:52:60:09:AD:32:71 X509v3 Authority Key Identifier: keyid:C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d3:66:f3:b8:33:19:a6:c1:2c:d8:50:4f:c1:d3:20:33:da: db:0f:e5:b8:11:26:0e:9c:31:dd:c7:f1:b8:48:6e:53:19:7c: 94:82:d9:19:a5:cd:dd:d5:18:68:f6:f9:ed:8e:be:1c:cf:1d: 36:a3:2f:a7:97:1f:7d:b2:e9:79:c2:24:3e:0b:e0:d1:cd:45: b5:3a:b2:e2:ca:03:9a:53:4b:8d:19:27:94:87:c5:bc:f0:08: 0e:a8:f3:97:cd:23:5e:fa:78:95:5b:7c:9b:97:af:79:91:92: 1e:b1:31:cc:d1:ee:59:b7:a3:69:4e:cf:d8:c0:9a:ba:88:44: ee:b5:ab:42:cf:46:03:87:05:88:78:35:02:e8:f1:98:e7:be: 24:61:38:c9:5d:41:a2:6b:7d:8b:10:62:23:56:1a:7e:0c:fe: 3a:fe:b6:ed:c3:ed:1c:10:9d:2b:ca:76:21:24:e0:15:67:c3: c9:c1:80:b1:0e:e8:f9:a9:ac:08:c3:6f:61:d5:ec:5e:61:56: 8b:37:d9:84:ca:40:ec:fb:47:1f:61:50:f2:b8:47:99:79:3d: bf:8b:d8:2c:45:f9:43:74:40:92:45:a6:0e:26:05:3e:d7:c5: 9f:5c:05:62:cc:79:83:32:24:f3:1d:57:8f:e7:b2:2e:36:7e: 86:44:f0:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFCow/32eMKYc00ky8pOyp+CMG04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5 QUIxQzc4RjAeFw0yNjEwMjUyMTI4NDFaFw0yNjEwMjcwMTA4NDFaMDMxMTAvBgNV BAMTKEUyQzZDMTlCODlBRTEyQzZEQjM3QzZEMTIxNDc1MjYwMDlBRDMyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwWmpyg69/DuHohy5X6JI5pmNv 20pehgxmTMahoqeveNT55Kyun+PARxlZzIGp79UXCzIozXsXEYZlEeYYW1anpBGa aIXm0zti1eFhGvCPAKxs1w7ZYuYGICErW2taPna/zHOgdY3ryhgrKNL73BTXB1sR KgBnVo8yMX6botc4+DgjEXdioWwjCO1UAx0D9cNN9mvxczlM2aV2zb+UGPo2Q0pK fsZq34tTBI/VqKvIw+r3skn22a8xJos3xb4LivbKM62jZJITiVs9RsAQkvSa7OKt yLCTQTZumVSLSEb3gtr4QZ2aDqArmMQLcpaMNwtMKbOS25pz8nHq1E4V9iWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4sbBm4muEsbbN8bRIUdSYAmtMnEwHwYDVR0j BBgwFoAUxSwSq5sTWbk8bIZAPTtR0Zqxx48wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwNzNhY2UtYTY5MS00ODYzLTljMWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5 QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5QUIxQzc4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTJDMTJBQjlCMTM1OUI5M0M2Qzg2NDAzRDNCNTFEMTlBQjFD NzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUx RDE5QUIxQzc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLTZvO4MxmmwSzYUE/B0yAz2tsP5bgRJg6c Md3H8bhIblMZfJSC2Rmlzd3VGGj2+e2OvhzPHTajL6eXH32y6XnCJD4L4NHNRbU6 suLKA5pTS40ZJ5SHxbzwCA6o85fNI176eJVbfJuXr3mRkh6xMczR7lm3o2lOz9jA mrqIRO61q0LPRgOHBYh4NQLo8ZjnviRhOMldQaJrfYsQYiNWGn4M/jr+tu3D7RwQ nSvKdiEk4BVnw8nBgLEO6PmprAjDb2HV7F5hVos32YTKQOz7Rx9hUPK4R5l5Pb+L 2CxF+UN0QJJFpg4mBT7XxZ9cBWLMeYMyJPMdV4/nsi42foZE8M4= -----END CERTIFICATE-----Generated at Mon Oct 26 08:29:03 2026 by rpki-client