$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft File: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft (raw, json) Hash identifier: kYpHOyeVQ/ucI+Hiqc7ZMBSRDOg83tGSFim7qOHFiWg= Subject key identifier: E5:DF:53:41:68:43:E5:5B:7C:54:18:75:22:82:11:7E:E6:BA:ED:D6 Authority key identifier: C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F Certificate issuer: /CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Certificate serial: 7DE69D2DB3622082B940B053D9AB4CAC89140ACF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft Manifest number: 1A Signing time: Wed 20 May 2026 19:44:44 +0000 Manifest this update: Wed 20 May 2026 19:39:44 +0000 Manifest next update: Thu 21 May 2026 22:03:44 +0000 Files and hashes: 1: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: yAZGzCFckEolEtkEocUhLNSw4BV4DJZdNzdA0tVkGtA=) 2: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl (hash: wFvLpDI0r0nyrbedFU80jCfAxFLH062IO3Y2CWQ74+k=) 3: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: 5StnOeqZ96buXCGi/ZTPekGCsI1j8G00cwvVyv/D23k=) 4: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: 3sTXjzHUOLPeEyAojCjuo6mjJbiX0Eb7eAu+BmtWebk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 21 May 2026 22:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e6:9d:2d:b3:62:20:82:b9:40:b0:53:d9:ab:4c:ac:89:14:0a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F Validity Not Before: May 20 19:39:44 2026 GMT Not After : May 21 22:03:44 2026 GMT Subject: CN=E5DF53416843E55B7C5418752282117EE6BAEDD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:41:e0:b3:e5:03:39:01:d4:b9:33:dc:d6:db: d1:c6:ae:5c:34:de:56:3c:e2:bf:a0:3e:27:2c:83: ed:46:ec:51:e6:f1:f4:1c:b1:86:b4:9e:b1:cd:d5: b7:0e:43:91:40:73:2b:cf:c5:ea:5d:da:90:d4:fe: 1d:c0:6b:94:39:f6:9a:86:f6:eb:5e:1e:8e:b2:65: 2f:16:d3:2c:2c:fa:6d:04:7f:01:d3:46:06:4b:6b: 17:0e:66:ec:d4:36:99:99:d0:4f:a8:ea:0b:7f:8c: b6:12:f1:c0:3a:01:83:dd:8d:50:0b:b2:9d:7e:10: c5:2a:2b:a1:94:cb:8c:6c:62:18:68:f0:a4:7c:f2: 1a:ae:4a:a1:ac:79:b2:00:c0:73:de:aa:df:ec:f7: 38:1e:94:4a:64:bc:d4:ff:e4:1e:fb:12:3d:3d:e3: 22:1d:d5:9a:51:21:9d:d2:2f:bf:e5:fe:c4:22:3d: cb:63:53:86:c7:8b:3a:03:8f:12:21:aa:9e:09:94: 94:63:07:0c:6d:0a:2e:bf:c4:4e:ac:d3:d8:df:f3: e5:2b:b4:07:56:fa:86:74:17:c1:c5:a4:4a:01:fb: 63:b3:35:de:29:e0:43:33:59:8f:12:aa:ea:d9:76: 3c:df:07:fc:07:68:f7:8a:2d:0c:4c:c9:58:35:e7: 53:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DF:53:41:68:43:E5:5B:7C:54:18:75:22:82:11:7E:E6:BA:ED:D6 X509v3 Authority Key Identifier: keyid:C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f7:d6:f3:94:f6:84:74:a4:84:09:0b:e0:9d:be:cf:b4:2b: 30:a1:7b:00:0b:51:cf:87:87:cc:ff:17:e5:df:37:e5:86:e4: 26:0e:ca:ee:3d:4d:be:e6:c7:b5:79:1a:9b:f3:1d:39:06:8f: 37:95:80:94:a2:fc:0f:65:0e:02:14:d7:c9:72:76:e7:6c:d0: aa:01:a1:9c:ae:b6:63:d7:15:73:c9:52:76:c7:d5:31:96:1c: e0:84:ac:da:5c:a1:45:26:52:7d:45:37:fb:b5:c0:db:79:e4: 26:9c:49:de:c6:39:bc:9d:f0:30:02:04:4d:3e:98:6e:4a:b6: 57:46:47:b1:54:bf:95:af:c8:23:03:1c:f5:22:9c:1d:77:5d: 99:b3:ff:d8:c6:55:91:c7:24:e3:43:e7:6b:93:72:0b:56:40: 3e:6e:99:d0:54:3e:62:78:48:75:d7:eb:c8:86:cb:85:42:35: 91:5c:15:aa:67:93:7e:e6:c4:7b:08:15:cf:7f:ea:e1:fa:6e: b8:c7:d3:af:3c:4f:70:3e:69:2e:52:55:5e:bd:c1:40:9f:80: 20:e2:37:b7:f5:5c:ab:75:25:41:58:db:32:68:e5:8b:66:ed: e8:6b:3d:e4:81:95:da:8f:65:28:26:97:60:5f:54:e4:00:87: 84:cb:14:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeadLbNiIIK5QLBT2atMrIkUCs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5 QUIxQzc4RjAeFw0yNjA1MjAxOTM5NDRaFw0yNjA1MjEyMjAzNDRaMDMxMTAvBgNV BAMTKEU1REY1MzQxNjg0M0U1NUI3QzU0MTg3NTIyODIxMTdFRTZCQUVERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQeCz5QM5AdS5M9zW29HGrlw0 3lY84r+gPicsg+1G7FHm8fQcsYa0nrHN1bcOQ5FAcyvPxepd2pDU/h3Aa5Q59pqG 9uteHo6yZS8W0yws+m0EfwHTRgZLaxcOZuzUNpmZ0E+o6gt/jLYS8cA6AYPdjVAL sp1+EMUqK6GUy4xsYhho8KR88hquSqGsebIAwHPeqt/s9zgelEpkvNT/5B77Ej09 4yId1ZpRIZ3SL7/l/sQiPctjU4bHizoDjxIhqp4JlJRjBwxtCi6/xE6s09jf8+Ur tAdW+oZ0F8HFpEoB+2OzNd4p4EMzWY8SqurZdjzfB/wHaPeKLQxMyVg151ODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5d9TQWhD5Vt8VBh1IoIRfua67dYwHwYDVR0j BBgwFoAUxSwSq5sTWbk8bIZAPTtR0Zqxx48wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDIwNzNhY2UtYTY5MS00ODYzLTljMWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5 QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5QUIxQzc4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNTJDMTJBQjlCMTM1OUI5M0M2Qzg2NDAzRDNCNTFEMTlBQjFD NzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj MWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUx RDE5QUIxQzc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIr31vOU9oR0pIQJC+Cdvs+0KzChewALUc+H h8z/F+XfN+WG5CYOyu49Tb7mx7V5GpvzHTkGjzeVgJSi/A9lDgIU18lyduds0KoB oZyutmPXFXPJUnbH1TGWHOCErNpcoUUmUn1FN/u1wNt55CacSd7GObyd8DACBE0+ mG5KtldGR7FUv5WvyCMDHPUinB13XZmz/9jGVZHHJOND52uTcgtWQD5umdBUPmJ4 SHXX68iGy4VCNZFcFapnk37mxHsIFc9/6uH6brjH0688T3A+aS5SVV69wUCfgCDi N7f1XKt1JUFY2zJo5Ytm7ehrPeSBldqPZSgml2BfVOQAh4TLFLs= -----END CERTIFICATE-----Generated at Thu May 21 12:32:43 2026 by rpki-client