
$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
File: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft (raw, json)
Hash identifier: uNDukGWZblD9BgBL+iulYffHAa2m+u8g0JxRVr3vIqI=
Subject key identifier: 16:90:13:BD:1C:07:78:BC:32:85:F8:60:0F:15:34:56:DA:00:04:50
Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
Certificate issuer: /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Certificate serial: 3FBC50FA47EB5A19C2BE5D5507C503BA48FE1184
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
Manifest number: 02C2
Signing time: Thu 16 Apr 2026 15:41:00 +0000
Manifest this update: Thu 16 Apr 2026 15:36:00 +0000
Manifest next update: Mon 20 Apr 2026 02:02:00 +0000
Files and hashes: 1: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: +nLJrgNenXj5PQpV5AHhNHWY/Cq5sRpb42T7e5SIyiw=)
2: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: YBihOSXIj0+TsV9w8FB5TlmuTjj67BcUuD5PWZy4luk=)
3: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: U9ZTyy58TYyDU59zLb+82dULdP77320V4BpJd3sqQGg=)
4: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl (hash: weYteWYS5Ui035y8OFs3PjKHsg3dTv/UvWT0rcahUX8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 02:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bc:50:fa:47:eb:5a:19:c2:be:5d:55:07:c5:03:ba:48:fe:11:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245
Validity
Not Before: Apr 16 15:36:00 2026 GMT
Not After : Apr 20 02:02:00 2026 GMT
Subject: CN=169013BD1C0778BC3285F8600F153456DA000450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:4c:cd:a4:5f:7b:b0:a2:22:5c:10:73:8c:
39:d0:37:62:2a:30:08:94:7e:c0:0f:bd:4f:2c:93:
b6:df:cb:9b:2c:de:aa:6c:48:48:56:4d:ed:f2:ad:
4c:66:48:4b:86:51:5c:fd:f7:14:de:3b:f2:81:6a:
0f:31:2b:95:03:25:5e:87:ba:97:71:c4:e8:f1:46:
4b:09:c5:89:f5:00:bb:c2:43:45:90:51:2c:de:c0:
5f:75:67:e5:19:bd:d6:ae:f8:a2:69:e4:d9:1a:82:
e0:7a:f4:c2:3a:88:c9:fc:5c:43:b4:df:74:43:d9:
8d:07:7b:14:85:bc:58:db:05:04:af:c1:ba:d5:2b:
c6:61:47:63:b4:ad:72:c8:7d:0e:f5:60:96:3e:e0:
84:25:62:c5:5d:f2:cd:9e:74:b0:9e:34:f0:80:92:
0b:71:21:04:d5:65:06:23:76:63:9e:ed:7e:7d:8c:
b7:64:62:94:db:30:c6:33:10:de:ef:e0:90:00:fb:
ad:83:8c:5e:af:06:33:09:d6:a8:30:7a:1e:76:4d:
97:3f:6f:88:20:76:f1:1f:ef:39:96:d1:11:dd:d5:
69:6f:94:30:26:d6:3b:19:d2:3e:dd:ca:4f:66:73:
d3:a8:57:b1:d3:80:f1:0f:67:39:0d:0a:96:12:d4:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:90:13:BD:1C:07:78:BC:32:85:F8:60:0F:15:34:56:DA:00:04:50
X509v3 Authority Key Identifier:
keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:88:59:e3:4a:45:bd:0f:4e:c4:2b:19:ea:4f:8d:fd:8f:71:
10:da:1c:d4:22:ec:3a:eb:af:5e:3c:e4:9d:27:04:b2:77:0a:
3c:6a:70:f1:6b:9f:70:7b:f7:64:06:23:8d:87:0b:e8:c1:eb:
a9:10:a8:d6:a9:65:d9:8e:46:57:26:92:be:5b:64:4f:b5:d5:
68:23:dc:e9:38:4f:19:28:0a:96:2d:cd:60:20:04:bd:88:05:
3d:fd:88:46:8e:d5:b2:00:9b:60:fc:28:fb:25:ec:8b:e5:74:
20:2a:d9:24:cd:57:93:a0:c7:81:b2:18:2f:6a:ad:a5:8f:3a:
86:61:e9:bd:ad:7e:0e:eb:29:e9:c0:af:5f:76:ff:65:cb:2a:
b0:b6:e2:e8:f8:59:e6:d7:a1:d7:3c:e4:15:b7:14:e1:0b:30:
c6:72:65:21:16:49:84:ce:53:9c:81:b1:34:a7:3f:65:26:55:
4c:c3:8c:78:64:38:20:ab:90:6d:a5:5a:03:5d:e8:2e:45:c0:
00:d4:e1:73:50:85:24:34:7c:98:7c:f7:ee:a5:c1:09:3e:c7:
9e:de:d8:e1:ae:cf:24:50:f4:92:c4:44:d3:aa:fb:e1:34:9b:
8a:6a:af:4b:8f:98:77:25:65:1e:ba:c6:82:a3:f6:04:60:e8:
df:ed:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:32:09 2026 by rpki-client