$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft File: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft (raw, json) Hash identifier: 0bu4jOo43RWNR7CrCA5dujEIXew6FsWc0/jC3nGGz4Q= Subject key identifier: D6:F3:C8:E6:F9:AF:3F:31:65:4A:B2:18:94:DC:D9:C2:8A:57:9F:80 Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 Certificate issuer: /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Certificate serial: 732474F28BF0E889D19F2EDEC03492CB222B61C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft Manifest number: 02AD Signing time: Sat 28 Feb 2026 10:00:59 +0000 Manifest this update: Sat 28 Feb 2026 09:55:59 +0000 Manifest next update: Tue 03 Mar 2026 20:15:59 +0000 Files and hashes: 1: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: fKMeJeAwMbkwf1kmZ/AB9YQDJH0OhHULVGJWeX+RPu0=) 2: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl (hash: ZwrGV7dS/Y1SMnxBtWqfyl3hIKCWKgAQ/6fLQ8R8Qrw=) 3: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: YBihOSXIj0+TsV9w8FB5TlmuTjj67BcUuD5PWZy4luk=) 4: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: UDP5vaqP++IAcM6lMBhTtGhgbdITohHwdo+pbRZf5tI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:24:74:f2:8b:f0:e8:89:d1:9f:2e:de:c0:34:92:cb:22:2b:61:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Validity Not Before: Feb 28 09:55:59 2026 GMT Not After : Mar 3 20:15:59 2026 GMT Subject: CN=D6F3C8E6F9AF3F31654AB21894DCD9C28A579F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:20:30:02:96:52:38:04:aa:80:e2:89:94: fc:73:07:de:f4:f2:39:99:09:55:8e:1b:f0:30:09: d3:68:47:ce:74:41:6e:ff:9d:d2:88:5c:d4:77:f1: 91:b7:39:ea:96:05:74:8e:5c:68:05:e9:5d:b4:de: 93:f8:c4:ea:85:d2:04:2d:59:46:12:93:40:db:0b: 20:64:3c:7a:b0:7a:2e:0a:3e:c1:fe:f7:09:4e:2d: 98:1a:6c:41:69:a5:ab:87:95:c0:99:0b:a1:19:01: bd:43:7e:48:a3:d5:30:05:4b:c6:22:20:28:3b:1a: 6a:6d:a8:50:db:eb:06:e4:dd:06:b6:a9:60:19:d6: 62:4d:b8:74:88:7f:12:33:57:ad:da:b3:6d:b7:0c: 8b:d4:b2:c0:a7:df:f4:37:d0:67:20:1a:1f:6c:4c: 7e:36:d0:b2:f2:87:10:dc:96:14:7e:cc:df:36:5d: f2:4c:87:f4:27:e3:21:e8:0c:38:93:7a:a7:dc:9d: 55:71:96:4f:69:97:23:4a:aa:5a:7b:74:a5:4e:78: 9a:df:c2:3a:d1:d4:90:fd:0a:00:c9:47:66:0c:0d: ea:87:83:de:89:c6:40:8f:71:e8:2e:14:65:65:bc: b3:df:0a:32:ac:f3:e1:49:a2:ee:a5:97:f8:92:28: 17:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F3:C8:E6:F9:AF:3F:31:65:4A:B2:18:94:DC:D9:C2:8A:57:9F:80 X509v3 Authority Key Identifier: keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:65:25:bd:2d:31:b5:7c:3c:16:69:03:2e:43:e0:d2:e8:ca: 4f:08:80:a7:9e:fb:91:b8:b7:61:68:9f:8a:4f:3d:ae:9e:d8: 3d:5b:09:ad:db:94:5a:16:24:c4:d7:ff:07:bd:1a:81:db:f9: c5:a8:7e:4f:b1:5e:dd:c1:68:dd:b5:51:be:45:37:5f:ed:15: 9f:e6:21:69:ac:27:d8:66:10:55:3c:b1:14:ab:c0:75:cf:3b: ab:48:7b:cb:c3:80:b6:3b:1e:fc:4a:f1:a7:3f:26:87:3e:0d: 23:8f:c5:63:36:d3:16:83:ac:2f:fa:5f:59:ad:3c:c6:e7:35: 3f:a7:3f:ca:b4:38:f2:04:94:b5:7c:82:13:19:d0:ad:52:f4: 8e:9c:42:3c:96:55:35:ed:1a:b5:1b:18:56:a5:fc:8f:70:aa: 93:f8:a3:01:a2:8d:6a:39:cc:00:2c:e7:08:b6:b3:2d:68:a1: 01:a9:ef:7a:ad:8d:1b:db:6c:f1:65:34:c3:fb:2a:ac:80:eb: c1:82:4a:1b:67:41:5e:ea:63:c8:02:cf:7b:f3:43:e3:ac:f2: a1:9b:27:1b:9a:f2:a2:23:4d:a6:c7:86:1e:b6:35:a0:6b:ae: c1:d7:1f:03:a7:68:b6:8d:b1:cc:bb:8e:94:40:85:5a:3d:06: 59:8b:7b:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcyR08ovw6InRny7ewDSSyyIrYcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZD QjhBQTI0NTAeFw0yNjAyMjgwOTU1NTlaFw0yNjAzMDMyMDE1NTlaMDMxMTAvBgNV BAMTKEQ2RjNDOEU2RjlBRjNGMzE2NTRBQjIxODk0RENEOUMyOEE1NzlGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QyAwApZSOASqgOKJlPxzB970 8jmZCVWOG/AwCdNoR850QW7/ndKIXNR38ZG3OeqWBXSOXGgF6V203pP4xOqF0gQt WUYSk0DbCyBkPHqwei4KPsH+9wlOLZgabEFppauHlcCZC6EZAb1Dfkij1TAFS8Yi ICg7GmptqFDb6wbk3Qa2qWAZ1mJNuHSIfxIzV63as223DIvUssCn3/Q30GcgGh9s TH420LLyhxDclhR+zN82XfJMh/Qn4yHoDDiTeqfcnVVxlk9plyNKqlp7dKVOeJrf wjrR1JD9CgDJR2YMDeqHg96JxkCPceguFGVlvLPfCjKs8+FJou6ll/iSKBcBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1vPI5vmvPzFlSrIYlNzZwopXn4AwHwYDVR0j BBgwFoAUUud7BrwmkcYTx6mHLuHij8uKokUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzkwODc4Mi00NTIwLTQ1YjQtOTllZC0xOTNlNTFkZjUxYzMvMC81MkU3N0IwNkJD MjY5MUM2MTNDN0E5ODcyRUUxRTI4RkNCOEFBMjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZDQjhB QTI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUy OEZDQjhBQTI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJllJb0tMbV8PBZpAy5D4NLoyk8IgKee+5G4 t2Fon4pPPa6e2D1bCa3blFoWJMTX/we9GoHb+cWofk+xXt3BaN21Ub5FN1/tFZ/m IWmsJ9hmEFU8sRSrwHXPO6tIe8vDgLY7HvxK8ac/Joc+DSOPxWM20xaDrC/6X1mt PMbnNT+nP8q0OPIElLV8ghMZ0K1S9I6cQjyWVTXtGrUbGFal/I9wqpP4owGijWo5 zAAs5wi2sy1ooQGp73qtjRvbbPFlNMP7KqyA68GCShtnQV7qY8gCz3vzQ+Os8qGb Jxua8qIjTabHhh62NaBrrsHXHwOnaLaNscy7jpRAhVo9BlmLe8U= -----END CERTIFICATE-----Generated at Mon Mar 2 17:58:27 2026 by rpki-client