$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: apMFHbRb7BjpFl73jeKI4gHqTOKCmPcvt5Y13BWHz1w= Subject key identifier: 09:9A:3A:1B:59:A3:A7:28:D5:1E:B9:A4:6E:AD:E1:31:CC:0E:2E:DA Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 7D415488E41FC44CCB215E42C88CF50AFB7878 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: 0127 Signing time: Sat 18 Apr 2026 06:52:26 +0000 Manifest this update: Sat 18 Apr 2026 06:47:26 +0000 Manifest next update: Tue 21 Apr 2026 08:50:26 +0000 Files and hashes: 1: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: /F5ng909hPJcYVdJ7RCI+M18WzSJ0jYtt+JugQSUSvc=) 2: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 08:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:41:54:88:e4:1f:c4:4c:cb:21:5e:42:c8:8c:f5:0a:fb:78:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Apr 18 06:47:26 2026 GMT Not After : Apr 21 08:50:26 2026 GMT Subject: CN=099A3A1B59A3A728D51EB9A46EADE131CC0E2EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:9c:fa:2b:9d:62:4d:05:5e:60:c1:a4:0a: 5b:6a:ae:11:96:26:2d:f1:c5:9d:c1:5a:ed:7f:3f: d8:76:c2:85:14:56:dd:1d:67:3c:4b:1f:86:b2:5f: 7b:fa:a4:e5:88:34:8c:01:0b:a3:83:8e:0a:9d:c6: 5a:40:fe:ec:9c:76:7f:d4:74:cc:9e:99:f8:84:1a: 44:a4:1c:38:64:f5:09:f0:1b:a8:28:39:d1:8b:0c: 70:5f:0c:71:46:99:96:35:be:fb:dd:8e:f5:0e:f7: 87:51:53:b5:0e:63:6f:0e:65:d0:dd:eb:66:4c:58: 9c:ec:f4:11:8a:47:87:b1:74:64:59:36:a0:de:6c: 82:ce:4d:06:ad:cb:32:4c:6b:6d:e7:ec:e5:6c:7b: c1:c7:96:36:a9:2e:58:16:94:56:52:f3:8e:e2:c9: 64:e8:c1:f0:d1:bb:9b:6f:9a:19:8e:38:b1:21:0a: cf:90:90:4b:b9:51:4a:9a:f1:cf:fb:ab:40:c3:89: 6d:03:ef:a7:6b:60:fb:d0:62:3b:a6:c6:31:7e:16: 9e:3d:e2:95:30:ed:9b:c9:1a:be:f6:40:26:00:c3: 87:9e:a0:f1:55:ea:72:9d:a5:59:43:74:37:e5:2a: fb:71:ba:fe:cd:86:16:c1:1d:45:2c:2c:95:37:54: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9A:3A:1B:59:A3:A7:28:D5:1E:B9:A4:6E:AD:E1:31:CC:0E:2E:DA X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dd:8d:26:f8:93:84:55:6d:c7:40:9e:4e:a7:bd:84:72:1f: 27:ed:59:2d:32:ac:44:dd:f8:03:ad:18:9f:6c:61:6d:5c:09: 8d:82:0e:d0:7a:4e:b6:ec:04:2b:0d:55:01:48:f9:36:6d:f0: 5b:94:ba:fe:9b:95:d1:14:f4:da:b0:3c:b8:12:36:a6:f0:01: 8c:66:a1:41:5b:dd:13:98:d5:2b:80:d2:6a:8e:30:73:ff:89: ac:20:c6:a0:8e:12:f3:bf:73:32:dd:5a:a0:0b:a4:b2:6a:d7: 80:90:11:b2:d8:7f:20:2b:98:49:4e:a4:3d:88:71:c1:c5:cf: 79:5e:7a:65:dd:9c:78:b8:06:10:bb:ba:d7:0e:fb:c6:4c:da: 1c:ed:5b:03:1b:6d:ed:75:8f:05:7d:a0:c2:89:cf:63:8e:5e: 1a:71:e0:7c:1f:b5:09:fb:4a:92:dc:67:5e:4b:97:f9:28:73: 0d:f6:0b:3a:88:51:ca:14:f2:ea:e2:0f:03:cc:6a:fe:6d:1b: c0:56:8c:66:b7:e8:46:39:37:8f:a7:4c:05:08:3b:7d:2f:1f: b7:5e:d4:d1:bf:5a:33:bb:a8:55:a9:4a:4a:69:cf:2d:0a:35: bd:a6:6b:bc:ca:9d:55:b3:2c:18:f2:e1:f7:f3:e4:02:74:06: 0f:54:cf:90 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITfUFUiOQfxEzLIV5CyIz1Cvt4eDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1MkZBMzhDMjJDQTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFE MzlEQjNCMB4XDTI2MDQxODA2NDcyNloXDTI2MDQyMTA4NTAyNlowMzExMC8GA1UE AxMoMDk5QTNBMUI1OUEzQTcyOEQ1MUVCOUE0NkVBREUxMzFDQzBFMkVEQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALo8nPornWJNBV5gwaQKW2quEZYm LfHFncFa7X8/2HbChRRW3R1nPEsfhrJfe/qk5Yg0jAELo4OOCp3GWkD+7Jx2f9R0 zJ6Z+IQaRKQcOGT1CfAbqCg50YsMcF8McUaZljW++92O9Q73h1FTtQ5jbw5l0N3r ZkxYnOz0EYpHh7F0ZFk2oN5sgs5NBq3LMkxrbefs5Wx7wceWNqkuWBaUVlLzjuLJ ZOjB8NG7m2+aGY44sSEKz5CQS7lRSprxz/urQMOJbQPvp2tg+9BiO6bGMX4Wnj3i lTDtm8kavvZAJgDDh56g8VXqcp2lWUN0N+Uq+3G6/s2GFsEdRSwslTdU6hUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQJmjobWaOnKNUeuaRureExzA4u2jAfBgNVHSME GDAWgBRS+jjCLKCYfOSKO9UZH/2irTnbOzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMx MjI0MjQ3LTM0N2YtNGE1Ny1hNzlhLWNiMmMyMWM5MTcwZS8wLzUyRkEzOEMyMkNB MDk4N0NFNDhBM0JENTE5MUZGREEyQUQzOURCM0IuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi81MkZBMzhDMjJDQTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlE QjNCLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8zMTIyNDI0Ny0zNDdmLTRhNTctYTc5 YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJDQTA5ODdDRTQ4QTNCRDUxOTFGRkRB MkFEMzlEQjNCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAet2NJviThFVtx0CeTqe9hHIfJ+1ZLTKsRN34 A60Yn2xhbVwJjYIO0HpOtuwEKw1VAUj5Nm3wW5S6/puV0RT02rA8uBI2pvABjGah QVvdE5jVK4DSao4wc/+JrCDGoI4S879zMt1aoAuksmrXgJARsth/ICuYSU6kPYhx wcXPeV56Zd2ceLgGELu61w77xkzaHO1bAxtt7XWPBX2gwonPY45eGnHgfB+1CftK ktxnXkuX+ShzDfYLOohRyhTy6uIPA8xq/m0bwFaMZrfoRjk3j6dMBQg7fS8ft17U 0b9aM7uoValKSmnPLQo1vaZrvMqdVbMsGPLh9/PkAnQGD1TPkA== -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:46 2026 by rpki-client