$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: 1EgMlexN6Po1YeYTco1jPu6MILxBYm6F5qvqJEnvxKs= Subject key identifier: BF:87:E4:A1:EB:D2:3E:EA:72:F2:0D:C8:36:9D:DF:50:A9:79:26:C2 Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 2ED28AD573C1B969124A0CDEA7E33BE6600158B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: 0111 Signing time: Fri 27 Feb 2026 17:12:22 +0000 Manifest this update: Fri 27 Feb 2026 17:07:22 +0000 Manifest next update: Tue 03 Mar 2026 02:12:22 +0000 Files and hashes: 1: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: Tv2seMraNQ+NBuK/jVIOfq5M1QZRNU+VQHfghstOeVw=) 2: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d2:8a:d5:73:c1:b9:69:12:4a:0c:de:a7:e3:3b:e6:60:01:58:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Feb 27 17:07:22 2026 GMT Not After : Mar 3 02:12:22 2026 GMT Subject: CN=BF87E4A1EBD23EEA72F20DC8369DDF50A97926C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:50:87:39:25:62:0f:32:8a:e3:61:12:46:fa: fe:7c:17:e8:ae:75:93:47:cb:81:05:65:8c:cc:f8: 4d:91:c1:f4:8e:43:f3:49:e3:c1:26:ce:e0:d0:cf: de:9c:e6:3a:54:40:2f:34:cd:26:0b:e9:46:d3:4c: 0a:0e:a7:cd:bb:57:11:5a:c8:3e:bb:0d:f0:66:15: e2:03:1b:9e:34:8a:33:27:7f:fa:58:46:7a:61:f2: f1:b7:7e:08:78:ac:af:57:82:61:39:68:d4:70:fc: 1b:f9:94:93:41:45:93:ec:25:c6:07:a8:16:78:6b: 45:8b:48:16:9e:b1:7e:f5:44:79:ff:da:1c:75:a0: 95:f8:1a:7e:b2:64:0d:ab:cc:81:6b:87:1a:73:05: c2:c9:d6:3b:93:37:0d:06:fa:25:6b:68:05:e7:c5: 59:fb:5c:d6:31:38:58:89:ea:cd:7a:9b:19:7d:2b: 83:8c:76:36:70:c6:26:b0:4c:4f:30:aa:11:31:73: 7b:7d:ba:7b:95:09:df:47:62:d2:6a:b8:ee:a4:f8: d4:8d:af:7e:07:16:99:35:79:ec:70:a2:3e:6e:fd: 7f:e5:8f:09:8a:46:31:65:77:4f:86:69:cb:f6:6d: 38:f7:82:1c:33:db:12:27:b2:63:a2:a0:39:fa:54: 13:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:87:E4:A1:EB:D2:3E:EA:72:F2:0D:C8:36:9D:DF:50:A9:79:26:C2 X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0b:b2:87:bb:42:da:d2:61:e3:05:5a:cd:24:0f:b8:c1:ba: 5c:77:87:73:88:1f:cb:dc:17:12:90:82:49:b7:36:65:7d:67: 74:58:c2:e9:b9:73:4a:d2:cb:d8:3d:4a:8d:b6:e4:26:96:7b: 99:d7:2d:08:f3:f7:1b:10:96:1b:0f:c8:3b:52:a7:23:98:f1: 63:24:a0:2f:89:51:6c:f3:a0:aa:79:82:15:d5:1d:10:5c:68: f5:a3:98:46:cc:f9:39:b6:50:4d:28:10:e5:a5:8a:16:20:e4: 90:c6:30:14:5a:c5:cc:53:40:d9:18:66:c6:6c:6e:1d:42:59: 81:e7:21:d3:29:b9:31:0a:8a:be:18:05:62:dc:07:20:ed:aa: ca:61:d7:f2:74:67:a0:ca:5a:67:81:32:79:00:2b:86:27:71: 98:56:19:2f:58:48:c7:42:bb:13:32:72:12:7b:0a:14:bc:49: 03:2a:a0:a7:34:58:53:70:44:da:07:dc:ca:91:69:2e:9e:04: 26:ed:24:95:a4:dc:e7:6d:84:f8:78:97:3d:58:d0:8a:f8:d1: 39:36:54:60:8e:f3:31:bf:5a:36:4c:55:3e:c0:9c:9a:f7:05: 9f:24:99:b3:2f:93:12:85:3a:d8:3a:0b:50:a2:3a:c7:1b:4a: 58:77:13:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULtKK1XPBuWkSSgzep+M75mABWLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNjAyMjcxNzA3MjJaFw0yNjAzMDMwMjEyMjJaMDMxMTAvBgNV BAMTKEJGODdFNEExRUJEMjNFRUE3MkYyMERDODM2OURERjUwQTk3OTI2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsUIc5JWIPMorjYRJG+v58F+iu dZNHy4EFZYzM+E2RwfSOQ/NJ48EmzuDQz96c5jpUQC80zSYL6UbTTAoOp827VxFa yD67DfBmFeIDG540ijMnf/pYRnph8vG3fgh4rK9XgmE5aNRw/Bv5lJNBRZPsJcYH qBZ4a0WLSBaesX71RHn/2hx1oJX4Gn6yZA2rzIFrhxpzBcLJ1juTNw0G+iVraAXn xVn7XNYxOFiJ6s16mxl9K4OMdjZwxiawTE8wqhExc3t9unuVCd9HYtJquO6k+NSN r34HFpk1eexwoj5u/X/ljwmKRjFld0+Gacv2bTj3ghwz2xInsmOioDn6VBMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv4fkoevSPupy8g3INp3fUKl5JsIwHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoLsoe7QtrSYeMFWs0kD7jBulx3h3OIH8vc FxKQgkm3NmV9Z3RYwum5c0rSy9g9So225CaWe5nXLQjz9xsQlhsPyDtSpyOY8WMk oC+JUWzzoKp5ghXVHRBcaPWjmEbM+Tm2UE0oEOWlihYg5JDGMBRaxcxTQNkYZsZs bh1CWYHnIdMpuTEKir4YBWLcByDtqsph1/J0Z6DKWmeBMnkAK4YncZhWGS9YSMdC uxMychJ7ChS8SQMqoKc0WFNwRNoH3MqRaS6eBCbtJJWk3OdthPh4lz1Y0Ir40Tk2 VGCO8zG/WjZMVT7AnJr3BZ8kmbMvkxKFOtg6C1CiOscbSlh3Ey0= -----END CERTIFICATE-----Generated at Mon Mar 2 01:10:49 2026 by rpki-client