
$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
File: 52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json)
Hash identifier: E9sfu1C0uqPbBFt2yMlz5X5xB7yS0DYYAbJapkTEzsU=
Subject key identifier: F2:24:76:C5:52:51:85:AC:F9:7A:FF:EF:EF:48:27:2C:21:11:23:9A
Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
Certificate issuer: /CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Certificate serial: 39135A8D9E255011CCD3F2C5B3723E682944EFBC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
Manifest number: 0524
Signing time: Fri 17 Apr 2026 06:21:55 +0000
Manifest this update: Fri 17 Apr 2026 06:16:55 +0000
Manifest next update: Mon 20 Apr 2026 18:03:55 +0000
Files and hashes: 1: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: k+lNpxYKvUc+yRjCFcAooqLioqO5gmjTGKKzTCyd9S4=)
2: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: ejH4Jptb2+nXxwdyhxr2eLVcxmTdzu5eDGJeQynArtM=)
3: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: I8J+VKjZlzAYUjuoXbFTNBgkY4GMxQkjdom4zb/4W0c=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl
rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 18:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:13:5a:8d:9e:25:50:11:cc:d3:f2:c5:b3:72:3e:68:29:44:ef:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Validity
Not Before: Apr 17 06:16:55 2026 GMT
Not After : Apr 20 18:03:55 2026 GMT
Subject: CN=F22476C5525185ACF97AFFEFEF48272C2111239A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:a5:2c:31:8b:03:00:eb:8b:2c:45:e2:09:
e0:39:9f:eb:b3:39:58:1d:d0:c8:87:8d:19:9e:3c:
3c:e6:ce:54:92:e1:14:42:e9:67:90:98:c5:b9:ab:
1a:a1:7a:53:f6:ba:0e:60:86:ae:b5:f1:e7:8e:b2:
57:5b:bb:61:2f:ce:ee:02:01:a5:87:c8:97:b6:2f:
8c:8e:9d:a2:b4:91:eb:7f:35:f2:fb:d2:0b:1e:59:
87:b8:ff:53:e4:c8:a0:25:8a:1a:d2:54:65:18:5b:
86:44:a0:da:90:7e:12:ab:42:50:46:d5:b3:cf:1c:
ef:b8:ef:8f:50:d9:99:94:b9:a0:88:fb:25:ed:bc:
6e:3f:a9:03:64:0c:08:7c:70:09:3f:f7:62:53:69:
9b:72:23:5d:66:db:84:24:b1:4f:35:00:f6:72:3a:
db:f3:c1:ef:29:e3:78:ee:b7:cd:64:da:f6:40:8a:
4d:3e:53:dc:99:bf:5d:a8:57:e3:ab:70:3d:5b:46:
d3:75:94:80:f1:0e:6d:a5:20:80:41:9b:29:05:2d:
1a:bf:06:65:a3:b2:60:d7:c9:c0:38:53:10:93:d8:
f2:08:64:73:1d:af:4e:9a:b7:8f:5f:71:75:4d:09:
c9:96:bf:92:7e:c9:ce:e0:8c:d0:48:eb:67:81:81:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:76:C5:52:51:85:AC:F9:7A:FF:EF:EF:48:27:2C:21:11:23:9A
X509v3 Authority Key Identifier:
keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bc:5e:70:0b:cd:2d:dc:99:52:b7:4c:1b:86:46:bd:78:cb:
a8:27:32:7e:ba:21:3d:ed:78:90:f5:cf:d8:b7:3e:ad:e4:24:
12:6c:b5:e1:5e:f5:7e:a0:54:c3:bc:85:0b:ea:dc:d5:29:3d:
5d:d0:4a:e1:c6:9c:97:f0:3e:d2:0e:45:76:b0:69:dc:43:ce:
09:77:e7:91:2d:9d:2d:8d:f4:44:4e:03:51:ca:f0:45:7c:c9:
55:d5:c8:05:b2:a8:07:ff:aa:1b:5a:b6:be:fe:63:97:20:2b:
18:7f:c7:0d:c9:63:c7:23:25:75:0f:04:49:7e:7b:07:4a:57:
9d:62:38:59:fe:3d:60:35:54:bc:92:48:12:77:1b:b0:9a:02:
12:f1:45:02:e3:b6:1d:78:35:c8:00:9d:4c:69:db:db:b0:c8:
cc:21:7d:a6:08:23:a3:62:16:93:4e:f2:e3:13:81:17:7f:d6:
42:4c:a1:62:d6:87:62:36:d5:aa:5f:33:25:8b:05:81:52:3b:
e7:94:2f:af:4d:64:24:e0:35:a4:09:4b:4c:ba:60:2e:ca:46:
6d:42:f3:91:1a:d5:45:0c:7a:62:15:5d:19:44:68:e3:d2:ea:
6d:59:70:0e:4e:99:19:d9:b2:c4:2c:4a:e6:c7:74:38:4a:8a:
13:c3:3d:ed
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUORNajZ4lUBHM0/LFs3I+aClE77wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFD
NjFGOUY4NjAeFw0yNjA0MTcwNjE2NTVaFw0yNjA0MjAxODAzNTVaMDMxMTAvBgNV
BAMTKEYyMjQ3NkM1NTI1MTg1QUNGOTdBRkZFRkVGNDgyNzJDMjExMTIzOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcPqUsMYsDAOuLLEXiCeA5n+uz
OVgd0MiHjRmePDzmzlSS4RRC6WeQmMW5qxqhelP2ug5ghq618eeOsldbu2Evzu4C
AaWHyJe2L4yOnaK0ket/NfL70gseWYe4/1PkyKAlihrSVGUYW4ZEoNqQfhKrQlBG
1bPPHO+4749Q2ZmUuaCI+yXtvG4/qQNkDAh8cAk/92JTaZtyI11m24QksU81APZy
Otvzwe8p43jut81k2vZAik0+U9yZv12oV+OrcD1bRtN1lIDxDm2lIIBBmykFLRq/
BmWjsmDXycA4UxCT2PIIZHMdr06at49fcXVNCcmWv5J+yc7gjNBI62eBgbkVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU8iR2xVJRhaz5ev/v70gnLCERI5owHwYDVR0j
BBgwFoAUUhRRg7W+GmY/vFwigQJUGsYfn4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NTdlODllOC01M2FhLTQ0ZjYtYjZkOC01ODc5MDc4YmY2NjQvMC81MjE0NTE4M0I1
QkUxQTY2M0ZCQzVDMjI4MTAyNTQxQUM2MUY5Rjg2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFDNjFG
OUY4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2
ZDgtNTg3OTA3OGJmNjY0LzAvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0
MUFDNjFGOUY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAIy8XnALzS3cmVK3TBuGRr14y6gnMn66IT3t
eJD1z9i3Pq3kJBJsteFe9X6gVMO8hQvq3NUpPV3QSuHGnJfwPtIORXawadxDzgl3
55EtnS2N9EROA1HK8EV8yVXVyAWyqAf/qhtatr7+Y5cgKxh/xw3JY8cjJXUPBEl+
ewdKV51iOFn+PWA1VLySSBJ3G7CaAhLxRQLjth14NcgAnUxp29uwyMwhfaYII6Ni
FpNO8uMTgRd/1kJMoWLWh2I21apfMyWLBYFSO+eUL69NZCTgNaQJS0y6YC7KRm1C
85Ea1UUMemIVXRlEaOPS6m1ZcA5OmRnZssQsSubHdDhKihPDPe0=
-----END CERTIFICATE-----
Generated at Sat Apr 18 12:59:21 2026 by rpki-client