
$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
File: 52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json)
Hash identifier: DvAMXVTRPOxDlK1n31JvbVEtt8nqnplwKbSN8PutslQ=
Subject key identifier: E0:95:47:CE:26:89:1F:72:E3:15:10:83:A1:60:73:ED:45:72:EE:92
Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
Certificate issuer: /CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Certificate serial: 3E8AD931116FF586903604D7EB5BFB1E5AC7DC1F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
Manifest number: 050F
Signing time: Sat 28 Feb 2026 21:01:56 +0000
Manifest this update: Sat 28 Feb 2026 20:56:56 +0000
Manifest next update: Wed 04 Mar 2026 07:31:56 +0000
Files and hashes: 1: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: I8J+VKjZlzAYUjuoXbFTNBgkY4GMxQkjdom4zb/4W0c=)
2: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: ejH4Jptb2+nXxwdyhxr2eLVcxmTdzu5eDGJeQynArtM=)
3: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: eOwlPW46RpuSrL4jgHfFK8ABPXHFSLCNNyYlxJQwkiM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl
rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 07:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8a:d9:31:11:6f:f5:86:90:36:04:d7:eb:5b:fb:1e:5a:c7:dc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Validity
Not Before: Feb 28 20:56:56 2026 GMT
Not After : Mar 4 07:31:56 2026 GMT
Subject: CN=E09547CE26891F72E3151083A16073ED4572EE92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e2:b7:aa:24:52:9d:e1:7e:f3:e0:32:fc:28:
08:b7:ac:b6:69:fe:94:c4:6f:40:63:38:6d:30:10:
c1:6a:a9:70:a2:10:ae:90:ab:a0:3f:8d:80:ac:38:
9a:ef:27:7f:e1:d9:ac:2d:59:fb:83:84:0a:84:1d:
5d:a9:61:ae:d7:ea:bf:58:dd:4c:10:88:68:cb:33:
55:69:27:9e:f9:6b:c0:54:74:4e:bb:c4:8a:61:a9:
73:50:bd:e9:c7:36:ab:7b:0b:5f:de:1b:40:87:f4:
16:fa:69:5f:e1:a3:ad:fe:39:5d:72:c1:dd:1c:47:
30:4e:32:c0:e7:5b:a2:5e:7a:e6:b3:2a:b8:4e:f4:
00:8d:83:68:36:25:cd:f7:ee:3b:94:7b:47:fa:99:
be:44:f4:fa:87:65:cf:a3:95:36:37:e7:37:8c:60:
51:9a:34:0d:aa:84:b6:de:64:17:d3:91:0e:aa:c7:
6a:09:bc:9f:80:34:a9:20:b6:22:d1:b6:93:36:ee:
5e:5e:64:e9:ca:d9:8c:5d:ad:7f:de:ad:dd:41:d3:
73:28:67:da:22:e1:d0:f5:d8:6d:fc:48:e8:5d:dc:
1f:2c:3d:0a:9b:a9:94:72:30:62:10:18:af:b8:a1:
65:45:7e:db:97:0f:bd:92:fc:78:e7:77:e1:a5:b9:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:95:47:CE:26:89:1F:72:E3:15:10:83:A1:60:73:ED:45:72:EE:92
X509v3 Authority Key Identifier:
keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cf:14:87:70:81:86:e2:47:08:f9:99:8f:f6:3a:f2:db:6f:
4f:e5:b2:42:de:e2:31:40:10:00:7e:b3:63:c8:4e:33:31:9b:
9e:83:04:15:f1:88:27:a6:0a:31:90:da:f8:2f:30:cf:78:59:
64:90:9b:9e:e0:ef:c2:df:9e:06:3d:36:15:f2:22:49:90:fa:
b1:bf:d6:31:a6:97:77:5e:85:15:76:5b:8d:9e:0f:15:fd:00:
17:bf:01:00:33:55:f2:d0:86:cd:f2:1b:7e:25:9d:e6:b8:fa:
63:fe:a2:bc:b9:77:4d:89:34:e8:43:52:eb:1c:c0:28:33:f2:
94:e6:8d:ec:d8:e8:26:76:62:b5:f8:e9:f3:89:f4:dc:49:e6:
15:c5:d0:a7:35:9d:11:4e:35:87:61:49:8c:1c:54:a2:53:37:
50:48:26:6d:bf:d7:79:46:e0:a2:74:8e:ca:bf:0e:34:63:58:
a0:c0:1d:63:aa:5c:d1:5d:e2:66:41:9e:64:10:05:60:c5:f5:
ca:55:ad:65:bb:90:d9:bf:2c:30:26:07:98:89:1e:c1:e9:27:
f5:42:70:8e:18:2a:66:8d:66:6d:38:94:3a:06:0b:45:93:a3:
00:bc:55:b5:27:a1:f9:c4:02:47:86:cd:bd:22:d7:cc:03:be:
5e:c5:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:08 2026 by rpki-client