$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: EPlzs7drhqBqjLs1gYQL3KYeEjI90YUNqF939KNsokw= Subject key identifier: A2:53:CE:E1:9D:92:46:6D:52:67:B8:6A:64:A4:BE:6A:13:23:65:EC Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 1D192A01FBF57E9E5263055BF55FA0F3A0470ECA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 0432 Signing time: Sat 28 Feb 2026 23:02:04 +0000 Manifest this update: Sat 28 Feb 2026 22:57:04 +0000 Manifest next update: Wed 04 Mar 2026 07:24:04 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: YNOtGaLfnkf/+LzjiiJPDx5nVKHmHrQR0WmpJnEVw/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:19:2a:01:fb:f5:7e:9e:52:63:05:5b:f5:5f:a0:f3:a0:47:0e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Feb 28 22:57:04 2026 GMT Not After : Mar 4 07:24:04 2026 GMT Subject: CN=A253CEE19D92466D5267B86A64A4BE6A132365EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:20:12:e1:0c:01:de:a8:69:e4:0f:53:b5: 65:3e:60:a3:26:73:0f:eb:26:ac:c8:18:65:3d:b2: 0f:3c:51:83:a6:f6:f4:2c:45:5a:d8:e0:fa:14:29: 15:15:a1:56:7f:b2:17:54:a7:f8:ce:19:cc:51:06: 2b:e8:fd:e6:ba:50:b9:b4:75:36:2c:9f:22:77:1a: cf:ef:65:84:c5:17:39:c4:71:54:ad:44:b1:4e:64: cd:4f:1a:c4:dc:98:52:ea:72:cf:6e:1a:64:7f:85: 18:55:a6:3c:56:34:0d:a6:be:ec:25:7b:ac:13:9e: 2f:d8:33:cc:97:22:3e:fe:5e:7c:ac:6f:78:dc:37: f3:e1:36:07:a8:e8:bb:c6:e0:47:98:3f:6e:9c:e7: ff:6a:c4:ed:1c:2f:05:96:91:4b:83:a0:3e:0f:26: b9:a5:da:13:ec:84:45:4d:51:ba:5e:62:a8:0e:aa: a5:37:fb:f4:53:94:b4:bc:db:1f:cc:d7:c9:64:c7: a6:cb:f2:9a:27:52:d4:19:3c:5b:0d:f4:db:89:a7: f9:0e:8f:35:ff:ba:46:de:92:31:96:33:f0:3e:bd: 12:89:f3:cc:a7:c1:26:dc:f5:7d:69:9a:d7:07:a4: f9:c3:94:bb:74:e5:c4:05:49:ce:0f:fe:78:f5:9a: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:53:CE:E1:9D:92:46:6D:52:67:B8:6A:64:A4:BE:6A:13:23:65:EC X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8a:5f:b3:15:de:cb:4d:8d:3d:5a:9e:d6:39:86:5e:c2:75: 5b:88:a6:a3:da:69:1d:bf:ed:30:42:80:31:ec:8a:64:d9:68: fe:e7:00:12:c9:b8:41:e7:37:bb:e9:44:e6:e0:30:40:63:1c: 25:fe:6d:0d:79:9d:89:1f:74:96:9d:32:02:47:fd:db:10:da: 30:73:b1:ca:b5:7a:55:f8:87:9a:84:1e:0f:25:06:b4:86:b4: b1:ab:2a:be:5e:b6:5a:8d:33:34:82:15:19:d8:dd:29:b4:bd: f4:ca:9c:75:31:37:a8:ca:e4:cf:7d:6b:83:d8:62:20:ba:6c: 85:8e:9c:8b:1c:f7:c1:5b:62:4d:6d:fc:ba:9d:d1:9d:74:88: 08:df:2f:62:90:48:7b:e6:d3:08:7f:4e:19:f2:b2:10:5b:cf: a7:3d:cf:af:ea:69:76:c1:62:46:90:6e:f5:b5:03:cc:25:9a: b1:a0:34:c6:08:6c:c0:da:1f:2b:6c:25:0b:98:4a:0e:32:5a: 29:9e:48:8d:8b:2e:49:15:01:b0:e3:6e:61:d5:03:f3:27:c1: ed:98:0d:ba:1e:c1:d6:fe:c8:46:b9:ad:c9:65:c3:af:1d:f2: 38:45:9a:8a:58:2d:14:3c:13:23:e7:b2:fe:96:3c:70:ad:2f: 78:ab:98:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHRkqAfv1fp5SYwVb9V+g86BHDsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNjAyMjgyMjU3MDRaFw0yNjAzMDQwNzI0MDRaMDMxMTAvBgNV BAMTKEEyNTNDRUUxOUQ5MjQ2NkQ1MjY3Qjg2QTY0QTRCRTZBMTMyMzY1RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/yAS4QwB3qhp5A9TtWU+YKMm cw/rJqzIGGU9sg88UYOm9vQsRVrY4PoUKRUVoVZ/shdUp/jOGcxRBivo/ea6ULm0 dTYsnyJ3Gs/vZYTFFznEcVStRLFOZM1PGsTcmFLqcs9uGmR/hRhVpjxWNA2mvuwl e6wTni/YM8yXIj7+Xnysb3jcN/PhNgeo6LvG4EeYP26c5/9qxO0cLwWWkUuDoD4P Jrml2hPshEVNUbpeYqgOqqU3+/RTlLS82x/M18lkx6bL8ponUtQZPFsN9NuJp/kO jzX/ukbekjGWM/A+vRKJ88ynwSbc9X1pmtcHpPnDlLt05cQFSc4P/nj1mum1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUolPO4Z2SRm1SZ7hqZKS+ahMjZewwHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEaKX7MV3stNjT1antY5hl7CdVuIpqPaaR2/ 7TBCgDHsimTZaP7nABLJuEHnN7vpRObgMEBjHCX+bQ15nYkfdJadMgJH/dsQ2jBz scq1elX4h5qEHg8lBrSGtLGrKr5etlqNMzSCFRnY3Sm0vfTKnHUxN6jK5M99a4PY YiC6bIWOnIsc98FbYk1t/Lqd0Z10iAjfL2KQSHvm0wh/ThnyshBbz6c9z6/qaXbB YkaQbvW1A8wlmrGgNMYIbMDaHytsJQuYSg4yWimeSI2LLkkVAbDjbmHVA/Mnwe2Y Dboewdb+yEa5rcllw68d8jhFmopYLRQ8EyPnsv6WPHCtL3irmK8= -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:03 2026 by rpki-client