$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: +A1htdIoHXd6J6B2/gIF67uEOETeoCCVwo/jQdXV8z4= Subject key identifier: BB:86:34:9F:22:DE:89:53:C1:7C:C4:73:92:81:D3:0E:88:26:B0:12 Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 1D4ED2FBA41FE5A19CFFC651931942FB6663D8AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 0447 Signing time: Fri 17 Apr 2026 10:12:04 +0000 Manifest this update: Fri 17 Apr 2026 10:07:04 +0000 Manifest next update: Mon 20 Apr 2026 16:41:04 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: P849LDfPt0yAdDvCGNT/j4hNKrAvXDkOXJ27wl2rXh0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4e:d2:fb:a4:1f:e5:a1:9c:ff:c6:51:93:19:42:fb:66:63:d8:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Apr 17 10:07:04 2026 GMT Not After : Apr 20 16:41:04 2026 GMT Subject: CN=BB86349F22DE8953C17CC4739281D30E8826B012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:15:87:5c:ac:9e:b6:67:8f:3b:18:73:c4: 6b:c5:aa:9f:6a:1e:09:62:21:ce:00:fa:60:66:17: 41:1f:a8:d1:f8:21:99:0c:92:0a:2d:73:c5:ae:31: 42:8f:10:79:45:41:c5:53:08:f9:40:04:d3:64:86: aa:5b:68:92:d9:83:23:80:db:42:d9:db:8d:b1:71: 3a:45:a1:7b:51:66:bf:2a:4d:26:ee:92:1a:23:db: fa:0a:2b:2a:a6:5f:70:ac:05:9d:cf:b2:78:ca:02: 40:ec:ab:ee:41:e2:e7:1d:97:b4:77:14:06:a0:da: e8:a1:cf:95:6e:fd:11:e4:f4:b4:e9:bb:5e:c8:43: b7:ae:a7:ca:ec:f0:53:48:5f:f0:3a:2d:58:d7:38: 2f:8a:9e:bc:0f:6a:44:03:96:61:62:23:c6:73:82: 40:2f:68:28:cc:e2:06:0d:5b:b0:30:e4:dc:46:de: a8:50:1c:7f:95:80:79:89:88:1a:26:69:19:2c:aa: 5e:df:29:dc:bb:5c:74:bc:77:79:cb:2c:c4:e9:be: 32:ad:5c:9f:ea:ae:a0:16:b5:8f:59:cd:9c:96:ff: c6:f5:05:1b:58:cb:d8:0e:7d:d4:f5:46:69:04:4d: 23:62:5a:83:60:dc:77:72:62:d5:b4:b8:e0:ad:52: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:86:34:9F:22:DE:89:53:C1:7C:C4:73:92:81:D3:0E:88:26:B0:12 X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:75:30:3e:05:29:03:81:15:82:84:98:0c:4b:e7:0d:0d:33: 65:7f:0a:2e:fb:1a:d9:e6:6b:ca:e6:b8:8e:c7:7b:a8:b6:77: b3:33:eb:b5:9a:8b:01:94:24:3f:65:e4:40:cc:c9:4c:57:68: fb:c7:5b:36:25:28:ff:e2:cc:c0:ed:0e:f6:59:be:17:59:f8: a0:cc:2e:47:2b:e5:37:56:59:79:d4:a2:ab:15:1f:9d:68:56: 4e:3b:af:1c:b6:e7:99:b5:cd:e6:28:a1:9f:4b:9e:f4:8a:e6: 88:41:97:55:59:b0:31:79:52:c8:19:7d:55:f5:42:6e:ad:ab: 26:3d:0a:16:23:02:23:1d:92:1d:c7:4b:17:d5:ad:f4:99:fb: 7e:7b:bd:0c:ee:9d:f3:45:41:f9:82:39:42:c4:8f:dc:17:f1: bd:c0:c7:d8:aa:ef:59:0e:79:89:50:9c:54:2a:c3:32:7a:af: 27:03:f5:12:71:47:d3:98:44:c1:c5:f7:fc:19:01:4a:b8:8f: c0:d0:49:72:4c:83:a9:ed:d3:10:ce:d9:f2:f3:ba:55:10:db: 66:ce:97:8f:02:93:3d:56:90:8f:b9:c3:cb:c7:88:0c:a5:36: 1f:a9:8f:ce:46:98:fc:9b:6c:ca:21:5e:da:35:4d:bf:7e:14: 4f:5c:ed:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHU7S+6Qf5aGc/8ZRkxlC+2Zj2K4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNjA0MTcxMDA3MDRaFw0yNjA0MjAxNjQxMDRaMDMxMTAvBgNV BAMTKEJCODYzNDlGMjJERTg5NTNDMTdDQzQ3MzkyODFEMzBFODgyNkIwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOnBWHXKyetmePOxhzxGvFqp9q HgliIc4A+mBmF0EfqNH4IZkMkgotc8WuMUKPEHlFQcVTCPlABNNkhqpbaJLZgyOA 20LZ242xcTpFoXtRZr8qTSbukhoj2/oKKyqmX3CsBZ3PsnjKAkDsq+5B4ucdl7R3 FAag2uihz5Vu/RHk9LTpu17IQ7eup8rs8FNIX/A6LVjXOC+KnrwPakQDlmFiI8Zz gkAvaCjM4gYNW7Aw5NxG3qhQHH+VgHmJiBomaRksql7fKdy7XHS8d3nLLMTpvjKt XJ/qrqAWtY9ZzZyW/8b1BRtYy9gOfdT1RmkETSNiWoNg3HdyYtW0uOCtUnPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu4Y0nyLeiVPBfMRzkoHTDogmsBIwHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADt1MD4FKQOBFYKEmAxL5w0NM2V/Ci77Gtnm a8rmuI7He6i2d7Mz67WaiwGUJD9l5EDMyUxXaPvHWzYlKP/izMDtDvZZvhdZ+KDM Lkcr5TdWWXnUoqsVH51oVk47rxy255m1zeYooZ9LnvSK5ohBl1VZsDF5UsgZfVX1 Qm6tqyY9ChYjAiMdkh3HSxfVrfSZ+357vQzunfNFQfmCOULEj9wX8b3Ax9iq71kO eYlQnFQqwzJ6rycD9RJxR9OYRMHF9/wZAUq4j8DQSXJMg6nt0xDO2fLzulUQ22bO l48Ckz1WkI+5w8vHiAylNh+pj85GmPybbMohXto1Tb9+FE9c7WY= -----END CERTIFICATE-----Generated at Sun Apr 19 15:39:44 2026 by rpki-client