$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: sxCZphnjJocXcbxgbMGE4fmDl89petlTegoBXtUZCis= Subject key identifier: AA:E8:90:01:64:0F:B7:4B:68:FB:E0:19:FD:45:E3:15:3A:02:24:47 Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 2CAA464CAF269001BA8F7DAE77077F7500140E87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: 0148 Signing time: Sat 28 Feb 2026 02:21:07 +0000 Manifest this update: Sat 28 Feb 2026 02:16:07 +0000 Manifest next update: Tue 03 Mar 2026 10:30:07 +0000 Files and hashes: 1: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: 4v43iD9DKTufMtXesf51VzAOv6Cm6ifyUjKOJHeSXSw=) 2: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: qcyqpIks80jrEIM0gWzsUnuRpwH1eBJXSdvwTuf+f7s=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: MfOMH8pyeWOb33eVj5lGJlXFgGJnVY97tpbaPDlGeZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:aa:46:4c:af:26:90:01:ba:8f:7d:ae:77:07:7f:75:00:14:0e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Feb 28 02:16:07 2026 GMT Not After : Mar 3 10:30:07 2026 GMT Subject: CN=AAE89001640FB74B68FBE019FD45E3153A022447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:69:02:67:fb:d2:a8:d4:c0:c0:9c:93:55: 80:d4:fe:7d:70:e4:51:81:87:85:c9:e6:01:b7:c6: 4a:bc:7e:9e:cf:24:83:22:79:1a:45:2e:58:a7:e4: 4c:f2:4e:54:50:3f:9d:b9:e6:80:ec:aa:ed:8c:e7: 22:8c:d9:80:ee:f6:b1:76:bd:83:cf:d6:8b:09:9b: b4:d8:d4:84:d2:1d:5f:48:6d:fa:55:d3:2f:6e:03: 80:59:9b:02:01:a6:06:d2:4f:3a:f5:db:36:67:27: 20:89:26:fd:cb:f6:03:70:27:97:2a:31:41:08:1a: c2:ad:55:31:aa:ce:75:d1:cc:ed:2d:8d:8f:f9:bf: 3e:01:56:ac:af:ef:95:1f:a3:e8:6e:18:21:3f:7d: 16:ea:93:75:08:5f:39:c2:fd:3c:85:6c:97:86:70: e4:60:3e:d8:85:1f:bf:09:90:9e:c1:26:ef:f0:aa: 63:26:a8:e4:94:79:22:86:6b:bc:e1:3b:26:77:0c: 6f:6d:31:d6:9e:8a:3a:5b:9e:2a:03:af:02:f3:4c: af:e6:7f:43:30:54:c2:d4:75:00:a3:6f:09:a5:02: c7:af:b0:84:24:e8:16:bd:3f:d4:a2:0e:0a:b0:a5: 39:c0:b2:d1:71:fe:00:ec:2e:ee:5c:10:47:af:1d: 37:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E8:90:01:64:0F:B7:4B:68:FB:E0:19:FD:45:E3:15:3A:02:24:47 X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3c:b6:36:45:ba:fb:e0:ef:fe:6f:d6:8b:21:01:64:06:9f: e9:9a:f0:ef:5c:a3:cb:34:24:b1:cf:32:aa:1a:be:0e:bf:75: b1:a0:3d:53:3f:ee:47:e8:ca:ad:e0:4b:05:a5:5c:ad:ef:b1: 52:62:e1:d5:9e:0f:f2:3a:5c:4a:5b:e7:cd:75:f6:c9:d7:6f: 69:ef:9c:26:eb:a5:f1:42:87:34:6a:2f:d3:8b:22:c1:6e:11: 70:69:ec:d7:a4:e9:4a:28:a6:2b:4a:9d:ac:38:9e:2e:fe:8a: 0b:ff:77:85:21:67:82:86:95:2d:d1:c3:c0:29:b6:21:2b:9a: fa:5b:31:a4:c1:05:bc:b9:bf:7d:65:27:0b:27:2e:d7:45:06: 6f:9a:fc:22:2f:28:03:33:8e:e8:77:b5:8d:78:ed:1f:13:b5: 4c:93:43:d7:9a:51:aa:36:3d:6a:0e:72:b5:90:6e:43:54:fd: 1c:fb:65:15:78:73:d3:8f:5e:89:fe:d2:35:81:45:fb:2b:fc: b4:f6:6e:18:0e:58:27:b6:e6:0e:72:89:c8:3a:73:cf:1b:0c: 34:70:75:95:83:95:0a:83:bf:6d:db:4a:98:d2:b7:56:ea:94: 02:78:f4:ad:9c:9d:ca:c3:6e:5a:6f:b4:1f:09:7c:cf:90:8e: 61:9e:14:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKpGTK8mkAG6j32udwd/dQAUDocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNjAyMjgwMjE2MDdaFw0yNjAzMDMxMDMwMDdaMDMxMTAvBgNV BAMTKEFBRTg5MDAxNjQwRkI3NEI2OEZCRTAxOUZENDVFMzE1M0EwMjI0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtS2kCZ/vSqNTAwJyTVYDU/n1w 5FGBh4XJ5gG3xkq8fp7PJIMieRpFLlin5EzyTlRQP5255oDsqu2M5yKM2YDu9rF2 vYPP1osJm7TY1ITSHV9IbfpV0y9uA4BZmwIBpgbSTzr12zZnJyCJJv3L9gNwJ5cq MUEIGsKtVTGqznXRzO0tjY/5vz4BVqyv75Ufo+huGCE/fRbqk3UIXznC/TyFbJeG cORgPtiFH78JkJ7BJu/wqmMmqOSUeSKGa7zhOyZ3DG9tMdaeijpbnioDrwLzTK/m f0MwVMLUdQCjbwmlAsevsIQk6Ba9P9SiDgqwpTnAstFx/gDsLu5cEEevHTf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUquiQAWQPt0to++AZ/UXjFToCJEcwHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADw8tjZFuvvg7/5v1oshAWQGn+ma8O9co8s0 JLHPMqoavg6/dbGgPVM/7kfoyq3gSwWlXK3vsVJi4dWeD/I6XEpb58119snXb2nv nCbrpfFChzRqL9OLIsFuEXBp7Nek6UoopitKnaw4ni7+igv/d4UhZ4KGlS3Rw8Ap tiErmvpbMaTBBby5v31lJwsnLtdFBm+a/CIvKAMzjuh3tY147R8TtUyTQ9eaUao2 PWoOcrWQbkNU/Rz7ZRV4c9OPXon+0jWBRfsr/LT2bhgOWCe25g5yicg6c88bDDRw dZWDlQqDv23bSpjSt1bqlAJ49K2cncrDblpvtB8JfM+QjmGeFAs= -----END CERTIFICATE-----Generated at Mon Mar 2 05:57:52 2026 by rpki-client