$ rpki-client -vvf repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft File: 52D962F5A9CABE2F4089548951269E5BD5F3249D.mft (raw, json) Hash identifier: CtmuoF/ngBXZP5I3nJ9LP2bWP/QkkD9ccqWx3oBg98w= Subject key identifier: 0F:A1:C9:A9:BB:8B:3E:1B:50:17:74:AB:7C:65:5D:C4:2B:7F:54:AD Authority key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Certificate issuer: /CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Certificate serial: 0EB134E82EDAF62DCAE65CA38B2DB558C717A3E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft Manifest number: DD Signing time: Sun 01 Mar 2026 07:30:01 +0000 Manifest this update: Sun 01 Mar 2026 07:25:01 +0000 Manifest next update: Wed 04 Mar 2026 13:32:01 +0000 Files and hashes: 1: 52D962F5A9CABE2F4089548951269E5BD5F3249D.crl (hash: C/byuT/Ut+e6mIOZHhARSBwBnpR1D/HjYpVgovuohLU=) 2: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: c4ofB5VSDY4XXKhWxq0LhNmllp1P3fen4sP7Y+RjYTk=) 3: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: vIF48KMANXIGE+Lk+ZdIeOLTYmbNmfa3MrBKBvJQqmE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b1:34:e8:2e:da:f6:2d:ca:e6:5c:a3:8b:2d:b5:58:c7:17:a3:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Validity Not Before: Mar 1 07:25:01 2026 GMT Not After : Mar 4 13:32:01 2026 GMT Subject: CN=0FA1C9A9BB8B3E1B501774AB7C655DC42B7F54AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2f:71:a7:a1:37:d4:93:14:7e:4f:18:b0:a7: 9d:c9:ff:b0:36:31:1b:ca:be:fb:83:8d:0b:ef:9f: 55:db:98:b2:ce:bc:b6:f3:03:2d:f3:d7:58:0d:15: 87:10:e9:17:a1:57:4a:87:63:20:7a:9d:47:fd:6c: 3c:f6:f1:ab:6a:81:fd:e0:c2:96:26:47:df:5e:36: 6e:ce:c6:65:13:df:c4:63:87:d0:89:a4:56:d1:c3: 14:d9:74:72:00:ac:86:b9:38:1c:a4:f1:e9:dd:83: e2:a9:d9:95:75:ef:9a:71:4f:1d:e0:90:6f:60:8e: 80:59:b1:12:4d:aa:24:f4:cb:d1:0b:54:bf:4f:87: ef:1e:6d:68:21:c4:7e:8c:78:33:9a:4f:74:e6:a3: 38:ab:94:5a:dd:7d:dd:57:c2:4d:1d:5f:12:b1:9f: 6d:6a:7e:8d:27:ea:bf:c6:3c:0b:40:c7:33:92:fc: c2:af:81:09:f5:ab:11:a4:98:78:b1:0d:01:7e:21: 06:84:5f:b6:96:91:19:0d:22:31:23:c1:8f:f0:c1: 9f:6c:ad:9b:37:39:1e:83:ff:e2:37:81:5c:72:57: 8f:67:9b:a7:ab:47:42:93:58:35:fc:89:8d:ff:08: a7:44:67:0f:86:f8:08:e6:d9:6c:e0:86:90:74:cd: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A1:C9:A9:BB:8B:3E:1B:50:17:74:AB:7C:65:5D:C4:2B:7F:54:AD X509v3 Authority Key Identifier: keyid:52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8a:fd:ec:44:e8:8e:7a:b6:c3:a1:fb:cb:5f:98:f3:f5:f1: f8:dc:dd:cd:2f:2a:f6:91:a0:32:05:a3:63:03:bd:23:9f:82: 6b:04:04:1e:42:1c:24:31:ca:00:bc:20:cb:5f:b4:6e:e9:53: 84:9c:f8:3e:ef:ad:ee:86:43:ca:b5:bf:77:9e:a0:7e:eb:4b: 98:df:6c:23:8d:18:1b:87:7d:9f:53:02:36:34:e2:2f:59:2b: 64:56:31:7c:bb:2c:24:88:9c:7e:4f:3e:4f:43:f5:91:f6:9c: 48:28:4f:23:fd:44:5c:c6:fb:05:ed:b4:f3:52:7a:ce:e6:c4: 61:62:2a:bb:34:a0:db:61:bd:b4:5d:23:8c:61:c3:17:a1:60: 9a:d3:1b:be:50:93:eb:e7:d1:55:58:2b:54:d7:e6:67:a0:81: 4f:fc:ed:ab:d9:cb:e6:eb:02:57:be:16:82:88:48:c1:5d:88: 94:47:0f:a7:1e:cb:56:ff:4f:e2:a0:c1:7f:70:d7:40:fd:e8: fd:d9:20:50:0a:b5:fa:cf:db:cf:09:9e:02:fa:e9:39:26:94: 64:63:db:99:98:9e:15:a5:b2:c0:95:11:77:90:b6:06:c7:2e: b0:1e:e7:24:06:02:44:ba:bb:c5:04:2f:dc:c0:74:d7:42:d3: 44:a5:6c:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrE06C7a9i3K5lyjiy21WMcXo+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJE NUYzMjQ5RDAeFw0yNjAzMDEwNzI1MDFaFw0yNjAzMDQxMzMyMDFaMDMxMTAvBgNV BAMTKDBGQTFDOUE5QkI4QjNFMUI1MDE3NzRBQjdDNjU1REM0MkI3RjU0QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiL3GnoTfUkxR+Txiwp53J/7A2 MRvKvvuDjQvvn1XbmLLOvLbzAy3z11gNFYcQ6RehV0qHYyB6nUf9bDz28atqgf3g wpYmR99eNm7OxmUT38Rjh9CJpFbRwxTZdHIArIa5OByk8endg+Kp2ZV175pxTx3g kG9gjoBZsRJNqiT0y9ELVL9Ph+8ebWghxH6MeDOaT3TmozirlFrdfd1Xwk0dXxKx n21qfo0n6r/GPAtAxzOS/MKvgQn1qxGkmHixDQF+IQaEX7aWkRkNIjEjwY/wwZ9s rZs3OR6D/+I3gVxyV49nm6erR0KTWDX8iY3/CKdEZw+G+Ajm2WzghpB0zUAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD6HJqbuLPhtQF3SrfGVdxCt/VK0wHwYDVR0j BBgwFoAUUtli9anKvi9AiVSJUSaeW9XzJJ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMC81MkQ5NjJGNUE5 Q0FCRTJGNDA4OTU0ODk1MTI2OUU1QkQ1RjMyNDlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJENUYz MjQ5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlF NUJENUYzMjQ5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaK/exE6I56tsOh+8tfmPP18fjc3c0vKvaR oDIFo2MDvSOfgmsEBB5CHCQxygC8IMtftG7pU4Sc+D7vre6GQ8q1v3eeoH7rS5jf bCONGBuHfZ9TAjY04i9ZK2RWMXy7LCSInH5PPk9D9ZH2nEgoTyP9RFzG+wXttPNS es7mxGFiKrs0oNthvbRdI4xhwxehYJrTG75Qk+vn0VVYK1TX5meggU/87avZy+br Ale+FoKISMFdiJRHD6cey1b/T+KgwX9w10D96P3ZIFAKtfrP288JngL66TkmlGRj 25mYnhWlssCVEXeQtgbHLrAe5yQGAkS6u8UEL9zAdNdC00SlbNE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:52 2026 by rpki-client