$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: HC7wAW6Pm9rEWl194qZuqPZNHK1IhVXDaNF5GzWivs4= Subject key identifier: F0:7F:12:9C:5A:83:DB:3C:C5:14:DC:D9:72:FF:42:85:4C:0A:5D:61 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 3ACDA22DF6AE62DDA6C2E91D6C47B34128A753A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 01C6 Signing time: Thu 16 Apr 2026 06:12:35 +0000 Manifest this update: Thu 16 Apr 2026 06:07:35 +0000 Manifest next update: Sun 19 Apr 2026 16:20:35 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) 2: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: f8Sj73OIcSk/dwI3FVf+Q1jZz9kLwIpBC8S96cFVFtQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 16:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:cd:a2:2d:f6:ae:62:dd:a6:c2:e9:1d:6c:47:b3:41:28:a7:53:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Apr 16 06:07:35 2026 GMT Not After : Apr 19 16:20:35 2026 GMT Subject: CN=F07F129C5A83DB3CC514DCD972FF42854C0A5D61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:d8:ea:c6:34:9f:fd:96:8e:e2:b9:ab:1b: 3e:ee:82:53:3d:62:27:b9:b3:93:52:47:d0:77:b6: 07:38:9b:2d:a7:b3:df:ef:bb:ff:64:15:c7:31:9b: 4e:b7:e8:61:f5:fc:83:d4:01:3d:44:6d:ca:91:61: 90:54:a2:98:f0:2a:f7:04:78:dc:f7:58:31:b0:55: 41:09:72:ba:bb:8c:0e:73:c3:a4:ae:0e:67:6c:3a: 5b:34:26:75:90:21:cf:82:dd:27:85:59:85:6b:63: 71:57:87:6e:75:0d:2e:7e:7c:93:1b:d7:b8:7a:ae: bf:00:b6:e7:ae:df:31:a7:3f:33:46:d6:b6:7b:90: 9d:33:9b:0f:95:54:20:2f:a5:f9:e5:6d:29:de:97: 47:ec:c8:10:d0:d8:de:67:cb:9e:57:06:db:8d:60: f8:e4:32:68:7a:9f:3e:5a:04:b7:cc:0d:e4:d2:1f: 01:6c:40:5f:66:3a:f5:c4:cb:3f:64:5a:41:7c:28: 14:d7:89:45:1c:4a:87:22:c7:07:9b:4d:ce:2b:9d: 23:a0:c7:49:91:f5:90:a3:7f:55:44:e2:aa:05:3d: 22:fc:66:fa:0c:97:8f:cf:9e:97:3c:60:2d:2d:c7: b1:48:0f:b5:01:22:79:4e:af:6b:41:39:06:73:b1: 73:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7F:12:9C:5A:83:DB:3C:C5:14:DC:D9:72:FF:42:85:4C:0A:5D:61 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e3:c8:b0:80:08:d2:25:03:27:55:be:2f:6a:4b:f6:d8:bb: a9:e5:c5:1f:8c:d1:a1:7c:3a:ec:c2:18:94:19:60:38:91:30: ff:4f:3c:e3:44:0e:4a:a3:44:19:2d:46:0a:85:58:32:4a:fe: e4:6a:5f:5e:12:a9:81:06:ab:1e:23:80:e4:8f:28:34:0d:f4: 37:16:05:76:2c:0a:4e:b0:f5:6b:b5:32:29:8d:e3:25:6e:85: 85:cd:f1:fd:77:f5:cc:1a:08:a6:58:a8:47:af:bb:a8:73:f0: 60:95:4a:aa:b7:11:b8:ea:92:40:b0:47:a5:c2:cf:47:ef:64: f3:0c:29:b2:e4:6f:f1:ec:72:07:d7:21:8e:41:48:b6:53:b7: d0:7f:b4:93:23:63:ed:13:eb:43:b3:31:2f:bd:82:64:16:7a: d2:0d:ea:6c:97:29:43:2e:3e:7c:19:fc:6b:bf:f0:35:0d:35: a0:c8:c8:f4:2b:51:4d:a1:5e:91:ad:06:d4:82:f8:73:f4:bf: 61:fc:c8:b9:77:62:94:f0:ff:45:91:57:dc:58:bd:b7:39:cd: f9:55:47:5f:48:64:73:68:95:ea:8a:f9:45:d0:71:ab:8a:a0: 04:be:23:65:a3:33:f0:bd:c2:3c:11:42:cd:bb:54:37:03:5f: ff:2f:b8:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOs2iLfauYt2mwukdbEezQSinU6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNjA0MTYwNjA3MzVaFw0yNjA0MTkxNjIwMzVaMDMxMTAvBgNV BAMTKEYwN0YxMjlDNUE4M0RCM0NDNTE0RENEOTcyRkY0Mjg1NEMwQTVENjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDW9jqxjSf/ZaO4rmrGz7uglM9 Yie5s5NSR9B3tgc4my2ns9/vu/9kFccxm0636GH1/IPUAT1EbcqRYZBUopjwKvcE eNz3WDGwVUEJcrq7jA5zw6SuDmdsOls0JnWQIc+C3SeFWYVrY3FXh251DS5+fJMb 17h6rr8Atueu3zGnPzNG1rZ7kJ0zmw+VVCAvpfnlbSnel0fsyBDQ2N5ny55XBtuN YPjkMmh6nz5aBLfMDeTSHwFsQF9mOvXEyz9kWkF8KBTXiUUcSocixwebTc4rnSOg x0mR9ZCjf1VE4qoFPSL8ZvoMl4/Pnpc8YC0tx7FID7UBInlOr2tBOQZzsXO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8H8SnFqD2zzFFNzZcv9ChUwKXWEwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfjyLCACNIlAydVvi9qS/bYu6nlxR+M0aF8 OuzCGJQZYDiRMP9PPONEDkqjRBktRgqFWDJK/uRqX14SqYEGqx4jgOSPKDQN9DcW BXYsCk6w9Wu1MimN4yVuhYXN8f139cwaCKZYqEevu6hz8GCVSqq3EbjqkkCwR6XC z0fvZPMMKbLkb/HscgfXIY5BSLZTt9B/tJMjY+0T60OzMS+9gmQWetIN6myXKUMu PnwZ/Gu/8DUNNaDIyPQrUU2hXpGtBtSC+HP0v2H8yLl3YpTw/0WRV9xYvbc5zflV R19IZHNoleqK+UXQcauKoAS+I2WjM/C9wjwRQs27VDcDX/8vuGE= -----END CERTIFICATE-----Generated at Fri Apr 17 14:45:34 2026 by rpki-client