$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: 5M81y50uG1PGxDjP+CDjP1b/5OHOyb3ruzbmrvjDofk= Subject key identifier: D0:09:F5:A3:F4:D4:9A:08:C9:A8:A2:1B:BF:44:6A:C5:C9:F0:5B:1F Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 5BCCC3B695743E684F17AEF2F74C3C45F8748D42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 01B2 Signing time: Sat 28 Feb 2026 21:12:36 +0000 Manifest this update: Sat 28 Feb 2026 21:07:36 +0000 Manifest next update: Wed 04 Mar 2026 07:17:36 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) 2: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: D2W/nRGN8KoESHkddBNDApmf3wLHjainBfcoyVDZwQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:cc:c3:b6:95:74:3e:68:4f:17:ae:f2:f7:4c:3c:45:f8:74:8d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Feb 28 21:07:36 2026 GMT Not After : Mar 4 07:17:36 2026 GMT Subject: CN=D009F5A3F4D49A08C9A8A21BBF446AC5C9F05B1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:d2:66:07:c9:f9:a2:ee:18:5c:14:c2:3a: 72:09:5a:c5:6c:46:74:43:e2:ab:d7:9c:73:f7:e3: 64:62:5b:f3:9a:44:65:22:f7:4c:09:eb:50:c6:41: 53:0c:7a:72:df:69:d1:1b:41:fa:d6:06:09:76:e7: 4e:69:f1:1c:65:51:0f:88:bd:bf:dd:fc:97:65:e4: 15:94:a1:eb:91:15:ad:b3:f3:ab:86:99:f6:34:99: 26:0a:9b:4c:6f:20:e2:42:84:f0:4d:d0:72:90:80: c8:a1:f2:e6:4c:fc:e4:77:07:a0:9e:de:2e:f0:f4: ec:fc:cd:2b:36:21:dc:26:0e:c9:b7:a3:88:c5:56: 2e:6c:23:a6:12:fb:a0:4f:d0:d8:32:47:5b:04:84: 9d:31:f5:20:67:c2:8a:d8:08:f8:d5:f3:38:52:5a: ee:ac:e0:c0:b9:fc:88:89:0e:99:37:10:11:ff:8f: a7:b3:dd:85:33:b0:95:ee:58:58:d0:ad:43:9d:6e: fb:90:72:cc:2f:d6:e2:ff:62:7b:f2:40:0a:51:d0: b8:31:27:1e:8b:0b:f6:5d:9a:21:c5:d9:a7:78:27: da:7f:d6:df:05:7a:dc:73:1e:b5:98:f2:ea:2f:df: 24:e3:b4:b3:18:57:0e:ab:f6:87:39:9e:51:1e:56: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:09:F5:A3:F4:D4:9A:08:C9:A8:A2:1B:BF:44:6A:C5:C9:F0:5B:1F X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:cb:0e:df:51:fe:4a:9d:9e:70:13:42:31:b8:85:d9:aa:8d: ca:53:6d:96:bc:55:3f:a1:ca:3f:6f:c2:c8:3c:2d:31:40:87: 92:cd:9f:c7:c9:9a:fb:55:41:65:87:6a:13:2f:0d:07:a5:45: c8:43:cc:f1:d4:67:50:44:ba:7d:8c:9f:ea:f8:c8:25:e3:fd: f5:13:51:13:16:3d:09:d2:9c:bb:d6:98:82:4f:ca:4b:41:39: c5:f9:61:7c:c0:a5:f7:96:cf:cd:2f:1d:da:d8:41:93:3a:63: fa:4e:50:51:cd:02:79:71:71:93:89:57:b6:e5:58:ed:69:9e: 4b:70:67:3c:06:95:49:8e:1b:b9:ca:b6:60:91:b9:34:57:ad: 79:11:a9:8e:fd:5d:85:cc:15:e3:1d:a4:c9:f5:77:d3:b8:4c: c2:13:a3:ab:13:13:55:59:ae:16:6f:39:9b:52:fb:a6:23:d2: 3d:e7:31:1d:9a:b5:d2:33:d0:f5:59:b7:db:e6:51:4f:54:b5: 8b:9f:f4:ba:ce:fd:b3:bc:0d:41:1d:9d:d0:d1:2d:1e:a2:0c: 68:8b:fb:bc:4b:81:db:90:fb:83:6d:dd:8e:e7:28:c4:5d:b0: 77:41:3a:23:e6:48:04:0a:14:2e:ec:0d:4b:da:89:5f:81:83: c3:1e:a2:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8zDtpV0PmhPF67y90w8Rfh0jUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNjAyMjgyMTA3MzZaFw0yNjAzMDQwNzE3MzZaMDMxMTAvBgNV BAMTKEQwMDlGNUEzRjRENDlBMDhDOUE4QTIxQkJGNDQ2QUM1QzlGMDVCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdNJmB8n5ou4YXBTCOnIJWsVs RnRD4qvXnHP342RiW/OaRGUi90wJ61DGQVMMenLfadEbQfrWBgl2505p8RxlUQ+I vb/d/Jdl5BWUoeuRFa2z86uGmfY0mSYKm0xvIOJChPBN0HKQgMih8uZM/OR3B6Ce 3i7w9Oz8zSs2IdwmDsm3o4jFVi5sI6YS+6BP0NgyR1sEhJ0x9SBnworYCPjV8zhS Wu6s4MC5/IiJDpk3EBH/j6ez3YUzsJXuWFjQrUOdbvuQcswv1uL/YnvyQApR0Lgx Jx6LC/ZdmiHF2ad4J9p/1t8FetxzHrWY8uov3yTjtLMYVw6r9oc5nlEeVo1fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0An1o/TUmgjJqKIbv0RqxcnwWx8wHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjLDt9R/kqdnnATQjG4hdmqjcpTbZa8VT+h yj9vwsg8LTFAh5LNn8fJmvtVQWWHahMvDQelRchDzPHUZ1BEun2Mn+r4yCXj/fUT URMWPQnSnLvWmIJPyktBOcX5YXzApfeWz80vHdrYQZM6Y/pOUFHNAnlxcZOJV7bl WO1pnktwZzwGlUmOG7nKtmCRuTRXrXkRqY79XYXMFeMdpMn1d9O4TMITo6sTE1VZ rhZvOZtS+6Yj0j3nMR2atdIz0PVZt9vmUU9UtYuf9LrO/bO8DUEdndDRLR6iDGiL +7xLgduQ+4Nt3Y7nKMRdsHdBOiPmSAQKFC7sDUvaiV+Bg8Meon4= -----END CERTIFICATE-----Generated at Mon Mar 2 07:52:20 2026 by rpki-client