$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft (raw, json) Hash identifier: R8Mg7Q53q7fgdCuTE9NBWpo/FT/Z0p8UsoIT1f4TpBs= Subject key identifier: CD:9F:0D:7E:69:B5:8C:E1:EB:36:A0:31:5A:08:F4:F5:06:42:BD:1A Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Certificate issuer: /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Certificate serial: 524BC5245DBCACB26C7074291A41E7B72EFABF5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft Manifest number: 037A Signing time: Sat 18 Apr 2026 16:22:14 +0000 Manifest this update: Sat 18 Apr 2026 16:17:14 +0000 Manifest next update: Tue 21 Apr 2026 20:24:14 +0000 Files and hashes: 1: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs=) 2: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw=) 3: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl (hash: cQMjc5meYLHDCOlhHBCmdvdS6GnaQW7WodEQDA616+I=) 4: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4b:c5:24:5d:bc:ac:b2:6c:70:74:29:1a:41:e7:b7:2e:fa:bf:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Validity Not Before: Apr 18 16:17:14 2026 GMT Not After : Apr 21 20:24:14 2026 GMT Subject: CN=CD9F0D7E69B58CE1EB36A0315A08F4F50642BD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:f9:b5:82:a7:3b:23:71:87:7e:e4:d2:15: d3:71:d1:80:aa:7d:7c:6a:60:ea:9f:43:e0:4a:d5: 82:3d:8c:5b:70:b4:b0:0a:5f:85:70:d8:7a:38:77: d9:b2:c3:72:cf:4e:ba:4a:20:55:da:17:f8:cb:53: 42:18:c2:1d:5f:71:2d:3f:10:91:24:56:7a:96:29: 29:de:09:ef:b3:87:4e:44:53:1a:a9:7e:fb:c4:28: 01:36:76:28:5d:a9:5f:79:32:00:0e:ca:f0:fd:9e: b4:2c:28:ad:09:4a:fd:80:db:3c:bf:c3:1c:90:4c: 26:71:f7:d0:24:c9:d8:f6:35:d1:43:52:23:b3:ed: e1:cb:90:6a:2c:86:0b:31:53:6f:31:a8:fd:c3:0d: 43:21:26:f9:f9:05:f1:3e:76:8c:59:a0:3e:0e:d7: f7:bd:f9:4e:5a:a9:65:74:d2:9c:60:e6:9d:bc:f1: 89:45:bc:e7:23:cc:6d:ba:89:4b:25:3e:da:d6:b9: ba:20:f1:1e:09:5d:88:19:06:36:c5:69:1e:9b:90: ba:ed:b9:de:e7:f2:97:16:42:cf:92:aa:16:3d:7e: de:84:1d:2b:fa:87:84:36:69:df:2a:60:89:72:30: 52:0f:2f:76:0f:20:c4:24:25:6c:13:ee:ca:52:42: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9F:0D:7E:69:B5:8C:E1:EB:36:A0:31:5A:08:F4:F5:06:42:BD:1A X509v3 Authority Key Identifier: keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ad:64:72:95:05:cc:1c:3c:48:68:d6:f3:75:16:f0:fc:7e: 63:f8:cc:fd:a1:9a:de:7f:51:40:c7:5a:ff:03:8e:02:6c:f1: 8b:77:6d:c6:db:06:b4:a9:c4:98:3b:8f:88:16:d0:46:ab:4e: d3:4e:e0:d2:cf:21:0f:8e:c5:ea:72:d0:6e:6c:09:85:3e:32: 4f:81:96:1f:44:db:28:68:a4:c2:e1:e3:76:ff:6b:7a:c7:fb: d8:54:c0:f9:3f:3e:ca:c0:2f:a8:b4:50:ad:2c:87:f3:9e:a6: a7:77:21:8a:37:d8:ad:5d:69:9a:02:50:f8:b7:47:00:28:f8: da:0c:7f:09:d0:2a:19:98:8d:4f:f6:24:a7:60:13:c6:4b:d5: e0:be:05:86:e4:9d:a7:d4:a9:f0:b4:78:54:a5:8a:aa:c6:61: 0f:65:68:8a:5b:2a:80:9c:a6:81:c8:c2:51:d8:b6:b1:43:45: a8:1d:d9:af:84:1a:69:fb:2a:5d:a4:ee:f3:6b:1f:48:d3:07: 44:4e:3b:b6:e4:31:3b:2e:7e:39:81:90:c5:37:21:d9:5e:a9: a4:0a:9b:ca:cc:03:74:3b:91:68:35:48:59:6a:a6:ec:e6:62: 72:fa:8d:23:6d:3b:9f:74:cb:36:9b:ac:35:64:79:1e:fd:69: f8:e7:f3:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkvFJF28rLJscHQpGkHnty76v10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE QkM1RkY0QzAeFw0yNjA0MTgxNjE3MTRaFw0yNjA0MjEyMDI0MTRaMDMxMTAvBgNV BAMTKENEOUYwRDdFNjlCNThDRTFFQjM2QTAzMTVBMDhGNEY1MDY0MkJEMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByvm1gqc7I3GHfuTSFdNx0YCq fXxqYOqfQ+BK1YI9jFtwtLAKX4Vw2Ho4d9myw3LPTrpKIFXaF/jLU0IYwh1fcS0/ EJEkVnqWKSneCe+zh05EUxqpfvvEKAE2dihdqV95MgAOyvD9nrQsKK0JSv2A2zy/ wxyQTCZx99Akydj2NdFDUiOz7eHLkGoshgsxU28xqP3DDUMhJvn5BfE+doxZoD4O 1/e9+U5aqWV00pxg5p288YlFvOcjzG26iUslPtrWubog8R4JXYgZBjbFaR6bkLrt ud7n8pcWQs+SqhY9ft6EHSv6h4Q2ad8qYIlyMFIPL3YPIMQkJWwT7spSQte3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzZ8Nfmm1jOHrNqAxWgj09QZCvRowHwYDVR0j BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1 RkY0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2 RENEQkM1RkY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHitZHKVBcwcPEho1vN1FvD8fmP4zP2hmt5/ UUDHWv8DjgJs8Yt3bcbbBrSpxJg7j4gW0EarTtNO4NLPIQ+Oxepy0G5sCYU+Mk+B lh9E2yhopMLh43b/a3rH+9hUwPk/PsrAL6i0UK0sh/Oepqd3IYo32K1daZoCUPi3 RwAo+NoMfwnQKhmYjU/2JKdgE8ZL1eC+BYbknafUqfC0eFSliqrGYQ9laIpbKoCc poHIwlHYtrFDRagd2a+EGmn7Kl2k7vNrH0jTB0ROO7bkMTsufjmBkMU3IdleqaQK m8rMA3Q7kWg1SFlqpuzmYnL6jSNtO590yzabrDVkeR79afjn81g= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:12 2026 by rpki-client