
$ rpki-client -vvf rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft
File: 52D9A1099AA71A2F408409BE12B3031B5511AE20.mft (raw, json)
Hash identifier: kL4bLtwlJ97p3EbOUux0lsnbYs4ASzHfv1IkoOaiJcY=
Subject key identifier: E2:E8:2A:37:05:71:FD:59:78:B2:CC:5C:E9:86:37:5D:FD:E6:93:B4
Authority key identifier: 52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20
Certificate issuer: /CN=52D9A1099AA71A2F408409BE12B3031B5511AE20
Certificate serial: 126602165F2A59D9F3582DB04631CA918180B951
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 13:46:24 +0000
Manifest this update: Sat 13 Jun 2026 13:41:24 +0000
Manifest next update: Sun 14 Jun 2026 17:04:24 +0000
Files and hashes: 1: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: XTZIiTgv/n33Q5JYlr7SxuQOT3cziTd7vm76FG24Z3Y=)
2: 52D9A1099AA71A2F408409BE12B3031B5511AE20.crl (hash: QOieYabk6Net/kZmGIta/9mdhaoJZrs5JbMqC17+rOc=)
3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: eCOHpaJr3e3g+S1j1WgdBSHj+x6BIYHKOcTVf2mib5Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl
rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:66:02:16:5f:2a:59:d9:f3:58:2d:b0:46:31:ca:91:81:80:b9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52D9A1099AA71A2F408409BE12B3031B5511AE20
Validity
Not Before: Jun 13 13:41:24 2026 GMT
Not After : Jun 14 17:04:24 2026 GMT
Subject: CN=E2E82A370571FD5978B2CC5CE986375DFDE693B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:c2:9b:a4:8b:38:5b:0c:db:7b:70:fa:44:
5c:ac:7e:f8:37:0c:89:93:d6:42:cf:4b:b6:16:d3:
e3:5e:a4:93:17:a7:b7:be:a6:06:d8:68:b0:43:d7:
73:76:ce:aa:c2:e0:22:2e:e6:9b:f6:4a:2e:10:13:
b1:03:58:14:f1:90:19:2b:e7:60:31:2d:16:1a:33:
49:25:09:3d:4e:8d:1f:af:99:2c:3c:a6:21:2b:87:
6f:d7:d6:64:bc:10:1d:35:87:22:02:c3:4a:48:3f:
63:79:04:f2:07:c9:25:29:f0:ed:27:93:47:5d:52:
be:b5:41:df:7f:b8:66:1e:bc:85:02:b5:e2:7e:01:
a9:63:01:4c:b8:37:cc:d0:df:0b:6d:01:76:b6:0a:
fe:92:ec:34:ae:be:6e:b0:7d:e5:03:74:8e:33:f1:
46:a1:f4:df:67:29:89:59:4f:2b:ca:c1:1c:66:77:
e6:55:76:a1:1e:16:0c:4e:1f:1f:9c:b3:62:c7:e7:
44:be:e1:77:34:71:fb:1f:8f:e8:62:b0:a3:c5:03:
16:1b:ef:62:12:c0:32:34:22:91:fb:e6:b0:d8:0f:
b4:97:de:53:71:b3:c7:fe:4c:08:4f:35:e5:70:17:
7f:b5:55:01:1f:04:ea:85:63:d4:2c:6d:60:e7:18:
54:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E8:2A:37:05:71:FD:59:78:B2:CC:5C:E9:86:37:5D:FD:E6:93:B4
X509v3 Authority Key Identifier:
keyid:52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0e:48:57:a7:75:16:04:89:03:82:e5:1d:c8:bd:03:09:ab:
31:a2:76:0a:4c:8e:27:be:27:5d:3a:45:d0:81:c7:cc:a4:70:
f9:04:06:ca:e0:ef:9c:62:e7:0d:b6:ef:f4:b9:25:30:2e:d2:
14:96:b8:f6:bd:04:80:8b:94:98:d2:f1:b7:e7:30:1f:4a:84:
df:2f:e7:9c:72:e9:ea:39:9f:f7:91:22:27:7f:00:72:ef:d2:
ac:26:13:ad:d4:41:7d:bb:10:cf:31:6c:b1:9a:ca:ad:4b:6a:
59:79:ac:36:78:ae:3a:9b:70:c3:f9:0d:28:55:88:2f:84:ba:
3e:62:ad:20:da:a8:53:bf:b1:d0:90:e7:5d:f8:60:44:72:d9:
e2:8b:f9:35:6f:17:31:34:d3:3e:34:35:c6:d4:09:33:19:52:
4f:5d:58:c5:b7:79:6f:f4:50:4e:25:c7:51:58:10:5d:3f:bd:
e8:f3:7d:eb:ba:83:df:f2:f7:98:ab:73:c4:6e:d4:c8:2a:41:
dc:7c:f6:3b:15:04:22:f6:63:df:b0:82:c9:a6:95:82:ce:99:
4e:f5:cf:79:0d:e4:ab:38:a3:92:6e:35:ab:0a:05:2e:26:d3:
ad:ef:bb:d0:e8:4c:55:80:14:21:f3:56:22:37:71:22:be:cb:
03:2d:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:40:54 2026 by rpki-client