$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft File: 52D9A1099AA71A2F408409BE12B3031B5511AE20.mft (raw, json) Hash identifier: 9mcvumHH1r6VwOSBeeCkKhEpVtxHgBY/jExFS55nxOE= Subject key identifier: A5:C7:69:FF:7C:1A:53:6A:34:39:CC:EE:4A:A4:C7:13:77:20:7B:7F Authority key identifier: 52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 Certificate issuer: /CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Certificate serial: 0F723FF0CE259706A3CE1DABB38161A4AE0F6375 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft Manifest number: D4 Signing time: Wed 07 Oct 2026 18:21:16 +0000 Manifest this update: Wed 07 Oct 2026 18:16:16 +0000 Manifest next update: Thu 08 Oct 2026 21:11:16 +0000 Files and hashes: 1: 52D9A1099AA71A2F408409BE12B3031B5511AE20.crl (hash: enff/W+soJkaaHFXbkfY8m3IFTGnQiDMe+Eifed/Jus=) 2: 3130332e3132392e37302e302f32332d3234203d3e20313335343738.roa (hash: XTZIiTgv/n33Q5JYlr7SxuQOT3cziTd7vm76FG24Z3Y=) 3: 3130332e3132392e36382e302f32332d3234203d3e20313335343738.roa (hash: eCOHpaJr3e3g+S1j1WgdBSHj+x6BIYHKOcTVf2mib5Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 21:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:72:3f:f0:ce:25:97:06:a3:ce:1d:ab:b3:81:61:a4:ae:0f:63:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D9A1099AA71A2F408409BE12B3031B5511AE20 Validity Not Before: Oct 7 18:16:16 2026 GMT Not After : Oct 8 21:11:16 2026 GMT Subject: CN=A5C769FF7C1A536A3439CCEE4AA4C71377207B7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e9:45:15:60:f1:ca:36:69:26:e1:e7:e9:61: a2:6d:07:9b:b9:5c:a4:d9:42:f4:91:4c:54:7b:f0: cc:d5:7b:97:35:7c:dc:1c:a9:b9:36:df:93:98:b8: 61:80:d1:22:aa:6c:a7:e4:ed:0e:cd:9e:7f:5e:59: 87:01:c3:44:85:10:47:6f:27:79:c6:a0:08:f6:7a: ed:bd:c7:23:a0:e5:af:cc:66:c1:e5:ba:b3:29:be: 1c:51:85:ce:b8:06:13:40:c4:e7:5d:25:ee:66:26: 6d:bd:71:17:93:35:1e:ac:77:5f:b2:ec:97:1d:69: 0e:2f:e1:c0:b7:20:42:c3:94:7e:96:0f:43:e1:db: ee:13:1e:f7:1c:8b:82:b5:12:a6:fb:a6:74:fd:b5: 92:bb:c2:e8:82:81:c6:63:87:56:f6:69:35:d6:1d: 6a:0f:50:a0:83:9a:34:73:17:ee:a5:8e:57:ee:8e: 3f:49:05:45:3f:a4:e8:27:a8:61:08:25:69:6e:25: 0c:44:af:54:de:6c:7a:d4:de:18:66:4b:c4:e7:9a: ad:0f:fd:d6:e8:19:39:10:1e:93:cf:80:5b:53:ee: 0c:f5:e1:aa:e2:e8:4d:11:d0:2a:07:f0:6b:3d:66: ee:33:2c:5f:79:37:ad:b3:0f:ae:0d:2f:d7:e5:a1: 8e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C7:69:FF:7C:1A:53:6A:34:39:CC:EE:4A:A4:C7:13:77:20:7B:7F X509v3 Authority Key Identifier: keyid:52:D9:A1:09:9A:A7:1A:2F:40:84:09:BE:12:B3:03:1B:55:11:AE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/52D9A1099AA71A2F408409BE12B3031B5511AE20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57f6e57b-4c26-442b-8afc-0329eedafb72/0/52D9A1099AA71A2F408409BE12B3031B5511AE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d9:b5:81:88:2c:00:3f:d3:4a:ec:b8:78:48:0f:27:a1:e9: 36:5f:7c:b8:23:7b:cd:96:96:0a:b4:45:fd:d3:17:b4:5a:4b: ec:24:90:e7:83:3d:8e:12:fa:99:6d:cd:0d:0d:71:79:52:8c: 39:bb:13:de:5d:2b:2d:99:f7:d4:31:58:3c:f1:3d:3f:75:44: 21:81:48:fb:3f:63:2c:5c:01:0f:7d:29:f0:03:50:16:ad:b4: 9b:1b:b7:06:ae:4f:d2:eb:6a:19:74:5c:1a:5d:88:64:3e:7b: c5:c1:13:a8:37:ca:bd:66:58:c2:fc:49:70:8e:34:b1:67:0b: 85:e1:ae:b5:82:15:b8:44:dc:25:44:7e:00:ff:ae:d9:e6:39: 44:c7:bf:b0:d2:3f:08:79:f1:4e:3f:10:be:38:d9:52:e7:56: fa:fa:d7:fc:91:c7:a5:f1:78:d7:50:87:5e:ec:c7:61:f8:6d: da:ed:86:7d:98:b5:f7:e7:4d:cc:54:ad:16:5f:8b:f3:d1:5c: 8d:e5:e8:2d:2e:95:eb:e3:69:98:ea:e3:21:2c:ae:06:90:1b: bd:de:39:5a:a7:81:fb:01:ee:1e:e0:9f:25:9a:20:e4:00:91: 8f:9a:69:bd:df:21:02:59:c7:ba:1e:9b:9d:a3:4a:7d:c4:8a: a9:72:f9:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3I/8M4llwajzh2rs4FhpK4PY3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1 NTExQUUyMDAeFw0yNjEwMDcxODE2MTZaFw0yNjEwMDgyMTExMTZaMDMxMTAvBgNV BAMTKEE1Qzc2OUZGN0MxQTUzNkEzNDM5Q0NFRTRBQTRDNzEzNzcyMDdCN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6UUVYPHKNmkm4efpYaJtB5u5 XKTZQvSRTFR78MzVe5c1fNwcqbk235OYuGGA0SKqbKfk7Q7Nnn9eWYcBw0SFEEdv J3nGoAj2eu29xyOg5a/MZsHlurMpvhxRhc64BhNAxOddJe5mJm29cReTNR6sd1+y 7JcdaQ4v4cC3IELDlH6WD0Ph2+4THvcci4K1Eqb7pnT9tZK7wuiCgcZjh1b2aTXW HWoPUKCDmjRzF+6ljlfujj9JBUU/pOgnqGEIJWluJQxEr1TebHrU3hhmS8Tnmq0P /dboGTkQHpPPgFtT7gz14ari6E0R0CoH8Gs9Zu4zLF95N62zD64NL9floY75AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpcdp/3waU2o0OczuSqTHE3cge38wHwYDVR0j BBgwFoAUUtmhCZqnGi9AhAm+ErMDG1URriAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdmNmU1N2ItNGMyNi00NDJiLThhZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5 QUE3MUEyRjQwODQwOUJFMTJCMzAzMUI1NTExQUUyMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MkQ5QTEwOTlBQTcxQTJGNDA4NDA5QkUxMkIzMDMxQjU1MTFB RTIwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdmNmU1N2ItNGMyNi00NDJiLThh ZmMtMDMyOWVlZGFmYjcyLzAvNTJEOUExMDk5QUE3MUEyRjQwODQwOUJFMTJCMzAz MUI1NTExQUUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTZtYGILAA/00rsuHhIDyeh6TZffLgje82W lgq0Rf3TF7RaS+wkkOeDPY4S+pltzQ0NcXlSjDm7E95dKy2Z99QxWDzxPT91RCGB SPs/YyxcAQ99KfADUBattJsbtwauT9Lrahl0XBpdiGQ+e8XBE6g3yr1mWML8SXCO NLFnC4XhrrWCFbhE3CVEfgD/rtnmOUTHv7DSPwh58U4/EL442VLnVvr61/yRx6Xx eNdQh17sx2H4bdrthn2YtffnTcxUrRZfi/PRXI3l6C0ulevjaZjq4yEsrgaQG73e OVqngfsB7h7gnyWaIOQAkY+aab3fIQJZx7oem52jSn3Eiqly+Tg= -----END CERTIFICATE-----Generated at Thu Oct 8 13:19:52 2026 by rpki-client