
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft
File: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft (raw, json)
Hash identifier: rCAdwDZxNj3mLts22zBiB1iHS1+bQMm/82B15FERAEE=
Subject key identifier: 3A:ED:2A:7E:64:E4:26:D8:02:20:DD:5A:CB:81:EC:16:25:08:59:FD
Authority key identifier: C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F
Certificate issuer: /CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F
Certificate serial: 1B262FEECADBEA15DB1439D5C1773EC490BCBF1B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 20:03:31 +0000
Manifest this update: Sat 13 Jun 2026 19:58:31 +0000
Manifest next update: Sun 14 Jun 2026 21:58:31 +0000
Files and hashes: 1: C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl (hash: rZo9wNLcpBCVbEup/mQqFZ6tdIw/iv99P4RvmaiKyjo=)
2: 3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (hash: 5StnOeqZ96buXCGi/ZTPekGCsI1j8G00cwvVyv/D23k=)
3: 3130332e3135322e3131382e302f32342d3234203d3e20313430343433.roa (hash: 3sTXjzHUOLPeEyAojCjuo6mjJbiX0Eb7eAu+BmtWebk=)
4: 3130332e3135322e3131382e302f32332d3233203d3e20313430343433.roa (hash: yAZGzCFckEolEtkEocUhLNSw4BV4DJZdNzdA0tVkGtA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl
rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:26:2f:ee:ca:db:ea:15:db:14:39:d5:c1:77:3e:c4:90:bc:bf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C52C12AB9B1359B93C6C86403D3B51D19AB1C78F
Validity
Not Before: Jun 13 19:58:31 2026 GMT
Not After : Jun 14 21:58:31 2026 GMT
Subject: CN=3AED2A7E64E426D80220DD5ACB81EC16250859FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:a1:b3:9b:37:2a:30:90:aa:72:1f:44:6c:
e3:91:d0:0f:54:70:d8:29:d5:00:b8:95:80:7f:54:
57:b5:62:b6:f8:4d:99:94:b9:8e:2e:fa:73:58:e1:
20:43:29:82:3c:57:de:e0:61:2e:db:70:2f:b4:98:
46:f1:ac:5c:0d:d0:98:ad:1c:a8:7f:c0:37:94:fb:
56:fc:06:05:e7:db:0e:53:44:4d:16:e5:e1:a1:0e:
d2:3d:ad:ac:b3:7c:c5:1d:ef:68:ca:26:aa:84:ff:
e6:ca:9f:cb:f0:70:d8:38:29:98:09:48:3b:78:78:
91:3d:09:6e:24:fa:79:85:e9:dd:41:58:cb:a3:2c:
9e:eb:10:58:b5:29:e9:4b:14:6c:06:5c:f1:a6:1d:
a2:47:ad:b6:ae:cb:d3:cc:8d:6c:b1:c3:e2:35:b0:
dd:27:0d:ea:23:7e:34:18:bf:17:9e:5c:25:31:12:
17:02:e1:a7:0a:14:6c:e7:55:e7:e3:b8:aa:4b:1e:
40:08:50:a2:41:4a:c7:8b:64:9c:22:3d:34:4a:7f:
f3:57:b6:0f:fe:b7:dc:cc:fd:08:d8:61:87:9b:49:
97:2c:5a:73:ae:ae:28:dc:ca:a1:cc:7a:79:f0:5e:
62:12:c9:8d:39:fd:55:5a:93:0a:d9:44:06:3e:7d:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:ED:2A:7E:64:E4:26:D8:02:20:DD:5A:CB:81:EC:16:25:08:59:FD
X509v3 Authority Key Identifier:
keyid:C5:2C:12:AB:9B:13:59:B9:3C:6C:86:40:3D:3B:51:D1:9A:B1:C7:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/C52C12AB9B1359B93C6C86403D3B51D19AB1C78F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e7:f0:79:8d:4b:97:b3:dc:3d:ce:dd:cd:cd:c7:12:37:9f:
c6:74:88:84:d5:74:fb:ee:8c:a7:7f:b4:29:a0:9e:30:db:d9:
c7:44:65:88:7e:02:38:bd:1a:56:76:e1:68:4e:d9:89:a5:79:
29:56:64:c7:b1:3a:d1:3e:95:f6:19:5b:14:07:40:04:e9:bc:
18:43:61:a0:2b:b5:03:0a:13:49:c3:08:3e:57:86:a9:37:94:
a0:c3:f5:35:2b:b9:7b:b1:2e:a7:4f:17:05:5f:f3:f7:d5:65:
78:0d:5f:5c:64:ec:c5:3f:80:50:76:b6:15:e4:2f:ba:d9:8b:
99:3f:8f:85:f1:76:38:9d:3f:fd:c5:22:56:05:97:42:6c:e6:
4e:45:81:ff:3e:47:b4:5b:ae:14:58:d9:9a:57:d6:60:68:c7:
26:f1:9f:a0:78:cc:be:a8:da:d6:67:77:42:08:94:78:d4:70:
cd:4a:e8:85:41:fd:e1:1a:c7:42:6f:ec:aa:b8:68:72:33:da:
e4:b9:21:0f:07:59:ac:79:0d:d2:c6:8f:af:30:1f:09:20:32:
9b:8e:c6:61:28:91:47:d7:e2:55:2f:86:62:bb:7e:c2:cf:4c:
d2:04:72:6e:b7:c5:a0:22:a5:80:77:e8:54:36:70:58:45:ec:
d3:a9:41:56
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUGyYv7srb6hXbFDnVwXc+xJC8vxswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5
QUIxQzc4RjAeFw0yNjA2MTMxOTU4MzFaFw0yNjA2MTQyMTU4MzFaMDMxMTAvBgNV
BAMTKDNBRUQyQTdFNjRFNDI2RDgwMjIwREQ1QUNCODFFQzE2MjUwODU5RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pKGzmzcqMJCqch9EbOOR0A9U
cNgp1QC4lYB/VFe1Yrb4TZmUuY4u+nNY4SBDKYI8V97gYS7bcC+0mEbxrFwN0Jit
HKh/wDeU+1b8BgXn2w5TRE0W5eGhDtI9rayzfMUd72jKJqqE/+bKn8vwcNg4KZgJ
SDt4eJE9CW4k+nmF6d1BWMujLJ7rEFi1KelLFGwGXPGmHaJHrbauy9PMjWyxw+I1
sN0nDeojfjQYvxeeXCUxEhcC4acKFGznVefjuKpLHkAIUKJBSseLZJwiPTRKf/NX
tg/+t9zM/QjYYYebSZcsWnOurijcyqHMennwXmISyY05/VVakwrZRAY+feQlAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUOu0qfmTkJtgCIN1ay4HsFiUIWf0wHwYDVR0j
BBgwFoAUxSwSq5sTWbk8bIZAPTtR0Zqxx48wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDIwNzNhY2UtYTY5MS00ODYzLTljMWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5
QjEzNTlCOTNDNkM4NjQwM0QzQjUxRDE5QUIxQzc4Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNTJDMTJBQjlCMTM1OUI5M0M2Qzg2NDAzRDNCNTFEMTlBQjFD
NzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDIwNzNhY2UtYTY5MS00ODYzLTlj
MWMtNTliMmRiOWNiNDYzLzAvQzUyQzEyQUI5QjEzNTlCOTNDNkM4NjQwM0QzQjUx
RDE5QUIxQzc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAMLn8HmNS5ez3D3O3c3NxxI3n8Z0iITVdPvu
jKd/tCmgnjDb2cdEZYh+Aji9GlZ24WhO2YmleSlWZMexOtE+lfYZWxQHQATpvBhD
YaArtQMKE0nDCD5Xhqk3lKDD9TUruXuxLqdPFwVf8/fVZXgNX1xk7MU/gFB2thXk
L7rZi5k/j4XxdjidP/3FIlYFl0Js5k5Fgf8+R7RbrhRY2ZpX1mBoxybxn6B4zL6o
2tZnd0IIlHjUcM1K6IVB/eEax0Jv7Kq4aHIz2uS5IQ8HWax5DdLGj68wHwkgMpuO
xmEokUfX4lUvhmK7fsLPTNIEcm63xaAipYB36FQ2cFhF7NOpQVY=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:23:46 2026 by rpki-client