$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: qRQgPBfAwC5ADh2mjQPxPG5xilEAdgOTo84Lv+7CKLw= Subject key identifier: 82:35:EE:87:94:CD:8D:A2:0F:00:35:D4:E5:6A:F3:02:67:EA:C4:38 Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 3804F6E1A34AD1A6053410B51B3FA159244C657E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: 8D Signing time: Sat 23 Aug 2025 20:00:48 +0000 Manifest this update: Sat 23 Aug 2025 19:55:48 +0000 Manifest next update: Tue 26 Aug 2025 23:01:48 +0000 Files and hashes: 1: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: KFtTwC33GXqo9SGENmFv37jmHYdZuCE+lzQamyWFaIQ=) 2: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: 55sjufMqiAUVQEWT+QA1EUsxab9EOoQxItI4+DBt3EA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:04:f6:e1:a3:4a:d1:a6:05:34:10:b5:1b:3f:a1:59:24:4c:65:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Aug 23 19:55:48 2025 GMT Not After : Aug 26 23:01:48 2025 GMT Subject: CN=8235EE8794CD8DA20F0035D4E56AF30267EAC438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:dc:45:39:1a:33:bb:cc:4c:ce:6a:a4:64: cc:ca:74:d5:df:c3:66:03:c5:10:a1:b8:43:1f:12: 26:31:87:28:1a:10:1c:b7:80:8e:e1:a7:2d:60:39: 20:ef:bb:fd:05:f1:b4:64:ac:c9:09:98:1a:33:c2: 5f:39:e3:59:86:1f:3a:29:f9:4d:da:91:64:97:d6: bb:80:c6:ff:6b:1a:58:c3:ed:b4:dd:5a:18:1a:6d: 14:d2:67:b6:37:b8:72:78:b3:4d:f9:9c:3d:4e:07: a8:ee:14:07:16:dd:92:87:8e:fd:23:1f:7f:28:1d: c3:6c:65:ae:97:0c:a6:1a:e7:f4:2e:d1:dd:2c:73: 4a:22:a9:55:88:59:55:4f:fb:c8:6a:5f:2f:c1:43: 0b:89:d4:b9:21:e3:7b:ca:db:34:e6:57:e1:6f:71: 34:96:fd:33:77:c9:b8:01:ba:cc:5e:9a:44:e3:f9: 49:70:99:73:c0:97:e8:a6:66:5b:66:01:6f:da:f9: 6d:01:3a:44:c7:d6:30:42:77:55:bd:10:85:a8:60: 08:5a:f9:04:a9:28:ec:bd:73:e1:eb:02:85:53:9b: d6:33:59:9a:d7:08:d1:57:44:ad:09:de:57:43:83: 4b:2f:65:7d:f9:31:e1:79:11:3d:b6:1e:5f:ae:c0: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:35:EE:87:94:CD:8D:A2:0F:00:35:D4:E5:6A:F3:02:67:EA:C4:38 X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:2e:8f:62:ac:2d:b1:6f:81:f4:fc:fa:90:69:2e:69:61:7d: 23:69:c6:3b:52:f7:9f:ac:4e:be:58:76:63:fc:79:47:b5:93: ab:80:2b:2d:38:b7:64:45:e4:b5:45:47:bc:e5:84:8e:18:09: ae:9d:b9:a9:b1:58:8f:07:75:91:9a:1f:50:0c:12:d0:f1:d8: 3b:d2:b7:15:4f:ae:e3:7d:57:35:ad:22:4b:d0:b5:d6:1d:37: 2e:cc:a6:27:cd:38:97:c6:a0:d7:cf:03:8d:23:37:09:4a:17: 0d:29:c9:a0:ce:ba:6a:15:6b:c9:ff:10:5b:c6:9d:ea:6c:db: 80:46:3d:8f:92:51:b0:e3:a9:99:19:c6:5b:c5:5d:1a:cb:9f: 2b:c5:60:35:09:03:9b:28:a4:5c:8a:9f:2b:70:98:e2:fa:64: 96:33:1a:41:f0:84:40:60:16:db:50:f7:f2:21:ce:48:4c:50: 4e:66:aa:dc:ca:8b:a1:83:09:18:44:6c:5c:49:cc:bf:ef:bf: c6:44:6e:b0:f3:c7:a2:04:bb:ba:35:c3:ea:ff:06:35:36:4b: 17:73:b9:f3:2c:c2:16:37:f6:41:a0:15:8a:86:97:ab:db:5e: dc:2c:c6:29:da:1a:91:14:06:54:49:bb:13:df:d6:06:53:75: ab:e0:84:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOAT24aNK0aYFNBC1Gz+hWSRMZX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNTA4MjMxOTU1NDhaFw0yNTA4MjYyMzAxNDhaMDMxMTAvBgNV BAMTKDgyMzVFRTg3OTRDRDhEQTIwRjAwMzVENEU1NkFGMzAyNjdFQUM0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUF9xFORozu8xMzmqkZMzKdNXf w2YDxRChuEMfEiYxhygaEBy3gI7hpy1gOSDvu/0F8bRkrMkJmBozwl8541mGHzop +U3akWSX1ruAxv9rGljD7bTdWhgabRTSZ7Y3uHJ4s035nD1OB6juFAcW3ZKHjv0j H38oHcNsZa6XDKYa5/Qu0d0sc0oiqVWIWVVP+8hqXy/BQwuJ1Lkh43vK2zTmV+Fv cTSW/TN3ybgBusxemkTj+UlwmXPAl+imZltmAW/a+W0BOkTH1jBCd1W9EIWoYAha +QSpKOy9c+HrAoVTm9YzWZrXCNFXRK0J3ldDg0svZX35MeF5ET22Hl+uwOifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgjXuh5TNjaIPADXU5WrzAmfqxDgwHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUuj2KsLbFvgfT8+pBpLmlhfSNpxjtS95+s Tr5YdmP8eUe1k6uAKy04t2RF5LVFR7zlhI4YCa6duamxWI8HdZGaH1AMEtDx2DvS txVPruN9VzWtIkvQtdYdNy7MpifNOJfGoNfPA40jNwlKFw0pyaDOumoVa8n/EFvG neps24BGPY+SUbDjqZkZxlvFXRrLnyvFYDUJA5sopFyKnytwmOL6ZJYzGkHwhEBg FttQ9/IhzkhMUE5mqtzKi6GDCRhEbFxJzL/vv8ZEbrDzx6IEu7o1w+r/BjU2Sxdz ufMswhY39kGgFYqGl6vbXtwsxinaGpEUBlRJuxPf1gZTdavghIo= -----END CERTIFICATE-----Generated at Sat Aug 23 21:48:07 2025 by rpki-client