$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: k+1qLz4VB+16qdU1qOyKmizXtZzahQ1caYeKNk7qLJ4= Subject key identifier: CC:E3:08:57:27:20:C9:92:C9:4B:1D:88:50:25:8A:2E:D2:A1:89:89 Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 770BEEC5761A6A180352270CCE412124F3EB49B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: A7 Signing time: Mon 20 Oct 2025 03:30:47 +0000 Manifest this update: Mon 20 Oct 2025 03:25:47 +0000 Manifest next update: Thu 23 Oct 2025 14:19:47 +0000 Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: pR6eogbZvQzPFnI0kZLcItGmRoYFBBreikW5pxdST7Q=) 2: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: ITOk5XG0tqRFOlxA/16JxWHfdZTCqvDWb5rU6u3pq5M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:0b:ee:c5:76:1a:6a:18:03:52:27:0c:ce:41:21:24:f3:eb:49:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Oct 20 03:25:47 2025 GMT Not After : Oct 23 14:19:47 2025 GMT Subject: CN=CCE308572720C992C94B1D8850258A2ED2A18989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:2b:9d:b0:e6:4e:88:99:5d:97:92:5c:62: 94:f8:e3:62:f8:73:69:5d:99:91:66:0a:19:57:11: b1:32:1f:f1:f9:44:df:32:d2:f2:1d:df:c6:3a:0a: be:27:88:4b:99:05:c9:12:da:04:09:ea:d9:bd:cd: f7:7d:92:ea:23:6a:6f:3e:99:27:87:4b:56:5a:d6: 53:e2:29:41:2f:50:5e:10:3b:3c:27:21:34:bd:d2: 34:c4:9e:f2:d6:04:75:c4:5b:61:81:5e:27:63:92: 5e:bf:3d:bf:a2:50:a5:93:86:2d:91:35:49:6e:f7: 70:ad:bb:8b:b1:ee:fc:df:0b:28:c8:87:2a:b8:b4: ee:f4:e6:89:2c:04:68:39:d5:e7:e7:0d:22:17:72: b8:fa:7e:70:b7:2b:bc:a9:bb:a5:e3:d3:5a:92:c9: 0b:ce:20:b2:ae:c2:8a:72:66:0e:8a:50:8b:3a:4f: 3c:37:a7:73:78:c3:c7:02:19:10:29:24:c4:28:74: 16:a8:7c:1a:4f:5e:3d:ec:e7:88:3d:50:38:05:5c: f2:bc:b5:24:74:b4:d2:17:53:21:a1:44:c6:6a:57: 7b:65:54:9b:cb:9f:54:a5:80:04:7e:36:7e:bd:a0: eb:68:af:33:ed:08:57:e2:bf:a0:ac:64:16:21:7d: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E3:08:57:27:20:C9:92:C9:4B:1D:88:50:25:8A:2E:D2:A1:89:89 X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:fc:7f:c7:27:2b:97:9f:fc:32:b4:eb:9f:84:f9:a3:0c:69: 2a:f8:3f:09:a0:d4:db:76:7d:ae:22:3b:e1:ad:c9:54:65:d4: 95:d7:8e:2d:1c:03:2d:4e:a6:53:5c:a2:bc:5a:3b:96:ed:bf: 09:56:9a:d6:81:70:3c:48:ff:f1:3d:9e:34:bc:e4:24:f6:71: dd:33:0e:68:85:19:a1:2f:c8:7e:11:1f:f1:b3:c2:c1:1b:50: 03:29:0b:0f:2a:50:c1:44:2d:83:22:81:09:4e:7c:72:1c:6e: 30:9a:49:04:01:47:8b:ba:fd:1c:f9:ec:20:8d:6a:4a:5a:11: 9a:99:88:b3:66:a5:4b:79:88:fe:cd:8c:90:c0:4b:e8:01:cc: 86:e7:0f:2f:fe:3a:75:dd:87:b9:12:db:a6:81:ff:53:1b:54: 17:ac:59:21:95:6d:27:c2:70:ac:66:53:5f:5b:b5:7b:33:d7: 3a:bb:4c:0f:04:82:77:79:38:15:69:20:cf:25:ff:e4:b6:00: 7e:43:05:5c:68:7d:5a:5a:5a:2f:41:9d:1a:c0:72:0a:0a:98: fa:4a:5b:4a:a6:94:00:9b:25:9a:94:ee:fe:a2:16:19:e3:bd: ea:2d:68:57:70:7b:c1:ec:5c:19:2f:7d:e2:07:44:5d:14:3e: a2:95:8a:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdwvuxXYaahgDUicMzkEhJPPrSbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNTEwMjAwMzI1NDdaFw0yNTEwMjMxNDE5NDdaMDMxMTAvBgNV BAMTKENDRTMwODU3MjcyMEM5OTJDOTRCMUQ4ODUwMjU4QTJFRDJBMTg5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BiudsOZOiJldl5JcYpT442L4 c2ldmZFmChlXEbEyH/H5RN8y0vId38Y6Cr4niEuZBckS2gQJ6tm9zfd9kuojam8+ mSeHS1Za1lPiKUEvUF4QOzwnITS90jTEnvLWBHXEW2GBXidjkl6/Pb+iUKWThi2R NUlu93Ctu4ux7vzfCyjIhyq4tO705oksBGg51efnDSIXcrj6fnC3K7ypu6Xj01qS yQvOILKuwopyZg6KUIs6Tzw3p3N4w8cCGRApJMQodBaofBpPXj3s54g9UDgFXPK8 tSR0tNIXUyGhRMZqV3tlVJvLn1SlgAR+Nn69oOtorzPtCFfiv6CsZBYhfQ2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzOMIVycgyZLJSx2IUCWKLtKhiYkwHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKD8f8cnK5ef/DK065+E+aMMaSr4Pwmg1Nt2 fa4iO+GtyVRl1JXXji0cAy1OplNcorxaO5btvwlWmtaBcDxI//E9njS85CT2cd0z DmiFGaEvyH4RH/GzwsEbUAMpCw8qUMFELYMigQlOfHIcbjCaSQQBR4u6/Rz57CCN akpaEZqZiLNmpUt5iP7NjJDAS+gBzIbnDy/+OnXdh7kS26aB/1MbVBesWSGVbSfC cKxmU19btXsz1zq7TA8Egnd5OBVpIM8l/+S2AH5DBVxofVpaWi9BnRrAcgoKmPpK W0qmlACbJZqU7v6iFhnjveotaFdwe8HsXBkvfeIHRF0UPqKVihs= -----END CERTIFICATE-----Generated at Mon Oct 20 21:32:09 2025 by rpki-client