$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: neu1S7XZ5VOTePwswCCIPFiGjsBl9cJQxR2nUdwbW30= Subject key identifier: 2A:06:12:EF:6E:07:EE:93:26:03:6E:18:C1:CC:C9:83:11:7A:0B:B4 Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 3CA3B0CBA8CA604E37231332FFA4430EF3F8D8E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: BC Signing time: Fri 22 Aug 2025 15:02:08 +0000 Manifest this update: Fri 22 Aug 2025 14:57:08 +0000 Manifest next update: Mon 25 Aug 2025 19:14:08 +0000 Files and hashes: 1: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: BrOTnG1Lfl9ow/1h1lCh439DC++5tYaerJaSn1jXv/8=) 2: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:14:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a3:b0:cb:a8:ca:60:4e:37:23:13:32:ff:a4:43:0e:f3:f8:d8:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Aug 22 14:57:08 2025 GMT Not After : Aug 25 19:14:08 2025 GMT Subject: CN=2A0612EF6E07EE9326036E18C1CCC983117A0BB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:b5:b2:47:fe:57:f9:26:2c:42:ff:c8:91: 86:71:90:a9:36:80:1f:d8:d2:f7:d5:9f:75:eb:40: 4d:ce:39:f3:79:d5:3f:e8:87:9e:e7:ea:a2:60:b2: 80:45:a8:5c:1c:2e:ed:b2:a9:e2:07:57:9e:d1:06: 4f:05:8d:3c:44:a9:be:eb:ce:65:ba:63:39:8b:3e: 36:54:0c:72:00:6e:bd:5b:8a:65:57:c6:65:db:20: cf:f9:6f:e2:11:8f:e7:c8:f3:21:a1:ea:a4:ab:bd: 3e:6e:47:ae:b6:7b:af:b2:90:89:eb:86:6d:fe:40: 47:fe:4c:f9:0b:b4:6a:85:d3:04:e2:5f:2c:a9:23: 06:2b:d3:4b:e4:15:3b:8e:2e:79:77:1a:b1:f9:07: fa:49:74:64:bc:11:6c:89:38:a2:69:ba:1c:0e:7b: cf:41:96:96:69:a7:c8:25:81:67:25:b7:34:a6:0f: 4e:b8:cc:8a:b5:bb:c3:78:fd:98:49:b3:b1:67:63: 1e:e1:e6:ba:e5:d9:d4:b4:b0:2c:36:a3:2b:bd:c7: d4:65:62:92:83:f3:97:d8:a7:5d:bd:39:b3:ae:1e: 5f:b6:47:80:d2:aa:a1:49:96:c8:f6:3b:5c:12:5a: a2:9f:9f:8e:5e:2c:96:12:de:32:a6:65:db:82:d9: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:06:12:EF:6E:07:EE:93:26:03:6E:18:C1:CC:C9:83:11:7A:0B:B4 X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c9:85:1e:50:6f:9c:c1:42:22:9c:72:ad:75:b3:0c:30:98: d5:2a:91:0d:ea:b1:c2:d7:c4:aa:a2:17:bb:9f:97:4f:fa:0e: c1:a1:96:60:da:a4:8d:40:90:92:3d:90:1b:60:e9:bd:f5:fe: b7:d3:62:2b:89:44:9f:80:84:b0:c2:30:b4:a3:43:ca:a8:bf: 81:2c:a4:c9:08:70:15:72:b0:d1:fb:ea:c9:1d:4a:65:b8:9f: f1:1b:a6:fc:8f:f9:70:b3:60:8c:32:84:07:b9:0c:ef:df:3f: 5c:43:4b:0e:11:f6:31:82:c8:31:c4:af:3d:ac:74:59:5b:d3: 07:ed:a3:1f:40:9d:04:01:f8:eb:fb:ac:e4:9a:3b:9d:6e:1d: 70:0e:19:97:0a:88:74:95:87:26:1f:b7:3c:f1:1e:68:83:52: a9:c5:2a:0c:76:45:7a:c4:45:3e:3f:64:55:7d:d0:ac:8e:5c: a6:8b:f8:97:ed:e4:47:01:d7:f2:dd:64:32:4e:e5:25:b2:8a: 37:70:31:38:f1:e3:55:73:cf:e1:78:8f:5c:61:e1:2b:73:77: fe:b3:dc:d0:9d:97:90:4e:39:18:18:79:6b:4f:5d:23:a0:3b: 20:13:e1:2e:cb:d2:88:93:89:e6:8d:19:44:58:a4:02:34:36: bd:6e:94:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKOwy6jKYE43IxMy/6RDDvP42OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNTA4MjIxNDU3MDhaFw0yNTA4MjUxOTE0MDhaMDMxMTAvBgNV BAMTKDJBMDYxMkVGNkUwN0VFOTMyNjAzNkUxOEMxQ0NDOTgzMTE3QTBCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCKbWyR/5X+SYsQv/IkYZxkKk2 gB/Y0vfVn3XrQE3OOfN51T/oh57n6qJgsoBFqFwcLu2yqeIHV57RBk8FjTxEqb7r zmW6YzmLPjZUDHIAbr1bimVXxmXbIM/5b+IRj+fI8yGh6qSrvT5uR662e6+ykInr hm3+QEf+TPkLtGqF0wTiXyypIwYr00vkFTuOLnl3GrH5B/pJdGS8EWyJOKJpuhwO e89BlpZpp8glgWcltzSmD064zIq1u8N4/ZhJs7FnYx7h5rrl2dS0sCw2oyu9x9Rl YpKD85fYp129ObOuHl+2R4DSqqFJlsj2O1wSWqKfn45eLJYS3jKmZduC2aW1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKgYS724H7pMmA24YwczJgxF6C7QwHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/JhR5Qb5zBQiKccq11swwwmNUqkQ3qscLX xKqiF7ufl0/6DsGhlmDapI1AkJI9kBtg6b31/rfTYiuJRJ+AhLDCMLSjQ8qov4Es pMkIcBVysNH76skdSmW4n/EbpvyP+XCzYIwyhAe5DO/fP1xDSw4R9jGCyDHErz2s dFlb0wftox9AnQQB+Ov7rOSaO51uHXAOGZcKiHSVhyYftzzxHmiDUqnFKgx2RXrE RT4/ZFV90KyOXKaL+Jft5EcB1/LdZDJO5SWyijdwMTjx41Vzz+F4j1xh4Stzd/6z 3NCdl5BOORgYeWtPXSOgOyAT4S7L0oiTieaNGURYpAI0Nr1ulLI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:47 2025 by rpki-client