$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft (raw, json) Hash identifier: Q1CvIgGjMxxQP3FymUVefrSaK7vxWPwdAl1MCmTU2WU= Subject key identifier: 22:80:29:DD:4E:E7:C4:BA:31:9D:61:CE:4F:EA:96:14:EC:40:33:7A Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Certificate issuer: /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Certificate serial: 3F0BF1600D16E8AEFDAF736EA8D004D8538ADE24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft Manifest number: 0501 Signing time: Fri 22 Aug 2025 02:41:06 +0000 Manifest this update: Fri 22 Aug 2025 02:36:06 +0000 Manifest next update: Mon 25 Aug 2025 08:56:06 +0000 Files and hashes: 1: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: jH+vIlrKU7PfFq1iZrO7cUj2zjNXd2QDgqmIURJ9hHo=) 2: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: 92iPAvFoV8ZIni26oBvQBCMwojDuPtSnBMptGXhyF7g=) 3: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: Co7QnH1utLTo+OaXOBXDzn1d7u1X3FX72sJ2/V1LcRI=) 4: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: NJ/fZulIyr1e7dyoj8v3tiz901wVBYZYjvKtkVFLK3I=) 5: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: Y4jHaeY4QidDK/340ECCQ/4I5FQ55qG4YZL2AdrbzPk=) 6: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl (hash: XotAlYCv26GQPYPNybJgHUWb7rQOoQVQ+iQ756XExgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0b:f1:60:0d:16:e8:ae:fd:af:73:6e:a8:d0:04:d8:53:8a:de:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Validity Not Before: Aug 22 02:36:06 2025 GMT Not After : Aug 25 08:56:06 2025 GMT Subject: CN=228029DD4EE7C4BA319D61CE4FEA9614EC40337A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:88:03:f7:ae:b5:ce:9b:86:9e:a7:b9:67: 48:7c:a3:ab:24:63:95:50:17:68:cb:d0:c6:2e:d0: 5c:01:25:9c:cf:5f:fd:c2:c8:6b:15:e6:7e:e3:22: a0:18:32:d3:62:72:af:7f:8b:ea:c8:b1:bf:f6:ef: c4:ae:d5:ad:91:17:3b:20:6c:34:bd:56:b9:5a:f8: 7b:2e:57:1c:ac:ff:ff:5c:4f:5a:97:57:5c:62:a4: a1:1d:17:d8:bd:d7:92:97:b1:c7:de:3f:52:1c:1d: 0f:23:e1:43:cc:fc:9b:c7:32:7e:14:b7:3f:84:53: c2:77:7c:79:73:be:74:a1:07:b3:4c:54:91:73:8a: 14:93:b6:f0:77:0a:76:ff:4e:b3:ec:ac:e9:11:db: 47:17:4c:a9:e0:61:94:79:64:38:ad:db:e0:96:a8: e3:c4:f4:ed:22:77:22:d1:63:95:f4:b9:83:2c:45: 93:56:f1:71:48:86:84:da:4f:7b:e8:5f:39:8e:5a: 7d:8c:fa:9f:9d:bc:67:0a:6d:a2:32:24:9e:e0:b3: 7f:97:c8:ac:a4:24:76:d7:6c:5e:72:e8:84:7c:1b: 59:35:f3:82:2e:95:34:bf:a2:e0:75:07:c3:39:d0: 4b:1e:90:9d:3d:13:6f:ce:22:7e:8f:6a:0c:d0:f2: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:80:29:DD:4E:E7:C4:BA:31:9D:61:CE:4F:EA:96:14:EC:40:33:7A X509v3 Authority Key Identifier: keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:0e:9c:e9:23:1d:6d:47:84:ef:64:2a:11:6a:a0:7c:57:29: 76:38:0b:95:58:8f:23:61:0a:96:ca:71:9c:12:ca:e2:2f:0d: 01:0d:ad:e7:03:5c:d7:58:1a:3f:df:90:02:b3:e3:50:1c:98: ed:1e:57:8e:71:0e:9c:d3:cb:3a:59:38:f6:de:5f:0b:e7:b1: 56:fa:b4:bc:26:6e:cb:1c:8f:e9:2e:ec:f1:23:77:1d:d0:23: df:a7:c1:ce:f9:ec:e9:1b:a7:4a:2a:c4:56:53:af:9a:92:e6: 4a:ba:7a:48:a0:85:ab:82:c3:50:a4:e1:27:5a:d5:ff:7a:9a: f2:ca:20:dc:44:23:0d:74:5d:23:50:85:61:f5:c6:e9:b9:d1: 58:a6:51:81:d3:eb:47:3d:fc:61:be:1f:bc:75:7e:0b:f7:97: ae:aa:9c:aa:c7:e0:be:bb:cf:26:d0:85:89:c9:ae:27:3a:57: 43:e8:b5:1e:69:fc:81:b8:6d:b0:d8:a3:19:3a:ba:ed:a5:10: 67:19:d9:cd:25:99:31:fa:03:80:23:6f:5c:4b:3b:07:ad:2a: 60:26:59:50:02:c8:5c:95:9c:2b:0f:14:84:dc:b8:a4:89:ec: b2:90:5f:b8:d1:9d:63:5c:ac:42:61:cc:04:50:09:d7:c3:24: 18:13:7f:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwvxYA0W6K79r3NuqNAE2FOK3iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIx MDZBNTk0QzAeFw0yNTA4MjIwMjM2MDZaFw0yNTA4MjUwODU2MDZaMDMxMTAvBgNV BAMTKDIyODAyOURENEVFN0M0QkEzMTlENjFDRTRGRUE5NjE0RUM0MDMzN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwx4gD9661zpuGnqe5Z0h8o6sk Y5VQF2jL0MYu0FwBJZzPX/3CyGsV5n7jIqAYMtNicq9/i+rIsb/278Su1a2RFzsg bDS9Vrla+HsuVxys//9cT1qXV1xipKEdF9i915KXscfeP1IcHQ8j4UPM/JvHMn4U tz+EU8J3fHlzvnShB7NMVJFzihSTtvB3Cnb/TrPsrOkR20cXTKngYZR5ZDit2+CW qOPE9O0idyLRY5X0uYMsRZNW8XFIhoTaT3voXzmOWn2M+p+dvGcKbaIyJJ7gs3+X yKykJHbXbF5y6IR8G1k184IulTS/ouB1B8M50EsekJ09E2/OIn6PagzQ8ovbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIoAp3U7nxLoxnWHOT+qWFOxAM3owHwYDVR0j BBgwFoAUr1LnFt5x7qk1P+qS+/ctohBqWUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC9BRjUyRTcxNkRF NzFFRUE5MzUzRkVBOTJGQkY3MkRBMjEwNkE1OTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIxMDZB NTk0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJE QTIxMDZBNTk0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcOnOkjHW1HhO9kKhFqoHxXKXY4C5VYjyNh CpbKcZwSyuIvDQENrecDXNdYGj/fkAKz41AcmO0eV45xDpzTyzpZOPbeXwvnsVb6 tLwmbsscj+ku7PEjdx3QI9+nwc757Okbp0oqxFZTr5qS5kq6ekighauCw1Ck4Sda 1f96mvLKINxEIw10XSNQhWH1xum50VimUYHT60c9/GG+H7x1fgv3l66qnKrH4L67 zybQhYnJric6V0PotR5p/IG4bbDYoxk6uu2lEGcZ2c0lmTH6A4Ajb1xLOwetKmAm WVACyFyVnCsPFITcuKSJ7LKQX7jRnWNcrEJhzARQCdfDJBgTf98= -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:19 2025 by rpki-client