$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft File: 52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json) Hash identifier: OWUMKN28RZa00j6wZfyU9WJRpp8a9ohVOsR6VYre6OA= Subject key identifier: 8A:C2:49:5A:DE:A4:1E:39:79:7F:30:91:D4:06:9B:B7:04:81:CC:6F Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86 Certificate issuer: /CN=52145183B5BE1A663FBC5C228102541AC61F9F86 Certificate serial: 77F743BBA98C88C2EB0250D3B5AB3BBB77393DDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft Manifest number: 04D4 Signing time: Mon 20 Oct 2025 09:11:44 +0000 Manifest this update: Mon 20 Oct 2025 09:06:44 +0000 Manifest next update: Thu 23 Oct 2025 20:50:44 +0000 Files and hashes: 1: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: UYjJN1zuJfG9dTWh9y6AIatBxrxKRiWJPaJOR4Iyado=) 2: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: I8J+VKjZlzAYUjuoXbFTNBgkY4GMxQkjdom4zb/4W0c=) 3: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: ejH4Jptb2+nXxwdyhxr2eLVcxmTdzu5eDGJeQynArtM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f7:43:bb:a9:8c:88:c2:eb:02:50:d3:b5:ab:3b:bb:77:39:3d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86 Validity Not Before: Oct 20 09:06:44 2025 GMT Not After : Oct 23 20:50:44 2025 GMT Subject: CN=8AC2495ADEA41E39797F3091D4069BB70481CC6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bf:db:a9:b8:80:d7:4f:8f:b3:21:f9:33:f3: 92:d6:0e:8b:f9:09:29:2f:eb:cb:f7:e4:11:a7:3f: 4a:2b:19:a0:c4:f4:e3:bc:6d:e6:a1:75:cc:22:d4: 81:7d:b1:05:ae:82:70:af:40:df:c9:d1:ed:14:db: 2e:e3:ba:ce:28:6f:9f:bf:ed:9f:9e:8b:b4:43:70: b8:c1:0d:2e:07:68:7a:a3:86:ba:71:d2:1f:84:12: 7e:54:fc:da:48:10:ae:51:ee:8c:aa:63:24:fc:12: 19:29:f3:ae:8e:7a:a0:09:f4:87:24:60:39:eb:5b: 99:1a:9b:5b:c1:fa:7d:e1:55:26:7d:d5:89:00:8d: 82:f0:0e:da:e7:0d:48:55:a0:91:fe:88:e6:01:d8: a9:16:a5:86:ed:1e:53:36:ed:e2:16:ad:3e:92:d1: 0d:85:fa:64:31:69:3c:20:40:4f:e1:b8:69:21:5c: 66:e5:a3:9b:4f:68:07:a7:a1:6d:2a:da:db:41:cb: da:d5:ce:15:d1:e4:07:86:00:83:b4:7d:41:a0:c0: 64:c0:8b:29:bd:a8:82:d9:f2:6e:b4:80:52:af:d5: c7:64:08:1b:73:0a:dd:24:51:fa:f7:da:be:49:01: 83:66:4b:f9:d6:30:a3:7e:ca:ea:de:0b:ff:42:7a: c5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C2:49:5A:DE:A4:1E:39:79:7F:30:91:D4:06:9B:B7:04:81:CC:6F X509v3 Authority Key Identifier: keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:6d:8c:6a:ad:33:28:a8:00:3f:b5:03:a6:cc:56:8d:cf:b7: e4:04:7a:b7:d4:cd:72:38:d5:61:c2:2b:ba:51:ab:36:73:42: af:aa:16:e6:12:13:80:d8:b3:61:3e:f0:04:62:73:ad:44:23: 05:fc:0e:84:2d:bb:b8:d0:2b:d4:c1:8e:50:c8:25:6a:0c:d5: fc:f2:12:f8:9c:0d:b6:32:0d:60:0f:61:96:97:3a:08:62:5d: b0:0b:42:ac:9f:ec:fe:26:f5:e0:32:01:dd:09:cc:0b:aa:70: c7:8e:1b:92:5c:cc:f7:9a:c7:27:0a:56:c1:47:ed:f1:57:c0: 44:e6:e1:31:00:28:8c:11:90:27:36:af:61:0b:ce:ce:d4:b5: 94:be:4f:a7:0a:28:90:2f:0a:e3:c7:3e:9c:90:9c:14:bc:de: f9:76:51:74:8c:68:6d:40:50:ce:32:25:91:b8:cb:31:59:af: 10:31:8d:2a:19:fd:50:40:43:4a:bc:c1:28:7a:9c:f4:68:d2: c1:05:78:16:f6:10:e1:9f:e9:a1:18:d0:7e:3e:00:09:ba:a9: db:f3:17:26:cb:dd:85:37:41:05:5c:01:2b:4a:36:48:02:3a: 5b:96:0a:9d:b5:3b:0c:48:24:ad:5b:5d:cd:7e:e9:be:b2:0d: 64:8f:c0:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/dDu6mMiMLrAlDTtas7u3c5Pd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFD NjFGOUY4NjAeFw0yNTEwMjAwOTA2NDRaFw0yNTEwMjMyMDUwNDRaMDMxMTAvBgNV BAMTKDhBQzI0OTVBREVBNDFFMzk3OTdGMzA5MUQ0MDY5QkI3MDQ4MUNDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMv9upuIDXT4+zIfkz85LWDov5 CSkv68v35BGnP0orGaDE9OO8beahdcwi1IF9sQWugnCvQN/J0e0U2y7jus4ob5+/ 7Z+ei7RDcLjBDS4HaHqjhrpx0h+EEn5U/NpIEK5R7oyqYyT8Ehkp866OeqAJ9Ick YDnrW5kam1vB+n3hVSZ91YkAjYLwDtrnDUhVoJH+iOYB2KkWpYbtHlM27eIWrT6S 0Q2F+mQxaTwgQE/huGkhXGblo5tPaAenoW0q2ttBy9rVzhXR5AeGAIO0fUGgwGTA iym9qILZ8m60gFKv1cdkCBtzCt0kUfr32r5JAYNmS/nWMKN+yureC/9CesXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUisJJWt6kHjl5fzCR1AabtwSBzG8wHwYDVR0j BBgwFoAUUhRRg7W+GmY/vFwigQJUGsYfn4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdlODllOC01M2FhLTQ0ZjYtYjZkOC01ODc5MDc4YmY2NjQvMC81MjE0NTE4M0I1 QkUxQTY2M0ZCQzVDMjI4MTAyNTQxQUM2MUY5Rjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFDNjFG OUY4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0 MUFDNjFGOUY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBtjGqtMyioAD+1A6bMVo3Pt+QEerfUzXI4 1WHCK7pRqzZzQq+qFuYSE4DYs2E+8ARic61EIwX8DoQtu7jQK9TBjlDIJWoM1fzy EvicDbYyDWAPYZaXOghiXbALQqyf7P4m9eAyAd0JzAuqcMeOG5JczPeaxycKVsFH 7fFXwETm4TEAKIwRkCc2r2ELzs7UtZS+T6cKKJAvCuPHPpyQnBS83vl2UXSMaG1A UM4yJZG4yzFZrxAxjSoZ/VBAQ0q8wSh6nPRo0sEFeBb2EOGf6aEY0H4+AAm6qdvz FybL3YU3QQVcAStKNkgCOluWCp21OwxIJK1bXc1+6b6yDWSPwNg= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:25 2025 by rpki-client