$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: 9x9SppEjtq0cLkdouq8ZjiWOL7+p0Psa/Twu/RDFEJM= Subject key identifier: BC:EA:87:FC:AA:21:A1:B5:E7:50:2B:D1:E2:08:BF:BA:07:0A:9E:AC Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 0A3FB7E4997F4053FC18C9CDD2861CBB7F13286D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 03F6 Signing time: Sat 18 Oct 2025 06:21:48 +0000 Manifest this update: Sat 18 Oct 2025 06:16:48 +0000 Manifest next update: Tue 21 Oct 2025 12:25:48 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: UZAww9wMrjmp2lM1ZTgMw/t01k+UPP6v1PoTFXL464w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3f:b7:e4:99:7f:40:53:fc:18:c9:cd:d2:86:1c:bb:7f:13:28:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Oct 18 06:16:48 2025 GMT Not After : Oct 21 12:25:48 2025 GMT Subject: CN=BCEA87FCAA21A1B5E7502BD1E208BFBA070A9EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:91:6e:ac:d0:29:57:03:30:71:d7:48:d4: 9c:1e:70:8b:04:87:2b:b3:b6:22:35:c2:d0:23:43: d2:b9:c3:36:e6:52:0d:03:a8:11:31:0a:99:7c:69: f8:9e:1c:bd:70:97:6c:a3:17:85:db:43:f8:29:0d: 92:1c:4c:df:0d:55:a8:ba:ad:f9:84:13:08:50:30: e9:b0:07:d8:66:e6:fa:2b:ba:14:d5:bb:ce:ee:b9: 0c:51:03:e6:92:bc:31:2c:e2:75:68:f2:29:c2:e9: 43:ec:34:5b:d5:11:9b:0b:e5:05:fd:e8:ff:d0:00: 67:88:62:b7:54:02:4f:de:e5:5d:a5:2f:6f:ed:51: ce:91:c5:1e:ec:da:2d:d6:4c:bd:c2:8f:f2:ac:c6: 77:67:15:8c:31:b9:6c:23:a9:64:65:19:db:32:ad: 3a:c5:3f:e0:48:94:b2:e4:ec:6f:b1:45:27:4b:72: fd:da:ce:39:b7:cd:65:3a:f5:20:df:44:17:03:0c: ff:01:da:fc:68:e5:e2:33:bf:0e:c1:98:d9:c2:37: 21:a2:61:39:56:67:37:6e:8b:d7:34:c8:90:10:7b: 75:ce:c9:06:5f:31:79:dd:2e:e2:69:c7:08:24:83: e8:ba:59:d1:fd:e2:ec:b8:a8:4c:25:c9:2b:7d:06: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EA:87:FC:AA:21:A1:B5:E7:50:2B:D1:E2:08:BF:BA:07:0A:9E:AC X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:14:56:de:fe:74:bd:64:2b:5f:56:2e:5c:a1:cb:e8:b8:f6: be:05:4d:81:37:6b:c6:b5:9d:ea:ea:32:69:e3:17:02:49:dd: 21:1a:7c:00:82:ca:69:4d:11:bf:4b:51:59:b2:24:5f:a7:7f: 30:5f:a7:e0:2e:2e:17:0b:c2:14:73:80:95:69:99:37:34:1a: 36:80:64:cc:07:62:01:c5:e2:eb:a7:96:bc:97:5f:5e:df:48: c6:38:87:7d:56:d6:aa:a0:e5:4a:c3:a8:b8:b2:e7:68:9c:c9: 0e:26:03:d8:f0:63:b1:f9:e1:52:78:e5:6b:f4:65:a0:3d:a4: d9:3f:1a:f7:93:ce:84:38:3b:d4:db:ef:d3:d4:c6:f3:ea:ab: 99:ad:15:57:d7:69:b3:ed:51:94:3a:51:c0:35:ca:af:06:63: 1d:5c:fd:69:b5:bc:5a:67:6b:b9:ae:f3:29:ce:c9:f5:78:0f: 7e:3b:9e:13:63:f0:b6:4c:3b:99:9b:de:85:43:0b:38:8f:6a: 35:6b:92:fe:8b:13:52:1a:71:a0:70:03:11:f8:00:e0:35:e3: 5f:b9:c6:37:ba:de:9e:2a:b5:3a:28:80:7e:cd:9f:10:90:2b: 68:8b:31:90:e2:61:46:11:64:41:1f:5c:19:72:d6:9c:ee:e6: 8f:9e:b2:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCj+35Jl/QFP8GMnN0oYcu38TKG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTEwMTgwNjE2NDhaFw0yNTEwMjExMjI1NDhaMDMxMTAvBgNV BAMTKEJDRUE4N0ZDQUEyMUExQjVFNzUwMkJEMUUyMDhCRkJBMDcwQTlFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMZFurNApVwMwcddI1JwecIsE hyuztiI1wtAjQ9K5wzbmUg0DqBExCpl8afieHL1wl2yjF4XbQ/gpDZIcTN8NVai6 rfmEEwhQMOmwB9hm5voruhTVu87uuQxRA+aSvDEs4nVo8inC6UPsNFvVEZsL5QX9 6P/QAGeIYrdUAk/e5V2lL2/tUc6RxR7s2i3WTL3Cj/KsxndnFYwxuWwjqWRlGdsy rTrFP+BIlLLk7G+xRSdLcv3azjm3zWU69SDfRBcDDP8B2vxo5eIzvw7BmNnCNyGi YTlWZzdui9c0yJAQe3XOyQZfMXndLuJpxwgkg+i6WdH94uy4qEwlySt9BgXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvOqH/KohobXnUCvR4gi/ugcKnqwwHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIUVt7+dL1kK19WLlyhy+i49r4FTYE3a8a1 nerqMmnjFwJJ3SEafACCymlNEb9LUVmyJF+nfzBfp+AuLhcLwhRzgJVpmTc0GjaA ZMwHYgHF4uunlryXX17fSMY4h31W1qqg5UrDqLiy52icyQ4mA9jwY7H54VJ45Wv0 ZaA9pNk/GveTzoQ4O9Tb79PUxvPqq5mtFVfXabPtUZQ6UcA1yq8GYx1c/Wm1vFpn a7mu8ynOyfV4D347nhNj8LZMO5mb3oVDCziPajVrkv6LE1IacaBwAxH4AOA141+5 xje63p4qtToogH7NnxCQK2iLMZDiYUYRZEEfXBly1pzu5o+esps= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:26 2025 by rpki-client