$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: t04tYPFf7uxf11jaFJ9qRA4pkyJT5hgQZJ0tlB9uRJY= Subject key identifier: D4:08:09:48:B8:FA:3A:55:BD:0B:CC:40:8D:ED:D0:9D:46:D3:81:99 Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 6208C110D813A42A062E7C8A8A98EB8A524C17A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: 010D Signing time: Sun 19 Oct 2025 17:21:00 +0000 Manifest this update: Sun 19 Oct 2025 17:16:00 +0000 Manifest next update: Wed 22 Oct 2025 18:52:00 +0000 Files and hashes: 1: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: 1+n1bLTZa1OFgYVtfd02hoxMAMoi5IPVMA2zOafBK5k=) 2: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:08:c1:10:d8:13:a4:2a:06:2e:7c:8a:8a:98:eb:8a:52:4c:17:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Oct 19 17:16:00 2025 GMT Not After : Oct 22 18:52:00 2025 GMT Subject: CN=D4080948B8FA3A55BD0BCC408DEDD09D46D38199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:af:d3:6b:13:bb:5e:6c:14:f7:18:c5:69:0f: de:b8:5f:da:c9:38:12:19:b7:97:84:f4:4f:20:c8: 7a:5d:60:f1:9c:4d:94:19:09:d6:95:5e:07:33:b9: 33:62:10:ce:d9:fd:98:ae:44:af:21:9e:f9:68:a8: d5:48:c1:b0:cc:da:88:e6:c3:a2:cb:54:ef:e7:74: 6b:87:47:9d:4c:0c:27:cc:86:88:07:a8:3a:25:e1: 4c:aa:13:2f:97:37:18:b9:b5:63:68:dc:5a:8a:67: da:72:b3:0b:66:56:d2:df:eb:ef:44:cc:31:d5:34: 6c:6f:af:a0:14:35:ae:c8:76:63:96:7c:1c:17:b8: 0b:6d:60:50:a8:06:79:6e:72:fb:67:d4:c3:a9:9c: 03:b0:3f:8c:31:d6:1b:32:0c:bb:59:36:e6:f3:99: 62:70:ae:96:33:d3:c7:a0:24:69:3f:6d:96:a5:53: 05:2c:a5:f5:95:f0:62:ea:64:6c:d5:5b:40:0a:d8: a4:fd:8f:5a:8a:38:9b:93:3a:aa:68:2c:c1:0b:1a: 90:29:36:d0:49:ea:f5:e0:dc:35:65:47:b4:5a:88: e8:33:44:6f:d2:9f:7c:74:a9:90:61:4e:58:2c:0c: 46:3f:32:b6:42:05:db:40:8c:50:2a:ff:6a:1a:7e: 57:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:08:09:48:B8:FA:3A:55:BD:0B:CC:40:8D:ED:D0:9D:46:D3:81:99 X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2e:cf:ff:6f:0e:7d:1d:c2:f4:db:4f:97:0e:4e:1a:cf:c2: 10:95:71:c5:46:e7:ff:0b:fc:13:d7:ad:16:e6:1a:8c:9b:72: 1c:68:c2:87:36:88:b6:c0:b7:09:da:eb:95:10:1d:54:63:dd: 50:d4:05:2a:66:57:dd:c5:39:b3:45:56:51:00:eb:76:24:e5: d9:33:34:2d:9b:e3:02:05:95:24:5e:f1:52:3f:02:b2:12:4b: 6b:c3:06:ff:2c:cc:c5:c6:af:5c:94:94:17:05:b5:a3:ea:63: d9:cb:b4:31:f2:f4:c8:87:a6:19:a2:0f:d6:ea:bc:99:6a:d1: b3:e3:70:25:66:86:58:aa:0a:8a:e8:e3:ef:f8:f0:d2:18:04: 9d:6a:86:fd:55:7b:8c:f9:89:23:d0:ff:3a:f4:2a:ed:78:fa: c9:69:d9:b5:f2:a9:98:4c:f9:17:a0:1a:78:56:94:ee:34:9f: 61:f2:5f:6b:15:c8:76:5e:b4:12:54:e5:6f:c7:da:cc:b2:d5: 52:6a:ab:b9:15:30:fe:95:ac:1a:79:d8:90:25:45:e0:75:66: 6f:a7:9d:42:fb:ad:a4:25:16:84:c7:f5:1d:6c:c3:29:c5:dd: 6d:15:ec:ea:04:3e:52:85:83:74:d3:8a:8b:06:fc:37:d1:97: fa:21:39:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgjBENgTpCoGLnyKipjrilJMF6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTEwMTkxNzE2MDBaFw0yNTEwMjIxODUyMDBaMDMxMTAvBgNV BAMTKEQ0MDgwOTQ4QjhGQTNBNTVCRDBCQ0M0MDhERUREMDlENDZEMzgxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlr9NrE7tebBT3GMVpD964X9rJ OBIZt5eE9E8gyHpdYPGcTZQZCdaVXgczuTNiEM7Z/ZiuRK8hnvloqNVIwbDM2ojm w6LLVO/ndGuHR51MDCfMhogHqDol4UyqEy+XNxi5tWNo3FqKZ9pyswtmVtLf6+9E zDHVNGxvr6AUNa7IdmOWfBwXuAttYFCoBnlucvtn1MOpnAOwP4wx1hsyDLtZNubz mWJwrpYz08egJGk/bZalUwUspfWV8GLqZGzVW0AK2KT9j1qKOJuTOqpoLMELGpAp NtBJ6vXg3DVlR7RaiOgzRG/Sn3x0qZBhTlgsDEY/MrZCBdtAjFAq/2oaflcXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1AgJSLj6OlW9C8xAje3QnUbTgZkwHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0uz/9vDn0dwvTbT5cOThrPwhCVccVG5/8L /BPXrRbmGoybchxowoc2iLbAtwna65UQHVRj3VDUBSpmV93FObNFVlEA63Yk5dkz NC2b4wIFlSRe8VI/ArISS2vDBv8szMXGr1yUlBcFtaPqY9nLtDHy9MiHphmiD9bq vJlq0bPjcCVmhliqCoro4+/48NIYBJ1qhv1Ve4z5iSPQ/zr0Ku14+slp2bXyqZhM +RegGnhWlO40n2HyX2sVyHZetBJU5W/H2syy1VJqq7kVMP6VrBp52JAlReB1Zm+n nUL7raQlFoTH9R1swynF3W0V7OoEPlKFg3TTiosG/DfRl/ohOQM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:51 2025 by rpki-client