$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: /GtsaYshnzpq0Y7Donmi2BiBmMnox+OpCfniF2YKMM4= Subject key identifier: AD:6D:35:9D:7C:3E:F7:A7:D1:B5:87:EC:AC:A5:C8:82:C6:E2:0D:79 Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 7369ADEFDC9CF23BD4B138C81A3F3EFD0866D7E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: F3 Signing time: Sat 23 Aug 2025 09:31:00 +0000 Manifest this update: Sat 23 Aug 2025 09:26:00 +0000 Manifest next update: Tue 26 Aug 2025 11:48:00 +0000 Files and hashes: 1: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: dUX8hUK+QA7gbKpEk+E/Udwxd4Qxhm14Fj0iz26474g=) 2: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:69:ad:ef:dc:9c:f2:3b:d4:b1:38:c8:1a:3f:3e:fd:08:66:d7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Aug 23 09:26:00 2025 GMT Not After : Aug 26 11:48:00 2025 GMT Subject: CN=AD6D359D7C3EF7A7D1B587ECACA5C882C6E20D79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:d1:70:85:f3:06:9b:3a:99:df:a0:15:bd: 5c:d7:f3:27:e0:72:d5:86:e0:ca:6f:eb:3e:58:39: 14:f0:a6:e5:c0:1e:e9:90:d5:2b:04:97:ae:9c:78: 96:68:cf:57:a6:25:99:89:a6:e1:3f:44:bf:91:63: 82:0b:35:0c:b1:06:d3:0e:f2:46:45:fd:a1:4d:56: d0:b5:0c:02:ae:42:e3:08:36:0d:13:4c:48:b0:5b: 8f:ef:0b:98:6c:de:a9:6e:9c:29:86:8b:fb:d7:80: b1:90:e2:b8:be:2a:64:34:92:b0:2b:a5:34:06:88: b9:52:9c:9b:81:df:95:55:6e:be:91:46:d9:11:ba: 01:df:68:8f:ca:10:43:db:16:57:02:a5:e3:bb:9d: c3:10:df:3c:bc:d2:06:57:01:22:12:cf:50:b2:c8: 7f:ad:8a:ec:16:bc:21:e5:d9:63:ff:d3:c4:83:0b: 14:57:98:2c:70:39:81:f5:67:e0:7a:eb:8b:0a:8c: 08:08:5e:e9:4f:cb:a7:90:a5:53:b5:ae:37:11:10: 31:a1:50:1c:c0:5c:fd:f8:d6:b2:4b:1c:3c:5a:53: 30:5b:53:2b:ac:78:cd:85:4e:00:45:2f:e8:ca:10: fb:e9:8b:2b:28:8c:52:cf:2b:73:d2:2d:7b:95:f8: d4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6D:35:9D:7C:3E:F7:A7:D1:B5:87:EC:AC:A5:C8:82:C6:E2:0D:79 X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:46:71:a4:74:a8:fe:ff:5c:ff:e6:6e:20:36:55:6a:a2:9a: 87:f0:d8:53:24:62:2f:34:59:32:0e:07:92:55:f4:45:ed:0b: 1a:13:b9:1c:94:92:96:44:70:29:fc:df:45:69:b0:3f:8d:79: 05:c2:ea:7c:0c:08:02:76:5e:0f:0c:c2:28:ad:e1:44:fc:dc: 87:8f:fa:4b:fb:f6:0e:02:52:df:31:ae:96:98:d2:a8:28:b1: b0:36:57:8f:2f:9c:ae:b6:c8:05:14:37:d9:ab:31:ca:07:61: b5:58:6a:74:2e:d1:15:bb:03:40:e6:2a:1b:b2:a4:3b:12:0d: 43:ae:80:a4:af:f7:3d:e0:88:78:0d:58:b3:91:53:52:27:17: 00:ff:c1:c4:9a:df:25:ee:a3:cb:83:63:48:44:30:3c:6f:f6: 87:19:30:c0:87:cc:5e:ac:aa:dc:66:25:14:83:83:b1:4d:53: 7e:35:8c:a5:42:2b:9a:f3:0c:80:ad:22:52:8f:1d:44:7c:41: 42:32:90:89:6f:7a:0e:c0:08:75:39:0a:05:7e:b0:3c:e5:50: e8:ab:ec:d9:f5:4c:b7:63:9f:a0:ba:1f:31:93:65:f5:06:af: 79:8d:8b:b6:01:f9:48:24:8e:bd:ba:b9:9c:e6:e8:b9:e4:07: dc:0c:2a:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2mt79yc8jvUsTjIGj8+/Qhm1+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTA4MjMwOTI2MDBaFw0yNTA4MjYxMTQ4MDBaMDMxMTAvBgNV BAMTKEFENkQzNTlEN0MzRUY3QTdEMUI1ODdFQ0FDQTVDODgyQzZFMjBENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBrtFwhfMGmzqZ36AVvVzX8yfg ctWG4Mpv6z5YORTwpuXAHumQ1SsEl66ceJZoz1emJZmJpuE/RL+RY4ILNQyxBtMO 8kZF/aFNVtC1DAKuQuMINg0TTEiwW4/vC5hs3qlunCmGi/vXgLGQ4ri+KmQ0krAr pTQGiLlSnJuB35VVbr6RRtkRugHfaI/KEEPbFlcCpeO7ncMQ3zy80gZXASISz1Cy yH+tiuwWvCHl2WP/08SDCxRXmCxwOYH1Z+B664sKjAgIXulPy6eQpVO1rjcREDGh UBzAXP341rJLHDxaUzBbUyuseM2FTgBFL+jKEPvpiysojFLPK3PSLXuV+NSBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrW01nXw+96fRtYfsrKXIgsbiDXkwHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdGcaR0qP7/XP/mbiA2VWqimofw2FMkYi80 WTIOB5JV9EXtCxoTuRyUkpZEcCn830VpsD+NeQXC6nwMCAJ2Xg8Mwiit4UT83IeP +kv79g4CUt8xrpaY0qgosbA2V48vnK62yAUUN9mrMcoHYbVYanQu0RW7A0DmKhuy pDsSDUOugKSv9z3giHgNWLORU1InFwD/wcSa3yXuo8uDY0hEMDxv9ocZMMCHzF6s qtxmJRSDg7FNU341jKVCK5rzDICtIlKPHUR8QUIykIlveg7ACHU5CgV+sDzlUOir 7Nn1TLdjn6C6HzGTZfUGr3mNi7YB+Ugkjr26uZzm6LnkB9wMKnk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:32:13 2025 by rpki-client