$ rpki-client -vvf repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft File: 52D962F5A9CABE2F4089548951269E5BD5F3249D.mft (raw, json) Hash identifier: HEp31hoiG/5mgejWncxRcytoPQdM/1zpb6dTOBCeT/w= Subject key identifier: 2C:0A:F3:1B:34:2E:92:7C:36:33:CD:DA:B2:E1:4C:83:07:D6:13:5A Authority key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Certificate issuer: /CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Certificate serial: 2626DC46C10A7F6600263CE2469C6AE8B948E9D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft Manifest number: 8A Signing time: Sat 23 Aug 2025 06:50:01 +0000 Manifest this update: Sat 23 Aug 2025 06:45:01 +0000 Manifest next update: Tue 26 Aug 2025 16:36:01 +0000 Files and hashes: 1: 52D962F5A9CABE2F4089548951269E5BD5F3249D.crl (hash: UtKXzjITZAdPuRWNPiyWpfdUaawgYrrAv//VM+/nfVs=) 2: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: kIpsRTz8rsVh7INCm035H5PFs4vQWvdsdTQtSQQkCfE=) 3: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: YC5+nsrmWedLDnN0PaZMpSlGmxCfT//FJoWJkorFOm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 16:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:26:dc:46:c1:0a:7f:66:00:26:3c:e2:46:9c:6a:e8:b9:48:e9:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Validity Not Before: Aug 23 06:45:01 2025 GMT Not After : Aug 26 16:36:01 2025 GMT Subject: CN=2C0AF31B342E927C3633CDDAB2E14C8307D6135A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:b8:70:06:49:07:83:47:40:c3:90:d4:2b: f2:5e:24:d0:68:78:a9:71:27:b4:6a:3f:b3:f8:aa: 67:3d:8e:4f:5f:19:b0:29:ff:a2:46:01:a2:11:f7: af:66:32:2c:f8:68:0b:ac:0b:44:fe:f2:d1:78:6b: 29:8f:cd:d9:5f:ca:86:15:0a:9e:79:7c:3e:e4:34: 94:14:74:82:39:28:2c:a0:1f:52:13:73:a1:e8:9c: 40:42:a4:c7:27:b0:0e:b8:c5:70:7a:79:43:02:0f: 97:02:2f:10:c5:5b:2e:b6:69:c9:f8:0d:e1:70:23: d7:5b:26:43:1a:ff:e8:55:4c:56:92:68:cd:07:92: 0d:cd:66:69:07:5a:15:66:29:0a:b7:ea:59:18:c5: 67:a1:7c:5f:68:b0:9f:e7:88:4f:57:34:53:0c:03: 13:93:bd:1e:45:b6:f0:84:11:5a:33:50:a8:55:43: f7:60:21:19:2d:ed:6f:0d:a4:c6:7f:52:b4:f7:3b: 1f:d9:44:dd:44:9b:e1:76:40:9d:7a:b4:6b:18:17: 6f:de:e3:02:05:78:10:76:0a:b9:12:3c:99:a7:20: a2:2f:b9:74:a1:c5:1e:f9:f7:fb:82:0e:65:62:14: 73:93:a6:c0:d2:70:d2:ec:d4:fb:09:82:d3:d7:7d: 72:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:F3:1B:34:2E:92:7C:36:33:CD:DA:B2:E1:4C:83:07:D6:13:5A X509v3 Authority Key Identifier: keyid:52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:89:79:cb:d1:ab:31:14:17:14:71:a1:aa:f9:ce:a9:94:f9: 37:cb:f3:01:23:5d:14:6d:1f:b5:a0:b5:9a:5f:eb:31:83:e4: 26:af:4d:61:26:d1:f3:06:30:27:30:88:9c:0b:c1:19:37:5f: 83:43:da:e9:49:21:ab:9f:a0:2e:d9:48:0b:33:44:9e:85:10: 5d:4a:fc:9b:e7:a2:e2:10:b7:07:c9:e3:7d:5c:e3:b3:b8:33: 14:5a:ab:14:11:69:8d:7d:53:27:26:cb:e8:04:22:eb:1a:03: 7d:86:e9:c6:b8:e1:46:f3:71:1c:f7:57:9b:06:b7:f6:14:81: 0c:04:d3:af:f0:06:b2:7b:d7:d2:80:cd:ef:98:ec:33:b9:fb: 4b:72:07:75:71:ca:13:b6:55:b8:71:05:19:1e:72:20:b7:e9: 99:b3:fe:f8:03:e8:1d:06:f4:2a:85:0f:4d:ec:8f:57:36:ee: aa:c8:44:bb:94:7c:98:e7:e7:f9:87:fb:fd:6f:83:cb:43:5f: e2:a6:42:5a:ee:05:db:5a:3e:17:61:5e:5a:fb:58:36:17:68: 35:d9:00:13:de:73:91:05:ae:0c:37:30:ae:b9:49:9c:a2:48: a3:0b:20:f4:65:30:68:76:2e:e3:12:1c:00:46:db:95:03:64: e2:a7:f0:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJibcRsEKf2YAJjziRpxq6LlI6dcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJE NUYzMjQ5RDAeFw0yNTA4MjMwNjQ1MDFaFw0yNTA4MjYxNjM2MDFaMDMxMTAvBgNV BAMTKDJDMEFGMzFCMzQyRTkyN0MzNjMzQ0REQUIyRTE0QzgzMDdENjEzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkD7hwBkkHg0dAw5DUK/JeJNBo eKlxJ7RqP7P4qmc9jk9fGbAp/6JGAaIR969mMiz4aAusC0T+8tF4aymPzdlfyoYV Cp55fD7kNJQUdII5KCygH1ITc6HonEBCpMcnsA64xXB6eUMCD5cCLxDFWy62acn4 DeFwI9dbJkMa/+hVTFaSaM0Hkg3NZmkHWhVmKQq36lkYxWehfF9osJ/niE9XNFMM AxOTvR5FtvCEEVozUKhVQ/dgIRkt7W8NpMZ/UrT3Ox/ZRN1Em+F2QJ16tGsYF2/e 4wIFeBB2CrkSPJmnIKIvuXShxR759/uCDmViFHOTpsDScNLs1PsJgtPXfXKtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULArzGzQuknw2M83asuFMgwfWE1owHwYDVR0j BBgwFoAUUtli9anKvi9AiVSJUSaeW9XzJJ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMC81MkQ5NjJGNUE5 Q0FCRTJGNDA4OTU0ODk1MTI2OUU1QkQ1RjMyNDlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJENUYz MjQ5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlF NUJENUYzMjQ5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANWJecvRqzEUFxRxoar5zqmU+TfL8wEjXRRt H7WgtZpf6zGD5CavTWEm0fMGMCcwiJwLwRk3X4ND2ulJIaufoC7ZSAszRJ6FEF1K /JvnouIQtwfJ431c47O4MxRaqxQRaY19Uycmy+gEIusaA32G6ca44UbzcRz3V5sG t/YUgQwE06/wBrJ719KAze+Y7DO5+0tyB3VxyhO2VbhxBRkeciC36Zmz/vgD6B0G 9CqFD03sj1c27qrIRLuUfJjn5/mH+/1vg8tDX+KmQlruBdtaPhdhXlr7WDYXaDXZ ABPec5EFrgw3MK65SZyiSKMLIPRlMGh2LuMSHABG25UDZOKn8Gs= -----END CERTIFICATE-----Generated at Sun Aug 24 04:28:57 2025 by rpki-client