$ rpki-client -vvf repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft File: 52D962F5A9CABE2F4089548951269E5BD5F3249D.mft (raw, json) Hash identifier: iaRKeB5d5qd/gKN7GeyhcoW0dcKK5TRrP8qHvRBuDhg= Subject key identifier: 52:E6:24:15:82:CA:69:29:AC:D8:62:01:09:DF:A5:8B:82:E7:8E:2D Authority key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Certificate issuer: /CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Certificate serial: 4C24E2363D5B37D8B2F0D26D5DFD70E9B2637CAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft Manifest number: A3 Signing time: Sun 19 Oct 2025 05:10:01 +0000 Manifest this update: Sun 19 Oct 2025 05:05:01 +0000 Manifest next update: Wed 22 Oct 2025 12:07:01 +0000 Files and hashes: 1: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: vIF48KMANXIGE+Lk+ZdIeOLTYmbNmfa3MrBKBvJQqmE=) 2: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: c4ofB5VSDY4XXKhWxq0LhNmllp1P3fen4sP7Y+RjYTk=) 3: 52D962F5A9CABE2F4089548951269E5BD5F3249D.crl (hash: rXIyqf3GOeID39xUbe8lngjYOsJyJeQ558g4kWY4EcE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:24:e2:36:3d:5b:37:d8:b2:f0:d2:6d:5d:fd:70:e9:b2:63:7c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Validity Not Before: Oct 19 05:05:01 2025 GMT Not After : Oct 22 12:07:01 2025 GMT Subject: CN=52E6241582CA6929ACD8620109DFA58B82E78E2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:35:fb:bd:8d:2d:80:f9:c1:56:6d:88:57:67: 54:9b:aa:53:8a:ec:85:13:8a:c4:4f:0c:ea:36:59: c7:a2:ec:e7:f7:fe:4f:22:92:86:d0:b6:da:ba:3f: 53:d5:bd:b7:7e:84:10:db:9f:f8:ee:72:4f:a9:f6: 77:92:cb:1c:96:9b:ae:17:e0:62:3b:08:c2:e1:ea: f3:8d:ef:c9:c5:35:e4:e9:0c:3f:85:e8:63:11:4f: f0:12:58:41:85:2c:e7:5f:93:d6:13:28:24:63:f9: 18:44:df:fb:55:67:6a:4c:99:83:2c:bd:3c:39:d7: a5:2f:f1:9f:8a:84:a5:50:df:d8:e8:7a:c5:1e:a2: c6:dd:ec:9d:b6:98:e5:a1:f7:58:8a:99:b5:7e:53: 86:0c:74:ee:09:d4:55:3b:13:f1:8a:02:25:51:09: ea:34:cb:95:34:99:72:e9:63:26:92:a4:59:5e:50: bf:82:e5:7d:53:a5:11:01:a0:1a:b4:f1:ea:ba:ed: 18:05:02:b5:2f:e0:4a:35:fa:d5:75:7d:b7:96:61: e2:da:31:6b:4c:6f:f3:2d:93:64:34:b2:0c:97:a7: 06:68:ce:cc:a2:c5:1b:ec:a8:1c:25:3a:e8:3d:7d: c2:a0:f6:6c:a1:0c:1d:eb:f1:55:2f:99:39:6c:d8: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E6:24:15:82:CA:69:29:AC:D8:62:01:09:DF:A5:8B:82:E7:8E:2D X509v3 Authority Key Identifier: keyid:52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ae:e7:71:e1:89:f9:bf:46:e3:44:a2:ca:47:ef:82:af:6d: f4:35:eb:3d:39:6c:d5:cc:7c:4b:20:2b:99:4f:b8:ec:bc:61: e2:f4:06:80:36:e0:44:9a:b7:c1:2e:ee:58:73:ee:e4:55:ea: 29:e9:1b:78:ab:7e:9a:fd:53:98:f9:64:9b:a6:60:13:95:78: 5f:a2:fc:5a:90:73:03:c4:0f:b3:40:bd:65:e0:7b:5d:d9:9a: 5f:4e:0c:3c:4c:c5:67:a7:d8:97:f9:93:87:aa:a0:4e:17:ec: d8:97:59:3b:17:d6:d8:3e:10:39:a3:c0:55:e9:cf:e4:22:ae: 49:a0:64:a4:0c:56:af:fd:1e:0b:77:2e:2a:af:73:d5:13:64: 0f:1f:68:ef:dd:8b:56:19:e7:0a:e4:01:63:bd:44:dc:8f:92: 6f:4c:08:a2:c9:81:a4:44:fe:3c:05:93:a9:7b:f9:8d:66:86: 69:52:72:93:e2:ab:9f:ce:ad:f5:65:e4:56:a2:1b:ed:c5:1f: 93:27:b4:6a:87:25:0a:01:42:b2:a7:f4:dd:d4:2b:d9:ec:4d: 66:20:fa:69:ad:22:0e:3a:22:27:24:12:74:1f:10:31:19:0c: 27:ba:e2:65:8c:53:59:60:3e:f4:7f:e2:36:8f:08:d4:2b:03: c7:b0:d3:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTCTiNj1bN9iy8NJtXf1w6bJjfKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJE NUYzMjQ5RDAeFw0yNTEwMTkwNTA1MDFaFw0yNTEwMjIxMjA3MDFaMDMxMTAvBgNV BAMTKDUyRTYyNDE1ODJDQTY5MjlBQ0Q4NjIwMTA5REZBNThCODJFNzhFMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Nfu9jS2A+cFWbYhXZ1SbqlOK 7IUTisRPDOo2Wcei7Of3/k8ikobQttq6P1PVvbd+hBDbn/juck+p9neSyxyWm64X 4GI7CMLh6vON78nFNeTpDD+F6GMRT/ASWEGFLOdfk9YTKCRj+RhE3/tVZ2pMmYMs vTw516Uv8Z+KhKVQ39joesUeosbd7J22mOWh91iKmbV+U4YMdO4J1FU7E/GKAiVR Ceo0y5U0mXLpYyaSpFleUL+C5X1TpREBoBq08eq67RgFArUv4Eo1+tV1fbeWYeLa MWtMb/Mtk2Q0sgyXpwZozsyixRvsqBwlOug9fcKg9myhDB3r8VUvmTls2EYdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUuYkFYLKaSms2GIBCd+li4Lnji0wHwYDVR0j BBgwFoAUUtli9anKvi9AiVSJUSaeW9XzJJ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMC81MkQ5NjJGNUE5 Q0FCRTJGNDA4OTU0ODk1MTI2OUU1QkQ1RjMyNDlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJENUYz MjQ5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlF NUJENUYzMjQ5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmu53Hhifm/RuNEospH74KvbfQ16z05bNXM fEsgK5lPuOy8YeL0BoA24ESat8Eu7lhz7uRV6inpG3irfpr9U5j5ZJumYBOVeF+i /FqQcwPED7NAvWXge13Zml9ODDxMxWen2Jf5k4eqoE4X7NiXWTsX1tg+EDmjwFXp z+QirkmgZKQMVq/9Hgt3Liqvc9UTZA8faO/di1YZ5wrkAWO9RNyPkm9MCKLJgaRE /jwFk6l7+Y1mhmlScpPiq5/OrfVl5FaiG+3FH5MntGqHJQoBQrKn9N3UK9nsTWYg +mmtIg46IickEnQfEDEZDCe64mWMU1lgPvR/4jaPCNQrA8ew0zo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:40:53 2025 by rpki-client