$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: JhL41C4u8YjxuIXyxPAKOV2GSMWs1WudjPS7akxhwJg= Subject key identifier: CE:B0:5B:AA:44:D6:80:E3:D5:92:AB:FD:2A:42:26:D3:8E:9C:3D:BF Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 63063CE3CD052FE6AF53CDA25B1599526ED9609C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 015E Signing time: Sat 23 Aug 2025 09:42:19 +0000 Manifest this update: Sat 23 Aug 2025 09:37:19 +0000 Manifest next update: Tue 26 Aug 2025 20:51:19 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) 2: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: gcfAYty1zNKrAnRdq4RN7H+xyVFgePi47p4DDEuiXpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:06:3c:e3:cd:05:2f:e6:af:53:cd:a2:5b:15:99:52:6e:d9:60:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Aug 23 09:37:19 2025 GMT Not After : Aug 26 20:51:19 2025 GMT Subject: CN=CEB05BAA44D680E3D592ABFD2A4226D38E9C3DBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:38:4b:e0:70:f6:49:69:4f:c0:1c:0b:bf:c2: 2e:47:14:f9:e3:89:c6:98:63:b7:3d:93:21:ab:18: 0f:dc:d0:50:89:76:72:e1:14:cc:19:c5:47:25:df: 19:5f:cb:20:f9:e3:1d:7f:df:8b:4d:fb:15:76:bd: 2e:8a:59:ea:8e:c1:c5:d8:71:ff:54:92:82:45:35: 45:da:44:2b:1b:d8:89:cf:58:14:6b:1f:39:95:44: 04:4d:e2:17:4b:1d:5d:b0:15:b7:19:5d:f4:20:f4: 48:47:b7:85:75:9d:6b:13:1b:4a:10:75:f5:11:31: 6a:d7:62:00:6c:54:fc:ec:cd:71:72:e1:bd:7e:44: 68:66:ed:f3:74:85:1b:78:65:7f:43:29:64:60:37: 18:bf:16:cd:a9:5d:7f:52:7e:b2:d1:58:71:78:44: 6d:b5:4f:52:8e:34:3d:6c:64:42:b6:cf:e0:62:2a: 38:5c:4a:00:44:63:87:6b:b3:91:5a:c3:c6:2e:18: 49:b7:89:35:17:05:9f:82:f2:a1:3d:cb:2b:31:50: 50:d2:ac:4b:e6:a1:11:71:ba:e2:da:85:c8:f2:d3: 28:eb:9c:4a:d7:46:2e:d0:eb:35:1a:dc:42:30:67: 42:f2:ed:6a:a7:5c:30:32:59:b4:8f:11:30:11:b7: 53:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B0:5B:AA:44:D6:80:E3:D5:92:AB:FD:2A:42:26:D3:8E:9C:3D:BF X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9d:a5:bd:49:00:d8:5b:3e:44:3e:42:55:3a:35:b1:ee:84: 0f:7e:d8:28:8c:4d:3f:6f:10:9a:23:65:32:60:e8:a9:2f:08: 73:9f:4b:90:04:8b:f5:12:4f:10:51:bd:4b:d0:1f:c1:20:65: d2:e9:c8:c7:91:59:ee:89:24:44:e1:38:8e:d0:f0:fa:93:dc: 1f:4b:b2:a6:d9:c5:88:e0:34:92:53:c9:4f:52:6f:9d:88:87: ef:51:4c:f4:50:24:c1:18:b4:a1:fb:71:4d:1b:60:1b:83:21: b9:d5:f0:ee:81:5c:01:e6:01:60:ae:e4:fe:a3:35:3f:66:6b: 50:a7:f7:7f:33:df:32:7e:f0:e5:a0:fc:e5:30:07:45:00:52: 7d:78:68:0d:56:b9:ed:91:16:6c:dd:17:1c:2b:a4:61:b7:da: 92:78:28:b0:58:84:01:be:fd:11:d1:0c:aa:32:0c:30:f2:93: 2d:3e:9c:fb:d1:74:87:91:26:ad:86:d4:41:60:03:ea:63:63: 3c:db:20:18:5d:5b:5b:b4:c5:ae:c0:ab:7f:a2:91:2c:da:09: 08:74:a3:0f:70:d5:b6:db:97:5f:b1:72:af:dc:6a:81:81:15: 47:e4:3d:14:b8:91:3c:c6:fb:52:93:4a:cf:21:a3:82:d6:2b: d6:46:97:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYwY8480FL+avU82iWxWZUm7ZYJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTA4MjMwOTM3MTlaFw0yNTA4MjYyMDUxMTlaMDMxMTAvBgNV BAMTKENFQjA1QkFBNDRENjgwRTNENTkyQUJGRDJBNDIyNkQzOEU5QzNEQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOEvgcPZJaU/AHAu/wi5HFPnj icaYY7c9kyGrGA/c0FCJdnLhFMwZxUcl3xlfyyD54x1/34tN+xV2vS6KWeqOwcXY cf9UkoJFNUXaRCsb2InPWBRrHzmVRARN4hdLHV2wFbcZXfQg9EhHt4V1nWsTG0oQ dfURMWrXYgBsVPzszXFy4b1+RGhm7fN0hRt4ZX9DKWRgNxi/Fs2pXX9SfrLRWHF4 RG21T1KOND1sZEK2z+BiKjhcSgBEY4drs5Faw8YuGEm3iTUXBZ+C8qE9yysxUFDS rEvmoRFxuuLahcjy0yjrnErXRi7Q6zUa3EIwZ0Ly7WqnXDAyWbSPETARt1NBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzrBbqkTWgOPVkqv9KkIm046cPb8wHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6dpb1JANhbPkQ+QlU6NbHuhA9+2CiMTT9v EJojZTJg6KkvCHOfS5AEi/USTxBRvUvQH8EgZdLpyMeRWe6JJEThOI7Q8PqT3B9L sqbZxYjgNJJTyU9Sb52Ih+9RTPRQJMEYtKH7cU0bYBuDIbnV8O6BXAHmAWCu5P6j NT9ma1Cn938z3zJ+8OWg/OUwB0UAUn14aA1Wue2RFmzdFxwrpGG32pJ4KLBYhAG+ /RHRDKoyDDDyky0+nPvRdIeRJq2G1EFgA+pjYzzbIBhdW1u0xa7Aq3+ikSzaCQh0 ow9w1bbbl1+xcq/caoGBFUfkPRS4kTzG+1KTSs8ho4LWK9ZGl28= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:12 2025 by rpki-client