$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: /Aw2hDvH7fOowFubxgfHzovP+8N9qs6nFlCXf6yc3O0= Subject key identifier: 58:98:4C:38:0F:20:B0:11:08:92:D5:13:13:26:48:E3:CF:3D:B1:6B Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 0B52C7B6D5FF1DA0E9C6ECBF414559966F397B8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 0177 Signing time: Sat 18 Oct 2025 14:52:17 +0000 Manifest this update: Sat 18 Oct 2025 14:47:17 +0000 Manifest next update: Tue 21 Oct 2025 21:19:17 +0000 Files and hashes: 1: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: v94W3T6+LeSTlAe7eVAcGHW9AsNIpaHVtgqJFM4EDNw=) 2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 21:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:52:c7:b6:d5:ff:1d:a0:e9:c6:ec:bf:41:45:59:96:6f:39:7b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Oct 18 14:47:17 2025 GMT Not After : Oct 21 21:19:17 2025 GMT Subject: CN=58984C380F20B0110892D513132648E3CF3DB16B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:07:50:a5:7e:72:a9:9f:8c:91:54:0e:df:9a: 5d:37:b2:e5:6b:6c:72:95:aa:8b:78:4d:a1:f3:a5: 63:31:f6:cb:36:4c:24:33:18:6f:45:a4:14:d9:fc: 0b:06:22:e8:59:63:e4:c5:da:7d:13:38:f3:c4:90: 67:5b:48:fd:4c:d9:a5:bb:0b:5a:9b:db:2a:58:23: cd:f2:d7:e5:18:c8:56:79:ab:e7:3b:fe:72:1b:32: 62:a7:9a:a7:95:0c:0e:e0:68:ba:7c:e9:bd:0d:70: 9b:63:fa:f9:27:e8:94:8d:75:d7:69:98:48:3c:f8: 7c:7e:b2:2d:90:e7:5d:a2:65:75:1c:1e:27:fd:08: f7:71:eb:21:6f:d6:ba:82:be:be:1d:32:9a:99:e3: 18:1e:7b:27:fc:a6:82:b3:74:70:5e:ad:a8:95:b8: 87:34:40:32:2c:f1:23:5a:49:91:d9:0f:a4:40:c1: e5:5d:35:21:ec:35:1a:f1:33:c1:ed:04:91:95:41: dc:b1:9b:26:88:6d:95:08:30:2c:c6:49:c5:cb:8b: 29:55:de:da:ea:04:f1:ec:c7:d4:bb:4f:de:8f:e7: a8:57:bc:4e:be:a7:ce:2d:8c:95:6f:6e:ff:7c:e6: 03:f4:4d:3e:8a:b1:ff:82:30:e3:ff:ab:1d:62:0d: 8e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:98:4C:38:0F:20:B0:11:08:92:D5:13:13:26:48:E3:CF:3D:B1:6B X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:eb:76:04:d3:28:57:b3:54:92:71:3f:35:11:ab:1d:5f:a3: 8d:da:48:f7:08:c0:9d:1f:5f:2d:0c:c4:6e:d4:42:f3:9f:ac: db:17:91:52:ee:e8:79:ad:95:c3:c6:3f:ff:8d:8c:ab:da:70: 5a:46:40:5d:ad:7c:db:8d:46:09:c3:99:02:c9:1c:a2:fa:c6: 5d:4e:80:ce:52:73:87:90:53:83:0a:b0:c1:68:0f:1a:ae:bb: d1:7f:ab:a8:08:ec:6e:4b:c3:37:75:c9:4b:15:02:55:28:9e: 2f:8c:12:56:a9:a9:b7:85:e1:70:85:8a:d8:54:dc:d9:6e:9b: 10:43:d0:ab:50:3a:11:f3:b3:ba:32:8f:1f:70:57:17:19:a8: 56:3c:bf:32:53:b0:00:b0:93:da:a8:20:4c:9c:59:9e:07:3f: ac:54:01:bd:66:9d:ae:76:8f:53:07:9f:bc:05:c6:43:b4:ce: 9d:75:70:db:17:76:fd:64:2a:05:a7:4e:94:7d:1e:92:f5:29: a9:e7:17:46:cc:25:f7:37:8e:53:e7:5a:b7:ff:de:77:de:22: ae:bb:2f:f9:f6:ed:2e:b5:14:66:dd:88:ea:69:a0:21:a2:fb: df:1c:7b:12:78:c4:ca:fc:76:97:36:59:cf:9c:5e:cd:ca:5f: 4b:fc:2e:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC1LHttX/HaDpxuy/QUVZlm85e44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTEwMTgxNDQ3MTdaFw0yNTEwMjEyMTE5MTdaMDMxMTAvBgNV BAMTKDU4OTg0QzM4MEYyMEIwMTEwODkyRDUxMzEzMjY0OEUzQ0YzREIxNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClB1ClfnKpn4yRVA7fml03suVr bHKVqot4TaHzpWMx9ss2TCQzGG9FpBTZ/AsGIuhZY+TF2n0TOPPEkGdbSP1M2aW7 C1qb2ypYI83y1+UYyFZ5q+c7/nIbMmKnmqeVDA7gaLp86b0NcJtj+vkn6JSNdddp mEg8+Hx+si2Q512iZXUcHif9CPdx6yFv1rqCvr4dMpqZ4xgeeyf8poKzdHBeraiV uIc0QDIs8SNaSZHZD6RAweVdNSHsNRrxM8HtBJGVQdyxmyaIbZUIMCzGScXLiylV 3trqBPHsx9S7T96P56hXvE6+p84tjJVvbv985gP0TT6Ksf+CMOP/qx1iDY6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWJhMOA8gsBEIktUTEyZI4889sWswHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXrdgTTKFezVJJxPzURqx1fo43aSPcIwJ0f Xy0MxG7UQvOfrNsXkVLu6HmtlcPGP/+NjKvacFpGQF2tfNuNRgnDmQLJHKL6xl1O gM5Sc4eQU4MKsMFoDxquu9F/q6gI7G5Lwzd1yUsVAlUoni+MElapqbeF4XCFithU 3NlumxBD0KtQOhHzs7oyjx9wVxcZqFY8vzJTsACwk9qoIEycWZ4HP6xUAb1mna52 j1MHn7wFxkO0zp11cNsXdv1kKgWnTpR9HpL1KannF0bMJfc3jlPnWrf/3nfeIq67 L/n27S61FGbdiOppoCGi+98cexJ4xMr8dpc2Wc+cXs3KX0v8LtI= -----END CERTIFICATE-----Generated at Mon Oct 20 22:55:23 2025 by rpki-client