$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft (raw, json) Hash identifier: cXYBVBsCVKD+gRI2IvtuG5d62ZeFC3kI2M/lHjE9PXc= Subject key identifier: 0B:1F:4D:BE:CC:43:7C:B5:80:12:EA:F5:73:51:9E:8C:90:8E:FE:52 Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Certificate issuer: /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Certificate serial: 1FDF88D2706AA6703084D7B1FDB07CE13CE79A2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft Manifest number: 0329 Signing time: Mon 20 Oct 2025 02:52:00 +0000 Manifest this update: Mon 20 Oct 2025 02:47:00 +0000 Manifest next update: Thu 23 Oct 2025 03:12:00 +0000 Files and hashes: 1: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=) 2: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw=) 3: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs=) 4: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl (hash: vLFXeo5gZ8PT6Sg2+PqzWiqZaHVSjnz27jsbWocFvys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:df:88:d2:70:6a:a6:70:30:84:d7:b1:fd:b0:7c:e1:3c:e7:9a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Validity Not Before: Oct 20 02:47:00 2025 GMT Not After : Oct 23 03:12:00 2025 GMT Subject: CN=0B1F4DBECC437CB58012EAF573519E8C908EFE52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:84:d2:26:2f:d2:8b:bf:5c:34:45:54:f0: 56:4d:c1:87:2e:85:43:f3:40:7e:97:57:1c:08:50: d2:63:85:0b:ba:01:a8:65:6e:88:31:8b:71:41:0d: 26:08:c2:a3:fb:ea:35:0d:df:2b:97:87:5b:80:cb: c9:f1:1c:56:25:c6:59:25:20:ed:62:a8:ac:17:95: b3:ba:b2:2a:b2:e9:6e:b9:70:7b:31:20:a5:a4:b0: 35:32:73:36:a4:c3:e5:af:bd:04:f9:41:23:be:95: ee:5f:f6:ae:24:fc:98:57:1b:e4:0a:dc:e6:24:24: 10:87:1e:30:03:a9:ac:be:c9:a5:1e:ac:81:a1:e6: ec:a7:80:bf:9d:e6:c0:3f:65:d7:3a:f9:0f:f6:82: 59:3c:67:51:3e:0c:44:43:a5:03:6f:73:91:ef:4c: c2:5c:21:48:31:d2:39:1c:7b:13:e2:47:56:e3:f0: 21:6b:dd:72:b2:96:4a:01:da:2d:29:ea:f1:f1:88: 3c:42:be:ce:3b:1a:be:02:b8:4d:a5:9a:6e:cc:6e: ad:ec:5f:9a:75:ec:5c:2c:ae:6b:2a:10:73:aa:09: 76:69:a8:7a:05:b5:0e:93:36:c0:02:cb:8c:e8:28: 52:80:11:08:41:e3:8c:41:53:8f:fc:bd:65:04:a9: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1F:4D:BE:CC:43:7C:B5:80:12:EA:F5:73:51:9E:8C:90:8E:FE:52 X509v3 Authority Key Identifier: keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ec:db:51:d3:b3:82:9f:43:b3:3e:77:20:32:a9:1c:82:bb: 18:91:16:42:93:52:bd:12:ac:66:a7:ec:8a:0c:a2:b5:ff:eb: 9a:b2:49:86:86:a2:ed:8d:9c:2e:29:54:6a:92:e1:c7:91:d9: 50:cd:e0:32:ea:76:f0:00:6b:e9:50:bf:d6:48:00:83:f2:ac: c5:97:f4:6b:5f:ed:ad:7a:fd:48:52:12:fa:eb:bb:95:f1:73: 19:ba:c6:03:ea:61:79:9f:17:fa:24:a5:f4:dd:ea:be:03:94: 93:76:ef:2a:24:e6:f9:02:ef:7d:16:f2:52:a4:ec:9a:26:c9: 8d:d8:37:68:73:67:28:a5:42:4c:93:ce:46:e7:25:1d:67:43: b3:50:8d:ee:48:a2:73:47:ae:8f:9b:b7:8a:9c:33:8d:13:3b: aa:16:c8:bf:b7:9f:6b:4e:35:ad:f7:0d:78:fb:cc:5d:54:98: 9d:7a:f9:c0:58:3e:aa:ad:a2:36:06:4b:43:22:29:b5:a9:a1: ad:f9:61:8e:a6:88:a3:6a:03:ef:5f:b3:d6:d3:91:2b:9e:0b: 00:ef:8a:dd:e4:a2:10:fe:5b:44:c8:8a:21:9a:a8:f6:29:17: 79:c2:8c:3b:86:15:92:71:8e:bf:d7:bb:a8:2e:99:2a:fd:55: b2:19:7a:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH9+I0nBqpnAwhNex/bB84TznmiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE QkM1RkY0QzAeFw0yNTEwMjAwMjQ3MDBaFw0yNTEwMjMwMzEyMDBaMDMxMTAvBgNV BAMTKDBCMUY0REJFQ0M0MzdDQjU4MDEyRUFGNTczNTE5RThDOTA4RUZFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qoTSJi/Si79cNEVU8FZNwYcu hUPzQH6XVxwIUNJjhQu6Aahlbogxi3FBDSYIwqP76jUN3yuXh1uAy8nxHFYlxlkl IO1iqKwXlbO6siqy6W65cHsxIKWksDUyczakw+WvvQT5QSO+le5f9q4k/JhXG+QK 3OYkJBCHHjADqay+yaUerIGh5uyngL+d5sA/Zdc6+Q/2glk8Z1E+DERDpQNvc5Hv TMJcIUgx0jkcexPiR1bj8CFr3XKylkoB2i0p6vHxiDxCvs47Gr4CuE2lmm7Mbq3s X5p17FwsrmsqEHOqCXZpqHoFtQ6TNsACy4zoKFKAEQhB44xBU4/8vWUEqe4pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCx9NvsxDfLWAEur1c1GejJCO/lIwHwYDVR0j BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1 RkY0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2 RENEQkM1RkY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXs21HTs4KfQ7M+dyAyqRyCuxiRFkKTUr0S rGan7IoMorX/65qySYaGou2NnC4pVGqS4ceR2VDN4DLqdvAAa+lQv9ZIAIPyrMWX 9Gtf7a16/UhSEvrru5Xxcxm6xgPqYXmfF/okpfTd6r4DlJN27yok5vkC730W8lKk 7JomyY3YN2hzZyilQkyTzkbnJR1nQ7NQje5IonNHro+bt4qcM40TO6oWyL+3n2tO Na33DXj7zF1UmJ16+cBYPqqtojYGS0MiKbWpoa35YY6miKNqA+9fs9bTkSueCwDv it3kohD+W0TIiiGaqPYpF3nCjDuGFZJxjr/Xu6gumSr9VbIZepM= -----END CERTIFICATE-----Generated at Mon Oct 20 18:16:43 2025 by rpki-client