$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft File: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft (raw, json) Hash identifier: zfKUTEDjUrxEtG9vNm0jmrFIDUNrL8+tPavT9n4U4Bs= Subject key identifier: A7:A1:68:26:1B:81:58:48:F3:51:37:D2:BA:F4:3A:5D:35:88:86:9F Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 Certificate issuer: /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Certificate serial: 6764C02A4E29E85C94F7334843A6DC308FEBD6C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft Manifest number: 0251 Signing time: Wed 06 Aug 2025 10:20:53 +0000 Manifest this update: Wed 06 Aug 2025 10:15:53 +0000 Manifest next update: Sat 09 Aug 2025 20:00:53 +0000 Files and hashes: 1: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl (hash: R5QZvjX8E1V3VSyT1IQbng4rCwBwmAoAqvlCWV3gFj8=) 2: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: fKMeJeAwMbkwf1kmZ/AB9YQDJH0OhHULVGJWeX+RPu0=) 3: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: itO8sihFgXMUbSQlwLdSsBmvziIF/OpyE/yJGtrY67A=) 4: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: UDP5vaqP++IAcM6lMBhTtGhgbdITohHwdo+pbRZf5tI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:64:c0:2a:4e:29:e8:5c:94:f7:33:48:43:a6:dc:30:8f:eb:d6:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Validity Not Before: Aug 6 10:15:53 2025 GMT Not After : Aug 9 20:00:53 2025 GMT Subject: CN=A7A168261B815848F35137D2BAF43A5D3588869F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ba:ea:2b:c9:9c:3e:d6:05:f9:ca:3e:a4:93: fc:88:e5:17:76:ad:cc:5a:97:c1:ee:4e:f2:7e:59: 38:53:6c:41:01:c2:11:45:a1:7a:9c:ea:ed:8c:b4: 66:3e:db:77:01:1d:90:1c:0d:64:c3:63:fc:e8:68: a8:18:97:be:01:a4:5d:40:09:3c:05:c2:02:5f:02: e8:6f:eb:5b:71:4f:1e:f3:e2:7b:69:9f:28:d9:bd: e1:ba:93:37:9f:26:48:28:ef:ad:b1:18:d7:56:c4: 0e:eb:f2:8a:80:af:96:39:c2:9a:7c:73:13:95:87: ee:a1:9a:c6:54:cb:0b:b6:5c:95:1c:d4:ca:41:fb: 7a:a0:c8:32:34:43:57:fa:37:9e:31:7c:64:73:49: 92:27:1c:02:cb:8e:b8:5e:5a:c7:5e:ea:48:d2:97: ac:c3:0a:b6:61:c0:81:b1:2b:54:78:0f:ec:d1:d5: 2f:36:d2:00:31:31:07:8d:ff:c5:e9:1e:34:c7:89: 08:29:43:76:57:fa:df:5b:b3:dc:5f:c7:f4:f2:d0: f4:de:8d:a1:71:73:5b:16:1d:0a:21:ac:78:8c:6c: a6:cd:8c:82:9c:a2:9d:2e:6b:00:9a:61:f4:75:1a: ce:7b:c4:2b:f8:55:51:76:33:3a:15:4f:24:23:29: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A1:68:26:1B:81:58:48:F3:51:37:D2:BA:F4:3A:5D:35:88:86:9F X509v3 Authority Key Identifier: keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:27:f8:51:76:0c:95:42:d6:67:c8:07:eb:1d:6c:36:c0:f1: b6:54:b7:d8:f0:a6:c0:e8:1b:81:50:5c:dd:8b:ce:bb:2d:54: 47:83:55:14:28:86:97:8a:5d:53:32:f9:e1:d9:5d:5a:e3:7b: b1:b2:c3:33:da:4f:82:6a:a0:6f:47:9b:7d:1d:18:15:b1:b3: 05:d8:8e:9d:4f:ec:71:a4:1d:f4:94:ab:44:07:3f:66:8e:ab: 23:5b:e0:e0:04:9f:1f:02:af:d3:f4:a7:16:6c:3f:77:f2:40: cc:c6:64:86:e2:d6:8c:e6:ad:69:f7:c4:cf:a8:ba:9b:17:cc: 7d:4a:cb:db:d8:48:ae:65:20:3c:6e:74:5e:b1:b5:d3:7c:5b: 29:b7:c8:e1:69:87:c2:fe:0f:9a:5c:6c:a3:a9:fe:8f:ab:bf: 84:b4:62:b2:00:c9:08:9d:31:71:7d:8d:c2:41:40:45:7b:a1: 47:6b:e1:3f:5a:27:37:bd:73:57:0a:f9:ac:89:3a:45:e1:7c: cf:69:66:d8:0d:71:8c:df:c3:0e:f6:05:4d:32:ed:c0:a4:1a: 33:a5:ee:4c:eb:ab:ec:72:bb:97:01:e0:7c:ef:05:ee:07:e2: 49:66:2e:e5:cc:20:29:6c:12:24:61:df:c0:9f:6f:7c:6d:67: ba:a7:8e:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2TAKk4p6FyU9zNIQ6bcMI/r1sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZD QjhBQTI0NTAeFw0yNTA4MDYxMDE1NTNaFw0yNTA4MDkyMDAwNTNaMDMxMTAvBgNV BAMTKEE3QTE2ODI2MUI4MTU4NDhGMzUxMzdEMkJBRjQzQTVEMzU4ODg2OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRuuoryZw+1gX5yj6kk/yI5Rd2 rcxal8HuTvJ+WThTbEEBwhFFoXqc6u2MtGY+23cBHZAcDWTDY/zoaKgYl74BpF1A CTwFwgJfAuhv61txTx7z4ntpnyjZveG6kzefJkgo762xGNdWxA7r8oqAr5Y5wpp8 cxOVh+6hmsZUywu2XJUc1MpB+3qgyDI0Q1f6N54xfGRzSZInHALLjrheWsde6kjS l6zDCrZhwIGxK1R4D+zR1S820gAxMQeN/8XpHjTHiQgpQ3ZX+t9bs9xfx/Ty0PTe jaFxc1sWHQohrHiMbKbNjIKcop0uawCaYfR1Gs57xCv4VVF2MzoVTyQjKUZVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6FoJhuBWEjzUTfSuvQ6XTWIhp8wHwYDVR0j BBgwFoAUUud7BrwmkcYTx6mHLuHij8uKokUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzkwODc4Mi00NTIwLTQ1YjQtOTllZC0xOTNlNTFkZjUxYzMvMC81MkU3N0IwNkJD MjY5MUM2MTNDN0E5ODcyRUUxRTI4RkNCOEFBMjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZDQjhB QTI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUy OEZDQjhBQTI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8n+FF2DJVC1mfIB+sdbDbA8bZUt9jwpsDo G4FQXN2LzrstVEeDVRQohpeKXVMy+eHZXVrje7GywzPaT4JqoG9Hm30dGBWxswXY jp1P7HGkHfSUq0QHP2aOqyNb4OAEnx8Cr9P0pxZsP3fyQMzGZIbi1ozmrWn3xM+o upsXzH1Ky9vYSK5lIDxudF6xtdN8Wym3yOFph8L+D5pcbKOp/o+rv4S0YrIAyQid MXF9jcJBQEV7oUdr4T9aJze9c1cK+ayJOkXhfM9pZtgNcYzfww72BU0y7cCkGjOl 7kzrq+xyu5cB4HzvBe4H4klmLuXMIClsEiRh38Cfb3xtZ7qnjso= -----END CERTIFICATE-----Generated at Thu Aug 7 20:22:09 2025 by rpki-client