$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: C4+POYAXY0whags+7fX8mUCS5a0VFX0Z33L6RDVf7Qg= Subject key identifier: AD:6E:3E:55:51:A1:79:9B:D6:4C:3B:43:D0:2D:2A:D4:F3:73:10:E6 Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 246525C498FA58B9DC99578EB01B8615CEB56D94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: DD Signing time: Mon 03 Nov 2025 21:23:01 +0000 Manifest this update: Mon 03 Nov 2025 21:18:01 +0000 Manifest next update: Fri 07 Nov 2025 04:06:01 +0000 Files and hashes: 1: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) 2: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: arxPwTteFZmL2dWxIDpIa5gDtrYlKhTKkOkjvU4p5bk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 04:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:65:25:c4:98:fa:58:b9:dc:99:57:8e:b0:1b:86:15:ce:b5:6d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Nov 3 21:18:01 2025 GMT Not After : Nov 7 04:06:01 2025 GMT Subject: CN=AD6E3E5551A1799BD64C3B43D02D2AD4F37310E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:27:d3:36:fc:6c:81:30:af:03:09:b2:b8: 24:fc:d7:34:90:67:32:8b:e9:0d:89:e9:fc:aa:d7: 23:b4:ae:ac:54:5e:4e:25:ef:e3:91:e6:11:33:5c: 23:3d:96:d3:d7:ee:a2:7a:f4:62:9a:96:3b:a1:da: f8:2f:02:74:7a:fb:bb:3d:a1:ba:5b:d4:cb:6f:78: d1:df:a2:da:64:64:0f:36:7a:c6:76:9a:cf:94:f2: 3f:7b:60:42:d2:c6:7c:9c:2c:73:3e:a9:cb:41:0b: bd:08:ed:1a:4b:2c:43:bd:83:bf:60:19:e9:99:25: ef:ab:24:c9:ec:2d:88:99:9a:1d:57:62:90:f1:e6: 3d:40:1b:5f:58:51:03:f4:22:cf:8c:8d:42:09:4a: 67:a4:d4:d6:2e:ad:32:49:08:90:6b:fa:a6:4a:0b: 0f:04:1b:78:d1:6a:cb:38:f7:ef:e5:15:9b:2c:c6: b6:69:90:3b:f2:3c:92:2e:64:30:0c:88:51:92:2d: 4e:5f:7e:16:2e:3b:76:f5:46:24:ed:e1:ba:44:2b: aa:78:f0:fc:fc:84:d2:bf:0c:d6:f9:70:5e:c4:bf: 2d:4c:8b:3c:ae:5a:cd:64:aa:e3:a2:1d:4f:9a:ab: 80:1a:84:61:aa:d9:3a:35:b9:77:db:94:ee:c7:f3: cd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6E:3E:55:51:A1:79:9B:D6:4C:3B:43:D0:2D:2A:D4:F3:73:10:E6 X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f8:39:37:6e:ae:db:1e:f0:8e:2a:fe:45:79:37:ab:3c:29: f0:da:3c:1c:30:6c:23:e1:0b:33:f7:b2:47:14:3f:ff:99:af: c0:4f:8e:19:6a:c5:93:b5:cb:e6:d1:ed:12:09:45:59:81:d8: 22:ec:63:09:c5:15:9b:01:b2:08:78:92:44:95:b0:9b:fb:7b: 77:3c:d7:88:6a:f3:e6:79:56:5f:6f:ba:f7:33:c6:9c:e3:a1: a8:b2:ee:77:a2:b5:5d:a7:76:d0:7a:b4:33:ae:91:ea:74:71: 2c:9f:da:ef:9e:22:bc:3a:ee:b2:28:1b:47:23:bb:f8:c0:79: 0d:a1:15:44:60:51:00:b6:86:1b:cf:b8:ba:ff:3c:e7:d9:a3: a9:76:e8:55:12:b7:87:cc:7c:ef:d4:b6:eb:d2:0d:0b:51:15: 39:ae:ff:82:97:b1:19:59:6d:df:81:13:7c:37:eb:24:da:6b: 71:c9:11:e3:3d:66:b5:d3:b4:14:4d:23:0e:bd:c5:54:c8:5d: 7b:9d:f0:be:5e:88:37:f2:fe:e9:c1:22:45:7e:e6:0f:44:b4: 36:11:ff:59:89:93:94:34:7c:4b:95:06:8c:dc:5d:ff:a9:06: 9d:ab:60:65:6e:e6:40:70:10:72:57:8b:6f:c1:66:e4:78:22: 00:42:c0:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGUlxJj6WLncmVeOsBuGFc61bZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNTExMDMyMTE4MDFaFw0yNTExMDcwNDA2MDFaMDMxMTAvBgNV BAMTKEFENkUzRTU1NTFBMTc5OUJENjRDM0I0M0QwMkQyQUQ0RjM3MzEwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKryfTNvxsgTCvAwmyuCT81zSQ ZzKL6Q2J6fyq1yO0rqxUXk4l7+OR5hEzXCM9ltPX7qJ69GKaljuh2vgvAnR6+7s9 obpb1MtveNHfotpkZA82esZ2ms+U8j97YELSxnycLHM+qctBC70I7RpLLEO9g79g GemZJe+rJMnsLYiZmh1XYpDx5j1AG19YUQP0Is+MjUIJSmek1NYurTJJCJBr+qZK Cw8EG3jRass49+/lFZssxrZpkDvyPJIuZDAMiFGSLU5ffhYuO3b1RiTt4bpEK6p4 8Pz8hNK/DNb5cF7Evy1MizyuWs1kquOiHU+aq4AahGGq2To1uXfblO7H881NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrW4+VVGheZvWTDtD0C0q1PNzEOYwHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL4OTdurtse8I4q/kV5N6s8KfDaPBwwbCPh CzP3skcUP/+Zr8BPjhlqxZO1y+bR7RIJRVmB2CLsYwnFFZsBsgh4kkSVsJv7e3c8 14hq8+Z5Vl9vuvczxpzjoaiy7neitV2ndtB6tDOukep0cSyf2u+eIrw67rIoG0cj u/jAeQ2hFURgUQC2hhvPuLr/POfZo6l26FUSt4fMfO/UtuvSDQtRFTmu/4KXsRlZ bd+BE3w36yTaa3HJEeM9ZrXTtBRNIw69xVTIXXud8L5eiDfy/unBIkV+5g9EtDYR /1mJk5Q0fEuVBozcXf+pBp2rYGVu5kBwEHJXi2/BZuR4IgBCwHA= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:33 2025 by rpki-client