$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft File: 52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json) Hash identifier: OKtCIpuFbQ5+q5cCnbodNQwjd92uPkBTf+yVshi59Yk= Subject key identifier: 9A:75:7E:41:D2:10:47:7F:CB:01:91:BE:4A:49:D8:DC:60:C2:0E:96 Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86 Certificate issuer: /CN=52145183B5BE1A663FBC5C228102541AC61F9F86 Certificate serial: 60B11D33135A5F93FC0B7477F9293F3CE58BCBC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft Manifest number: 04DA Signing time: Mon 03 Nov 2025 00:31:42 +0000 Manifest this update: Mon 03 Nov 2025 00:26:42 +0000 Manifest next update: Thu 06 Nov 2025 07:35:42 +0000 Files and hashes: 1: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: E1yVJgbztfvQex9tHD7u+h5Ydapi409VmHgdkUqSuGM=) 2: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: ejH4Jptb2+nXxwdyhxr2eLVcxmTdzu5eDGJeQynArtM=) 3: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: I8J+VKjZlzAYUjuoXbFTNBgkY4GMxQkjdom4zb/4W0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b1:1d:33:13:5a:5f:93:fc:0b:74:77:f9:29:3f:3c:e5:8b:cb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86 Validity Not Before: Nov 3 00:26:42 2025 GMT Not After : Nov 6 07:35:42 2025 GMT Subject: CN=9A757E41D210477FCB0191BE4A49D8DC60C20E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:4d:85:4b:d1:84:8e:b6:82:65:d5:2f:80: 8c:2c:cd:21:fe:5b:74:67:87:30:30:6c:56:d6:cd: bf:8e:e4:b5:c1:1c:a0:ed:af:62:3a:46:10:1f:73: b3:be:ba:7d:30:e5:b8:a8:9b:f5:88:e2:c7:2a:1b: e2:9f:62:ec:e9:8c:52:1b:d9:15:ea:b9:8d:5b:2e: 77:01:f9:f9:b8:af:a2:f9:94:44:ac:8d:07:5c:b2: 2f:8a:36:d2:7f:f3:4c:36:a5:c5:f7:10:fa:c2:99: b0:fa:80:f2:1e:50:46:52:4d:34:54:20:f7:c2:ed: 18:c4:72:84:c9:a7:f1:a0:20:01:e9:6a:1b:2e:81: 7b:6c:3a:79:cc:4e:94:11:c7:5a:71:f7:d8:80:a4: f6:f3:11:af:90:cf:fa:de:9a:54:fc:b1:80:76:c0: c3:16:d8:a4:73:fc:9f:34:1b:3d:b8:fa:a3:c0:9a: d6:f3:29:6c:1c:f8:9b:de:a0:2d:26:5b:fe:a9:0a: 6c:60:0a:12:11:5b:a9:45:19:f4:d2:8a:3e:26:9b: 0b:b9:49:1f:21:af:af:36:4f:d1:7b:80:97:22:2c: 1f:d7:05:3e:f5:8f:41:19:f1:eb:90:e6:b6:9f:31: 52:10:62:1a:70:20:bd:d8:30:19:fd:41:d5:e0:2a: 4c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:75:7E:41:D2:10:47:7F:CB:01:91:BE:4A:49:D8:DC:60:C2:0E:96 X509v3 Authority Key Identifier: keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:66:19:81:48:1b:ae:fb:c7:a0:f8:26:2b:a6:b2:c1:dc:6c: d7:f8:80:6a:99:fd:63:a6:30:39:8a:24:ed:43:c7:58:94:74: 74:66:b6:bb:46:7f:ae:bc:68:01:7a:6a:6e:8b:c1:52:c2:f0: fb:01:9d:1b:bc:5e:84:10:e4:93:a2:73:7c:43:8b:1d:c7:f8: a9:0f:90:3d:fe:2c:53:68:d8:97:e5:af:55:75:ed:92:8d:9f: 0c:2b:4e:e4:7d:9d:f8:b0:d0:23:88:4b:17:50:00:c0:04:33: 15:2f:3d:b2:52:0a:4f:e5:69:1c:78:d4:9f:21:e6:5d:2d:e8: fc:a5:9f:77:50:ed:36:0c:e9:25:f0:1e:ad:43:c7:dc:f1:ec: fe:9b:27:3d:75:c3:d7:d1:58:74:c3:34:7d:4f:b6:54:91:0c: b1:19:ef:53:96:0e:26:b1:36:54:89:ed:b8:b3:20:e7:fe:5e: 99:0b:3d:22:d1:95:d5:18:d2:6f:bb:28:77:c8:c7:25:0f:33: 0d:8f:d0:5a:e2:8d:a7:aa:02:bd:21:85:01:37:44:56:d9:9f: d5:6c:56:21:b8:46:d2:15:82:65:24:6e:29:70:b9:05:41:70: c3:c4:c2:90:75:be:ce:bd:74:ac:2a:95:ad:40:92:d8:36:bd: 9a:35:f0:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYLEdMxNaX5P8C3R3+Sk/POWLy8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFD NjFGOUY4NjAeFw0yNTExMDMwMDI2NDJaFw0yNTExMDYwNzM1NDJaMDMxMTAvBgNV BAMTKDlBNzU3RTQxRDIxMDQ3N0ZDQjAxOTFCRTRBNDlEOERDNjBDMjBFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JU2FS9GEjraCZdUvgIwszSH+ W3RnhzAwbFbWzb+O5LXBHKDtr2I6RhAfc7O+un0w5biom/WI4scqG+KfYuzpjFIb 2RXquY1bLncB+fm4r6L5lESsjQdcsi+KNtJ/80w2pcX3EPrCmbD6gPIeUEZSTTRU IPfC7RjEcoTJp/GgIAHpahsugXtsOnnMTpQRx1px99iApPbzEa+Qz/remlT8sYB2 wMMW2KRz/J80Gz24+qPAmtbzKWwc+JveoC0mW/6pCmxgChIRW6lFGfTSij4mmwu5 SR8hr682T9F7gJciLB/XBT71j0EZ8euQ5rafMVIQYhpwIL3YMBn9QdXgKkwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmnV+QdIQR3/LAZG+SknY3GDCDpYwHwYDVR0j BBgwFoAUUhRRg7W+GmY/vFwigQJUGsYfn4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdlODllOC01M2FhLTQ0ZjYtYjZkOC01ODc5MDc4YmY2NjQvMC81MjE0NTE4M0I1 QkUxQTY2M0ZCQzVDMjI4MTAyNTQxQUM2MUY5Rjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFDNjFG OUY4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0 MUFDNjFGOUY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApmGYFIG677x6D4JiumssHcbNf4gGqZ/WOm MDmKJO1Dx1iUdHRmtrtGf668aAF6am6LwVLC8PsBnRu8XoQQ5JOic3xDix3H+KkP kD3+LFNo2Jflr1V17ZKNnwwrTuR9nfiw0COISxdQAMAEMxUvPbJSCk/laRx41J8h 5l0t6Pyln3dQ7TYM6SXwHq1Dx9zx7P6bJz11w9fRWHTDNH1PtlSRDLEZ71OWDiax NlSJ7bizIOf+XpkLPSLRldUY0m+7KHfIxyUPMw2P0FrijaeqAr0hhQE3RFbZn9Vs ViG4RtIVgmUkbilwuQVBcMPEwpB1vs69dKwqla1Aktg2vZo18JA= -----END CERTIFICATE-----Generated at Tue Nov 4 01:58:38 2025 by rpki-client