$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft File: 52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json) Hash identifier: tpxfOAX3Kvq8Nf4/+ADvjlo6lYnLrENVJRWO/ii6dP0= Subject key identifier: D8:D0:DD:2B:EB:F2:14:D1:E1:0E:D4:17:C5:E4:B6:C8:A3:00:9E:DA Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86 Certificate issuer: /CN=52145183B5BE1A663FBC5C228102541AC61F9F86 Certificate serial: 4A557B46D8B3B5E7941BDD054459175A97E72A06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft Manifest number: 04B1 Signing time: Tue 05 Aug 2025 12:01:44 +0000 Manifest this update: Tue 05 Aug 2025 11:56:44 +0000 Manifest next update: Fri 08 Aug 2025 19:37:44 +0000 Files and hashes: 1: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: ejH4Jptb2+nXxwdyhxr2eLVcxmTdzu5eDGJeQynArtM=) 2: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: /hJyfV6PR16JNZ+DEa2S1gpvBiL5SDBd/0mdlnBUhuY=) 3: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: fKawcHDd7r5IR/d6noFwU51AsUxWc9fbGsJE9m9cj+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 19:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:55:7b:46:d8:b3:b5:e7:94:1b:dd:05:44:59:17:5a:97:e7:2a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86 Validity Not Before: Aug 5 11:56:44 2025 GMT Not After : Aug 8 19:37:44 2025 GMT Subject: CN=D8D0DD2BEBF214D1E10ED417C5E4B6C8A3009EDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:29:10:7c:bf:21:78:1b:2b:31:72:13:de:2e: 43:e4:c1:8d:e4:75:3b:7a:2f:a3:f7:b3:4e:60:fc: b2:1f:eb:20:93:79:75:38:32:94:cb:60:d0:77:cc: 85:43:83:14:42:88:01:1a:be:de:0a:64:82:69:b2: 5b:16:6a:b8:b4:56:36:08:5c:76:7c:a8:2d:66:9d: 9a:57:99:f7:c0:a5:59:ba:20:c9:ce:2d:d2:cb:13: 08:cf:62:d9:91:72:a6:24:61:18:e5:fa:0d:a6:3a: c8:d6:7c:2f:7f:59:96:b4:50:3f:12:fd:ea:1f:94: b9:06:9e:07:05:6a:2e:00:dc:ad:a9:f9:2f:70:47: ab:46:40:c4:a6:54:13:ed:c9:5d:0c:40:df:ab:c3: ed:fa:be:72:5a:3b:d0:e5:68:68:04:ec:51:d5:de: 0b:45:37:f2:97:8c:9d:9b:45:84:9f:4a:5e:fa:88: b5:71:50:d7:97:c4:c4:80:40:54:ea:08:66:d4:da: 17:b5:dc:43:e6:d0:8a:fa:8d:93:0a:b3:01:f9:f4: d5:a1:99:d3:90:94:3d:b6:27:9b:78:e1:9f:21:c4: 04:9e:13:33:53:1c:f0:ff:5b:6a:05:5c:1f:4a:5a: c6:ae:44:e7:25:f9:08:f6:9f:fc:04:1a:94:a0:74: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D0:DD:2B:EB:F2:14:D1:E1:0E:D4:17:C5:E4:B6:C8:A3:00:9E:DA X509v3 Authority Key Identifier: keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:a4:c9:7b:73:af:90:fc:61:55:86:28:8c:ae:74:c7:ba:89: f0:53:b5:16:41:cb:8f:14:f9:1d:b4:91:93:96:15:3c:51:19: ef:3a:66:72:de:67:ff:f5:43:1b:9a:79:85:04:d8:a1:56:b8: 7c:a2:43:98:4d:40:0c:8a:2f:b4:e0:da:aa:d8:55:c0:0d:68: 91:61:3b:c6:75:82:24:52:9a:a7:4f:54:b9:37:13:1e:c1:d5: 99:74:3e:0d:c3:0e:21:3f:35:d3:64:bd:02:c8:44:0a:92:cf: d6:62:4d:53:fa:8c:68:6f:f7:0f:61:06:52:a6:1b:05:8a:4b: 8f:e5:3f:52:8f:52:1b:fa:a8:d0:e4:03:5a:54:1a:6b:3f:0c: c0:18:cc:85:79:f3:24:53:61:85:86:18:1e:03:7c:c7:0a:44: 56:61:06:27:62:28:61:0d:b9:7c:3a:d6:c8:02:78:6c:74:2f: c4:02:54:47:58:5e:ba:fb:39:2b:49:34:40:5c:a7:18:60:d5: b7:a7:93:d1:ef:e4:0d:36:82:66:8a:39:2e:b7:a6:60:f7:95: ec:29:cb:ec:40:ed:be:5d:55:6f:a4:f3:99:94:62:0b:e9:51: ac:ca:d0:29:34:c6:4c:ed:10:67:b6:9a:73:10:41:97:ba:0e: dc:06:35:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSlV7RtizteeUG90FRFkXWpfnKgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFD NjFGOUY4NjAeFw0yNTA4MDUxMTU2NDRaFw0yNTA4MDgxOTM3NDRaMDMxMTAvBgNV BAMTKEQ4RDBERDJCRUJGMjE0RDFFMTBFRDQxN0M1RTRCNkM4QTMwMDlFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnKRB8vyF4GysxchPeLkPkwY3k dTt6L6P3s05g/LIf6yCTeXU4MpTLYNB3zIVDgxRCiAEavt4KZIJpslsWari0VjYI XHZ8qC1mnZpXmffApVm6IMnOLdLLEwjPYtmRcqYkYRjl+g2mOsjWfC9/WZa0UD8S /eoflLkGngcFai4A3K2p+S9wR6tGQMSmVBPtyV0MQN+rw+36vnJaO9DlaGgE7FHV 3gtFN/KXjJ2bRYSfSl76iLVxUNeXxMSAQFTqCGbU2he13EPm0Ir6jZMKswH59NWh mdOQlD22J5t44Z8hxASeEzNTHPD/W2oFXB9KWsauROcl+Qj2n/wEGpSgdH2vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2NDdK+vyFNHhDtQXxeS2yKMAntowHwYDVR0j BBgwFoAUUhRRg7W+GmY/vFwigQJUGsYfn4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdlODllOC01M2FhLTQ0ZjYtYjZkOC01ODc5MDc4YmY2NjQvMC81MjE0NTE4M0I1 QkUxQTY2M0ZCQzVDMjI4MTAyNTQxQUM2MUY5Rjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFDNjFG OUY4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0 MUFDNjFGOUY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOkyXtzr5D8YVWGKIyudMe6ifBTtRZBy48U +R20kZOWFTxRGe86ZnLeZ//1QxuaeYUE2KFWuHyiQ5hNQAyKL7Tg2qrYVcANaJFh O8Z1giRSmqdPVLk3Ex7B1Zl0Pg3DDiE/NdNkvQLIRAqSz9ZiTVP6jGhv9w9hBlKm GwWKS4/lP1KPUhv6qNDkA1pUGms/DMAYzIV58yRTYYWGGB4DfMcKRFZhBidiKGEN uXw61sgCeGx0L8QCVEdYXrr7OStJNEBcpxhg1benk9Hv5A02gmaKOS63pmD3lewp y+xA7b5dVW+k85mUYgvpUazK0Ck0xkztEGe2mnMQQZe6DtwGNZg= -----END CERTIFICATE-----Generated at Wed Aug 6 12:25:16 2025 by rpki-client