$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: gT2pWjs4KnTBAa+hC3asBX6+/nhu2yc5nTbWau7aNGU= Subject key identifier: CB:FA:56:34:62:FC:49:5E:79:AC:01:43:26:03:23:E7:D9:EA:57:1F Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 2359DC4E44D058636B327CB5C6FFB459CDF2CF3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 03FD Signing time: Sun 02 Nov 2025 23:51:48 +0000 Manifest this update: Sun 02 Nov 2025 23:46:48 +0000 Manifest next update: Thu 06 Nov 2025 04:52:48 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: NhcvyUiUPA7bOvbxazIKhRne+Dk9FhYF/Mx3rBR1bYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:59:dc:4e:44:d0:58:63:6b:32:7c:b5:c6:ff:b4:59:cd:f2:cf:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Nov 2 23:46:48 2025 GMT Not After : Nov 6 04:52:48 2025 GMT Subject: CN=CBFA563462FC495E79AC0143260323E7D9EA571F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:85:0d:97:66:cd:12:14:03:ba:4c:4a:fb: d2:2f:e0:eb:32:55:1c:d1:56:ad:6a:f6:f6:b1:49: 16:77:42:6d:e0:0a:78:0f:ec:dd:a7:05:12:43:b4: dc:38:01:63:15:3f:5a:8b:ce:37:2d:cb:cd:c2:9e: 35:ec:36:f2:83:03:c9:d6:f7:d9:65:43:c6:5e:9d: af:3b:48:48:b4:ca:8a:3c:da:28:3c:f5:a0:d8:e4: be:f3:af:c9:74:19:c3:08:76:2e:cd:9e:8e:a6:02: 4d:d3:fc:95:ab:f9:13:fc:a8:d6:54:20:50:f0:25: 35:77:18:9a:41:bc:39:45:dc:8a:0c:ac:06:cb:f0: 87:ad:75:0d:93:48:8f:1b:9f:99:5b:ef:a3:49:a0: 94:c2:e6:91:7f:05:35:31:a7:ab:d6:8a:ed:20:54: 2d:80:a3:3a:9a:23:14:d6:6a:a3:d0:ee:cc:f8:70: 32:24:f5:f8:b5:07:2b:6a:89:ac:94:a8:92:93:fc: 2e:7e:78:d6:ca:8e:39:5a:f0:5b:6c:e7:02:de:63: 84:80:5c:9d:ce:30:4a:28:94:bb:f7:f8:94:4c:d7: 4d:be:c5:af:ba:b6:12:b2:d6:c5:6c:33:c4:a3:26: dd:12:b0:6c:e4:8d:24:1e:bd:50:fd:11:a3:d6:5c: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FA:56:34:62:FC:49:5E:79:AC:01:43:26:03:23:E7:D9:EA:57:1F X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e5:46:b7:92:f8:88:e1:83:39:61:a1:0c:19:ca:64:38:b4: c0:c5:f7:8e:e3:7a:f0:5b:1b:41:4e:f1:e0:96:00:47:ef:fc: 23:85:e2:7d:15:2e:ff:fc:c5:d6:95:a3:25:6b:aa:b9:77:b5: fd:b5:db:35:3a:a1:9f:f0:41:8b:99:65:a5:7a:63:66:07:cd: 44:c6:49:10:9e:03:4e:2d:21:8a:77:47:1c:c4:57:94:ef:b5: a3:e7:6d:8f:06:78:41:d7:48:8b:20:2c:67:75:a1:0f:08:a2: 95:20:b9:f9:b5:d6:1e:5a:de:9e:4c:13:b0:19:1b:3b:44:1f: 23:a6:e5:44:08:5f:9c:5e:ee:73:26:19:8d:14:a9:2b:89:d5: 98:2f:ed:54:09:8c:8e:40:94:77:3d:c9:f2:d0:55:56:50:9c: 28:5c:e6:b6:2e:3c:0b:c0:64:ef:27:6a:2f:eb:1b:6d:1f:33: 92:7d:da:39:e6:34:b9:63:cd:cc:ab:67:28:76:72:6f:51:1b: f1:78:48:3e:ef:e9:11:d2:73:87:cb:44:7d:51:99:5f:50:78: cc:da:99:49:15:90:6a:ea:ce:ed:cc:3a:03:f7:16:dc:56:b9: d5:9b:3f:91:17:cb:ef:bb:ec:5e:ab:38:76:e2:8e:af:dd:8e: 41:60:13:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI1ncTkTQWGNrMny1xv+0Wc3yzz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTExMDIyMzQ2NDhaFw0yNTExMDYwNDUyNDhaMDMxMTAvBgNV BAMTKENCRkE1NjM0NjJGQzQ5NUU3OUFDMDE0MzI2MDMyM0U3RDlFQTU3MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HYUNl2bNEhQDukxK+9Iv4Osy VRzRVq1q9vaxSRZ3Qm3gCngP7N2nBRJDtNw4AWMVP1qLzjcty83CnjXsNvKDA8nW 99llQ8Zena87SEi0yoo82ig89aDY5L7zr8l0GcMIdi7Nno6mAk3T/JWr+RP8qNZU IFDwJTV3GJpBvDlF3IoMrAbL8IetdQ2TSI8bn5lb76NJoJTC5pF/BTUxp6vWiu0g VC2AozqaIxTWaqPQ7sz4cDIk9fi1BytqiayUqJKT/C5+eNbKjjla8Fts5wLeY4SA XJ3OMEoolLv3+JRM102+xa+6thKy1sVsM8SjJt0SsGzkjSQevVD9EaPWXDQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy/pWNGL8SV55rAFDJgMj59nqVx8wHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABblRreS+IjhgzlhoQwZymQ4tMDF947jevBb G0FO8eCWAEfv/COF4n0VLv/8xdaVoyVrqrl3tf212zU6oZ/wQYuZZaV6Y2YHzUTG SRCeA04tIYp3RxzEV5TvtaPnbY8GeEHXSIsgLGd1oQ8IopUgufm11h5a3p5ME7AZ GztEHyOm5UQIX5xe7nMmGY0UqSuJ1Zgv7VQJjI5AlHc9yfLQVVZQnChc5rYuPAvA ZO8nai/rG20fM5J92jnmNLljzcyrZyh2cm9RG/F4SD7v6RHSc4fLRH1RmV9QeMza mUkVkGrqzu3MOgP3FtxWudWbP5EXy++77F6rOHbijq/djkFgE6s= -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:21 2025 by rpki-client