$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: BnFXrZ7G/AKdKRCNDL+NnqagCp9AiGMCCRdvow9e1VA= Subject key identifier: 16:03:FC:50:4F:A8:48:0C:C1:8F:00:5D:88:6C:E0:CB:E1:61:FB:62 Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 42A25633919732AA65F1427D5C3FC98BED7B5D4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: 0114 Signing time: Tue 04 Nov 2025 09:01:01 +0000 Manifest this update: Tue 04 Nov 2025 08:56:01 +0000 Manifest next update: Fri 07 Nov 2025 14:39:01 +0000 Files and hashes: 1: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: IB40zjIFiRm9LMb0EOBVHAKxfgh4JTYBHW80UYdrUVU=) 2: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 14:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a2:56:33:91:97:32:aa:65:f1:42:7d:5c:3f:c9:8b:ed:7b:5d:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Nov 4 08:56:01 2025 GMT Not After : Nov 7 14:39:01 2025 GMT Subject: CN=1603FC504FA8480CC18F005D886CE0CBE161FB62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:88:23:4f:78:91:06:be:88:72:38:5b:59: 02:93:96:52:b5:fa:7d:cc:77:3c:56:42:c1:d6:db: 29:c6:1d:cc:1c:50:e9:6a:c3:40:4c:fa:73:a7:14: 67:dd:49:5b:54:56:fe:ea:03:2c:26:25:f8:23:8a: b2:18:b9:99:b0:70:0c:07:50:2d:c3:55:96:e1:3a: 9e:8b:7c:05:7f:e0:46:07:81:44:d4:85:76:9f:62: 9c:26:f1:1c:e3:91:a1:7f:8f:e1:b3:a6:58:b4:a7: 27:59:cd:5e:c7:94:79:fc:71:fe:9f:a8:08:e2:95: b9:cc:22:87:67:3d:ee:69:9b:ba:bd:ed:35:e0:6b: 0f:a2:0a:8b:bc:b5:88:b4:7f:d9:ad:26:83:6f:b6: 68:16:85:cf:82:38:bb:de:9b:90:c4:b6:06:d7:16: 1d:fe:ad:da:7d:91:f6:4e:e5:8c:46:cb:52:4d:35: 37:1e:11:c9:c3:87:a8:f4:2c:4a:6f:5c:67:b7:5e: a1:95:bf:85:51:ba:de:27:a5:21:9b:ea:50:5f:e5: d1:d8:aa:9c:db:4b:f6:ca:30:f3:4b:98:2b:2a:c2: f0:f7:0b:ea:9d:17:bc:cd:63:0b:72:d5:f4:8f:62: 28:36:c5:33:83:8f:25:e0:ca:ae:38:2c:8d:1b:4d: 5a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:03:FC:50:4F:A8:48:0C:C1:8F:00:5D:88:6C:E0:CB:E1:61:FB:62 X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c5:a0:bf:9e:33:81:a9:7a:f2:ad:fd:8c:47:4a:65:0d:1c: c5:2e:46:8a:76:8e:bb:4d:d4:e4:e9:70:0f:8c:28:f2:4c:86: cf:0a:be:f2:93:62:2d:87:4b:ad:6f:eb:2c:38:70:b4:6b:cc: 23:a7:29:63:f6:d5:8c:9b:d6:63:9c:e4:e2:89:47:9d:ee:15: f2:57:eb:d7:6d:49:10:1b:b1:c6:16:b5:9e:97:d2:f6:52:ba: 78:cf:1f:58:c9:60:5a:7c:ff:9a:0c:ef:9b:52:b7:cb:e2:ba: c1:95:09:38:6c:17:3e:21:b4:d8:c7:b0:8d:26:7b:55:d2:17: 94:85:e5:7e:8b:b3:e6:59:2c:8d:de:ad:36:1e:fb:f8:6e:e5: eb:ce:88:bd:ea:56:20:20:af:16:14:dd:ab:40:82:ff:c9:f1: 06:82:66:51:70:c4:7b:a2:30:d2:7b:d4:e9:5e:bf:4f:a0:b3: c6:6b:e1:9d:ce:8c:f8:8c:61:2b:bc:1d:1f:c0:96:28:47:84: c6:01:eb:19:60:25:66:e5:06:42:d1:3f:4a:41:88:bb:45:78: da:0e:4e:93:5f:b2:bd:50:57:3e:8c:61:9d:d3:78:ce:1d:45: f9:86:3f:47:e5:69:43:b1:61:e3:e5:12:af:7b:df:87:4a:92: b1:c3:a0:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqJWM5GXMqpl8UJ9XD/Ji+17XUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTExMDQwODU2MDFaFw0yNTExMDcxNDM5MDFaMDMxMTAvBgNV BAMTKDE2MDNGQzUwNEZBODQ4MENDMThGMDA1RDg4NkNFMENCRTE2MUZCNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KYgjT3iRBr6IcjhbWQKTllK1 +n3MdzxWQsHW2ynGHcwcUOlqw0BM+nOnFGfdSVtUVv7qAywmJfgjirIYuZmwcAwH UC3DVZbhOp6LfAV/4EYHgUTUhXafYpwm8RzjkaF/j+Gzpli0pydZzV7HlHn8cf6f qAjilbnMIodnPe5pm7q97TXgaw+iCou8tYi0f9mtJoNvtmgWhc+COLvem5DEtgbX Fh3+rdp9kfZO5YxGy1JNNTceEcnDh6j0LEpvXGe3XqGVv4VRut4npSGb6lBf5dHY qpzbS/bKMPNLmCsqwvD3C+qdF7zNYwty1fSPYig2xTODjyXgyq44LI0bTVrDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFgP8UE+oSAzBjwBdiGzgy+Fh+2IwHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbFoL+eM4GpevKt/YxHSmUNHMUuRop2jrtN 1OTpcA+MKPJMhs8KvvKTYi2HS61v6yw4cLRrzCOnKWP21Yyb1mOc5OKJR53uFfJX 69dtSRAbscYWtZ6X0vZSunjPH1jJYFp8/5oM75tSt8viusGVCThsFz4htNjHsI0m e1XSF5SF5X6Ls+ZZLI3erTYe+/hu5evOiL3qViAgrxYU3atAgv/J8QaCZlFwxHui MNJ71Olev0+gs8Zr4Z3OjPiMYSu8HR/AlihHhMYB6xlgJWblBkLRP0pBiLtFeNoO TpNfsr1QVz6MYZ3TeM4dRfmGP0flaUOxYePlEq9734dKkrHDoNs= -----END CERTIFICATE-----Generated at Wed Nov 5 01:09:02 2025 by rpki-client