$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: 2iR6qB1VSDUHS8jDNyrJC38+zoS6pCAC/U5djpie9vk= Subject key identifier: FF:74:3B:E8:B7:E3:CC:9A:B4:4D:5C:DB:D2:03:97:F5:7E:D0:ED:41 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 3905A578AC2E340B8D3D913B93A802D988B871F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 0157 Signing time: Thu 07 Aug 2025 08:02:23 +0000 Manifest this update: Thu 07 Aug 2025 07:57:23 +0000 Manifest next update: Sun 10 Aug 2025 17:04:23 +0000 Files and hashes: 1: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: hryz7S2P5lbc2OSQfklSNvWSnWmJJ+hsgrTZyekD00Q=) 2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 17:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:05:a5:78:ac:2e:34:0b:8d:3d:91:3b:93:a8:02:d9:88:b8:71:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Aug 7 07:57:23 2025 GMT Not After : Aug 10 17:04:23 2025 GMT Subject: CN=FF743BE8B7E3CC9AB44D5CDBD20397F57ED0ED41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:06:0e:77:de:58:4a:e7:c9:0c:53:3d:fe: f1:ae:3b:53:13:ff:92:1f:d9:da:28:4f:01:93:cb: af:9e:6b:8e:d4:e7:4b:64:09:6d:70:ef:c4:86:26: 40:09:21:a4:ea:e1:d8:6d:57:e2:0b:8e:c5:41:7d: 39:19:07:e8:1d:47:1f:c4:91:9c:8f:07:ab:5c:b5: 9a:1e:29:40:cd:25:57:f0:7a:36:62:e9:5f:8f:53: 60:b1:e1:6d:ef:8c:8c:5d:75:c8:03:e7:ba:23:ea: eb:be:4e:ef:d5:db:3e:8f:98:b0:77:97:cc:4a:1a: 24:13:17:5d:91:8f:4d:b1:01:17:6f:f1:67:0e:7f: d0:36:d3:23:1a:73:d4:60:96:20:45:96:7c:d8:4f: ee:f5:af:3c:84:f1:d2:0a:ca:a5:ba:ca:02:5c:bc: 48:e4:e7:b0:c4:e8:e6:0f:c6:09:be:f6:15:1a:21: 4e:0f:81:07:37:16:0e:6b:8f:56:43:b9:28:6e:52: 4d:5f:e0:7c:c9:63:9f:df:38:05:54:0e:7f:dd:27: d4:6c:31:cf:d9:91:94:64:92:c5:c9:bb:b0:b1:bf: 51:5e:8e:2e:86:22:33:5d:7e:e6:e5:d7:6e:05:8a: da:7c:bf:62:ea:dc:f2:6b:b9:48:e9:23:e7:34:10: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:74:3B:E8:B7:E3:CC:9A:B4:4D:5C:DB:D2:03:97:F5:7E:D0:ED:41 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:e6:12:89:84:78:9f:af:d9:04:15:51:36:f5:8a:8b:a2:52: 5c:0e:12:ca:12:a2:a8:48:84:ae:35:ed:57:bd:a0:dc:d1:32: 31:5d:4b:43:cc:80:2e:38:8e:d0:9a:f2:78:04:eb:0f:7e:82: cf:3c:1b:64:65:4d:c2:cc:0a:ec:93:f4:cc:4c:93:94:e7:aa: fb:a0:f8:50:12:52:fa:4f:be:85:b8:04:62:ca:20:f1:8f:4b: e7:a8:44:cb:72:ba:bd:24:d4:84:1a:bc:13:a3:25:aa:8b:06: f7:28:00:f8:a9:49:b1:6c:68:be:2e:10:22:83:1d:1c:e7:7f: 4d:5d:80:a3:80:fd:77:a0:66:cc:ab:a7:ee:ec:38:71:cd:47: 58:43:73:19:d7:34:21:dc:a3:2c:89:fe:06:0c:c1:59:07:3b: 94:35:ca:2f:12:b9:7d:fe:a5:8c:2e:be:c3:3a:bf:7d:77:4c: 4a:f2:08:cb:11:06:52:17:49:20:b2:92:53:5a:d4:19:4b:8a: b2:51:0d:4c:ae:ad:21:94:1b:e4:2b:13:68:5c:7c:6f:fe:f5: b2:13:3e:d1:e0:81:bd:6a:0c:cf:cc:65:f9:aa:19:1f:c3:9e: cc:e9:ae:07:82:f8:03:d2:8c:bd:ac:db:c2:32:88:64:d2:cb: d6:40:32:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQWleKwuNAuNPZE7k6gC2Yi4cfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTA4MDcwNzU3MjNaFw0yNTA4MTAxNzA0MjNaMDMxMTAvBgNV BAMTKEZGNzQzQkU4QjdFM0NDOUFCNDRENUNEQkQyMDM5N0Y1N0VEMEVENDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXcAYOd95YSufJDFM9/vGuO1MT /5If2dooTwGTy6+ea47U50tkCW1w78SGJkAJIaTq4dhtV+ILjsVBfTkZB+gdRx/E kZyPB6tctZoeKUDNJVfwejZi6V+PU2Cx4W3vjIxddcgD57oj6uu+Tu/V2z6PmLB3 l8xKGiQTF12Rj02xARdv8WcOf9A20yMac9RgliBFlnzYT+71rzyE8dIKyqW6ygJc vEjk57DE6OYPxgm+9hUaIU4PgQc3Fg5rj1ZDuShuUk1f4HzJY5/fOAVUDn/dJ9Rs Mc/ZkZRkksXJu7Cxv1Feji6GIjNdfubl124Fitp8v2Lq3PJruUjpI+c0ED2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/3Q76LfjzJq0TVzb0gOX9X7Q7UEwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPmEomEeJ+v2QQVUTb1iouiUlwOEsoSoqhI hK417Ve9oNzRMjFdS0PMgC44jtCa8ngE6w9+gs88G2RlTcLMCuyT9MxMk5Tnqvug +FASUvpPvoW4BGLKIPGPS+eoRMtyur0k1IQavBOjJaqLBvcoAPipSbFsaL4uECKD HRznf01dgKOA/XegZsyrp+7sOHHNR1hDcxnXNCHcoyyJ/gYMwVkHO5Q1yi8SuX3+ pYwuvsM6v313TEryCMsRBlIXSSCyklNa1BlLirJRDUyurSGUG+QrE2hcfG/+9bIT PtHggb1qDM/MZfmqGR/DnszprgeC+APSjL2s28IyiGTSy9ZAMlc= -----END CERTIFICATE-----Generated at Fri Aug 8 00:00:29 2025 by rpki-client