$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: /s7aEOWItFI4CY8L2o34+zR01bqwRew0Xr6CQokX43E= Subject key identifier: 43:AC:85:F0:60:45:29:4C:0C:14:17:2C:A6:66:8D:FE:D8:17:5F:1E Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 19195B7BDBCBD9DA938EFA71BDC8D48EA48C281C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 017E Signing time: Mon 03 Nov 2025 15:52:17 +0000 Manifest this update: Mon 03 Nov 2025 15:47:17 +0000 Manifest next update: Thu 06 Nov 2025 16:53:17 +0000 Files and hashes: 1: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: 90sCMqXz7k3LYP0psmmF4RTzEnksGzMgXW78wnXcDec=) 2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:19:5b:7b:db:cb:d9:da:93:8e:fa:71:bd:c8:d4:8e:a4:8c:28:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Nov 3 15:47:17 2025 GMT Not After : Nov 6 16:53:17 2025 GMT Subject: CN=43AC85F06045294C0C14172CA6668DFED8175F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:2d:f6:ac:a2:0c:fd:f4:b1:65:94:b7:65: 2a:2f:a6:9c:fe:97:ed:35:c4:c4:0b:5c:f5:8a:4c: 7d:03:60:5d:60:dd:a3:05:87:6e:65:1c:f9:bd:d4: 30:bc:6b:10:b6:d7:84:77:8e:77:6d:39:5f:87:ae: 85:76:bf:d5:a4:61:29:ed:45:f6:c7:09:1f:ac:0d: 61:c3:44:a9:4e:b4:ab:ba:ea:de:59:37:ca:d4:a2: 97:af:35:ef:23:eb:69:8f:76:28:c7:95:50:10:50: d8:fa:b1:59:87:4f:08:e4:73:73:c7:92:42:63:7c: 77:81:30:c6:32:b0:16:8d:f9:cf:c5:db:be:4b:33: 69:34:c2:54:60:ed:ab:4e:65:1c:d6:e3:a7:04:71: 6e:09:f6:17:c7:e6:41:e0:35:48:5c:5f:44:7d:48: 92:e1:88:f9:e7:11:97:3d:08:bc:a9:44:5a:86:5b: f4:df:76:9e:a3:06:c6:02:e4:d2:1a:10:27:f4:11: 53:c8:1f:22:ee:ec:85:0e:21:76:11:b2:05:8e:d4: 33:af:8b:4f:9e:aa:7f:c9:9e:e6:b1:a3:57:d3:7c: b2:d2:73:98:d5:86:0c:2a:8a:a2:60:7a:e9:12:1e: ef:93:54:09:64:53:6a:99:f5:bd:a8:ca:49:01:30: 52:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AC:85:F0:60:45:29:4C:0C:14:17:2C:A6:66:8D:FE:D8:17:5F:1E X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:dd:07:d5:ad:dc:ef:1b:76:85:bd:29:15:57:79:7d:3d:28: 4e:8d:e8:c9:89:4d:71:ef:e8:0b:ca:8a:cd:9a:2b:da:9a:af: 0b:a0:25:dd:33:3b:c0:9a:4d:a6:3e:b4:a3:a8:ec:df:03:95: 3b:9f:42:51:cf:e8:53:28:5b:68:37:e9:24:a1:5c:6e:29:ed: 8a:aa:58:89:9e:3a:eb:aa:4d:ab:45:e3:23:bf:30:ad:ef:cc: 9d:e9:46:2d:4b:b2:cd:ed:a1:11:c3:19:53:e2:08:9b:94:98: a9:bd:fb:c5:3c:15:db:16:7a:4f:62:f8:0a:c6:41:c5:59:66: ef:5d:ed:e3:59:d7:33:f2:4e:55:4b:75:44:77:27:e1:d4:c2: e6:a6:e3:15:4b:99:b8:c8:f9:0b:32:f7:97:78:2f:f4:0b:1f: f2:db:14:f2:7f:2c:02:5d:cd:fd:ee:73:e0:63:29:1c:db:9d: 8e:28:b8:2f:79:74:e2:2b:10:9a:9d:6a:21:ca:36:53:e5:82: a2:68:e7:0e:14:d3:cb:39:ae:64:49:e1:9f:ad:bf:3b:c1:80: 7c:5f:d0:c6:f6:18:dc:ca:46:23:be:73:43:e4:ba:72:8c:21: cd:66:13:a5:6e:08:18:01:af:a6:6f:fc:41:b5:4c:6b:f3:b4: 3a:0f:df:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRlbe9vL2dqTjvpxvcjUjqSMKBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTExMDMxNTQ3MTdaFw0yNTExMDYxNjUzMTdaMDMxMTAvBgNV BAMTKDQzQUM4NUYwNjA0NTI5NEMwQzE0MTcyQ0E2NjY4REZFRDgxNzVGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAsi32rKIM/fSxZZS3ZSovppz+ l+01xMQLXPWKTH0DYF1g3aMFh25lHPm91DC8axC214R3jndtOV+HroV2v9WkYSnt RfbHCR+sDWHDRKlOtKu66t5ZN8rUopevNe8j62mPdijHlVAQUNj6sVmHTwjkc3PH kkJjfHeBMMYysBaN+c/F275LM2k0wlRg7atOZRzW46cEcW4J9hfH5kHgNUhcX0R9 SJLhiPnnEZc9CLypRFqGW/Tfdp6jBsYC5NIaECf0EVPIHyLu7IUOIXYRsgWO1DOv i0+eqn/Jnuaxo1fTfLLSc5jVhgwqiqJgeukSHu+TVAlkU2qZ9b2oykkBMFK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ6yF8GBFKUwMFBcspmaN/tgXXx4wHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXdB9Wt3O8bdoW9KRVXeX09KE6N6MmJTXHv 6AvKis2aK9qarwugJd0zO8CaTaY+tKOo7N8DlTufQlHP6FMoW2g36SShXG4p7Yqq WImeOuuqTatF4yO/MK3vzJ3pRi1Lss3toRHDGVPiCJuUmKm9+8U8FdsWek9i+ArG QcVZZu9d7eNZ1zPyTlVLdUR3J+HUwuam4xVLmbjI+Qsy95d4L/QLH/LbFPJ/LAJd zf3uc+BjKRzbnY4ouC95dOIrEJqdaiHKNlPlgqJo5w4U08s5rmRJ4Z+tvzvBgHxf 0Mb2GNzKRiO+c0PkunKMIc1mE6VuCBgBr6Zv/EG1TGvztDoP3/w= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:29 2025 by rpki-client