$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft File: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft (raw, json) Hash identifier: 3BQaH7ljRQdalYCqtaUmr24Cbak16RF7IjjirfgIDpI= Subject key identifier: BB:5C:5D:BE:50:17:53:8E:00:24:BC:5D:D9:E9:0B:3F:F4:8D:16:A2 Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 Certificate issuer: /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Certificate serial: 72D7BB98F1BCBD272F464AD59F12A8539CE4B9C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft Manifest number: 025C Signing time: Sun 31 Aug 2025 08:10:50 +0000 Manifest this update: Sun 31 Aug 2025 08:05:50 +0000 Manifest next update: Wed 03 Sep 2025 15:44:50 +0000 Files and hashes: 1: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: itO8sihFgXMUbSQlwLdSsBmvziIF/OpyE/yJGtrY67A=) 2: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl (hash: Qe33lUkEm0ZBTh1scj6RmuF/4q90SqvkHfozYxKdSn0=) 3: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: UDP5vaqP++IAcM6lMBhTtGhgbdITohHwdo+pbRZf5tI=) 4: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: fKMeJeAwMbkwf1kmZ/AB9YQDJH0OhHULVGJWeX+RPu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Sep 2025 15:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d7:bb:98:f1:bc:bd:27:2f:46:4a:d5:9f:12:a8:53:9c:e4:b9:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Validity Not Before: Aug 31 08:05:50 2025 GMT Not After : Sep 3 15:44:50 2025 GMT Subject: CN=BB5C5DBE5017538E0024BC5DD9E90B3FF48D16A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9f:9c:aa:f1:a4:d8:90:1e:1c:97:dd:d3:94: f7:46:f5:7d:7b:40:81:b7:d7:72:cc:05:e7:b9:c4: dc:a7:5f:df:4c:3a:a1:ca:9a:80:ec:49:72:43:05: 03:fc:c4:17:62:65:fa:d4:26:52:4c:37:c3:c3:37: 8a:9e:4b:90:b8:fe:12:27:3d:4f:d9:7d:ca:1a:5f: 41:34:c0:3f:39:07:0e:be:de:30:63:d4:02:86:8f: 9c:4a:25:8e:f6:2c:e4:cc:82:e9:8c:c3:b0:2b:c7: 2a:bb:00:b5:9d:33:1d:25:72:eb:6c:e0:b3:89:43: c4:3c:49:97:3e:d9:93:67:b8:75:15:f3:06:77:3b: a1:3f:6e:7b:9c:f3:7e:12:3c:01:ce:5a:e7:ed:d2: 37:1a:e8:b2:08:2b:e3:6d:eb:5a:3d:74:ff:b2:ed: d0:f7:e7:cd:dd:93:b3:b0:25:7e:a6:39:65:d7:23: 1b:fa:64:bf:e4:ca:cf:a1:92:63:ca:fa:d2:5b:d6: 60:ef:60:1f:5c:28:a8:0a:e3:da:61:4d:89:c6:77: 2a:11:fd:3a:a4:8f:57:3b:67:90:12:5c:68:48:f6: 82:d6:cd:f6:2e:b7:c9:bd:9a:eb:5f:99:0a:d8:58: 49:2f:17:2f:6b:0d:aa:3c:83:ea:7a:dc:5c:8e:c0: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5C:5D:BE:50:17:53:8E:00:24:BC:5D:D9:E9:0B:3F:F4:8D:16:A2 X509v3 Authority Key Identifier: keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c3:ad:37:fa:7e:81:ef:80:2d:54:7d:43:fe:5b:77:b4:ca: 76:9d:f2:ed:10:13:94:8a:bc:67:11:e4:c4:cc:df:6b:5f:70: 5b:3b:4a:83:d2:32:0b:05:b7:35:a7:77:12:7e:50:57:7e:3d: ac:17:ba:cf:63:15:5e:c4:88:32:58:41:ab:01:e7:6c:c1:e3: d0:bb:f4:22:38:60:c7:00:c8:79:4a:ce:8b:2c:11:79:d9:da: c0:6d:75:8f:c4:f3:1f:80:73:36:ac:88:57:05:ba:86:bd:45: 38:7b:2d:5d:8d:58:80:8c:76:03:3a:b8:36:dd:ff:c9:f1:ce: 87:1d:74:77:a5:3d:d6:54:9c:2a:dc:ea:98:0d:be:ee:8b:f5: fe:89:39:3e:37:7a:c0:7f:87:f7:98:10:c6:d7:f7:65:29:df: 3a:23:ce:3c:96:3b:3d:e2:49:c3:91:3b:31:26:3a:d3:9c:f8: a6:d0:c7:d2:d1:11:13:1a:65:1e:61:60:7e:65:a8:a5:70:ac: 0a:d7:5c:8f:35:95:c3:ba:ee:90:f4:e3:c0:82:e0:51:cc:35: 0e:ac:2d:6b:80:4f:da:31:e6:f6:e0:61:cb:2e:ba:cf:1b:80: 08:2d:ea:99:5a:0e:07:86:f7:0d:03:31:eb:95:93:30:5b:ce: 2a:b2:66:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcte7mPG8vScvRkrVnxKoU5zkucYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZD QjhBQTI0NTAeFw0yNTA4MzEwODA1NTBaFw0yNTA5MDMxNTQ0NTBaMDMxMTAvBgNV BAMTKEJCNUM1REJFNTAxNzUzOEUwMDI0QkM1REQ5RTkwQjNGRjQ4RDE2QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2n5yq8aTYkB4cl93TlPdG9X17 QIG313LMBee5xNynX99MOqHKmoDsSXJDBQP8xBdiZfrUJlJMN8PDN4qeS5C4/hIn PU/ZfcoaX0E0wD85Bw6+3jBj1AKGj5xKJY72LOTMgumMw7Arxyq7ALWdMx0lcuts 4LOJQ8Q8SZc+2ZNnuHUV8wZ3O6E/bnuc834SPAHOWuft0jca6LIIK+Nt61o9dP+y 7dD3583dk7OwJX6mOWXXIxv6ZL/kys+hkmPK+tJb1mDvYB9cKKgK49phTYnGdyoR /Tqkj1c7Z5ASXGhI9oLWzfYut8m9mutfmQrYWEkvFy9rDao8g+p63FyOwM1xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu1xdvlAXU44AJLxd2ekLP/SNFqIwHwYDVR0j BBgwFoAUUud7BrwmkcYTx6mHLuHij8uKokUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzkwODc4Mi00NTIwLTQ1YjQtOTllZC0xOTNlNTFkZjUxYzMvMC81MkU3N0IwNkJD MjY5MUM2MTNDN0E5ODcyRUUxRTI4RkNCOEFBMjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZDQjhB QTI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUy OEZDQjhBQTI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7DrTf6foHvgC1UfUP+W3e0ynad8u0QE5SK vGcR5MTM32tfcFs7SoPSMgsFtzWndxJ+UFd+PawXus9jFV7EiDJYQasB52zB49C7 9CI4YMcAyHlKzossEXnZ2sBtdY/E8x+AczasiFcFuoa9RTh7LV2NWICMdgM6uDbd /8nxzocddHelPdZUnCrc6pgNvu6L9f6JOT43esB/h/eYEMbX92Up3zojzjyWOz3i ScOROzEmOtOc+KbQx9LRERMaZR5hYH5lqKVwrArXXI81lcO67pD048CC4FHMNQ6s LWuAT9ox5vbgYcsuus8bgAgt6plaDgeG9w0DMeuVkzBbziqyZuI= -----END CERTIFICATE-----Generated at Sun Aug 31 21:40:14 2025 by rpki-client