$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: haEe2U9IeKiRAU5NVMZw9pTVPo14UeVAR88AS6mNPfI= Subject key identifier: 72:FF:9E:B2:D3:E2:D2:B9:62:17:C9:21:BE:4E:56:0B:A3:61:57:17 Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 029C1E391091ABF24769425A314DD957E91FBC49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: 90 Signing time: Sat 30 Aug 2025 18:20:47 +0000 Manifest this update: Sat 30 Aug 2025 18:15:47 +0000 Manifest next update: Tue 02 Sep 2025 19:35:47 +0000 Files and hashes: 1: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: 16B43UTjGF2wNuq9o7mp9zpbjRgxd+iYLTn7wmB/9WY=) 2: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: 55sjufMqiAUVQEWT+QA1EUsxab9EOoQxItI4+DBt3EA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9c:1e:39:10:91:ab:f2:47:69:42:5a:31:4d:d9:57:e9:1f:bc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Aug 30 18:15:47 2025 GMT Not After : Sep 2 19:35:47 2025 GMT Subject: CN=72FF9EB2D3E2D2B96217C921BE4E560BA3615717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:42:5b:64:ed:89:4f:17:9e:a8:61:71:13: 7e:36:6d:bc:7d:78:29:af:b3:71:eb:48:2b:21:c9: 21:5e:79:d1:91:4f:57:c0:ce:55:4e:8a:a2:1b:95: 5f:7c:85:96:4e:1c:7a:9e:32:4c:eb:42:a0:2d:09: 35:ef:23:10:93:dd:c4:9d:c6:52:bf:e1:07:62:9f: e0:4f:04:fb:1b:9d:46:05:58:14:4d:55:75:3e:43: ae:57:09:8f:a5:a2:36:f1:97:90:04:74:e1:65:4b: 3c:55:63:dc:ec:9d:12:38:e0:7c:21:33:29:c2:a3: aa:a2:02:42:93:72:b1:38:67:10:2b:b5:b3:9e:07: 06:75:61:ea:d2:83:bb:d3:18:97:05:15:9d:52:97: c6:b3:eb:93:ba:f5:a6:5f:5f:4f:22:86:f1:4d:09: fa:6e:4c:1a:d2:3b:d6:24:42:7f:42:6c:7b:a0:eb: 46:b6:4e:85:26:da:bc:f1:26:9a:57:8f:b6:eb:91: 8b:97:d1:db:35:83:11:99:01:10:35:30:00:22:0e: 69:44:8e:10:4b:38:94:07:a9:83:f1:72:88:0a:11: 43:51:c3:66:82:3d:b3:29:bf:f0:ef:6c:b8:c6:d1: 9d:2b:8a:96:34:ce:77:6d:2a:1d:d4:83:b2:91:a9: 71:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FF:9E:B2:D3:E2:D2:B9:62:17:C9:21:BE:4E:56:0B:A3:61:57:17 X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a1:70:b5:b6:65:f8:3d:d2:1b:44:cd:36:e9:01:2d:7c:94: 75:98:b1:9d:2e:45:8d:0c:72:50:72:f5:cc:a8:31:0d:2c:5b: 77:31:ee:96:40:40:8e:b6:d3:94:40:c1:55:b6:dd:05:3a:66: 81:49:eb:97:2b:a7:ad:56:05:36:88:a0:10:37:da:a8:b3:d7: 73:7f:b7:0b:f6:6d:c2:37:99:55:77:06:ba:bc:09:64:ab:70: c3:a1:6e:29:13:77:6f:f2:cc:a9:65:c8:67:fb:20:cc:55:6b: 6a:b8:db:3b:b7:57:30:bb:6b:45:91:88:3f:ce:a2:56:fb:77: 6c:f6:4b:3d:55:ca:ab:d4:2b:ea:d9:11:2c:65:6c:a8:d4:85: c8:8b:4b:ab:ea:46:52:e5:78:30:b5:10:d3:d4:cc:6a:ef:a7: 89:06:64:8a:46:b1:9d:b7:ed:6b:29:df:72:6c:b9:49:98:06: f2:c1:3d:ca:20:c4:32:98:01:a8:df:06:76:19:d3:4a:e7:f0: 60:24:f2:a6:17:87:4c:7a:4f:95:d0:4e:5a:6c:57:a8:de:94: 93:ac:83:6c:d1:f7:5b:9b:0f:ad:93:28:b8:61:f9:04:df:d5: 4e:fb:18:de:b1:66:ed:a2:43:b9:e8:96:20:92:79:45:5e:a1: 88:91:4e:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUApweORCRq/JHaUJaMU3ZV+kfvEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNTA4MzAxODE1NDdaFw0yNTA5MDIxOTM1NDdaMDMxMTAvBgNV BAMTKDcyRkY5RUIyRDNFMkQyQjk2MjE3QzkyMUJFNEU1NjBCQTM2MTU3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaEJbZO2JTxeeqGFxE342bbx9 eCmvs3HrSCshySFeedGRT1fAzlVOiqIblV98hZZOHHqeMkzrQqAtCTXvIxCT3cSd xlK/4Qdin+BPBPsbnUYFWBRNVXU+Q65XCY+lojbxl5AEdOFlSzxVY9zsnRI44Hwh MynCo6qiAkKTcrE4ZxArtbOeBwZ1YerSg7vTGJcFFZ1Sl8az65O69aZfX08ihvFN CfpuTBrSO9YkQn9CbHug60a2ToUm2rzxJppXj7brkYuX0ds1gxGZARA1MAAiDmlE jhBLOJQHqYPxcogKEUNRw2aCPbMpv/DvbLjG0Z0ripY0zndtKh3Ug7KRqXEnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcv+estPi0rliF8khvk5WC6NhVxcwHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFihcLW2Zfg90htEzTbpAS18lHWYsZ0uRY0M clBy9cyoMQ0sW3cx7pZAQI6205RAwVW23QU6ZoFJ65crp61WBTaIoBA32qiz13N/ twv2bcI3mVV3Brq8CWSrcMOhbikTd2/yzKllyGf7IMxVa2q42zu3VzC7a0WRiD/O olb7d2z2Sz1VyqvUK+rZESxlbKjUhciLS6vqRlLleDC1ENPUzGrvp4kGZIpGsZ23 7Wsp33JsuUmYBvLBPcogxDKYAajfBnYZ00rn8GAk8qYXh0x6T5XQTlpsV6jelJOs g2zR91ubD62TKLhh+QTf1U77GN6xZu2iQ7noliCSeUVeoYiRToc= -----END CERTIFICATE-----Generated at Sat Aug 30 23:15:14 2025 by rpki-client