$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: E+q/qPhYG7aIVhxdpJg2vzXIp6/7mzJCjKXoH1MDTpA= Subject key identifier: 88:14:5C:D7:CE:2F:2C:94:A2:D8:99:DE:B4:D1:BA:6E:DF:85:1A:AE Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 38BE60B0C95397338F412213F0B463AA51EDB13E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: C1 Signing time: Wed 03 Sep 2025 05:12:09 +0000 Manifest this update: Wed 03 Sep 2025 05:07:09 +0000 Manifest next update: Sat 06 Sep 2025 16:19:09 +0000 Files and hashes: 1: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: 8YAbMR04M1Gy7dHiDVGDkvr8K4ZLBQYrNp/ogi4rUdQ=) 2: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 16:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:be:60:b0:c9:53:97:33:8f:41:22:13:f0:b4:63:aa:51:ed:b1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Sep 3 05:07:09 2025 GMT Not After : Sep 6 16:19:09 2025 GMT Subject: CN=88145CD7CE2F2C94A2D899DEB4D1BA6EDF851AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2e:bc:75:7a:2c:15:36:8e:8b:85:67:87:2f: 72:62:3d:7b:a2:97:3d:a1:04:75:bc:39:e3:73:ea: dd:53:ea:13:f7:9f:31:13:1c:50:f7:fa:7d:2c:eb: aa:4d:b5:fb:ac:6d:d3:0f:c2:83:1d:0f:b3:19:4b: c2:c8:10:9e:f6:ad:d2:61:01:9c:80:3e:c2:96:9f: 9b:2a:71:d5:6f:20:e3:50:e7:2b:94:2f:00:b5:fd: db:06:f5:3c:31:d2:06:3a:c0:90:f1:f6:c7:22:8c: 40:ef:92:0d:ae:6e:60:af:34:30:10:13:f4:43:30: 18:66:04:42:61:68:f7:6b:45:22:c7:98:04:30:ad: 5c:98:61:50:c9:ea:73:4a:08:45:96:be:3e:e2:f2: a3:32:ba:12:d4:88:7c:06:c9:72:de:9f:45:44:6b: d5:92:aa:78:69:7f:0a:ed:e7:8a:f7:8f:ee:95:3c: 83:37:d4:8e:e6:71:c3:a6:b4:ac:fd:9e:46:9c:7d: ce:1a:6e:37:4d:20:aa:ce:52:71:f0:e1:e9:35:05: 5e:f3:7b:bc:4b:80:ba:02:f2:fd:10:bf:fa:11:7d: da:ec:e5:40:bc:3c:0d:84:93:7f:a3:5b:dc:f4:d4: 63:32:c4:dd:f2:ea:a0:a7:f5:e6:7d:b7:37:8f:62: ec:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:14:5C:D7:CE:2F:2C:94:A2:D8:99:DE:B4:D1:BA:6E:DF:85:1A:AE X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:46:ef:fb:38:d5:25:7a:98:de:59:13:e6:d7:43:77:78:45: 3b:33:f0:a1:65:ec:fb:db:71:c5:00:e2:02:96:cc:53:16:d3: 24:bb:46:cc:ee:c4:6d:ef:43:03:58:8b:78:17:4f:e3:b9:ab: 82:94:7a:1a:83:b1:56:ac:f0:66:0c:96:a5:4c:62:19:1d:0c: 6c:b4:09:bc:d5:e9:a9:b3:4f:17:39:cf:b2:84:fd:30:83:45: e8:a5:be:e5:5c:ba:b2:b8:8b:c6:49:17:46:11:19:6c:87:07: a2:5c:30:24:f1:0e:18:a4:40:5f:b2:02:58:70:a2:af:28:fc: 09:66:25:f8:f6:9f:f8:6e:26:af:3d:d7:0d:ba:4c:5a:ed:3e: 1c:ec:62:fd:c2:cc:e8:cf:fb:1a:83:9c:9d:8f:9e:80:63:4d: 80:99:6b:81:6c:ad:cc:59:d5:ce:8c:42:68:9b:24:a9:00:18: 0b:4a:6b:57:06:a7:57:a2:90:08:bb:a0:95:f2:29:f7:8b:ae: 8a:54:de:e0:ab:09:f7:2e:dc:12:a7:dc:b0:ba:67:69:e8:fc: 08:25:14:39:fb:c8:a4:76:07:62:33:36:0e:5c:eb:8d:c4:88: 3c:a5:2f:3f:30:a4:b4:fe:80:9f:f7:fa:c4:d0:7d:e1:f9:b0: 02:d1:e0:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOL5gsMlTlzOPQSIT8LRjqlHtsT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNTA5MDMwNTA3MDlaFw0yNTA5MDYxNjE5MDlaMDMxMTAvBgNV BAMTKDg4MTQ1Q0Q3Q0UyRjJDOTRBMkQ4OTlERUI0RDFCQTZFREY4NTFBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpLrx1eiwVNo6LhWeHL3JiPXui lz2hBHW8OeNz6t1T6hP3nzETHFD3+n0s66pNtfusbdMPwoMdD7MZS8LIEJ72rdJh AZyAPsKWn5sqcdVvIONQ5yuULwC1/dsG9Twx0gY6wJDx9scijEDvkg2ubmCvNDAQ E/RDMBhmBEJhaPdrRSLHmAQwrVyYYVDJ6nNKCEWWvj7i8qMyuhLUiHwGyXLen0VE a9WSqnhpfwrt54r3j+6VPIM31I7mccOmtKz9nkacfc4abjdNIKrOUnHw4ek1BV7z e7xLgLoC8v0Qv/oRfdrs5UC8PA2Ek3+jW9z01GMyxN3y6qCn9eZ9tzePYuw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiBRc184vLJSi2JnetNG6bt+FGq4wHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBG7/s41SV6mN5ZE+bXQ3d4RTsz8KFl7Pvb ccUA4gKWzFMW0yS7RszuxG3vQwNYi3gXT+O5q4KUehqDsVas8GYMlqVMYhkdDGy0 CbzV6amzTxc5z7KE/TCDReilvuVcurK4i8ZJF0YRGWyHB6JcMCTxDhikQF+yAlhw oq8o/AlmJfj2n/huJq891w26TFrtPhzsYv3CzOjP+xqDnJ2PnoBjTYCZa4FsrcxZ 1c6MQmibJKkAGAtKa1cGp1eikAi7oJXyKfeLropU3uCrCfcu3BKn3LC6Z2no/Agl FDn7yKR2B2IzNg5c643EiDylLz8wpLT+gJ/3+sTQfeH5sALR4Cw= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:37 2025 by rpki-client