$ rpki-client -vvf repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft (raw, json) Hash identifier: KxbHIXLVKdpgOJVdrt57W9dUwk25qWtxB+bOEUIBr0k= Subject key identifier: 03:EF:A0:F9:59:75:83:F8:43:45:82:80:70:5B:86:B9:F2:ED:8C:9D Authority key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Certificate issuer: /CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Certificate serial: 066159CDF8621BDE9F97FCF88F5AA7383FD4C82B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft Manifest number: 051B Signing time: Sun 19 Oct 2025 07:41:08 +0000 Manifest this update: Sun 19 Oct 2025 07:36:08 +0000 Manifest next update: Wed 22 Oct 2025 13:08:08 +0000 Files and hashes: 1: 323030313a6466373a373430303a3a2f34382d3438203d3e20313336303532.roa (hash: q884sNHCW5gx53DgOjtLJ9QZQAoxktWTxQd/7H0Tgro=) 2: 3130332e31352e3232362e302f32342d3234203d3e20313336303532.roa (hash: 92iPAvFoV8ZIni26oBvQBCMwojDuPtSnBMptGXhyF7g=) 3: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl (hash: I5gITOb63wn0vSi01xbMVddcy/9sp36nM9SLa4gGCNs=) 4: 3130332e3233362e3230312e302f32342d3234203d3e20313336303532.roa (hash: NJ/fZulIyr1e7dyoj8v3tiz901wVBYZYjvKtkVFLK3I=) 5: 3130332e35352e33362e302f32322d3234203d3e20313336303532.roa (hash: Co7QnH1utLTo+OaXOBXDzn1d7u1X3FX72sJ2/V1LcRI=) 6: 3130332e32382e35322e302f32332d3234203d3e20313336303532.roa (hash: jH+vIlrKU7PfFq1iZrO7cUj2zjNXd2QDgqmIURJ9hHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:61:59:cd:f8:62:1b:de:9f:97:fc:f8:8f:5a:a7:38:3f:d4:c8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Validity Not Before: Oct 19 07:36:08 2025 GMT Not After : Oct 22 13:08:08 2025 GMT Subject: CN=03EFA0F9597583F843458280705B86B9F2ED8C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:36:49:0f:d0:d8:d6:f1:ba:5d:e8:49:aa:6c: e7:5c:31:b1:2e:c6:93:75:ec:5c:95:b4:d5:6b:2f: 92:f2:c9:c2:41:66:6b:0f:9a:82:cf:9a:69:e1:65: 07:3d:1c:01:42:30:22:9b:fc:05:fe:3b:d7:c2:10: 94:bc:73:18:08:51:df:50:0d:c6:8c:5e:67:8a:92: f6:54:1b:43:67:6c:6d:08:35:c8:ea:b5:26:6f:ba: 17:04:9a:bb:17:d0:bd:60:a0:00:d3:2e:e9:dc:80: 88:f0:c3:5b:60:03:46:1d:7d:47:2e:fb:b7:d2:c0: d8:66:c0:3e:ce:6d:fc:f0:1c:5e:57:57:23:23:86: 3d:99:53:1c:88:36:80:5a:13:e6:f9:54:95:5c:4c: 46:40:8c:bf:61:d6:6a:c2:d0:71:62:ec:f5:f7:ac: 5b:da:97:9e:33:4b:5c:30:b2:b2:0f:7f:3a:c3:b1: fd:b5:bb:74:56:35:b5:e4:19:eb:31:cc:c1:6e:2c: b3:88:d4:70:b8:ef:a8:2f:82:c0:29:c2:2f:80:0b: 98:2f:e9:49:22:e6:4e:be:d3:b8:5e:8b:16:5d:e7: dd:c0:4e:c2:9c:a5:2a:5c:7c:14:32:18:84:3c:b1: 12:5c:f3:9b:81:51:b4:72:50:0a:e5:20:37:c7:41: b3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EF:A0:F9:59:75:83:F8:43:45:82:80:70:5B:86:B9:F2:ED:8C:9D X509v3 Authority Key Identifier: keyid:AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:73:8d:ce:c7:bd:e3:c1:08:25:d8:04:14:0c:32:06:60:73: c2:4f:d6:0e:1e:6b:ea:b5:84:7a:fa:2d:92:78:df:de:87:d7: 32:e3:84:8b:e5:b4:51:74:20:37:2c:f9:e9:ab:3b:b9:36:34: 6f:8e:9b:ae:a4:e5:56:27:68:4f:0d:11:bb:57:10:da:c1:61: c1:21:b2:da:91:1e:80:4a:af:62:09:e7:64:fc:6a:8b:41:cb: 43:9b:5c:d1:de:78:9d:27:05:01:ac:27:c8:44:18:25:c9:3c: ca:88:2f:4d:1b:22:7f:c6:00:f2:61:16:a1:67:6f:63:0c:dc: 7b:c0:20:70:33:d0:36:33:38:62:b1:3f:03:fc:f8:50:18:04: b9:18:de:d2:36:e1:7f:73:e9:20:50:19:6f:54:31:a3:1a:e6: 55:e1:02:29:57:93:1b:9e:91:4b:fc:3d:da:70:09:c5:f7:66: fe:70:5a:5a:74:b0:46:13:4f:c6:4f:3e:b5:0a:d5:bd:b6:92: a9:de:25:4f:2f:4f:56:b1:88:ef:9a:7c:a6:41:c6:2a:e9:4c: 39:01:e4:e4:62:5e:9b:fb:dc:c1:f1:fb:ca:24:d9:91:11:1c: 5a:b2:6c:b8:5a:99:c1:d8:e0:73:13:53:a0:c2:b3:17:33:14: 6a:62:d7:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmFZzfhiG96fl/z4j1qnOD/UyCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIx MDZBNTk0QzAeFw0yNTEwMTkwNzM2MDhaFw0yNTEwMjIxMzA4MDhaMDMxMTAvBgNV BAMTKDAzRUZBMEY5NTk3NTgzRjg0MzQ1ODI4MDcwNUI4NkI5RjJFRDhDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZNkkP0NjW8bpd6EmqbOdcMbEu xpN17FyVtNVrL5LyycJBZmsPmoLPmmnhZQc9HAFCMCKb/AX+O9fCEJS8cxgIUd9Q DcaMXmeKkvZUG0NnbG0INcjqtSZvuhcEmrsX0L1goADTLuncgIjww1tgA0YdfUcu +7fSwNhmwD7ObfzwHF5XVyMjhj2ZUxyINoBaE+b5VJVcTEZAjL9h1mrC0HFi7PX3 rFval54zS1wwsrIPfzrDsf21u3RWNbXkGesxzMFuLLOI1HC476gvgsApwi+AC5gv 6Uki5k6+07heixZd593ATsKcpSpcfBQyGIQ8sRJc85uBUbRyUArlIDfHQbMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA++g+Vl1g/hDRYKAcFuGufLtjJ0wHwYDVR0j BBgwFoAUr1LnFt5x7qk1P+qS+/ctohBqWUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMC9BRjUyRTcxNkRF NzFFRUE5MzUzRkVBOTJGQkY3MkRBMjEwNkE1OTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJEQTIxMDZB NTk0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJhYzBjYTUtNWNlNy00ZTZlLTlm ZmYtNzIxM2VmMWVmMzY0LzAvQUY1MkU3MTZERTcxRUVBOTM1M0ZFQTkyRkJGNzJE QTIxMDZBNTk0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMFzjc7HvePBCCXYBBQMMgZgc8JP1g4ea+q1 hHr6LZJ4396H1zLjhIvltFF0IDcs+emrO7k2NG+Om66k5VYnaE8NEbtXENrBYcEh stqRHoBKr2IJ52T8aotBy0ObXNHeeJ0nBQGsJ8hEGCXJPMqIL00bIn/GAPJhFqFn b2MM3HvAIHAz0DYzOGKxPwP8+FAYBLkY3tI24X9z6SBQGW9UMaMa5lXhAilXkxue kUv8PdpwCcX3Zv5wWlp0sEYTT8ZPPrUK1b22kqneJU8vT1axiO+afKZBxirpTDkB 5ORiXpv73MHx+8ok2ZERHFqybLhamcHY4HMTU6DCsxczFGpi12k= -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:55 2025 by rpki-client