$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: lD/Bwxcbe9TurK2NC063FWsGfMXbnUYNYW+zsUcNVJY= Subject key identifier: AE:24:42:AB:0A:FD:71:D1:BE:81:57:59:B4:B7:B2:1F:3D:B3:62:ED Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 7ED581B780F3860398BD5F09B88FEAAF18490355 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 03E2 Signing time: Thu 04 Sep 2025 17:51:46 +0000 Manifest this update: Thu 04 Sep 2025 17:46:46 +0000 Manifest next update: Sun 07 Sep 2025 21:58:46 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: c0FYdrA0EdCXn57rDun45CVVNp9qcGXnJP0vicCpdHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 21:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d5:81:b7:80:f3:86:03:98:bd:5f:09:b8:8f:ea:af:18:49:03:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Sep 4 17:46:46 2025 GMT Not After : Sep 7 21:58:46 2025 GMT Subject: CN=AE2442AB0AFD71D1BE815759B4B7B21F3DB362ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3b:5e:90:81:d1:e0:f2:5b:aa:84:c8:3b:11: 80:59:50:6b:ca:69:7e:55:c6:56:d9:ca:f7:df:ab: 37:ba:e6:10:0a:32:5d:0b:99:9b:47:57:e2:db:64: 62:a1:71:32:76:93:c2:74:6c:3b:53:6e:bb:ba:c0: 51:5b:5e:14:53:62:37:6e:09:1c:0d:d7:0a:9b:42: 81:3c:b8:bc:ea:36:b9:b5:c6:07:73:53:25:28:aa: 95:69:28:87:9c:eb:be:c2:98:da:91:6b:77:95:19: a7:92:e8:0f:dd:14:98:72:c8:d0:a0:83:7c:3c:01: 6d:71:79:12:7b:a7:e4:b3:00:46:c8:ad:fe:ba:a8: ba:45:90:d6:e7:c8:f7:4a:19:99:15:9a:f6:13:5b: 49:cb:75:3e:34:10:c6:c2:4f:87:e8:ec:e9:3a:d7: e6:1d:10:70:49:bd:6c:c3:f6:a7:72:36:b8:c3:56: ef:77:bd:f8:ac:42:79:2f:d3:cf:66:db:65:6b:bb: 70:0f:62:77:cf:1c:26:7d:24:59:e5:b0:6a:e2:a9: 0d:1c:51:38:8d:93:bd:1e:0c:0e:bf:2e:76:15:7b: 15:29:ce:17:de:33:c5:37:36:2c:96:0c:23:06:40: be:8c:38:43:58:b8:ec:5b:06:c2:f2:93:e6:9f:24: 57:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:24:42:AB:0A:FD:71:D1:BE:81:57:59:B4:B7:B2:1F:3D:B3:62:ED X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:cb:21:9b:ee:2c:7b:f8:2d:11:b1:b7:1d:e1:2a:ef:e7:6e: f5:cf:fd:7d:8a:7d:c7:f6:c8:22:cc:1e:b6:49:e1:63:af:a7: 36:51:51:56:3c:f3:22:3c:67:28:81:4f:f2:a3:11:12:2e:ed: 77:e3:9f:ce:b3:bc:a9:9e:08:e7:e1:fd:3e:70:29:70:88:d8: 9a:f1:4b:cf:a2:06:d8:c6:e6:a0:d0:a3:90:0f:64:31:7c:59: 44:c3:93:97:b6:a8:de:0a:76:98:1b:1c:db:e7:19:3b:02:85: 6c:1e:13:fd:ca:91:f0:8f:1e:d8:ec:24:15:0e:e4:a6:3d:94: 81:b6:f5:0a:79:7a:83:78:df:6a:b5:4a:a4:15:3c:87:32:ec: 19:57:5e:19:ca:d4:d1:78:20:dc:9f:37:ad:f0:17:bc:13:29: 47:2c:3e:b3:c6:8b:31:7f:c3:9a:9f:be:02:f2:00:fa:ed:75: c8:af:b5:77:06:d2:92:10:a2:9c:4a:1b:24:fc:70:46:19:50: c3:be:c4:ce:84:5e:6f:66:8a:11:40:0f:1e:cb:c8:2d:f3:1e: 68:4b:e6:d7:35:28:80:e0:0e:f4:64:47:f2:01:dc:e1:7e:75: 09:1a:2d:8d:fb:91:20:ac:9c:c7:cb:e4:d5:c6:e7:9f:3d:1a: af:fd:34:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftWBt4DzhgOYvV8JuI/qrxhJA1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTA5MDQxNzQ2NDZaFw0yNTA5MDcyMTU4NDZaMDMxMTAvBgNV BAMTKEFFMjQ0MkFCMEFGRDcxRDFCRTgxNTc1OUI0QjdCMjFGM0RCMzYyRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfO16QgdHg8luqhMg7EYBZUGvK aX5VxlbZyvffqze65hAKMl0LmZtHV+LbZGKhcTJ2k8J0bDtTbru6wFFbXhRTYjdu CRwN1wqbQoE8uLzqNrm1xgdzUyUoqpVpKIec677CmNqRa3eVGaeS6A/dFJhyyNCg g3w8AW1xeRJ7p+SzAEbIrf66qLpFkNbnyPdKGZkVmvYTW0nLdT40EMbCT4fo7Ok6 1+YdEHBJvWzD9qdyNrjDVu93vfisQnkv089m22Vru3APYnfPHCZ9JFnlsGriqQ0c UTiNk70eDA6/LnYVexUpzhfeM8U3NiyWDCMGQL6MOENYuOxbBsLyk+afJFf7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUriRCqwr9cdG+gVdZtLeyHz2zYu0wHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATLIZvuLHv4LRGxtx3hKu/nbvXP/X2Kfcf2 yCLMHrZJ4WOvpzZRUVY88yI8ZyiBT/KjERIu7Xfjn86zvKmeCOfh/T5wKXCI2Jrx S8+iBtjG5qDQo5APZDF8WUTDk5e2qN4KdpgbHNvnGTsChWweE/3KkfCPHtjsJBUO 5KY9lIG29Qp5eoN432q1SqQVPIcy7BlXXhnK1NF4INyfN63wF7wTKUcsPrPGizF/ w5qfvgLyAPrtdcivtXcG0pIQopxKGyT8cEYZUMO+xM6EXm9mihFADx7LyC3zHmhL 5tc1KIDgDvRkR/IB3OF+dQkaLY37kSCsnMfL5NXG5589Gq/9NEs= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:34 2025 by rpki-client