$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: 5uqq28V7qreWtCW3GjS+kjo2Y2/vH8v+mnG4RcTzAVI= Subject key identifier: CF:A1:71:D6:55:A3:09:B2:78:D8:61:10:CE:76:36:37:A5:53:21:F5 Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 250AF4128587B423009998DE5D80227388BE35A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: F9 Signing time: Fri 05 Sep 2025 17:00:59 +0000 Manifest this update: Fri 05 Sep 2025 16:55:59 +0000 Manifest next update: Mon 08 Sep 2025 19:29:59 +0000 Files and hashes: 1: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) 2: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: SJW123VBB1TCB37XsfZGgXbZ9NoTO1j7KC3qdqBByrI=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 19:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0a:f4:12:85:87:b4:23:00:99:98:de:5d:80:22:73:88:be:35:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Sep 5 16:55:59 2025 GMT Not After : Sep 8 19:29:59 2025 GMT Subject: CN=CFA171D655A309B278D86110CE763637A55321F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:87:15:04:81:ef:07:f6:56:a5:0a:c3:53: f4:de:9a:62:dd:65:d8:c6:f0:71:73:10:1d:23:83: 6c:5e:8b:68:ab:fc:42:08:9b:7c:df:90:2d:6d:4a: e7:cc:70:5c:f8:ae:e6:87:28:8d:9c:de:9f:d4:5d: 34:b5:84:f4:77:17:01:1c:1c:a9:ff:82:b0:25:1c: c1:f0:19:f4:0c:04:e2:e4:aa:cb:35:e2:7e:81:6c: b2:58:ff:ca:e2:93:17:f1:37:e1:ba:38:a2:c2:15: 3f:71:03:75:d1:3b:10:fe:cb:6f:7d:4d:ec:d9:0b: c9:f1:17:fc:66:0f:96:a3:9a:b2:91:3b:7e:27:ba: 46:d9:64:96:b2:29:83:4f:e3:54:0e:d9:21:e1:21: 5c:14:9e:fe:8c:3a:e1:38:df:ba:d9:d1:d8:2f:48: 12:c8:54:19:c0:9c:1c:6d:13:0c:04:ed:07:ca:5c: 74:40:aa:9c:b3:ae:b2:cf:0b:fa:a1:ae:22:d8:b4: 67:a6:f5:8a:12:6d:df:e1:7e:2a:29:ca:d4:32:9e: f4:c4:1f:14:09:6e:c8:c9:64:3f:c9:a9:66:6b:7c: 84:e7:4e:10:f3:d4:3c:af:81:a2:9a:d3:6e:2a:90: 8b:28:55:ec:9e:5c:30:cc:7e:1f:c7:37:ad:12:52: c2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A1:71:D6:55:A3:09:B2:78:D8:61:10:CE:76:36:37:A5:53:21:F5 X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7c:4e:38:f1:7b:61:c1:1a:11:96:4b:be:d2:47:c5:99:c6: 0e:62:9b:94:8f:d4:30:6a:37:2c:7f:54:70:27:32:72:37:88: 7a:cf:d6:7c:0e:84:77:6c:cb:26:6c:84:15:7a:c0:b3:d3:24: 03:c9:05:54:f3:ad:d6:46:b0:24:42:b1:e5:27:bd:6c:c0:05: 46:61:6d:a7:c7:0d:47:3f:18:9a:b0:84:60:4d:40:dd:20:af: 07:e6:40:6e:37:39:9b:dd:9e:72:df:01:e7:db:76:17:ef:27: 8d:47:ec:2e:a3:7d:32:44:72:a8:3f:fd:5d:4b:28:4e:24:f7: 3a:2c:c9:44:99:de:53:7a:37:d7:6e:3b:69:94:18:f3:85:40: 43:df:c3:53:46:85:3c:a7:1c:0e:30:d4:1f:22:70:37:05:c2: 1e:00:f2:26:8c:e7:49:64:8c:be:20:89:a2:8b:cc:fc:75:df: 48:ac:16:a0:71:ba:46:76:9e:5e:c1:7f:75:61:05:af:2e:de: c4:79:83:2a:40:2e:d3:ae:25:8a:cc:40:d5:9b:8e:99:5e:40: fa:9d:e5:91:f1:4d:20:0f:82:ab:b5:b5:ef:39:22:21:39:48: 15:d9:8f:60:25:6c:49:78:b4:96:d9:ec:de:d9:24:2e:96:7b: dc:38:16:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJQr0EoWHtCMAmZjeXYAic4i+NaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTA5MDUxNjU1NTlaFw0yNTA5MDgxOTI5NTlaMDMxMTAvBgNV BAMTKENGQTE3MUQ2NTVBMzA5QjI3OEQ4NjExMENFNzYzNjM3QTU1MzIxRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/YcVBIHvB/ZWpQrDU/TemmLd ZdjG8HFzEB0jg2xei2ir/EIIm3zfkC1tSufMcFz4ruaHKI2c3p/UXTS1hPR3FwEc HKn/grAlHMHwGfQMBOLkqss14n6BbLJY/8rikxfxN+G6OKLCFT9xA3XROxD+y299 TezZC8nxF/xmD5ajmrKRO34nukbZZJayKYNP41QO2SHhIVwUnv6MOuE437rZ0dgv SBLIVBnAnBxtEwwE7QfKXHRAqpyzrrLPC/qhriLYtGem9YoSbd/hfiopytQynvTE HxQJbsjJZD/JqWZrfITnThDz1DyvgaKa024qkIsoVeyeXDDMfh/HN60SUsLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz6Fx1lWjCbJ42GEQznY2N6VTIfUwHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGF8Tjjxe2HBGhGWS77SR8WZxg5im5SP1DBq Nyx/VHAnMnI3iHrP1nwOhHdsyyZshBV6wLPTJAPJBVTzrdZGsCRCseUnvWzABUZh bafHDUc/GJqwhGBNQN0grwfmQG43OZvdnnLfAefbdhfvJ41H7C6jfTJEcqg//V1L KE4k9zosyUSZ3lN6N9duO2mUGPOFQEPfw1NGhTynHA4w1B8icDcFwh4A8iaM50lk jL4giaKLzPx130isFqBxukZ2nl7Bf3VhBa8u3sR5gypALtOuJYrMQNWbjpleQPqd 5ZHxTSAPgqu1te85IiE5SBXZj2AlbEl4tJbZ7N7ZJC6We9w4Fgc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:12 2025 by rpki-client