$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft (raw, json) Hash identifier: GPC9L/gF2P7XV6Aw7YUpFk64swQo23VwyOWwj0lhYo4= Subject key identifier: 67:2B:A9:5F:57:FB:14:25:2B:26:0F:ED:09:4F:D6:0E:BE:0D:6F:82 Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Certificate issuer: /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Certificate serial: 5FCADD30EA3A10C6511EE3399E24716EA1274348 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft Manifest number: 0316 Signing time: Sun 07 Sep 2025 01:11:57 +0000 Manifest this update: Sun 07 Sep 2025 01:06:57 +0000 Manifest next update: Wed 10 Sep 2025 07:01:57 +0000 Files and hashes: 1: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl (hash: gALXW6pm+6dXI3LH5NyZwGqVA+9mVgzvhmVp6P712eQ=) 2: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=) 3: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw=) 4: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ca:dd:30:ea:3a:10:c6:51:1e:e3:39:9e:24:71:6e:a1:27:43:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Validity Not Before: Sep 7 01:06:57 2025 GMT Not After : Sep 10 07:01:57 2025 GMT Subject: CN=672BA95F57FB14252B260FED094FD60EBE0D6F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:b0:7f:cf:ab:95:65:6c:18:06:c7:f2:2b: b3:8e:39:50:a5:bf:2a:12:17:e0:2d:8e:87:e0:58: 19:7a:98:b5:06:c8:91:65:dc:34:fc:e2:d7:8e:41: de:1c:00:03:3e:82:75:29:a8:10:92:02:e3:9d:16: 47:d9:b1:aa:6c:25:8a:e5:df:83:cf:ad:69:4f:63: 9b:2b:2c:f3:97:c1:58:e6:ce:de:4d:9b:2f:10:1a: 61:19:76:bf:17:db:e3:30:1e:37:43:8c:b1:e7:ab: c8:b9:f6:f4:9d:4f:9a:f5:45:a8:07:64:af:f5:f6: 05:a1:3f:0e:8f:ed:34:53:3f:43:9e:a3:35:1b:fc: ad:c8:29:37:c7:a8:af:7a:80:da:e8:35:d5:96:11: c6:4b:32:1c:29:9f:1e:fa:b3:14:69:e4:92:5b:a6: 64:b5:64:c3:f7:b9:e1:40:85:06:f0:57:f6:e3:c9: 4d:43:f5:e1:8d:e2:56:b9:2d:a4:1d:43:75:bb:41: 02:7f:39:f1:96:1d:1b:f7:83:f7:14:14:53:3b:69: 30:53:2b:f5:fa:33:29:2b:68:6d:71:3c:37:b5:96: c1:39:a3:29:ea:4a:69:07:eb:5c:e3:aa:07:85:a1: cf:36:ae:50:94:aa:81:91:0d:c0:bf:0e:06:bf:eb: 7c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:2B:A9:5F:57:FB:14:25:2B:26:0F:ED:09:4F:D6:0E:BE:0D:6F:82 X509v3 Authority Key Identifier: keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:af:48:ed:15:48:93:c3:54:a1:bc:df:41:b7:b7:20:2c:17: f2:e9:e4:6e:88:4a:56:35:b4:cc:73:10:1c:57:23:33:f4:e9: 31:09:bb:43:34:90:b2:45:01:97:38:4a:c9:5d:05:89:04:ac: e9:e8:d6:1f:91:f4:3e:37:3e:60:e0:a8:be:a0:a3:15:d8:62: 59:56:12:13:48:f0:32:c9:45:99:e7:7a:f3:45:79:f8:59:6c: a6:04:de:fd:eb:ce:a1:46:b3:d1:da:ef:f9:d9:a3:dd:53:ae: a0:17:42:2c:cd:c9:f7:f6:ff:6a:e9:73:a0:ce:89:a1:be:05: e1:e2:d4:c2:21:d9:c1:f1:f4:9c:29:67:39:01:50:6e:06:41: 65:d7:ad:25:c1:73:e4:8f:de:22:80:69:ed:41:9a:6a:f0:43: aa:ff:c2:36:cd:4b:8d:87:58:e0:f8:0b:38:bd:de:5d:43:5b: b6:bb:7f:6d:0c:ff:80:29:37:79:9d:56:ea:74:3d:d2:4f:fd: 81:3e:bc:9b:35:ce:64:94:34:90:7d:25:11:fb:31:87:79:95: 1c:7d:a9:23:67:13:66:8c:d4:b5:5d:e0:e1:20:b9:3e:7f:d1: 99:dc:03:05:ac:77:01:8c:ff:d2:a7:f2:16:ab:0a:ec:24:f2: 95:0b:2f:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8rdMOo6EMZRHuM5niRxbqEnQ0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE QkM1RkY0QzAeFw0yNTA5MDcwMTA2NTdaFw0yNTA5MTAwNzAxNTdaMDMxMTAvBgNV BAMTKDY3MkJBOTVGNTdGQjE0MjUyQjI2MEZFRDA5NEZENjBFQkUwRDZGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpCLB/z6uVZWwYBsfyK7OOOVCl vyoSF+AtjofgWBl6mLUGyJFl3DT84teOQd4cAAM+gnUpqBCSAuOdFkfZsapsJYrl 34PPrWlPY5srLPOXwVjmzt5Nmy8QGmEZdr8X2+MwHjdDjLHnq8i59vSdT5r1RagH ZK/19gWhPw6P7TRTP0OeozUb/K3IKTfHqK96gNroNdWWEcZLMhwpnx76sxRp5JJb pmS1ZMP3ueFAhQbwV/bjyU1D9eGN4la5LaQdQ3W7QQJ/OfGWHRv3g/cUFFM7aTBT K/X6MykraG1xPDe1lsE5oynqSmkH61zjqgeFoc82rlCUqoGRDcC/Dga/63zDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZyupX1f7FCUrJg/tCU/WDr4Nb4IwHwYDVR0j BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1 RkY0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2 RENEQkM1RkY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALyvSO0VSJPDVKG830G3tyAsF/Lp5G6ISlY1 tMxzEBxXIzP06TEJu0M0kLJFAZc4SsldBYkErOno1h+R9D43PmDgqL6goxXYYllW EhNI8DLJRZnnevNFefhZbKYE3v3rzqFGs9Ha7/nZo91TrqAXQizNyff2/2rpc6DO iaG+BeHi1MIh2cHx9JwpZzkBUG4GQWXXrSXBc+SP3iKAae1BmmrwQ6r/wjbNS42H WOD4Czi93l1DW7a7f20M/4ApN3mdVup0PdJP/YE+vJs1zmSUNJB9JRH7MYd5lRx9 qSNnE2aM1LVd4OEguT5/0ZncAwWsdwGM/9Kn8harCuwk8pULL78= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:51 2025 by rpki-client