$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: poq2OxmgQqlU1PXXCFadO+n3Igiz/BuE5mycuL7kH+U= Subject key identifier: D9:00:DE:38:D7:73:0F:36:D7:D5:C0:41:F2:0E:11:AB:F1:09:F8:6D Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 4C5B27469D8AC8D391F2927CE6D1F82C9DB89091 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: AD Signing time: Sun 20 Jul 2025 05:42:09 +0000 Manifest this update: Sun 20 Jul 2025 05:37:09 +0000 Manifest next update: Wed 23 Jul 2025 07:27:09 +0000 Files and hashes: 1: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: SidQyC2Mu2Hv9YPZGl/OwfHNZC4TomNR8x77uIjWP10=) 2: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5b:27:46:9d:8a:c8:d3:91:f2:92:7c:e6:d1:f8:2c:9d:b8:90:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Jul 20 05:37:09 2025 GMT Not After : Jul 23 07:27:09 2025 GMT Subject: CN=D900DE38D7730F36D7D5C041F20E11ABF109F86D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c7:16:6c:d0:1a:1c:47:0f:07:47:f0:62:9b: 7c:2c:e2:2b:6a:7f:6f:f6:32:90:98:bd:79:a2:4c: 7f:7b:15:3e:25:0b:5d:ec:89:ac:1a:03:fb:f2:f5: 4e:fb:7c:ad:8f:0d:f8:04:1d:6e:b0:8e:dd:20:a2: d2:37:b5:b7:0a:d0:0b:58:8f:53:3c:5d:f8:a9:40: a7:60:51:95:a0:a9:98:37:a0:7c:8f:1d:05:58:6a: d7:2c:d5:ae:92:b5:ad:60:db:78:99:5d:95:54:0c: 9b:f7:03:39:38:4b:c7:b0:cd:5b:7c:f1:56:e9:e3: be:5a:53:35:be:aa:ae:88:a8:92:8b:22:18:b5:93: c4:c0:c5:00:c9:47:27:39:df:75:69:85:f2:40:50: 7f:a0:de:1f:75:88:c6:2b:74:cd:5b:11:2a:e7:1d: dd:67:0b:80:09:19:8e:35:d3:d6:4a:70:4d:a7:24: 05:ff:8e:6e:70:95:27:37:35:bd:55:3a:b1:46:13: 22:a5:3c:47:22:7c:bb:19:c3:7b:5a:f9:f0:94:27: ae:67:17:90:17:0e:e1:f9:b4:8e:fa:51:2c:7d:5e: ae:f8:d1:0c:bb:d2:84:f5:b9:1b:a3:c8:7a:9f:d8: 6a:37:19:8a:62:22:0f:ff:55:89:0a:54:b1:8b:f3: 03:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:00:DE:38:D7:73:0F:36:D7:D5:C0:41:F2:0E:11:AB:F1:09:F8:6D X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:2f:3f:14:3f:bf:e7:9a:7c:a1:38:a6:64:88:1b:8a:8a:a4: 06:27:c0:d4:da:40:a4:42:9c:46:64:19:61:96:a5:dc:bf:24: a0:64:7c:86:47:e6:c9:9f:00:42:6a:ea:da:c9:0e:27:3a:4e: b1:26:da:0c:e4:aa:3b:f0:10:8f:96:c9:00:e2:16:60:2b:a0: 75:4a:c7:bc:4e:74:74:68:71:c7:c1:54:76:22:8d:d0:28:e5: d6:6c:01:ce:8c:93:18:66:e4:20:93:64:f0:6d:c4:4d:07:3e: dc:4e:b8:72:44:50:11:df:dc:18:12:b3:11:86:44:dd:dd:aa: 41:3e:6f:11:e0:0b:7d:bd:57:c7:e1:a7:e0:94:6a:b5:50:05: 47:6b:4a:1f:57:18:3c:81:1f:6b:f2:ab:4d:b3:11:ca:50:81: 9c:21:e0:e7:90:85:6b:a6:34:9f:25:e8:7b:5b:44:47:73:06: 02:9a:ed:cc:a2:1a:f9:1b:61:5e:ed:1e:f5:af:b9:4b:ab:8b: e2:84:a0:09:5a:b4:80:fb:d1:d6:dd:78:89:ec:b8:28:2d:ae: 3d:b5:36:7f:bd:ec:c2:41:98:6e:2b:21:e8:21:0c:1a:17:3a: 16:2a:32:9f:46:d9:47:e5:8c:c7:36:ea:d8:1f:56:fb:69:48: 76:64:1b:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFsnRp2KyNOR8pJ85tH4LJ24kJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNTA3MjAwNTM3MDlaFw0yNTA3MjMwNzI3MDlaMDMxMTAvBgNV BAMTKEQ5MDBERTM4RDc3MzBGMzZEN0Q1QzA0MUYyMEUxMUFCRjEwOUY4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVxxZs0BocRw8HR/Bim3ws4itq f2/2MpCYvXmiTH97FT4lC13siawaA/vy9U77fK2PDfgEHW6wjt0gotI3tbcK0AtY j1M8XfipQKdgUZWgqZg3oHyPHQVYatcs1a6Sta1g23iZXZVUDJv3Azk4S8ewzVt8 8Vbp475aUzW+qq6IqJKLIhi1k8TAxQDJRyc533VphfJAUH+g3h91iMYrdM1bESrn Hd1nC4AJGY4109ZKcE2nJAX/jm5wlSc3Nb1VOrFGEyKlPEcifLsZw3ta+fCUJ65n F5AXDuH5tI76USx9Xq740Qy70oT1uRujyHqf2Go3GYpiIg//VYkKVLGL8wNtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2QDeONdzDzbX1cBB8g4Rq/EJ+G0wHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEvPxQ/v+eafKE4pmSIG4qKpAYnwNTaQKRC nEZkGWGWpdy/JKBkfIZH5smfAEJq6trJDic6TrEm2gzkqjvwEI+WyQDiFmAroHVK x7xOdHRoccfBVHYijdAo5dZsAc6Mkxhm5CCTZPBtxE0HPtxOuHJEUBHf3BgSsxGG RN3dqkE+bxHgC329V8fhp+CUarVQBUdrSh9XGDyBH2vyq02zEcpQgZwh4OeQhWum NJ8l6HtbREdzBgKa7cyiGvkbYV7tHvWvuUuri+KEoAlatID70dbdeInsuCgtrj21 Nn+97MJBmG4rIeghDBoXOhYqMp9G2UfljMc26tgfVvtpSHZkGyo= -----END CERTIFICATE-----Generated at Mon Jul 21 13:21:23 2025 by rpki-client