$ rpki-client -vvf repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft File: 52D962F5A9CABE2F4089548951269E5BD5F3249D.mft (raw, json) Hash identifier: 0rY5feWf2dzUKojikGqo1viA1oRDV8l0AFnnsz/pDxU= Subject key identifier: 0F:BF:56:F7:43:3D:49:D6:28:C2:B8:1B:51:59:28:DB:7E:31:A2:CA Authority key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Certificate issuer: /CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Certificate serial: 2549D1D905F6D7D01673ED8186ACF517E00DE66B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft Manifest number: 7C Signing time: Tue 22 Jul 2025 08:50:01 +0000 Manifest this update: Tue 22 Jul 2025 08:45:01 +0000 Manifest next update: Fri 25 Jul 2025 11:25:01 +0000 Files and hashes: 1: 52D962F5A9CABE2F4089548951269E5BD5F3249D.crl (hash: tlsyqhSwaEyBO47aPOYdclIu3/ZiW13RtBmQ/5tRBYo=) 2: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: YC5+nsrmWedLDnN0PaZMpSlGmxCfT//FJoWJkorFOm8=) 3: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: kIpsRTz8rsVh7INCm035H5PFs4vQWvdsdTQtSQQkCfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:25:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:49:d1:d9:05:f6:d7:d0:16:73:ed:81:86:ac:f5:17:e0:0d:e6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Validity Not Before: Jul 22 08:45:01 2025 GMT Not After : Jul 25 11:25:01 2025 GMT Subject: CN=0FBF56F7433D49D628C2B81B515928DB7E31A2CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:28:b0:b2:5f:9c:32:1b:7c:8d:a6:6d:03:9f: f4:02:28:f3:d9:8b:74:40:33:f3:25:0d:f1:c0:e4: f3:f8:7f:88:ef:cd:d2:a3:12:7a:c9:e7:10:62:59: a6:53:c2:77:a5:18:a6:98:e4:9d:6b:1d:16:01:64: a0:fc:0c:1c:f8:53:69:47:20:30:6b:52:da:f9:b9: 81:40:4f:5f:82:b7:91:71:c7:a5:7e:db:f8:30:90: 22:3c:50:d8:a2:96:6a:52:3c:b3:bd:ea:1b:2b:a8: 87:a3:fe:5e:96:bd:d6:1c:18:0f:db:8a:9f:09:5a: 03:ce:cf:e5:ae:ab:c3:5f:47:e3:27:bc:74:37:99: 04:c0:17:78:df:f1:e3:2a:da:79:da:a2:69:79:88: 6e:b8:17:c7:cf:c6:1f:ca:0e:aa:60:0b:d3:75:b1: 74:79:e7:89:3b:83:d7:1c:72:0f:06:48:b2:0c:34: 2f:28:98:19:92:bb:3b:ac:ec:6a:62:e8:ed:d0:06: 41:4e:1b:e3:69:a3:dd:68:20:ad:93:1e:e3:bf:9b: 27:40:e9:24:54:b1:81:a8:01:e9:43:52:7a:b7:58: a5:d0:ca:4f:08:ef:c7:89:ab:ce:9d:17:56:5a:fe: fe:68:90:15:07:1b:36:06:ce:25:83:b1:00:3a:5d: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BF:56:F7:43:3D:49:D6:28:C2:B8:1B:51:59:28:DB:7E:31:A2:CA X509v3 Authority Key Identifier: keyid:52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:e3:b3:eb:76:6a:76:d5:40:59:c7:98:a3:d6:89:a0:d7:5c: 1f:f7:8d:b5:eb:e0:5a:98:bf:f4:4c:d3:d5:fc:07:b2:7f:6e: ea:70:cd:92:98:84:74:55:57:38:33:24:e6:f6:bd:af:55:02: c2:40:fe:f2:7a:a4:99:20:18:51:96:cb:57:2d:37:ac:df:c9: d6:ad:f5:6e:03:55:c9:3a:dd:8a:16:9e:3c:3d:45:26:e7:5d: 87:b5:39:9c:f1:63:1a:5b:23:d1:e7:c9:a2:f2:2f:19:0d:49: c2:28:78:87:99:4b:e8:96:c7:ac:d5:3c:ec:98:65:7d:fd:08: 75:95:bd:53:35:ce:b0:af:19:00:0c:e9:48:f4:ed:3c:f9:6c: ad:d3:42:ab:f4:1f:7e:a1:26:4e:94:da:74:41:90:88:02:60: 2b:98:44:8b:81:9a:14:7f:83:95:8f:d9:a4:61:b8:c3:1e:71: 7b:78:2a:9f:15:5d:9d:f8:36:d6:27:9a:e4:b0:89:93:51:bc: 67:0e:cb:89:86:b2:e4:02:e1:c6:18:72:bc:e5:d0:e7:c0:23: d7:d1:fb:93:6a:c3:7a:78:d9:ae:5c:93:b9:0d:33:8c:ce:47: b8:3d:b1:6d:67:4c:08:b3:54:2d:8e:e8:d4:9e:7d:f0:b4:72: 2e:41:50:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUnR2QX219AWc+2Bhqz1F+AN5mswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJE NUYzMjQ5RDAeFw0yNTA3MjIwODQ1MDFaFw0yNTA3MjUxMTI1MDFaMDMxMTAvBgNV BAMTKDBGQkY1NkY3NDMzRDQ5RDYyOEMyQjgxQjUxNTkyOERCN0UzMUEyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUKLCyX5wyG3yNpm0Dn/QCKPPZ i3RAM/MlDfHA5PP4f4jvzdKjEnrJ5xBiWaZTwnelGKaY5J1rHRYBZKD8DBz4U2lH IDBrUtr5uYFAT1+Ct5Fxx6V+2/gwkCI8UNiilmpSPLO96hsrqIej/l6WvdYcGA/b ip8JWgPOz+Wuq8NfR+MnvHQ3mQTAF3jf8eMq2nnaoml5iG64F8fPxh/KDqpgC9N1 sXR554k7g9cccg8GSLIMNC8omBmSuzus7Gpi6O3QBkFOG+Npo91oIK2THuO/mydA 6SRUsYGoAelDUnq3WKXQyk8I78eJq86dF1Za/v5okBUHGzYGziWDsQA6XT4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD79W90M9SdYowrgbUVko234xosowHwYDVR0j BBgwFoAUUtli9anKvi9AiVSJUSaeW9XzJJ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMC81MkQ5NjJGNUE5 Q0FCRTJGNDA4OTU0ODk1MTI2OUU1QkQ1RjMyNDlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJENUYz MjQ5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlF NUJENUYzMjQ5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLjs+t2anbVQFnHmKPWiaDXXB/3jbXr4FqY v/RM09X8B7J/bupwzZKYhHRVVzgzJOb2va9VAsJA/vJ6pJkgGFGWy1ctN6zfydat 9W4DVck63YoWnjw9RSbnXYe1OZzxYxpbI9HnyaLyLxkNScIoeIeZS+iWx6zVPOyY ZX39CHWVvVM1zrCvGQAM6Uj07Tz5bK3TQqv0H36hJk6U2nRBkIgCYCuYRIuBmhR/ g5WP2aRhuMMecXt4Kp8VXZ34NtYnmuSwiZNRvGcOy4mGsuQC4cYYcrzl0OfAI9fR +5Nqw3p42a5ck7kNM4zOR7g9sW1nTAizVC2O6NSeffC0ci5BUMI= -----END CERTIFICATE-----Generated at Thu Jul 24 11:58:49 2025 by rpki-client