$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: MG23K9e5DUct+8EQYz8Tax0lZjsMKBfgi9mDxvLBTJM= Subject key identifier: D8:34:24:70:05:83:44:2F:32:75:4F:4F:61:06:E0:C1:33:F1:31:85 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 6ADE433AB657589EB454327780236B311E6A008D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 014F Signing time: Sun 20 Jul 2025 12:02:13 +0000 Manifest this update: Sun 20 Jul 2025 11:57:13 +0000 Manifest next update: Wed 23 Jul 2025 22:50:13 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: IbilM14Tghq0s15Jun72yk+UFwN4B/MVdRN8dmwioxY=) 2: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: EtmSwffCSumnGoHCYMz0D6rX07xL21x9ZEhlnuCLNB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:de:43:3a:b6:57:58:9e:b4:54:32:77:80:23:6b:31:1e:6a:00:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Jul 20 11:57:13 2025 GMT Not After : Jul 23 22:50:13 2025 GMT Subject: CN=D83424700583442F32754F4F6106E0C133F13185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:61:88:27:72:c5:62:46:56:ec:77:51:7d:71: 66:c6:05:09:a4:1c:e0:4e:5a:0c:65:d3:41:11:b7: 49:a6:77:30:e6:9a:ae:97:39:f3:2d:65:9c:4c:57: 5a:77:5b:25:c7:86:a3:82:71:9a:59:9d:8f:d1:4f: d5:d7:2b:8f:d4:d9:2d:a1:c6:5a:d8:04:15:7c:26: 6b:2d:f5:1d:91:d2:2d:58:a2:d5:08:fd:62:d1:cc: 50:31:a3:10:ae:59:c5:37:fb:c6:25:15:54:f7:e1: 5c:6e:35:9a:d5:c8:1e:45:0d:d5:71:0e:5f:c8:03: c5:a7:64:a8:37:35:59:8c:28:9e:8b:8c:16:42:60: 9e:c2:1e:5c:28:58:1f:7e:8e:1c:eb:a8:07:ba:96: 7d:0f:6c:95:c7:c4:25:d4:14:66:78:66:02:40:e6: ad:22:a7:8c:ce:6e:b4:82:ce:aa:ac:b4:86:74:cf: 01:3a:27:6a:91:d7:81:11:0b:44:ba:ba:ab:a8:82: c0:57:66:e1:f6:3d:9f:39:2b:b7:c9:6d:47:e6:a2: 9c:cf:a3:fc:53:d9:7b:bd:02:31:ba:68:54:af:39: f4:c1:bc:0c:d2:d5:aa:a2:d5:84:f8:b6:70:0c:3b: 23:f6:11:da:e2:46:55:54:68:57:2f:7f:ac:3b:48: cd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:34:24:70:05:83:44:2F:32:75:4F:4F:61:06:E0:C1:33:F1:31:85 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e8:d1:42:c6:f5:ad:4e:47:85:8d:b9:8b:24:a9:9d:14:85: c5:ea:58:85:7d:f4:5c:62:31:a9:13:05:fa:fa:fc:3b:4e:c3: cc:14:21:41:05:cc:94:a2:de:bb:1b:14:c8:96:3a:1d:d0:f9: 75:d9:39:8d:4f:38:39:de:6f:22:65:6b:23:2f:dd:aa:4d:65: 59:89:e2:cd:2c:23:c5:8b:0f:9e:77:48:94:b4:f6:05:71:fa: 3d:a5:d8:12:03:79:0e:cd:2c:23:53:f9:f6:5d:5d:fe:b1:2b: 9a:2f:8e:c6:c6:4a:24:02:e3:49:c3:7e:48:7c:9f:59:b2:54: 0a:d0:29:31:04:66:3f:ab:85:e8:4a:a0:09:4c:69:b9:a9:6b: 03:43:3e:d6:99:8b:04:b6:d0:39:9b:22:2a:c6:7a:5e:69:cc: fc:77:2d:bd:8b:98:51:a2:4b:71:a9:21:57:db:81:4c:ce:f4: d7:d0:4c:b6:c2:8a:65:33:4c:83:7f:66:06:72:13:6a:ce:e2: 4f:e5:b7:40:28:50:fc:bd:42:0e:fc:1b:a1:1b:c1:c3:44:3d: 48:d6:41:a1:29:58:da:4e:75:c5:37:fc:e5:6a:92:95:02:7a: d6:f6:da:6a:a9:99:af:13:0f:d6:6d:6e:3d:d3:68:5d:72:81: 0e:ad:96:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUat5DOrZXWJ60VDJ3gCNrMR5qAI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTA3MjAxMTU3MTNaFw0yNTA3MjMyMjUwMTNaMDMxMTAvBgNV BAMTKEQ4MzQyNDcwMDU4MzQ0MkYzMjc1NEY0RjYxMDZFMEMxMzNGMTMxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYYgncsViRlbsd1F9cWbGBQmk HOBOWgxl00ERt0mmdzDmmq6XOfMtZZxMV1p3WyXHhqOCcZpZnY/RT9XXK4/U2S2h xlrYBBV8Jmst9R2R0i1YotUI/WLRzFAxoxCuWcU3+8YlFVT34VxuNZrVyB5FDdVx Dl/IA8WnZKg3NVmMKJ6LjBZCYJ7CHlwoWB9+jhzrqAe6ln0PbJXHxCXUFGZ4ZgJA 5q0ip4zObrSCzqqstIZ0zwE6J2qR14ERC0S6uquogsBXZuH2PZ85K7fJbUfmopzP o/xT2Xu9AjG6aFSvOfTBvAzS1aqi1YT4tnAMOyP2EdriRlVUaFcvf6w7SM0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2DQkcAWDRC8ydU9PYQbgwTPxMYUwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7o0ULG9a1OR4WNuYskqZ0UhcXqWIV99Fxi MakTBfr6/DtOw8wUIUEFzJSi3rsbFMiWOh3Q+XXZOY1PODnebyJlayMv3apNZVmJ 4s0sI8WLD553SJS09gVx+j2l2BIDeQ7NLCNT+fZdXf6xK5ovjsbGSiQC40nDfkh8 n1myVArQKTEEZj+rhehKoAlMabmpawNDPtaZiwS20DmbIirGel5pzPx3Lb2LmFGi S3GpIVfbgUzO9NfQTLbCimUzTIN/ZgZyE2rO4k/lt0AoUPy9Qg78G6EbwcNEPUjW QaEpWNpOdcU3/OVqkpUCetb22mqpma8TD9Ztbj3TaF1ygQ6tljo= -----END CERTIFICATE-----Generated at Mon Jul 21 13:04:36 2025 by rpki-client