$ rpki-client -vvf repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft File: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft (raw, json) Hash identifier: /PDDyiVRklR/QMv8dmi/9hjPc9D9IyTLFucBQUxlmzo= Subject key identifier: D4:44:FB:56:93:1D:C0:FB:7A:DA:37:98:39:C2:93:77:52:5B:54:82 Authority key identifier: 52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 Certificate issuer: /CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Certificate serial: 70AC41C1C35519543978E6A917762FC38B4BB567 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft Manifest number: 0235 Signing time: Thu 05 Jun 2025 00:00:50 +0000 Manifest this update: Wed 04 Jun 2025 23:55:50 +0000 Manifest next update: Sun 08 Jun 2025 10:48:50 +0000 Files and hashes: 1: 3130332e3138302e3136342e302f32342d3234203d3e20313338313331.roa (hash: fKMeJeAwMbkwf1kmZ/AB9YQDJH0OhHULVGJWeX+RPu0=) 2: 52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl (hash: 4SglZ/kyUgdAzyu223yp3xHf2zEEH+ejb9CrCXC3uog=) 3: 3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (hash: itO8sihFgXMUbSQlwLdSsBmvziIF/OpyE/yJGtrY67A=) 4: 3130332e3138302e3136352e302f32342d3234203d3e20313338313331.roa (hash: UDP5vaqP++IAcM6lMBhTtGhgbdITohHwdo+pbRZf5tI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 10:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ac:41:c1:c3:55:19:54:39:78:e6:a9:17:76:2f:c3:8b:4b:b5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52E77B06BC2691C613C7A9872EE1E28FCB8AA245 Validity Not Before: Jun 4 23:55:50 2025 GMT Not After : Jun 8 10:48:50 2025 GMT Subject: CN=D444FB56931DC0FB7ADA379839C29377525B5482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:0d:49:f2:0f:1a:84:6e:ed:0c:ed:24:1a: bc:3a:73:ee:2c:c6:12:38:07:75:52:b2:1a:21:a5: e0:bd:4a:e0:48:1b:4d:98:95:b0:a7:78:26:3a:98: 03:58:57:9d:f7:7e:c3:43:65:c8:ac:c3:6d:23:5e: 20:08:56:46:f7:e0:21:8a:a4:b5:5b:12:6d:10:3b: 35:6d:7b:42:aa:1a:fc:2b:e2:6c:d9:86:18:2f:66: 94:7c:df:ff:bc:43:4e:c1:0a:5d:6a:02:81:bf:8f: b6:84:c8:52:12:b7:5c:43:27:ed:13:68:a2:cd:0e: 17:11:03:88:01:4d:82:3e:e3:42:f2:79:be:d4:43: c9:aa:b2:b6:83:f0:0a:f0:8c:b7:a5:8c:33:4f:b8: 1f:85:21:bf:31:3e:8c:b6:11:f4:50:9e:a6:07:77: 4a:78:8a:60:89:f1:56:a4:9b:40:80:f3:e0:81:3f: 78:89:5d:65:a3:13:7f:2f:2f:fd:83:96:2d:e0:b5: cf:c2:7f:cd:e4:c2:d2:3d:72:f5:72:5a:f0:37:14: e5:ef:c4:67:be:3f:bd:8d:e4:ac:ac:1e:04:ef:37: 5a:c4:0a:d2:e1:7e:a3:39:80:14:38:42:c5:9d:e9: 14:23:3e:ed:b0:94:49:05:f3:f9:47:19:dd:dc:46: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:44:FB:56:93:1D:C0:FB:7A:DA:37:98:39:C2:93:77:52:5B:54:82 X509v3 Authority Key Identifier: keyid:52:E7:7B:06:BC:26:91:C6:13:C7:A9:87:2E:E1:E2:8F:CB:8A:A2:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/52E77B06BC2691C613C7A9872EE1E28FCB8AA245.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ba:fe:84:a4:37:89:3a:f7:78:36:9a:56:7c:c9:be:5d:d0: a1:dc:06:ce:90:e5:5e:6c:39:53:05:fc:ba:ea:0d:3c:0b:10: 83:4d:fd:4e:4e:04:9d:75:96:d7:43:d5:3b:32:85:98:0b:65: b8:b9:e9:84:d7:13:4f:df:95:3d:95:da:47:a6:bb:0d:85:10: e4:c3:8d:5e:3c:e7:6a:79:a4:ca:5b:e0:af:14:d0:8d:ff:47: cb:d4:e0:0a:84:8d:7c:4c:1f:32:f4:0c:92:1e:e2:38:19:b4: 7e:a2:e5:f0:dc:98:74:c0:86:70:8d:4b:92:3a:70:c8:00:7d: 53:48:b6:3f:04:87:00:2b:74:d9:ab:79:5d:e9:3d:b3:cc:6c: 04:a3:fa:50:41:a2:e0:ff:54:ba:d0:e9:27:bb:a3:17:12:6c: 33:b8:09:9e:71:10:73:e7:52:bc:f4:de:c0:5c:ef:ee:77:b0: c0:3a:bb:77:01:41:07:7d:d5:73:d1:ba:11:c0:e4:46:75:b7: 15:ea:fd:a8:aa:94:1d:d9:8e:e6:24:5d:32:7c:95:a5:c6:be: 94:99:6f:3d:de:34:8e:cb:df:ef:66:94:fa:0a:e3:a1:bb:39: 6e:6b:6b:f7:bc:43:49:0c:58:72:69:9d:d9:a9:1b:aa:e4:50: 82:51:0b:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcKxBwcNVGVQ5eOapF3Yvw4tLtWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZD QjhBQTI0NTAeFw0yNTA2MDQyMzU1NTBaFw0yNTA2MDgxMDQ4NTBaMDMxMTAvBgNV BAMTKEQ0NDRGQjU2OTMxREMwRkI3QURBMzc5ODM5QzI5Mzc3NTI1QjU0ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOA1J8g8ahG7tDO0kGrw6c+4s xhI4B3VSshohpeC9SuBIG02YlbCneCY6mANYV533fsNDZcisw20jXiAIVkb34CGK pLVbEm0QOzVte0KqGvwr4mzZhhgvZpR83/+8Q07BCl1qAoG/j7aEyFISt1xDJ+0T aKLNDhcRA4gBTYI+40Lyeb7UQ8mqsraD8ArwjLeljDNPuB+FIb8xPoy2EfRQnqYH d0p4imCJ8Vakm0CA8+CBP3iJXWWjE38vL/2Dli3gtc/Cf83kwtI9cvVyWvA3FOXv xGe+P72N5KysHgTvN1rECtLhfqM5gBQ4QsWd6RQjPu2wlEkF8/lHGd3cRs99AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ET7VpMdwPt62jeYOcKTd1JbVIIwHwYDVR0j BBgwFoAUUud7BrwmkcYTx6mHLuHij8uKokUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzkwODc4Mi00NTIwLTQ1YjQtOTllZC0xOTNlNTFkZjUxYzMvMC81MkU3N0IwNkJD MjY5MUM2MTNDN0E5ODcyRUUxRTI4RkNCOEFBMjQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUyOEZDQjhB QTI0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM5MDg3ODItNDUyMC00NWI0LTk5 ZWQtMTkzZTUxZGY1MWMzLzAvNTJFNzdCMDZCQzI2OTFDNjEzQzdBOTg3MkVFMUUy OEZDQjhBQTI0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE66/oSkN4k693g2mlZ8yb5d0KHcBs6Q5V5s OVMF/LrqDTwLEINN/U5OBJ11ltdD1TsyhZgLZbi56YTXE0/flT2V2kemuw2FEOTD jV4852p5pMpb4K8U0I3/R8vU4AqEjXxMHzL0DJIe4jgZtH6i5fDcmHTAhnCNS5I6 cMgAfVNItj8EhwArdNmreV3pPbPMbASj+lBBouD/VLrQ6Se7oxcSbDO4CZ5xEHPn Urz03sBc7+53sMA6u3cBQQd91XPRuhHA5EZ1txXq/aiqlB3ZjuYkXTJ8laXGvpSZ bz3eNI7L3+9mlPoK46G7OW5ra/e8Q0kMWHJpndmpG6rkUIJRC3g= -----END CERTIFICATE-----Generated at Fri Jun 6 16:55:15 2025 by rpki-client