$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: 8aJ73YIekgNy8Aoknb/m/gpcUCtwPq9cMhWSpO8yUZU= Subject key identifier: B0:0F:2C:F4:35:5C:E1:DD:89:A4:42:3B:FD:90:15:D0:7B:47:BC:40 Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 2954D445EACF824A55E0D067E7E54CC18F0ABE67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: 50 Signing time: Mon 07 Apr 2025 18:30:46 +0000 Manifest this update: Mon 07 Apr 2025 18:25:46 +0000 Manifest next update: Fri 11 Apr 2025 02:20:46 +0000 Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: 55sjufMqiAUVQEWT+QA1EUsxab9EOoQxItI4+DBt3EA=) 2: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: U83nEK46hs5KkOnyRKfQQ+xis1rIlDyTuV0mAzXKbss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 02:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:54:d4:45:ea:cf:82:4a:55:e0:d0:67:e7:e5:4c:c1:8f:0a:be:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Apr 7 18:25:46 2025 GMT Not After : Apr 11 02:20:46 2025 GMT Subject: CN=B00F2CF4355CE1DD89A4423BFD9015D07B47BC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:c5:11:6a:4d:7b:b0:7e:d5:ab:1e:e5:08: 8b:f3:fa:bc:83:77:49:43:41:c8:37:a3:64:78:2e: b7:55:b5:a1:6f:7f:2c:94:fd:b1:81:a0:9c:1d:d8: 65:43:e3:d6:1e:fe:84:5c:a3:dd:c6:ec:32:ce:22: 11:43:fb:16:04:0c:9d:c9:16:b7:00:9b:ba:17:e1: 37:10:d8:91:0d:88:38:a9:e9:6b:8e:93:61:e7:33: 0d:64:6c:e1:dd:b7:02:13:63:e8:f9:80:f9:8d:30: 5d:65:39:a9:a9:5b:c0:69:56:6c:d8:c2:6d:a7:48: b1:60:1c:55:b0:e6:ff:14:5c:cb:87:fe:69:14:dc: 59:c2:37:45:ce:45:1e:c0:e5:ed:04:4d:a4:85:76: c9:4b:fe:f2:f3:c3:16:b7:a6:d4:74:8d:82:79:3d: bb:b9:51:bb:8a:47:30:92:7a:c0:d0:48:51:99:6a: 19:70:0e:f9:17:7f:dc:ab:f1:39:ec:96:8f:a9:e7: a9:88:bf:18:7f:5d:0c:30:2b:8d:cd:03:c2:22:01: 2d:88:46:30:99:af:40:68:6e:48:bf:ac:b0:8d:07: 7e:4f:3b:e2:61:96:db:66:ed:90:19:39:f8:b4:03: 8c:b3:b3:42:d7:e8:e4:37:4e:7f:d9:db:c9:8c:72: b5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0F:2C:F4:35:5C:E1:DD:89:A4:42:3B:FD:90:15:D0:7B:47:BC:40 X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:7a:09:75:ae:aa:9a:84:f2:d6:dd:c2:27:14:d7:e7:ad:a9: f0:52:10:eb:7c:87:be:8f:00:b9:85:70:b2:a9:eb:16:57:e3: ee:83:b6:54:bc:a2:bf:45:69:50:1e:2b:36:80:3e:ce:02:41: 45:cc:97:61:b3:4d:5a:2a:db:29:27:ef:cd:13:a5:a8:c4:6f: b5:40:4c:52:db:97:ab:ec:9c:59:b7:b7:cf:b8:e8:da:82:c5: e2:a0:20:7e:b0:1b:7c:c9:f7:e6:09:e1:15:b1:a9:97:d7:a5: 79:ea:9c:fc:eb:e2:aa:61:ce:71:47:f9:bd:a6:bc:fc:3a:40: 62:94:66:6b:ba:75:ac:2c:e2:6d:29:6d:15:cf:99:36:93:34: 6d:bf:0b:cd:bd:ed:d0:5e:57:f3:86:48:90:2b:64:01:6c:47: 18:dc:c4:00:0f:c0:86:87:54:e9:c7:b5:af:f1:81:9a:13:70: 3e:a8:54:87:73:55:38:06:28:b7:95:37:f4:f7:9e:c8:e2:bb: c7:0a:8a:10:96:5e:30:57:1a:86:ff:e6:5b:70:e3:46:61:81: 1d:5f:62:5c:90:19:56:c9:15:db:e7:25:18:c5:ef:99:81:72: 2d:75:87:9c:1c:a6:51:77:8f:09:34:0c:4f:82:d3:37:80:0a: ad:cb:db:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVTURerPgkpV4NBn5+VMwY8KvmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNTA0MDcxODI1NDZaFw0yNTA0MTEwMjIwNDZaMDMxMTAvBgNV BAMTKEIwMEYyQ0Y0MzU1Q0UxREQ4OUE0NDIzQkZEOTAxNUQwN0I0N0JDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSqMURak17sH7Vqx7lCIvz+ryD d0lDQcg3o2R4LrdVtaFvfyyU/bGBoJwd2GVD49Ye/oRco93G7DLOIhFD+xYEDJ3J FrcAm7oX4TcQ2JENiDip6WuOk2HnMw1kbOHdtwITY+j5gPmNMF1lOampW8BpVmzY wm2nSLFgHFWw5v8UXMuH/mkU3FnCN0XORR7A5e0ETaSFdslL/vLzwxa3ptR0jYJ5 Pbu5UbuKRzCSesDQSFGZahlwDvkXf9yr8Tnslo+p56mIvxh/XQwwK43NA8IiAS2I RjCZr0Bobki/rLCNB35PO+Jhlttm7ZAZOfi0A4yzs0LX6OQ3Tn/Z28mMcrULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsA8s9DVc4d2JpEI7/ZAV0HtHvEAwHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABV6CXWuqpqE8tbdwicU1+etqfBSEOt8h76P ALmFcLKp6xZX4+6DtlS8or9FaVAeKzaAPs4CQUXMl2GzTVoq2ykn780TpajEb7VA TFLbl6vsnFm3t8+46NqCxeKgIH6wG3zJ9+YJ4RWxqZfXpXnqnPzr4qphznFH+b2m vPw6QGKUZmu6daws4m0pbRXPmTaTNG2/C8297dBeV/OGSJArZAFsRxjcxAAPwIaH VOnHta/xgZoTcD6oVIdzVTgGKLeVN/T3nsjiu8cKihCWXjBXGob/5ltw40ZhgR1f YlyQGVbJFdvnJRjF75mBci11h5wcplF3jwk0DE+C0zeACq3L2/w= -----END CERTIFICATE-----Generated at Wed Apr 9 16:43:37 2025 by rpki-client