$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: +msdhDm2OAAflp2SfBX3OtB7Y94d31zyd9EliHTpWgg= Subject key identifier: 8A:A3:E4:0C:87:87:2A:D0:85:03:B8:D7:75:03:E9:E7:AE:06:BE:35 Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 7FB1EA20C31E57DAF036568B8F90614A3715873B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: 6A Signing time: Thu 05 Jun 2025 03:40:46 +0000 Manifest this update: Thu 05 Jun 2025 03:35:46 +0000 Manifest next update: Sun 08 Jun 2025 10:59:46 +0000 Files and hashes: 1: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: Cda4c/83Rii4iTkxpBhkT84AkdFQOuWw/CZwTM2EAG0=) 2: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: 55sjufMqiAUVQEWT+QA1EUsxab9EOoQxItI4+DBt3EA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 10:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b1:ea:20:c3:1e:57:da:f0:36:56:8b:8f:90:61:4a:37:15:87:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Jun 5 03:35:46 2025 GMT Not After : Jun 8 10:59:46 2025 GMT Subject: CN=8AA3E40C87872AD08503B8D77503E9E7AE06BE35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:05:05:6a:b2:2d:aa:d4:38:0c:5a:ae:dd:a4: 24:6f:de:33:da:75:84:09:7b:d2:a3:14:a9:ee:d3: 2c:63:8c:3f:28:22:2d:5f:12:fa:0d:35:66:9a:6b: 76:61:05:b9:a3:e8:99:96:cc:c0:21:d8:63:5a:e8: e8:b0:3f:e9:b8:5f:7f:19:a3:a6:82:48:65:c2:58: e1:44:3d:e4:0b:04:2f:02:8e:32:3d:95:bc:08:34: de:07:35:d4:20:7b:5e:80:73:c0:02:72:64:ec:b0: d5:3e:97:d4:6a:44:2d:c9:f1:77:52:3a:76:d4:b0: 8e:db:c6:46:dd:4f:57:57:7a:2a:f9:06:75:f1:3a: 92:80:db:ae:4a:5a:ec:b7:8f:aa:36:c5:03:52:70: 17:ca:f2:a0:cc:23:b8:f2:1a:84:a2:75:42:35:f7: 93:d6:9f:1e:34:51:37:1b:ca:71:14:dc:eb:b9:8f: 42:c1:9b:25:0b:46:d4:57:a1:ce:03:eb:20:37:1e: 3e:5e:b0:c4:07:36:04:54:f2:43:a7:da:20:d7:50: a9:c0:d3:39:1a:29:d8:89:07:13:3d:8c:7d:8a:68: f0:d4:a0:51:4f:ce:86:7c:96:a4:c6:1f:e0:45:e3: 52:39:73:f1:b9:a8:e6:72:35:cd:3a:93:b5:c0:5d: 43:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A3:E4:0C:87:87:2A:D0:85:03:B8:D7:75:03:E9:E7:AE:06:BE:35 X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:69:e1:ca:e6:c2:db:a3:8c:3a:c0:3d:07:28:b1:a6:f3:e0: 20:e8:a6:bb:d8:e5:d4:c7:ae:ec:ca:3b:a3:fc:0c:64:d4:44: 47:43:f1:db:20:d2:13:80:05:21:94:5b:e3:c3:10:53:f3:77: 4a:20:5d:cb:1b:41:2e:01:5d:2c:9b:27:9a:31:2b:f4:62:62: 90:3a:04:df:78:68:6b:a3:7b:19:cf:48:e3:1f:47:f9:be:ab: aa:4c:78:fe:97:d7:ba:be:00:34:1a:ad:b2:98:6b:f9:48:0b: ce:46:a1:35:64:c9:95:7e:e0:f1:74:5b:a6:0a:4b:82:80:b0: bd:12:c4:92:2c:1a:29:94:03:6a:65:43:0a:5f:9a:ba:c4:eb: ea:90:b4:cf:eb:18:c7:44:77:30:af:49:85:30:ae:58:bf:4f: 26:88:70:0d:fc:f3:7d:39:f1:4a:65:4d:c2:ba:4f:9f:6f:2f: 2e:d5:05:e7:c2:a6:d3:1c:2c:54:21:3c:2d:1d:6c:95:5c:b4: 9a:6b:16:59:8e:65:1b:57:f0:ec:0d:a7:ef:36:20:07:27:bc: fd:6c:db:2c:c7:9f:cc:60:e0:87:0c:c8:78:d7:3b:2a:d3:70: e9:fe:05:dd:45:d9:09:cb:74:e4:82:1e:2f:bb:b7:7b:25:8a: 59:f5:10:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7HqIMMeV9rwNlaLj5BhSjcVhzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNTA2MDUwMzM1NDZaFw0yNTA2MDgxMDU5NDZaMDMxMTAvBgNV BAMTKDhBQTNFNDBDODc4NzJBRDA4NTAzQjhENzc1MDNFOUU3QUUwNkJFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfBQVqsi2q1DgMWq7dpCRv3jPa dYQJe9KjFKnu0yxjjD8oIi1fEvoNNWaaa3ZhBbmj6JmWzMAh2GNa6OiwP+m4X38Z o6aCSGXCWOFEPeQLBC8CjjI9lbwINN4HNdQge16Ac8ACcmTssNU+l9RqRC3J8XdS OnbUsI7bxkbdT1dXeir5BnXxOpKA265KWuy3j6o2xQNScBfK8qDMI7jyGoSidUI1 95PWnx40UTcbynEU3Ou5j0LBmyULRtRXoc4D6yA3Hj5esMQHNgRU8kOn2iDXUKnA 0zkaKdiJBxM9jH2KaPDUoFFPzoZ8lqTGH+BF41I5c/G5qOZyNc06k7XAXUP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiqPkDIeHKtCFA7jXdQPp564GvjUwHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlp4crmwtujjDrAPQcosabz4CDoprvY5dTH ruzKO6P8DGTUREdD8dsg0hOABSGUW+PDEFPzd0ogXcsbQS4BXSybJ5oxK/RiYpA6 BN94aGujexnPSOMfR/m+q6pMeP6X17q+ADQarbKYa/lIC85GoTVkyZV+4PF0W6YK S4KAsL0SxJIsGimUA2plQwpfmrrE6+qQtM/rGMdEdzCvSYUwrli/TyaIcA388305 8UplTcK6T59vLy7VBefCptMcLFQhPC0dbJVctJprFlmOZRtX8OwNp+82IAcnvP1s 2yzHn8xg4IcMyHjXOyrTcOn+Bd1F2QnLdOSCHi+7t3sliln1EGc= -----END CERTIFICATE-----Generated at Sat Jun 7 04:03:10 2025 by rpki-client