$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: W9XaqNvbmLqfck9M0+1VQbUfXEc5kEFIudtdoDkzbYc= Subject key identifier: 5D:68:EE:64:7F:21:52:70:72:12:88:2A:AF:D9:4E:DA:AA:91:37:C8 Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 6886FFA7DCD2DD07019BE8D2B8F655DF9224D919 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 03BA Signing time: Sat 07 Jun 2025 23:11:47 +0000 Manifest this update: Sat 07 Jun 2025 23:06:47 +0000 Manifest next update: Tue 10 Jun 2025 23:51:47 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: 4zWCPF85v4LrfnqP6wRTLR038Z/fdOPlBf8ttaWZxQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 23:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:86:ff:a7:dc:d2:dd:07:01:9b:e8:d2:b8:f6:55:df:92:24:d9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Jun 7 23:06:47 2025 GMT Not After : Jun 10 23:51:47 2025 GMT Subject: CN=5D68EE647F2152707212882AAFD94EDAAA9137C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:29:0f:e1:4f:f6:4b:ad:a4:5f:ee:01:b0:c8: b9:75:52:4b:fc:37:1b:e6:9a:6e:3c:0f:b1:c9:d2: 1c:57:78:f1:2e:c5:83:94:6a:89:2c:f3:70:d1:55: a9:6e:13:59:d6:3e:fc:58:e1:93:d3:3a:ea:4f:61: 69:1b:23:23:4c:13:32:f8:d1:3c:2c:9a:17:be:be: 3e:36:37:28:23:23:49:12:80:60:ee:bc:0d:26:7f: 44:cc:cb:94:28:b5:d7:73:94:e2:78:57:bb:48:6e: 89:0c:d4:73:d8:ad:ab:73:68:f9:a9:eb:88:79:86: 84:1a:be:a4:49:7e:0a:e9:3b:7c:29:b7:3f:91:cd: 03:08:24:3c:f7:39:7b:76:6d:66:3c:7d:37:f9:7c: 05:de:a8:91:3f:4c:16:d9:f9:e8:b8:f9:3d:d1:93: 0c:5e:17:ac:0f:24:64:70:89:87:f3:d0:84:5b:54: c3:29:8f:53:0c:85:15:44:7d:2d:f1:4e:c7:1a:2d: bb:42:5e:18:4d:f1:56:38:6d:9f:0c:08:1e:a2:75: ab:d2:cc:61:d1:eb:ba:67:8c:e6:23:bf:b4:c3:70: b2:77:99:db:fe:ce:1e:9a:5c:a7:c5:d0:f0:cb:44: 73:14:12:d4:65:f8:85:64:d0:39:33:7d:a2:fc:0f: 78:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:68:EE:64:7F:21:52:70:72:12:88:2A:AF:D9:4E:DA:AA:91:37:C8 X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d7:00:a7:8c:72:87:47:a8:00:cc:ce:04:83:68:82:88:fd: bf:f4:0d:27:61:86:d0:64:d1:92:a0:78:cf:78:b0:58:01:51: 28:0f:9e:ca:5c:91:5a:6e:a9:7f:9d:1f:55:b6:ca:78:02:70: f9:16:fb:42:41:68:fc:b2:4a:82:08:96:5e:45:54:81:8d:d9: 51:40:0e:42:59:ee:be:7d:72:6f:13:c1:8e:1e:82:e4:23:5e: 59:bd:ff:70:9a:5b:8b:e1:52:94:bf:e0:2d:94:2a:76:e3:89: 23:19:eb:cb:f8:4c:a5:d9:ad:c0:51:26:f2:6a:09:56:e8:b6: d5:2a:37:6d:96:a5:16:03:8b:55:d4:6c:61:22:53:0a:c0:ef: 34:02:ed:8a:14:bb:b2:51:79:96:22:21:0e:c9:a3:22:75:f9: 66:9a:13:c0:96:4e:51:cb:4d:5e:96:2c:cb:36:5d:5e:cc:61: ca:94:c7:aa:99:f3:8f:51:72:78:97:88:f6:dc:59:3d:81:05: 0b:2b:a1:18:d7:b1:eb:ff:17:4b:a8:fd:69:e7:d7:f3:97:b8: 72:f2:ac:96:58:38:56:98:68:2c:5d:39:a0:b6:74:56:21:ca: fc:f6:e9:1f:fc:c1:d7:23:67:06:25:2a:98:96:d7:ea:98:fc: 5f:35:01:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaIb/p9zS3QcBm+jSuPZV35Ik2RkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTA2MDcyMzA2NDdaFw0yNTA2MTAyMzUxNDdaMDMxMTAvBgNV BAMTKDVENjhFRTY0N0YyMTUyNzA3MjEyODgyQUFGRDk0RURBQUE5MTM3QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKQ/hT/ZLraRf7gGwyLl1Ukv8 Nxvmmm48D7HJ0hxXePEuxYOUaoks83DRValuE1nWPvxY4ZPTOupPYWkbIyNMEzL4 0Twsmhe+vj42NygjI0kSgGDuvA0mf0TMy5QotddzlOJ4V7tIbokM1HPYratzaPmp 64h5hoQavqRJfgrpO3wptz+RzQMIJDz3OXt2bWY8fTf5fAXeqJE/TBbZ+ei4+T3R kwxeF6wPJGRwiYfz0IRbVMMpj1MMhRVEfS3xTscaLbtCXhhN8VY4bZ8MCB6idavS zGHR67pnjOYjv7TDcLJ3mdv+zh6aXKfF0PDLRHMUEtRl+IVk0DkzfaL8D3iJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXWjuZH8hUnByEogqr9lO2qqRN8gwHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7XAKeMcodHqADMzgSDaIKI/b/0DSdhhtBk 0ZKgeM94sFgBUSgPnspckVpuqX+dH1W2yngCcPkW+0JBaPyySoIIll5FVIGN2VFA DkJZ7r59cm8TwY4eguQjXlm9/3CaW4vhUpS/4C2UKnbjiSMZ68v4TKXZrcBRJvJq CVbottUqN22WpRYDi1XUbGEiUwrA7zQC7YoUu7JReZYiIQ7JoyJ1+WaaE8CWTlHL TV6WLMs2XV7MYcqUx6qZ849RcniXiPbcWT2BBQsroRjXsev/F0uo/Wnn1/OXuHLy rJZYOFaYaCxdOaC2dFYhyvz26R/8wdcjZwYlKpiW1+qY/F81AVc= -----END CERTIFICATE-----Generated at Sun Jun 8 05:22:56 2025 by rpki-client