$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: 6+OlC+v22q3QaaTsR9OvxY329pZEm0/0ZzoO86muK6M= Subject key identifier: F9:A5:24:60:4A:49:84:36:39:DD:3F:39:2C:08:50:43:80:2F:D2:AD Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 69932D57DC14EEAE5F954331231BD0F9EFA7B1FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 0389 Signing time: Tue 18 Feb 2025 18:22:16 +0000 Manifest this update: Tue 18 Feb 2025 18:17:16 +0000 Manifest next update: Sat 22 Feb 2025 05:49:16 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: Yhf5CW+BeaRmiz4Km2ZjnPj5ybGGO1wH2PRF80qlgqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 05:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:93:2d:57:dc:14:ee:ae:5f:95:43:31:23:1b:d0:f9:ef:a7:b1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Feb 18 18:17:16 2025 GMT Not After : Feb 22 05:49:16 2025 GMT Subject: CN=F9A524604A49843639DD3F392C085043802FD2AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:eb:86:e6:82:bd:d7:c8:7a:26:c2:8f:58: 3d:70:04:19:17:9a:28:a8:4c:db:3e:9d:74:ba:a0: 25:02:35:ae:5c:21:c3:55:1f:ef:5f:cc:a8:93:1b: ca:59:16:a7:a7:ef:5d:1c:72:f7:37:a4:0d:0d:73: 53:34:32:f5:d1:11:6b:ff:dc:34:21:5b:b8:0a:28: b5:6b:e8:e0:02:54:e5:26:68:74:8f:5c:b3:58:6c: a5:a9:7f:55:9b:2a:36:05:1e:d2:4f:e2:4f:5a:cc: 23:fe:87:04:a8:fa:89:a6:72:0d:d6:51:4a:8f:d5: 45:65:c4:ec:81:7b:b8:65:d8:e5:25:0f:0e:c5:33: 6f:f4:8c:26:15:d0:d5:49:e3:47:51:65:53:1c:be: ed:b9:09:27:b7:91:d5:9f:57:9d:2b:46:84:2e:15: a5:a9:f4:bf:e0:ff:46:bd:45:a1:90:09:69:1c:72: 60:35:2f:34:1a:24:04:cb:09:9a:9c:41:9f:b2:14: e3:64:1d:7c:ca:f4:8b:da:b2:a6:4b:f0:47:11:3d: 86:2e:ef:2f:fd:aa:2e:88:0c:3a:8d:1f:47:a3:5b: f7:96:60:4b:82:79:35:45:e1:00:6d:75:5f:48:a0: bc:ff:ac:0b:bf:64:00:6e:24:78:bb:c5:43:c0:cf: 5d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A5:24:60:4A:49:84:36:39:DD:3F:39:2C:08:50:43:80:2F:D2:AD X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:78:b4:e2:77:98:20:93:d2:79:89:01:c9:d4:62:b0:1a:c2: c8:a3:9e:c0:9f:58:d5:4b:59:74:0d:10:ba:7d:4c:23:92:00: 78:af:b0:c8:cc:ad:da:de:8a:f1:49:63:d4:cf:b3:c7:b8:99: 24:6a:ec:75:10:34:39:99:65:38:47:8e:5e:f3:ee:45:91:b5: 45:b2:33:e9:56:6e:a9:09:26:23:d3:08:c7:46:6f:b3:b2:be: 8d:61:ea:c8:99:c0:3a:d0:d2:2d:8d:4c:d6:44:87:32:39:e9: c4:ff:8e:28:a3:8a:cb:4d:c7:1e:9e:d2:21:06:6e:ba:70:a7: 24:b0:f2:5e:da:4d:36:74:04:b7:fa:37:76:0f:18:23:82:74: 52:39:8a:d3:ae:dc:0f:bd:08:5e:18:13:78:d7:19:47:ea:d6: 27:10:cb:00:0d:c6:16:f8:4c:9a:de:ac:51:98:3f:64:e5:bd: e4:a6:8c:59:83:3f:77:96:51:33:0c:9c:ad:84:54:fc:bf:cf: 2f:b7:a4:a8:fb:1d:93:13:13:0c:a1:fc:b1:0a:a6:10:1e:ef: 76:f9:f6:8d:54:5a:66:13:ef:3e:82:10:30:2c:01:f7:b4:0a: ec:ba:db:a1:3d:64:6c:b4:3e:1e:d0:72:fa:fa:d5:1d:fd:f3: 43:23:3c:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaZMtV9wU7q5flUMxIxvQ+e+nsf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTAyMTgxODE3MTZaFw0yNTAyMjIwNTQ5MTZaMDMxMTAvBgNV BAMTKEY5QTUyNDYwNEE0OTg0MzYzOUREM0YzOTJDMDg1MDQzODAyRkQyQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5uuG5oK918h6JsKPWD1wBBkX miioTNs+nXS6oCUCNa5cIcNVH+9fzKiTG8pZFqen710ccvc3pA0Nc1M0MvXREWv/ 3DQhW7gKKLVr6OACVOUmaHSPXLNYbKWpf1WbKjYFHtJP4k9azCP+hwSo+ommcg3W UUqP1UVlxOyBe7hl2OUlDw7FM2/0jCYV0NVJ40dRZVMcvu25CSe3kdWfV50rRoQu FaWp9L/g/0a9RaGQCWkccmA1LzQaJATLCZqcQZ+yFONkHXzK9IvasqZL8EcRPYYu 7y/9qi6IDDqNH0ejW/eWYEuCeTVF4QBtdV9IoLz/rAu/ZABuJHi7xUPAz12JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+aUkYEpJhDY53T85LAhQQ4Av0q0wHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJ4tOJ3mCCT0nmJAcnUYrAawsijnsCfWNVL WXQNELp9TCOSAHivsMjMrdreivFJY9TPs8e4mSRq7HUQNDmZZThHjl7z7kWRtUWy M+lWbqkJJiPTCMdGb7Oyvo1h6siZwDrQ0i2NTNZEhzI56cT/jiijistNxx6e0iEG brpwpySw8l7aTTZ0BLf6N3YPGCOCdFI5itOu3A+9CF4YE3jXGUfq1icQywANxhb4 TJrerFGYP2TlveSmjFmDP3eWUTMMnK2EVPy/zy+3pKj7HZMTEwyh/LEKphAe73b5 9o1UWmYT7z6CEDAsAfe0Cuy626E9ZGy0Ph7Qcvr61R3980MjPJo= -----END CERTIFICATE-----Generated at Wed Feb 19 22:20:02 2025 by rpki-client