$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: FcexyMFKYUct/4vltx+ukIO+8BIl5KemXVYz1vhrtTc= Subject key identifier: 9F:C7:5C:B0:30:2C:58:87:85:B5:96:E6:66:7A:83:4C:BE:DD:68:13 Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 0BCA409177B275C8045F7EFDFFFE78FE87444B45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: D0 Signing time: Thu 05 Jun 2025 12:20:59 +0000 Manifest this update: Thu 05 Jun 2025 12:15:59 +0000 Manifest next update: Sun 08 Jun 2025 15:40:59 +0000 Files and hashes: 1: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: 8uu7GoRI2PnxWE0tw2aDXCqMrdKPJjcdCEjbyI7Ilxw=) 2: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 15:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ca:40:91:77:b2:75:c8:04:5f:7e:fd:ff:fe:78:fe:87:44:4b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Jun 5 12:15:59 2025 GMT Not After : Jun 8 15:40:59 2025 GMT Subject: CN=9FC75CB0302C588785B596E6667A834CBEDD6813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a4:7b:21:f3:57:0d:d1:11:32:86:0f:ba:e3: 09:5f:b7:f0:d7:f8:18:1c:03:2e:9d:bc:38:87:fb: b1:c3:42:9a:4b:17:82:d8:13:33:8d:88:43:db:22: a1:9a:2a:2c:88:1a:1f:fc:20:9c:d0:c9:d5:a5:ea: 17:38:92:b7:1f:86:89:c8:51:d0:64:73:15:cf:93: a7:49:77:0c:92:36:e5:25:58:f0:1e:e3:6c:6a:4c: a7:28:62:f0:3c:ec:2b:6d:e1:93:a5:d7:17:05:c1: 18:31:05:4c:26:18:dd:e8:c8:62:d8:32:d4:ab:1e: 05:e1:37:70:dd:aa:10:42:2c:86:76:74:09:1a:8b: 6d:a8:4c:be:a7:9b:25:e7:fc:12:f0:e9:73:e8:69: 7b:e5:65:cb:d0:87:5b:99:32:63:76:20:98:e7:7c: 06:e8:01:f7:58:de:7b:ff:9e:e4:6c:2c:e4:54:89: 3e:96:e8:cd:be:8a:4d:33:f2:4e:38:48:f3:27:0d: 70:25:7a:2a:05:51:0f:f7:7a:4c:cc:a9:15:94:36: 45:c0:ae:85:d1:e4:10:39:5b:f3:8b:c5:8c:37:e0: 01:6b:c1:5d:09:72:1e:25:45:88:a8:f5:34:30:b2: 07:91:5c:4c:1c:31:e2:e9:95:4b:85:22:3a:96:64: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C7:5C:B0:30:2C:58:87:85:B5:96:E6:66:7A:83:4C:BE:DD:68:13 X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:45:58:45:eb:cf:5f:36:62:5b:6b:35:ac:9d:36:4e:16:7e: 84:2e:0d:b9:7e:24:e6:17:21:eb:36:17:c3:1c:aa:e7:dd:b0: bf:d5:5e:8b:66:14:c6:c1:0a:9c:8e:af:db:61:6a:aa:b5:9c: 96:74:50:d2:bc:9d:8b:d4:ab:be:ca:6f:32:34:5e:4a:59:1d: 49:2b:f3:c5:a8:96:07:e1:53:76:62:fc:05:36:45:8b:76:8d: c9:b4:5e:a6:09:3b:77:c3:6c:8e:66:ee:93:c6:08:38:a4:cf: 26:8c:05:f6:81:48:e3:65:e4:14:9d:ee:be:31:2b:56:53:f5: 39:7a:52:80:3c:1f:7d:05:f4:ae:eb:32:71:ee:21:57:65:2b: eb:38:d2:73:57:8a:44:6b:03:6d:6f:1c:56:d8:bd:c7:cf:9c: 6b:71:cc:80:a5:2d:a8:d1:c8:86:d2:43:88:80:42:9d:ad:39: 12:ff:2c:a2:34:95:b2:d6:1e:76:cc:ae:db:61:51:ab:dc:d1: 1e:2f:da:93:3e:85:00:6b:64:4e:5b:32:31:18:e6:c0:02:59: 19:79:2e:be:f9:2c:6c:1d:ee:d3:47:28:a1:7b:7b:5a:b9:4f: 27:38:26:07:6e:84:92:eb:07:f1:20:2e:c0:4d:a1:f4:cc:57: 55:9a:27:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8pAkXeydcgEX379//54/odES0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTA2MDUxMjE1NTlaFw0yNTA2MDgxNTQwNTlaMDMxMTAvBgNV BAMTKDlGQzc1Q0IwMzAyQzU4ODc4NUI1OTZFNjY2N0E4MzRDQkVERDY4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApHsh81cN0REyhg+64wlft/DX +BgcAy6dvDiH+7HDQppLF4LYEzONiEPbIqGaKiyIGh/8IJzQydWl6hc4krcfhonI UdBkcxXPk6dJdwySNuUlWPAe42xqTKcoYvA87Ctt4ZOl1xcFwRgxBUwmGN3oyGLY MtSrHgXhN3DdqhBCLIZ2dAkai22oTL6nmyXn/BLw6XPoaXvlZcvQh1uZMmN2IJjn fAboAfdY3nv/nuRsLORUiT6W6M2+ik0z8k44SPMnDXAleioFUQ/3ekzMqRWUNkXA roXR5BA5W/OLxYw34AFrwV0Jch4lRYio9TQwsgeRXEwcMeLplUuFIjqWZJK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8dcsDAsWIeFtZbmZnqDTL7daBMwHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1FWEXrz182YltrNaydNk4WfoQuDbl+JOYX Ies2F8McqufdsL/VXotmFMbBCpyOr9thaqq1nJZ0UNK8nYvUq77KbzI0XkpZHUkr 88WolgfhU3Zi/AU2RYt2jcm0XqYJO3fDbI5m7pPGCDikzyaMBfaBSONl5BSd7r4x K1ZT9Tl6UoA8H30F9K7rMnHuIVdlK+s40nNXikRrA21vHFbYvcfPnGtxzIClLajR yIbSQ4iAQp2tORL/LKI0lbLWHnbMrtthUavc0R4v2pM+hQBrZE5bMjEY5sACWRl5 Lr75LGwd7tNHKKF7e1q5Tyc4JgduhJLrB/EgLsBNofTMV1WaJ6w= -----END CERTIFICATE-----Generated at Sat Jun 7 04:03:23 2025 by rpki-client