$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: 7yn8o9fAUtZJYuL7kappPbmO/oQMX4H2IQotbGyw63U= Subject key identifier: 72:F0:45:3D:A9:7A:19:E7:82:E3:57:9E:EF:0A:9A:65:C1:91:C3:3A Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 77763E514C5BD8EF0009646C7B03AE940682FD00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 0139 Signing time: Mon 02 Jun 2025 20:12:26 +0000 Manifest this update: Mon 02 Jun 2025 20:07:26 +0000 Manifest next update: Thu 05 Jun 2025 21:54:26 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: hXkfYf+nz9ZnfdREym/fTXbtiX2Nu0w5Ce/fSSjfGRo=) 2: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: QcLERYdKYXglAmVwLBGA01ofQ12yc0hJ7YfWcHNQ7R4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 21:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:76:3e:51:4c:5b:d8:ef:00:09:64:6c:7b:03:ae:94:06:82:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Jun 2 20:07:26 2025 GMT Not After : Jun 5 21:54:26 2025 GMT Subject: CN=72F0453DA97A19E782E3579EEF0A9A65C191C33A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:ea:95:1a:04:60:f7:19:76:69:a3:84:cd: 25:04:7b:54:e5:56:c5:f7:86:b2:20:bb:e4:4f:cd: 9a:0d:79:27:54:ee:ec:73:e9:64:1b:2b:1d:1e:44: 0a:fa:b7:93:09:2f:03:ce:39:9f:f0:e0:de:4a:21: 69:6a:64:94:1f:b9:31:8f:fd:02:60:90:4c:b4:1c: 1a:5c:86:4b:07:3c:1e:4c:75:71:ff:cb:d2:fe:de: e0:ec:e7:44:93:7d:f0:05:4b:70:6e:1e:f8:19:29: 6b:c3:22:51:9b:a7:fb:bc:3d:50:54:19:ef:67:81: f8:6a:5c:41:55:ea:34:c3:b5:0d:d3:cd:31:a5:12: c8:21:ca:f8:87:b0:25:fa:d1:e4:41:5c:31:10:bb: 74:0c:19:7e:fd:23:77:82:d9:59:bb:ce:7d:99:c6: 6a:24:75:ac:39:82:39:b9:f3:c9:89:94:49:8a:8f: ff:4d:48:53:48:23:b1:67:cb:ee:02:43:6d:89:8c: ff:be:7c:ea:2c:e6:1d:49:5f:27:9c:27:b8:e9:d7: 53:a3:5b:b3:26:b7:6e:10:1c:69:a1:e7:2a:1f:e3: c5:be:53:5a:26:d1:c5:15:64:7c:0e:6b:cc:88:53: 95:b8:d5:a0:26:30:87:0d:b0:f5:f0:3b:02:fd:98: f2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F0:45:3D:A9:7A:19:E7:82:E3:57:9E:EF:0A:9A:65:C1:91:C3:3A X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:53:87:e2:93:55:b6:f5:26:ec:7a:5a:f0:ba:91:dd:f1:51: 4d:03:21:2e:11:6c:9e:a6:5c:0e:8c:20:69:1e:db:95:7b:11: 68:91:b5:f2:9f:e6:46:35:b7:07:1e:b0:a2:7f:f9:d7:44:d1: ee:32:9e:91:f8:a9:a1:5e:e8:b1:b3:81:3e:1f:aa:e9:cc:c9: 53:42:0d:cb:ce:17:c5:2b:5a:62:2c:bc:38:1b:d6:ec:18:7e: ee:85:4c:ff:33:50:69:fb:88:a8:6a:43:22:66:44:03:21:78: 0e:d8:c0:61:73:ea:c9:5f:17:18:f8:a5:f2:eb:61:94:3a:00: 44:ab:8f:37:0d:a3:2b:b2:b1:0c:43:34:88:71:25:fd:a7:d4: 38:d6:80:00:9e:ac:15:59:c2:cf:38:9f:c6:4e:10:aa:e6:cb: 03:36:28:5c:f1:1c:6d:f5:91:cf:ea:6a:4d:f5:98:6a:de:a4: 0b:4b:9c:ba:dc:56:7f:b3:a1:a8:c2:b2:54:4f:00:61:03:62: 2e:23:c0:67:0c:9a:d0:74:0d:76:a3:67:18:ec:68:7a:63:3e: 18:fa:0e:5a:93:e8:8d:7a:01:6c:7d:e8:ab:4c:8e:07:1b:c9: 84:a3:df:53:b1:29:e2:f8:22:39:ff:29:db:5d:c4:7c:4f:90: 8f:d7:af:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3Y+UUxb2O8ACWRsewOulAaC/QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTA2MDIyMDA3MjZaFw0yNTA2MDUyMTU0MjZaMDMxMTAvBgNV BAMTKDcyRjA0NTNEQTk3QTE5RTc4MkUzNTc5RUVGMEE5QTY1QzE5MUMzM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfs+qVGgRg9xl2aaOEzSUEe1Tl VsX3hrIgu+RPzZoNeSdU7uxz6WQbKx0eRAr6t5MJLwPOOZ/w4N5KIWlqZJQfuTGP /QJgkEy0HBpchksHPB5MdXH/y9L+3uDs50STffAFS3BuHvgZKWvDIlGbp/u8PVBU Ge9ngfhqXEFV6jTDtQ3TzTGlEsghyviHsCX60eRBXDEQu3QMGX79I3eC2Vm7zn2Z xmokdaw5gjm588mJlEmKj/9NSFNII7Fny+4CQ22JjP++fOos5h1JXyecJ7jp11Oj W7Mmt24QHGmh5yof48W+U1om0cUVZHwOa8yIU5W41aAmMIcNsPXwOwL9mPK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcvBFPal6GeeC41ee7wqaZcGRwzowHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVTh+KTVbb1Jux6WvC6kd3xUU0DIS4RbJ6m XA6MIGke25V7EWiRtfKf5kY1twcesKJ/+ddE0e4ynpH4qaFe6LGzgT4fqunMyVNC DcvOF8UrWmIsvDgb1uwYfu6FTP8zUGn7iKhqQyJmRAMheA7YwGFz6slfFxj4pfLr YZQ6AESrjzcNoyuysQxDNIhxJf2n1DjWgACerBVZws84n8ZOEKrmywM2KFzxHG31 kc/qak31mGrepAtLnLrcVn+zoajCslRPAGEDYi4jwGcMmtB0DXajZxjsaHpjPhj6 DlqT6I16AWx96KtMjgcbyYSj31OxKeL4Ijn/KdtdxHxPkI/Xr+c= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:44 2025 by rpki-client