$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: 6Ur8CpB4zSxXXy+1fjhNxFET0J1dX/1ki+/gxpeLWCU= Subject key identifier: 92:28:6B:4C:DF:04:95:06:70:83:7D:27:BB:CB:F2:B1:59:4C:63:15 Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 5CC5AE297F5A38ED1F9CB84D13CD76C16046B5ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: 5F Signing time: Sat 10 May 2025 16:50:45 +0000 Manifest this update: Sat 10 May 2025 16:45:45 +0000 Manifest next update: Tue 13 May 2025 19:35:45 +0000 Files and hashes: 1: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: 55sjufMqiAUVQEWT+QA1EUsxab9EOoQxItI4+DBt3EA=) 2: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: lI/2epQxrKCt9d23qDekyXKMz8uoUSgkR4XldesSuO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c5:ae:29:7f:5a:38:ed:1f:9c:b8:4d:13:cd:76:c1:60:46:b5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: May 10 16:45:45 2025 GMT Not After : May 13 19:35:45 2025 GMT Subject: CN=92286B4CDF04950670837D27BBCBF2B1594C6315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7b:52:d9:e1:e0:f4:d7:bb:4e:cf:4d:9a:ed: f3:62:e4:5a:4d:b1:b5:24:c9:e0:da:f2:e0:52:e6: 89:2f:96:0a:64:0b:ca:0d:c4:31:10:91:8c:38:14: a8:ad:ce:4a:b7:15:87:e3:21:7e:11:92:e2:03:f8: 44:b9:fd:9d:0c:5d:ef:80:0a:3f:fc:0c:32:28:2b: 9d:6c:5e:21:ac:3e:be:22:27:54:ee:b7:f2:80:65: 4a:a0:ae:de:5e:22:42:09:16:eb:02:26:ee:ce:89: 1a:a7:8b:7c:84:d8:b7:6b:90:04:75:77:f4:0c:f1: 51:04:10:9d:4d:8e:5a:c7:d7:1c:db:f4:f3:1b:30: c6:ae:b0:47:e3:96:b0:42:a9:e0:ee:60:c1:84:01: d6:f7:69:6b:4a:97:95:de:bc:f2:86:fd:4b:2e:5e: ab:dd:98:9a:9f:22:db:33:82:4a:8d:0c:ba:23:8c: f2:26:56:34:19:6f:b7:15:73:9c:ca:3d:1f:45:f7: 52:a4:dc:64:0d:21:16:a6:c5:be:90:01:6b:16:58: 23:b2:8f:3d:87:bd:c6:64:ad:9e:2f:e4:7d:07:3a: 01:40:5c:b0:68:d6:f1:ca:68:5b:dd:aa:49:e7:ac: c6:8b:23:81:42:14:88:05:57:61:b5:5f:82:e8:0e: 60:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:28:6B:4C:DF:04:95:06:70:83:7D:27:BB:CB:F2:B1:59:4C:63:15 X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:8a:be:14:8a:5a:0a:27:a5:bc:6e:e0:78:e9:7b:95:e3:9f: 1e:17:06:f4:5a:aa:97:ec:7a:10:21:b1:f5:37:c1:3f:85:c4: ea:46:ef:e0:94:cc:68:fe:e4:1d:9c:52:4f:9b:28:8b:37:d6: 9f:cf:cf:b9:c9:6d:f9:f3:db:95:f3:ae:d6:5b:e3:4f:0d:49: 1d:a2:db:7f:9f:61:2d:7c:27:37:3d:1a:81:42:ad:e6:35:72: 92:3e:92:4c:68:1f:88:d9:1f:66:91:bc:f2:96:2e:48:1e:be: 58:02:95:45:64:ea:91:c2:26:cc:c8:53:36:a2:5d:2c:c9:cb: 62:e1:eb:ef:8b:9f:b8:45:0a:38:d0:93:4a:35:26:64:f0:05: 07:1d:aa:7b:d3:3a:50:51:4a:c7:d1:78:b5:ea:11:34:b3:0a: 6e:c4:e7:ba:1f:c6:2d:64:57:3f:5c:fb:4c:80:fd:9e:1a:03: 4a:58:92:28:f7:e1:c4:14:44:54:8f:4d:20:15:74:c8:69:5c: 2b:e8:20:22:3f:1c:e4:87:fb:f9:df:54:3c:dc:0f:5a:1e:7c: ed:c2:33:d4:c6:2d:4f:43:2b:ba:d7:a0:62:9f:97:b0:99:6c: af:96:6e:e5:24:11:c4:6a:cc:8e:85:06:dd:e5:f2:2f:81:8b: 75:b2:1c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMWuKX9aOO0fnLhNE812wWBGte0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNTA1MTAxNjQ1NDVaFw0yNTA1MTMxOTM1NDVaMDMxMTAvBgNV BAMTKDkyMjg2QjRDREYwNDk1MDY3MDgzN0QyN0JCQ0JGMkIxNTk0QzYzMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2e1LZ4eD017tOz02a7fNi5FpN sbUkyeDa8uBS5okvlgpkC8oNxDEQkYw4FKitzkq3FYfjIX4RkuID+ES5/Z0MXe+A Cj/8DDIoK51sXiGsPr4iJ1Tut/KAZUqgrt5eIkIJFusCJu7OiRqni3yE2LdrkAR1 d/QM8VEEEJ1NjlrH1xzb9PMbMMausEfjlrBCqeDuYMGEAdb3aWtKl5XevPKG/Usu XqvdmJqfItszgkqNDLojjPImVjQZb7cVc5zKPR9F91Kk3GQNIRamxb6QAWsWWCOy jz2HvcZkrZ4v5H0HOgFAXLBo1vHKaFvdqknnrMaLI4FCFIgFV2G1X4LoDmANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkihrTN8ElQZwg30nu8vysVlMYxUwHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeKvhSKWgonpbxu4Hjpe5Xjnx4XBvRaqpfs ehAhsfU3wT+FxOpG7+CUzGj+5B2cUk+bKIs31p/Pz7nJbfnz25XzrtZb408NSR2i 23+fYS18Jzc9GoFCreY1cpI+kkxoH4jZH2aRvPKWLkgevlgClUVk6pHCJszIUzai XSzJy2Lh6++Ln7hFCjjQk0o1JmTwBQcdqnvTOlBRSsfReLXqETSzCm7E57ofxi1k Vz9c+0yA/Z4aA0pYkij34cQURFSPTSAVdMhpXCvoICI/HOSH+/nfVDzcD1oefO3C M9TGLU9DK7rXoGKfl7CZbK+WbuUkEcRqzI6FBt3l8i+Bi3WyHIA= -----END CERTIFICATE-----Generated at Sun May 11 05:21:20 2025 by rpki-client