$ rpki-client -vvf repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft File: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft (raw, json) Hash identifier: SJVWUug1dDPiTTQnzKS44zzPa7WQ7b3cu0uIu3cv1mA= Subject key identifier: 1C:1A:64:32:91:14:CC:7A:F0:C7:C4:7D:77:E8:83:0E:AE:26:BB:AB Authority key identifier: 52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A Certificate issuer: /CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Certificate serial: 15ADDB63D5AD42DA7D67C4A539EA78F1ED637F18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft Manifest number: 75 Signing time: Mon 30 Jun 2025 00:10:47 +0000 Manifest this update: Mon 30 Jun 2025 00:05:47 +0000 Manifest next update: Thu 03 Jul 2025 09:17:47 +0000 Files and hashes: 1: 52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl (hash: z5jbSK082T1sS/07yxt2qlSBHYgAP36AB/EoumloyhQ=) 2: 3135372e31302e3138342e302f32342d3234203d3e20313532333438.roa (hash: 55sjufMqiAUVQEWT+QA1EUsxab9EOoQxItI4+DBt3EA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ad:db:63:d5:ad:42:da:7d:67:c4:a5:39:ea:78:f1:ed:63:7f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A Validity Not Before: Jun 30 00:05:47 2025 GMT Not After : Jul 3 09:17:47 2025 GMT Subject: CN=1C1A64329114CC7AF0C7C47D77E8830EAE26BBAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ea:c8:3e:6d:f3:ad:2f:55:73:06:5b:aa:9f: 8d:07:27:99:e5:33:62:57:1f:10:84:1f:94:2a:44: 32:71:b3:87:9c:9b:d7:94:c4:ff:01:c2:b8:e4:bc: dc:7f:f0:cf:0e:59:67:02:bc:95:ea:91:75:44:72: 8d:12:48:52:c5:4a:3f:e8:d6:52:39:9c:1a:46:02: ef:e8:e0:03:03:a4:58:47:99:44:b8:37:54:bc:a4: 01:44:66:8d:77:64:f4:08:01:6e:2c:cb:80:6b:a6: 1b:f8:02:dd:1a:f8:84:e8:7f:8d:39:49:4d:bc:09: 37:39:d5:90:12:be:2d:51:aa:14:d1:c0:4e:5d:51: f6:82:6c:2c:12:f9:ff:5b:64:92:2e:c5:0b:d5:b5: df:a0:aa:97:9b:da:8c:09:bb:7b:29:db:0b:03:48: ff:00:73:a0:ab:61:93:1b:50:bb:2e:49:db:20:00: 53:fd:fa:3c:cb:bf:c7:3e:03:8f:dd:68:84:ea:3b: 90:f9:fa:31:11:4c:16:d6:c7:0a:a8:87:35:b1:f4: 1f:9d:0d:c8:b9:0c:c6:96:a0:93:80:eb:ae:9b:40: 35:44:6d:a2:f2:45:96:b5:0d:63:5f:61:20:58:46: 74:6f:b4:ac:29:03:40:9d:2f:43:3e:b3:76:35:de: 9d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1A:64:32:91:14:CC:7A:F0:C7:C4:7D:77:E8:83:0E:AE:26:BB:AB X509v3 Authority Key Identifier: keyid:52:B9:C1:E5:F0:BA:F3:45:C4:0F:2E:79:66:9C:63:CB:39:E5:CF:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10a8590e-e4dc-4416-a6fa-fb78d6dd12d7/0/52B9C1E5F0BAF345C40F2E79669C63CB39E5CF3A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:4e:1e:38:77:05:5a:bd:b6:6f:e5:eb:58:82:71:27:52:cb: 13:13:70:e1:aa:7e:ef:c5:a2:8b:2a:27:73:34:c7:0f:6e:45: cb:77:3d:c3:3d:50:70:28:96:e9:b6:34:a7:71:cc:d3:e0:aa: c5:fc:dd:e7:a6:30:38:00:95:1e:86:a0:dd:f5:44:e7:b7:6d: c5:34:c5:3a:fc:a9:db:ef:e3:7f:e2:87:e3:62:df:0b:8e:16: 94:14:d1:6b:02:94:dd:59:ba:bd:7a:5b:8c:4d:26:92:e5:32: 37:13:cf:27:d2:23:ee:82:b0:54:74:cf:de:a4:1b:3e:d8:68: 6d:66:b3:db:2a:42:82:b5:bd:10:83:6a:37:3a:e7:ac:e3:c0: 0c:79:d5:77:78:49:2f:37:dd:f7:81:1e:e3:94:02:c8:20:30: bc:9d:f6:6a:29:2b:0b:b8:c7:44:a5:98:54:08:c8:6a:8a:1a: 72:9d:e1:03:63:5f:ae:c8:91:4f:78:81:b9:89:8b:45:c7:6f: 9a:bc:96:b9:e6:e8:0f:4c:20:0b:1f:10:9c:b0:8d:3b:7d:30: 67:80:fc:4c:7b:9a:c6:6e:eb:ac:87:0e:2d:24:5a:08:41:9b: b2:8c:9a:cd:c6:c1:75:77:98:26:5a:54:44:bd:21:d1:90:38: 56:94:24:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFa3bY9WtQtp9Z8SlOep48e1jfxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0Iz OUU1Q0YzQTAeFw0yNTA2MzAwMDA1NDdaFw0yNTA3MDMwOTE3NDdaMDMxMTAvBgNV BAMTKDFDMUE2NDMyOTExNENDN0FGMEM3QzQ3RDc3RTg4MzBFQUUyNkJCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj6sg+bfOtL1VzBluqn40HJ5nl M2JXHxCEH5QqRDJxs4ecm9eUxP8BwrjkvNx/8M8OWWcCvJXqkXVEco0SSFLFSj/o 1lI5nBpGAu/o4AMDpFhHmUS4N1S8pAFEZo13ZPQIAW4sy4Brphv4At0a+ITof405 SU28CTc51ZASvi1RqhTRwE5dUfaCbCwS+f9bZJIuxQvVtd+gqpeb2owJu3sp2wsD SP8Ac6CrYZMbULsuSdsgAFP9+jzLv8c+A4/daITqO5D5+jERTBbWxwqohzWx9B+d Dci5DMaWoJOA666bQDVEbaLyRZa1DWNfYSBYRnRvtKwpA0CdL0M+s3Y13p1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHBpkMpEUzHrwx8R9d+iDDq4mu6swHwYDVR0j BBgwFoAUUrnB5fC680XEDy55ZpxjyznlzzowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGE4NTkwZS1lNGRjLTQ0MTYtYTZmYS1mYjc4ZDZkZDEyZDcvMC81MkI5QzFFNUYw QkFGMzQ1QzQwRjJFNzk2NjlDNjNDQjM5RTVDRjNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYzQ0IzOUU1 Q0YzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBhODU5MGUtZTRkYy00NDE2LWE2 ZmEtZmI3OGQ2ZGQxMmQ3LzAvNTJCOUMxRTVGMEJBRjM0NUM0MEYyRTc5NjY5QzYz Q0IzOUU1Q0YzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNOHjh3BVq9tm/l61iCcSdSyxMTcOGqfu/F oosqJ3M0xw9uRct3PcM9UHAolum2NKdxzNPgqsX83eemMDgAlR6GoN31ROe3bcU0 xTr8qdvv43/ih+Ni3wuOFpQU0WsClN1Zur16W4xNJpLlMjcTzyfSI+6CsFR0z96k Gz7YaG1ms9sqQoK1vRCDajc656zjwAx51Xd4SS833feBHuOUAsggMLyd9mopKwu4 x0SlmFQIyGqKGnKd4QNjX67IkU94gbmJi0XHb5q8lrnm6A9MIAsfEJywjTt9MGeA /Ex7msZu66yHDi0kWghBm7KMms3GwXV3mCZaVES9IdGQOFaUJD8= -----END CERTIFICATE-----Generated at Mon Jun 30 13:03:55 2025 by rpki-client