$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: EZv2DKCpFt3fTDzRnKAEAqZopol4gWBqUrgYG88lqRU= Subject key identifier: AD:41:51:8F:F5:9A:05:B7:36:55:67:13:0B:4F:00:0C:C3:28:55:48 Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 6E84B030FC3DD10FBB4B27E69DCE4D02E071AE0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: 8C Signing time: Fri 09 May 2025 14:22:09 +0000 Manifest this update: Fri 09 May 2025 14:17:09 +0000 Manifest next update: Mon 12 May 2025 22:19:09 +0000 Files and hashes: 1: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: fPmATf3p519D1nsuyIU7bMDgC3vCa3u+pQyHo3JelLE=) 2: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: eTrpqqkIueHdP3kBKmIfuHvX44Oh6lKpnFBgo91RIhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 22:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:84:b0:30:fc:3d:d1:0f:bb:4b:27:e6:9d:ce:4d:02:e0:71:ae:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: May 9 14:17:09 2025 GMT Not After : May 12 22:19:09 2025 GMT Subject: CN=AD41518FF59A05B7365567130B4F000CC3285548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3a:bd:8b:e8:36:24:12:bb:38:0e:f4:a0:e8: 39:20:ac:d6:59:de:54:a9:6e:b4:53:1e:96:46:2f: 8f:6f:bf:62:ba:d9:ca:17:a9:c2:3c:79:3f:e5:4b: 5b:f7:2a:4a:ec:d9:5a:43:2c:41:37:d1:5e:94:90: 73:48:ab:0a:58:8a:6e:01:bf:44:14:9e:86:cd:e1: e6:ab:97:a6:2c:2c:40:8b:1c:86:2e:04:0f:32:25: 28:2f:66:40:4f:c1:fb:d1:58:5f:31:08:92:5f:27: b2:6c:94:7d:eb:c2:4c:4e:1d:93:86:b3:29:ab:79: 98:97:1e:b2:25:e8:c5:5d:dc:a0:17:5b:09:cc:47: 56:4d:5f:53:3f:e9:57:98:2e:34:71:91:49:eb:cc: b7:1b:19:18:46:34:2b:b6:18:f5:d4:cf:67:23:b7: 7d:ba:c0:d0:6f:37:71:aa:c0:1c:a0:2d:90:36:4e: ce:4d:f6:81:3a:33:f9:9c:a5:42:2a:e0:77:12:f1: 52:3a:88:93:d3:37:e3:04:20:79:b0:15:e3:bc:c9: 36:e1:aa:b6:19:4a:65:23:43:e1:94:bd:28:23:e2: 86:26:b8:3e:a7:68:56:22:89:93:c8:f3:ee:6c:d9: 33:25:ac:71:16:c5:5a:df:2e:4a:bb:c9:31:8d:84: 76:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:41:51:8F:F5:9A:05:B7:36:55:67:13:0B:4F:00:0C:C3:28:55:48 X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:69:f4:0b:2b:cf:84:30:21:4d:49:6f:60:33:81:3f:ef:f0: 29:98:d7:ae:3f:dd:cc:a5:2d:bc:30:47:ef:23:5c:67:07:8d: e0:59:85:aa:0e:5e:99:0d:01:ad:bf:c5:5c:d0:f8:d9:1d:80: ee:a9:92:ac:07:eb:36:f7:5d:fa:af:00:95:25:1b:c6:56:ce: fd:f1:32:52:4d:21:44:c7:32:bd:21:20:eb:04:14:09:ae:6a: 26:2d:3e:7f:f0:33:c7:d8:af:d7:8a:43:11:e2:59:ff:2b:e7: f3:d1:97:7c:00:d8:9b:1f:a7:13:26:01:aa:ea:cd:6e:8c:08: 9a:5c:f4:be:48:6f:6e:be:24:cb:73:28:33:a6:cd:45:3b:e1: 7c:c2:e4:94:47:a4:15:af:26:13:3f:f6:0f:f7:8b:7f:ed:e8: 25:89:6d:86:85:7a:92:b6:16:da:bc:cb:b8:39:fb:1e:ae:e0: eb:19:18:44:c3:86:cd:fe:8f:a8:ba:d3:d0:39:3f:88:b9:4f: be:95:ed:dd:de:86:f0:4d:2d:16:31:b9:2d:cc:dd:38:fe:ea: 4c:f1:70:f0:76:be:c9:73:12:15:7d:2f:4d:4f:82:73:4d:20: 4f:0d:31:f0:e1:ca:f9:18:6e:74:a1:e2:e8:65:ad:8e:6b:a7: 84:b9:23:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUboSwMPw90Q+7Syfmnc5NAuBxrgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNTA1MDkxNDE3MDlaFw0yNTA1MTIyMjE5MDlaMDMxMTAvBgNV BAMTKEFENDE1MThGRjU5QTA1QjczNjU1NjcxMzBCNEYwMDBDQzMyODU1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhOr2L6DYkErs4DvSg6DkgrNZZ 3lSpbrRTHpZGL49vv2K62coXqcI8eT/lS1v3Kkrs2VpDLEE30V6UkHNIqwpYim4B v0QUnobN4earl6YsLECLHIYuBA8yJSgvZkBPwfvRWF8xCJJfJ7JslH3rwkxOHZOG symreZiXHrIl6MVd3KAXWwnMR1ZNX1M/6VeYLjRxkUnrzLcbGRhGNCu2GPXUz2cj t326wNBvN3GqwBygLZA2Ts5N9oE6M/mcpUIq4HcS8VI6iJPTN+MEIHmwFeO8yTbh qrYZSmUjQ+GUvSgj4oYmuD6naFYiiZPI8+5s2TMlrHEWxVrfLkq7yTGNhHb3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrUFRj/WaBbc2VWcTC08ADMMoVUgwHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBp9Asrz4QwIU1Jb2AzgT/v8CmY164/3cyl LbwwR+8jXGcHjeBZhaoOXpkNAa2/xVzQ+NkdgO6pkqwH6zb3XfqvAJUlG8ZWzv3x MlJNIUTHMr0hIOsEFAmuaiYtPn/wM8fYr9eKQxHiWf8r5/PRl3wA2JsfpxMmAarq zW6MCJpc9L5Ib26+JMtzKDOmzUU74XzC5JRHpBWvJhM/9g/3i3/t6CWJbYaFepK2 Ftq8y7g5+x6u4OsZGETDhs3+j6i609A5P4i5T76V7d3ehvBNLRYxuS3M3Tj+6kzx cPB2vslzEhV9L01PgnNNIE8NMfDhyvkYbnSh4uhlrY5rp4S5Iys= -----END CERTIFICATE-----Generated at Fri May 9 23:54:33 2025 by rpki-client