$ rpki-client -vvf repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft File: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft (raw, json) Hash identifier: QDCDxFaHUAVmf56okmYucpG4TY6LU6o5onYMIWvkJXU= Subject key identifier: A4:72:22:C9:BD:07:36:78:A5:4B:36:0D:B1:C2:19:D9:FA:57:9B:8A Authority key identifier: 52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B Certificate issuer: /CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Certificate serial: 0B48810A6934614E813C2937EB3ABB4542BEF2E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft Manifest number: A4 Signing time: Sun 29 Jun 2025 23:32:08 +0000 Manifest this update: Sun 29 Jun 2025 23:27:08 +0000 Manifest next update: Thu 03 Jul 2025 04:59:08 +0000 Files and hashes: 1: 52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl (hash: nwtDMob0g426shfxz1kvKpJ3cDLEa7YLRavf8oYxdQ8=) 2: 3231302e38372e3132332e302f32342d3234203d3e20313532303634.roa (hash: cxNzmi6v2p99HHhR+ggQ6n1CG/x3GBlPxyYmKXCdmXo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 04:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:48:81:0a:69:34:61:4e:81:3c:29:37:eb:3a:bb:45:42:be:f2:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B Validity Not Before: Jun 29 23:27:08 2025 GMT Not After : Jul 3 04:59:08 2025 GMT Subject: CN=A47222C9BD073678A54B360DB1C219D9FA579B8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5d:4d:8f:e5:aa:84:b4:4f:eb:ad:e7:5f:9a: a6:da:d9:35:b8:8d:89:77:e9:bf:a3:41:76:e9:99: f6:26:85:9a:d0:68:83:54:90:48:33:1a:7a:fa:0d: c9:70:91:b9:ba:31:a5:51:a3:ae:bf:7c:42:f6:11: f9:ff:b8:ca:1b:4d:e5:77:bd:6f:3f:ab:6c:6c:3c: c9:b9:31:88:55:e2:73:07:5e:f7:a0:a8:1d:f8:8c: 01:c4:67:88:fc:1c:09:f4:f9:78:7a:92:6b:9e:29: c0:76:07:08:ea:c0:c5:f6:eb:a1:67:80:34:1d:f0: 2c:94:3a:64:47:b4:04:81:a9:4e:8d:c8:33:fb:26: 7f:54:e7:0b:15:4d:74:1b:92:bc:34:ba:ce:fc:f7: b4:5c:a9:13:bc:e0:fa:e0:81:9c:a9:26:28:29:76: 7f:ec:6d:c2:b8:21:08:93:12:cd:b3:ba:6b:24:ef: 6b:84:d1:10:96:fb:fc:86:84:e0:55:7d:02:aa:29: cc:7b:cd:fd:3d:8a:93:7f:00:d5:4c:36:e5:14:06: 12:ec:70:ab:00:0a:f6:ab:82:64:e0:01:7d:04:07: f6:43:84:35:26:9d:10:db:32:13:aa:4f:a9:ec:ef: d1:c1:16:41:8e:35:34:ac:42:ab:d8:ca:52:03:2f: 89:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:72:22:C9:BD:07:36:78:A5:4B:36:0D:B1:C2:19:D9:FA:57:9B:8A X509v3 Authority Key Identifier: keyid:52:FA:38:C2:2C:A0:98:7C:E4:8A:3B:D5:19:1F:FD:A2:AD:39:DB:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31224247-347f-4a57-a79a-cb2c21c9170e/0/52FA38C22CA0987CE48A3BD5191FFDA2AD39DB3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:21:0e:d9:c1:00:76:36:b8:69:92:ab:99:db:5d:0c:29:0f: aa:c4:06:17:40:1e:7e:00:38:20:34:c1:5c:7d:5a:06:ba:ff: 1e:b8:20:31:da:8d:4f:7d:d3:2e:54:45:18:35:1b:dd:15:92: ea:9a:fc:a9:cb:99:26:53:92:ea:3e:50:30:76:71:68:26:ba: 91:73:73:06:12:e9:dd:c4:1d:f9:b9:49:74:b4:1d:c8:6d:6b: cf:ac:bc:d2:09:e8:c8:cb:58:9a:99:ec:c6:a4:99:1b:99:49: f2:d8:49:78:19:88:af:fc:80:f3:a3:bc:24:ca:14:c4:24:5a: b5:1d:49:c5:f2:be:f2:60:6d:a0:57:62:57:ff:94:81:bd:63: 0d:97:32:ec:15:99:e8:ff:29:41:2a:7c:5e:b8:13:32:f1:52: 23:a3:0f:99:6f:41:4c:2a:0c:73:be:a1:27:55:a6:5e:be:ac: 0c:da:09:66:4e:72:b4:92:55:b6:11:f9:b5:fd:9d:04:c4:71: 87:1e:d5:88:a6:4a:3c:b8:4f:4a:b7:7d:3f:92:f7:6a:9e:df: cf:42:f3:7b:6a:73:67:49:d9:f9:af:47:6f:49:80:84:6f:94: 01:3c:f2:7b:6f:91:17:14:2a:7d:a0:df:41:9f:ad:8f:3d:d0: 40:b9:25:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC0iBCmk0YU6BPCk36zq7RUK+8ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJB RDM5REIzQjAeFw0yNTA2MjkyMzI3MDhaFw0yNTA3MDMwNDU5MDhaMDMxMTAvBgNV BAMTKEE0NzIyMkM5QkQwNzM2NzhBNTRCMzYwREIxQzIxOUQ5RkE1NzlCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvXU2P5aqEtE/rredfmqba2TW4 jYl36b+jQXbpmfYmhZrQaINUkEgzGnr6Dclwkbm6MaVRo66/fEL2Efn/uMobTeV3 vW8/q2xsPMm5MYhV4nMHXvegqB34jAHEZ4j8HAn0+Xh6kmueKcB2BwjqwMX266Fn gDQd8CyUOmRHtASBqU6NyDP7Jn9U5wsVTXQbkrw0us7897RcqRO84PrggZypJigp dn/sbcK4IQiTEs2zumsk72uE0RCW+/yGhOBVfQKqKcx7zf09ipN/ANVMNuUUBhLs cKsACvargmTgAX0EB/ZDhDUmnRDbMhOqT6ns79HBFkGONTSsQqvYylIDL4mJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHIiyb0HNnilSzYNscIZ2fpXm4owHwYDVR0j BBgwFoAUUvo4wiygmHzkijvVGR/9oq052zswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTIyNDI0Ny0zNDdmLTRhNTctYTc5YS1jYjJjMjFjOTE3MGUvMC81MkZBMzhDMjJD QTA5ODdDRTQ4QTNCRDUxOTFGRkRBMkFEMzlEQjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZEQTJBRDM5 REIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzEyMjQyNDctMzQ3Zi00YTU3LWE3 OWEtY2IyYzIxYzkxNzBlLzAvNTJGQTM4QzIyQ0EwOTg3Q0U0OEEzQkQ1MTkxRkZE QTJBRDM5REIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEhDtnBAHY2uGmSq5nbXQwpD6rEBhdAHn4A OCA0wVx9Wga6/x64IDHajU990y5URRg1G90Vkuqa/KnLmSZTkuo+UDB2cWgmupFz cwYS6d3EHfm5SXS0Hchta8+svNIJ6MjLWJqZ7MakmRuZSfLYSXgZiK/8gPOjvCTK FMQkWrUdScXyvvJgbaBXYlf/lIG9Yw2XMuwVmej/KUEqfF64EzLxUiOjD5lvQUwq DHO+oSdVpl6+rAzaCWZOcrSSVbYR+bX9nQTEcYce1YimSjy4T0q3fT+S92qe389C 83tqc2dJ2fmvR29JgIRvlAE88ntvkRcUKn2g30GfrY890EC5JXg= -----END CERTIFICATE-----Generated at Wed Jul 2 04:19:12 2025 by rpki-client