$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft File: 52145183B5BE1A663FBC5C228102541AC61F9F86.mft (raw, json) Hash identifier: 5MRg/riGDvYat5fAP1jU50vlJy6y6UbNLlWA0aEivCo= Subject key identifier: B1:C8:1B:A2:95:EC:80:2E:38:25:0A:71:17:74:F2:9D:95:8A:8A:BF Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86 Certificate issuer: /CN=52145183B5BE1A663FBC5C228102541AC61F9F86 Certificate serial: 493278E85B5F209BF56E0DE7506325526C3FBC10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft Manifest number: 0487 Signing time: Mon 05 May 2025 09:11:39 +0000 Manifest this update: Mon 05 May 2025 09:06:39 +0000 Manifest next update: Thu 08 May 2025 10:55:39 +0000 Files and hashes: 1: 52145183B5BE1A663FBC5C228102541AC61F9F86.crl (hash: 2erqIf+jY4QTPnDJ2gmtP9pYdO+sC7s4R4JPZ+IwY0c=) 2: 3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (hash: MOwE9NdjkbMsjqSArgWX/DHZff75hmj3QBsAYiIXqhs=) 3: 323430363a396163303a3a2f33322d3438203d3e20313431313134.roa (hash: /hJyfV6PR16JNZ+DEa2S1gpvBiL5SDBd/0mdlnBUhuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 10:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:32:78:e8:5b:5f:20:9b:f5:6e:0d:e7:50:63:25:52:6c:3f:bc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86 Validity Not Before: May 5 09:06:39 2025 GMT Not After : May 8 10:55:39 2025 GMT Subject: CN=B1C81BA295EC802E38250A711774F29D958A8ABF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:9b:28:93:b1:1a:7c:8b:24:96:24:9a:02: a4:39:37:bb:69:f2:1f:4b:53:74:78:1f:85:7c:78: b2:19:d8:71:9b:4a:f8:71:f9:57:b8:b3:2f:0f:cd: ae:e2:59:fd:eb:8c:35:94:67:5e:9e:d3:2b:e2:76: 64:5c:f1:02:45:7f:76:d8:6c:4c:ad:40:43:39:30: 6f:38:bf:df:47:bc:9d:8c:69:3f:8e:c3:fc:f2:77: c4:68:6c:fc:55:14:f8:8f:d4:33:ab:a1:36:17:6a: e1:ad:e0:f0:e4:c3:60:6a:ab:b7:82:87:32:97:82: 1d:48:b4:df:09:a0:eb:ea:0d:68:09:6e:e5:8b:f8: 71:e9:8a:47:a5:9a:46:62:49:45:13:b3:fe:5f:ac: a8:76:9b:e6:dd:01:d8:0b:0b:e7:6b:0d:b9:01:d6: b6:18:36:81:17:1d:67:9b:50:05:d1:15:07:df:09: bb:ad:ae:54:d3:b8:58:89:3b:05:a6:82:81:6f:4a: 3e:7c:da:d0:4c:ef:35:b3:c3:36:9a:91:9c:6a:52: db:cb:aa:a4:71:80:60:69:aa:9e:63:9f:7c:14:7d: 9c:33:eb:40:e0:9c:d4:55:a8:5a:8d:28:ae:2a:f1: e8:86:60:03:7d:29:77:72:e5:ee:0c:b8:ad:7f:90: 3b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C8:1B:A2:95:EC:80:2E:38:25:0A:71:17:74:F2:9D:95:8A:8A:BF X509v3 Authority Key Identifier: keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d7:3b:ae:6b:b8:7e:22:5d:99:af:1c:d7:da:08:a1:9a:66: b9:da:53:98:13:48:59:e1:1a:57:af:85:09:f1:9f:a6:47:96: 68:e4:a3:15:4f:fe:55:35:c3:93:cd:46:69:8c:94:64:92:aa: 7b:f3:96:29:0b:18:d3:b3:7c:83:27:d2:3d:96:2d:f1:9b:c5: d4:be:9f:1a:6e:50:54:1d:0a:d1:47:5f:cb:42:0d:50:93:8a: c3:ca:af:5e:ae:b3:7e:c4:02:9f:84:75:67:d3:3e:8f:28:29: 86:76:28:dc:fe:63:22:cc:7c:30:64:7a:91:d8:22:28:88:62: 1b:e4:93:31:77:65:c7:0c:8a:64:83:ee:b3:2e:ea:3c:4e:ae: 19:a5:8b:ed:0b:99:cb:08:33:b4:80:5f:35:fb:ef:f0:d4:43: e9:fb:c7:ce:8d:5c:a5:60:d9:e7:65:10:c1:b1:cf:b7:3c:d9: 84:f2:98:e9:ef:a5:43:9d:7d:b8:fa:0b:6b:cb:05:c8:7b:76: 88:40:d4:5a:6e:a3:1c:2e:30:48:bf:55:49:d9:31:b9:39:1a: 15:82:aa:6a:8a:ec:58:fd:2e:4f:b4:1c:fa:0a:c6:e7:00:42: 6e:0e:ae:53:61:5e:e3:a3:2b:b9:8c:86:d1:65:7c:7b:df:f0: 2a:b6:19:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTJ46FtfIJv1bg3nUGMlUmw/vBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFD NjFGOUY4NjAeFw0yNTA1MDUwOTA2MzlaFw0yNTA1MDgxMDU1MzlaMDMxMTAvBgNV BAMTKEIxQzgxQkEyOTVFQzgwMkUzODI1MEE3MTE3NzRGMjlEOTU4QThBQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4A5sok7EafIskliSaAqQ5N7tp 8h9LU3R4H4V8eLIZ2HGbSvhx+Ve4sy8Pza7iWf3rjDWUZ16e0yvidmRc8QJFf3bY bEytQEM5MG84v99HvJ2MaT+Ow/zyd8RobPxVFPiP1DOroTYXauGt4PDkw2Bqq7eC hzKXgh1ItN8JoOvqDWgJbuWL+HHpikelmkZiSUUTs/5frKh2m+bdAdgLC+drDbkB 1rYYNoEXHWebUAXRFQffCbutrlTTuFiJOwWmgoFvSj582tBM7zWzwzaakZxqUtvL qqRxgGBpqp5jn3wUfZwz60DgnNRVqFqNKK4q8eiGYAN9KXdy5e4MuK1/kDtpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUscgbopXsgC44JQpxF3TynZWKir8wHwYDVR0j BBgwFoAUUhRRg7W+GmY/vFwigQJUGsYfn4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdlODllOC01M2FhLTQ0ZjYtYjZkOC01ODc5MDc4YmY2NjQvMC81MjE0NTE4M0I1 QkUxQTY2M0ZCQzVDMjI4MTAyNTQxQUM2MUY5Rjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFDNjFG OUY4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3ZTg5ZTgtNTNhYS00NGY2LWI2 ZDgtNTg3OTA3OGJmNjY0LzAvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0 MUFDNjFGOUY4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPXO65ruH4iXZmvHNfaCKGaZrnaU5gTSFnh GlevhQnxn6ZHlmjkoxVP/lU1w5PNRmmMlGSSqnvzlikLGNOzfIMn0j2WLfGbxdS+ nxpuUFQdCtFHX8tCDVCTisPKr16us37EAp+EdWfTPo8oKYZ2KNz+YyLMfDBkepHY IiiIYhvkkzF3ZccMimSD7rMu6jxOrhmli+0LmcsIM7SAXzX77/DUQ+n7x86NXKVg 2edlEMGxz7c82YTymOnvpUOdfbj6C2vLBch7dohA1FpuoxwuMEi/VUnZMbk5GhWC qmqK7Fj9Lk+0HPoKxucAQm4OrlNhXuOjK7mMhtFlfHvf8Cq2GbE= -----END CERTIFICATE-----Generated at Tue May 6 09:46:08 2025 by rpki-client