$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: iEylMhwMTqX2nYveLs+VEbEGT6r9e9yVi8gF9c/Xq+c= Subject key identifier: 24:D8:B9:B2:8E:E3:F8:1F:ED:E8:63:00:8A:F9:DB:8B:5E:DA:46:D5 Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 061BFCCBE62A2C77FCBE562352E04D32B1709387 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 03C5 Signing time: Wed 02 Jul 2025 10:21:44 +0000 Manifest this update: Wed 02 Jul 2025 10:16:44 +0000 Manifest next update: Sat 05 Jul 2025 14:01:44 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: YeCYfJP9wSZJXoVslOx0ziAxI0pGvgsduh8zeFzT6ak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:1b:fc:cb:e6:2a:2c:77:fc:be:56:23:52:e0:4d:32:b1:70:93:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Jul 2 10:16:44 2025 GMT Not After : Jul 5 14:01:44 2025 GMT Subject: CN=24D8B9B28EE3F81FEDE863008AF9DB8B5EDA46D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:48:3f:96:62:2a:b1:dc:3a:7d:3b:7b:85:39: eb:b6:e2:f6:f8:16:20:f6:32:77:2e:83:cf:94:98: 7a:0a:e4:2d:da:76:e0:6f:2f:38:2c:a4:35:49:42: 82:fa:60:83:5f:b3:f0:29:76:38:2f:ed:8c:6b:1c: c8:54:51:5d:8d:2f:97:98:72:f2:29:e6:4d:3e:6a: 93:08:7b:3b:53:b6:35:3b:82:c0:ac:d7:ad:aa:f1: 8b:ef:b9:ba:5c:7f:89:ef:2f:07:30:6e:d4:7a:d9: 86:d5:2d:92:53:d7:1c:8e:2a:87:57:5e:72:c2:ce: 16:c1:43:ac:8d:5a:99:3f:7c:26:39:13:d3:fe:52: 93:96:a0:8b:16:74:df:1a:01:8f:ef:96:15:b2:ed: 64:67:76:bd:f3:31:90:98:d4:87:dc:48:94:1f:ec: 94:be:86:ca:62:f5:78:0d:b8:2b:62:16:f7:82:b3: ad:e3:ef:2b:ee:f1:ca:be:52:7b:9b:d8:19:68:4b: 59:65:5e:ea:1a:da:11:6b:be:eb:1a:c7:75:55:56: 1c:9a:f4:3f:29:21:e6:2c:58:e0:3f:b4:b8:3a:45: 8e:3f:45:c1:ec:23:8e:1c:92:a2:4f:51:6e:6a:84: 2f:e9:ec:29:76:c8:0c:b1:50:45:2e:aa:65:76:9a: e6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D8:B9:B2:8E:E3:F8:1F:ED:E8:63:00:8A:F9:DB:8B:5E:DA:46:D5 X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d6:09:41:5b:cc:1d:ba:4b:cd:77:ec:f5:2a:07:61:24:50: 69:68:99:02:56:ba:9c:8f:33:d4:95:8e:36:de:4e:72:e2:fd: aa:61:71:8a:06:53:75:4f:2f:c1:19:20:52:1d:36:1b:04:81: b7:ab:21:a9:e3:42:b0:23:cd:de:f5:35:2b:89:dd:a1:ba:46: 6c:08:87:a2:46:4b:7c:ab:04:8d:7d:08:ff:cc:8b:22:47:27: 08:c2:af:8f:76:51:61:9c:3b:98:ba:86:21:86:0d:89:1d:14: a9:eb:b0:2a:39:78:e3:18:14:b7:6d:ab:fa:70:b9:44:0d:77: c8:0e:51:f3:06:cf:5d:4e:6a:dd:a3:2e:e0:4e:a2:9d:c2:17: 19:70:c8:4e:43:b1:e4:20:a6:ef:42:f7:3a:c6:f5:cb:a6:5a: 68:a1:e3:60:66:6b:53:d8:ae:11:53:67:e6:e6:4e:82:6f:3e: b4:6e:e3:4f:34:31:f0:f6:7d:4c:4c:b7:ed:19:e5:01:13:41: 99:d1:1f:bd:c1:e1:2d:6a:66:36:2e:56:ce:48:f4:6f:ae:ab: 47:52:90:b6:73:df:d3:55:ba:d0:80:95:1f:86:7b:c0:81:15: 97:79:11:19:bc:51:4f:69:94:07:16:bd:b6:de:9a:2c:00:cd: ac:22:7c:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBhv8y+YqLHf8vlYjUuBNMrFwk4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTA3MDIxMDE2NDRaFw0yNTA3MDUxNDAxNDRaMDMxMTAvBgNV BAMTKDI0RDhCOUIyOEVFM0Y4MUZFREU4NjMwMDhBRjlEQjhCNUVEQTQ2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwSD+WYiqx3Dp9O3uFOeu24vb4 FiD2Mncug8+UmHoK5C3aduBvLzgspDVJQoL6YINfs/Apdjgv7YxrHMhUUV2NL5eY cvIp5k0+apMIeztTtjU7gsCs162q8Yvvubpcf4nvLwcwbtR62YbVLZJT1xyOKodX XnLCzhbBQ6yNWpk/fCY5E9P+UpOWoIsWdN8aAY/vlhWy7WRndr3zMZCY1IfcSJQf 7JS+hspi9XgNuCtiFveCs63j7yvu8cq+Unub2BloS1llXuoa2hFrvusax3VVVhya 9D8pIeYsWOA/tLg6RY4/RcHsI44ckqJPUW5qhC/p7Cl2yAyxUEUuqmV2muZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJNi5so7j+B/t6GMAivnbi17aRtUwHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbWCUFbzB26S8137PUqB2EkUGlomQJWupyP M9SVjjbeTnLi/aphcYoGU3VPL8EZIFIdNhsEgberIanjQrAjzd71NSuJ3aG6RmwI h6JGS3yrBI19CP/MiyJHJwjCr492UWGcO5i6hiGGDYkdFKnrsCo5eOMYFLdtq/pw uUQNd8gOUfMGz11Oat2jLuBOop3CFxlwyE5DseQgpu9C9zrG9cumWmih42Bma1PY rhFTZ+bmToJvPrRu4080MfD2fUxMt+0Z5QETQZnRH73B4S1qZjYuVs5I9G+uq0dS kLZz39NVutCAlR+Ge8CBFZd5ERm8UU9plAcWvbbemiwAzawifLQ= -----END CERTIFICATE-----Generated at Wed Jul 2 14:18:29 2025 by rpki-client