$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: ZMl+AgJpI+nEWF2nyS6NTFtW+un0QGqKxDsugwqj+ew= Subject key identifier: 8D:E6:FB:15:AC:44:48:BB:4A:CE:9A:6E:6F:F0:1F:76:66:C4:38:8F Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 505F222C612C377EBCA66FD6BF0AC2DB6C94F9C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 03DC Signing time: Fri 22 Aug 2025 03:42:51 +0000 Manifest this update: Fri 22 Aug 2025 03:37:51 +0000 Manifest next update: Mon 25 Aug 2025 04:26:51 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: EAYr0Vj7YpPeGt1JVi1Rcxw1OwKj/6I1shijOY3ijXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:5f:22:2c:61:2c:37:7e:bc:a6:6f:d6:bf:0a:c2:db:6c:94:f9:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Aug 22 03:37:51 2025 GMT Not After : Aug 25 04:26:51 2025 GMT Subject: CN=8DE6FB15AC4448BB4ACE9A6E6FF01F7666C4388F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:6a:0c:f6:6a:43:00:73:83:a6:98:fc:2a: ee:66:11:81:75:48:fe:da:0f:45:e5:13:aa:14:1b: d3:ee:fe:95:fd:05:57:64:db:12:48:9c:49:99:12: 0f:61:aa:b9:d4:41:1a:9e:93:73:97:9f:4e:19:8c: 9c:88:f1:db:e8:08:52:b8:7d:99:a4:81:89:5a:8b: 19:42:fa:bb:b0:6e:f1:8a:17:2e:40:09:8b:51:e8: 6c:2e:b5:76:e0:7d:06:10:f3:fc:e0:6a:33:21:af: 6d:3b:9b:e8:08:33:38:6b:05:96:67:3b:b2:b0:5f: af:26:c6:e4:c9:09:14:6b:9b:f4:6f:77:2b:6e:a5: 84:80:18:32:bc:a1:61:5b:f4:0b:f7:33:97:49:80: 31:1f:51:10:61:5b:92:49:be:23:c4:5b:b0:38:4c: cf:ac:c1:28:a8:6c:8f:87:15:78:00:6d:ca:ed:27: c7:98:f9:74:76:b2:16:c1:c0:e6:2f:54:76:f6:2a: ec:2c:67:12:4d:e6:06:b1:68:f2:e3:32:3d:2e:1a: 5d:f3:f4:68:60:96:85:07:51:03:b0:21:c5:53:de: 81:66:cd:09:17:dd:59:23:45:8e:ee:82:b3:f4:1c: ab:5b:31:dd:54:2e:7e:e4:89:df:29:3a:4e:fc:99: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E6:FB:15:AC:44:48:BB:4A:CE:9A:6E:6F:F0:1F:76:66:C4:38:8F X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f6:30:a5:b1:af:5e:61:87:f7:e8:64:c9:01:cc:95:1d:f9: bf:0c:f0:4b:d7:79:58:fd:42:d6:83:3a:9f:22:1b:d5:22:11: cf:d7:84:d4:84:9b:d3:49:a6:24:d0:7a:e2:4e:60:8a:ec:04: 7c:5f:8f:0a:2e:fc:3a:f4:10:00:f6:33:74:6c:4a:f8:4d:d8: 7c:9a:ac:be:58:07:74:57:95:61:af:e6:cf:f9:df:23:04:81: 5c:67:94:30:9f:bb:00:fb:47:d4:c7:1c:f2:98:5a:93:da:3d: 03:53:87:ca:5b:10:45:cf:d9:42:10:b4:e3:8b:0f:fd:51:83: 0f:ad:f8:7c:fb:bd:a4:e4:b5:36:f1:a3:57:60:f3:4b:cd:8d: e3:de:80:af:bd:d1:a3:32:ae:d3:69:6f:e8:7e:48:87:b0:80: 18:50:e6:e5:8e:0b:0f:f2:67:97:17:44:fe:c3:c3:d3:02:27: 59:5b:35:6b:12:cd:b6:fd:75:f6:6f:51:1d:8a:5b:e0:1e:ee: 27:58:be:89:3e:23:ab:47:ba:9a:f8:ed:d1:07:f8:8b:5d:35: f2:2e:5e:b8:1a:f5:b2:e6:7f:84:f2:d8:43:11:15:78:f5:64: a9:9c:5d:2b:48:a7:6b:8f:ab:b2:7e:1e:12:b7:8e:94:d8:5e: 83:86:e6:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUF8iLGEsN368pm/WvwrC22yU+cIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTA4MjIwMzM3NTFaFw0yNTA4MjUwNDI2NTFaMDMxMTAvBgNV BAMTKDhERTZGQjE1QUM0NDQ4QkI0QUNFOUE2RTZGRjAxRjc2NjZDNDM4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzx2oM9mpDAHODppj8Ku5mEYF1 SP7aD0XlE6oUG9Pu/pX9BVdk2xJInEmZEg9hqrnUQRqek3OXn04ZjJyI8dvoCFK4 fZmkgYlaixlC+ruwbvGKFy5ACYtR6GwutXbgfQYQ8/zgajMhr207m+gIMzhrBZZn O7KwX68mxuTJCRRrm/RvdytupYSAGDK8oWFb9Av3M5dJgDEfURBhW5JJviPEW7A4 TM+swSiobI+HFXgAbcrtJ8eY+XR2shbBwOYvVHb2KuwsZxJN5gaxaPLjMj0uGl3z 9GhgloUHUQOwIcVT3oFmzQkX3VkjRY7ugrP0HKtbMd1ULn7kid8pOk78mcdNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjeb7FaxESLtKzppub/AfdmbEOI8wHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/2MKWxr15hh/foZMkBzJUd+b8M8EvXeVj9 QtaDOp8iG9UiEc/XhNSEm9NJpiTQeuJOYIrsBHxfjwou/Dr0EAD2M3RsSvhN2Hya rL5YB3RXlWGv5s/53yMEgVxnlDCfuwD7R9THHPKYWpPaPQNTh8pbEEXP2UIQtOOL D/1Rgw+t+Hz7vaTktTbxo1dg80vNjePegK+90aMyrtNpb+h+SIewgBhQ5uWOCw/y Z5cXRP7Dw9MCJ1lbNWsSzbb9dfZvUR2KW+Ae7idYvok+I6tHupr47dEH+ItdNfIu Xrga9bLmf4Ty2EMRFXj1ZKmcXStIp2uPq7J+HhK3jpTYXoOG5rg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:46 2025 by rpki-client