$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: e7hxZD0ukxbloL7a1wSvmN20TlAiqfb80bXKS1yn+9M= Subject key identifier: 26:03:64:4F:4C:40:C0:EE:D9:66:17:C1:1D:83:31:AA:69:EE:5B:EA Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 20E3FC86C32F9F8590FF74232B276336F8F23892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: DA Signing time: Fri 27 Jun 2025 23:20:58 +0000 Manifest this update: Fri 27 Jun 2025 23:15:58 +0000 Manifest next update: Tue 01 Jul 2025 09:13:58 +0000 Files and hashes: 1: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: rzp0727N6ufzD1zVYl3dJTdxTba9gs1rSjEo9eFYutk=) 2: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) 3: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 09:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e3:fc:86:c3:2f:9f:85:90:ff:74:23:2b:27:63:36:f8:f2:38:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Jun 27 23:15:58 2025 GMT Not After : Jul 1 09:13:58 2025 GMT Subject: CN=2603644F4C40C0EED96617C11D8331AA69EE5BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f3:49:3a:dc:79:ca:8e:ef:27:44:eb:3e:5d: 11:1b:b1:8c:cb:79:c0:d2:4c:63:c6:13:2f:90:87: 67:d9:2c:2e:4e:c5:06:b7:71:91:8f:0b:06:9e:12: 04:ab:ab:52:f5:91:6e:80:e4:6d:37:35:95:9a:4a: 9a:2a:1f:61:d5:4c:ac:f8:af:68:31:2a:c9:9e:d7: 54:a0:b8:eb:e2:5c:fb:43:8d:96:7e:14:b9:fe:31: 91:30:f7:c6:4a:e8:c3:37:b6:44:24:42:e2:79:ba: fe:62:2b:58:4f:e3:82:2b:c9:c4:56:3b:ca:d5:46: cd:13:9f:e9:38:d4:da:ce:22:86:d9:0e:30:e4:1d: b8:14:14:7b:b7:31:ae:50:c7:84:98:d1:db:51:68: ae:e1:ea:fd:6f:00:9e:6b:7b:6e:14:4c:b7:55:71: 0a:e1:15:50:83:bd:35:08:d9:c0:51:51:47:37:dd: 3b:f2:18:fc:09:30:1b:c9:b9:00:b0:21:32:af:7a: ee:9c:62:03:84:a9:ff:6d:4d:50:e1:49:0b:d4:67: dd:1e:78:b3:ff:cb:a7:0d:8e:0e:79:f1:f6:c7:9e: 9e:c8:8e:85:7f:99:e9:7b:ea:de:2a:fd:ec:5b:4c: 9a:d9:2f:18:4d:e6:54:50:60:bd:46:44:f9:6f:4f: 4a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:03:64:4F:4C:40:C0:EE:D9:66:17:C1:1D:83:31:AA:69:EE:5B:EA X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:f0:69:cf:b7:5c:41:0c:ec:5e:94:63:1c:ab:8a:e0:8a:fe: b4:de:7c:c0:39:7f:50:d6:0a:6d:a1:5b:d3:9d:97:1b:ed:d5: 6e:be:3e:50:5f:21:eb:73:65:33:cd:3c:6b:e2:22:d8:8d:b8: 54:22:27:01:37:2c:a0:30:b3:d1:6c:0c:2d:fd:34:a2:ad:ab: ee:cb:87:cb:15:bc:9e:71:e4:50:7f:08:cb:a7:a9:f9:c7:2a: ef:df:22:ff:d3:b5:68:c8:28:7f:f0:7e:7f:c9:4d:c0:ad:4f: 00:d1:38:38:5f:2d:08:a6:ca:f0:78:4a:f0:9b:7c:2b:d4:6a: c4:86:b4:2f:f6:f6:f6:66:a7:fa:1e:47:bc:fb:75:c5:a9:be: 23:50:d6:77:9c:69:c1:44:1c:fd:f8:12:31:bb:5f:54:d0:f4: 47:cc:4e:83:b1:82:e8:c8:28:01:21:4a:1c:e1:d5:6a:cf:56: e9:2a:85:77:83:62:ed:01:8b:f9:90:67:c2:55:17:db:2f:de: 07:63:c2:a0:73:20:de:c1:56:c3:f8:6d:c3:1e:2e:11:e4:70: c4:7f:d4:68:7f:96:c9:8e:c0:d6:8a:4b:9d:7d:d5:e4:30:a2: 65:e6:13:18:f7:90:f4:7e:17:c8:ef:79:bd:96:ab:1c:c8:5d: c7:03:4d:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIOP8hsMvn4WQ/3QjKydjNvjyOJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTA2MjcyMzE1NThaFw0yNTA3MDEwOTEzNThaMDMxMTAvBgNV BAMTKDI2MDM2NDRGNEM0MEMwRUVEOTY2MTdDMTFEODMzMUFBNjlFRTVCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH80k63HnKju8nROs+XREbsYzL ecDSTGPGEy+Qh2fZLC5OxQa3cZGPCwaeEgSrq1L1kW6A5G03NZWaSpoqH2HVTKz4 r2gxKsme11SguOviXPtDjZZ+FLn+MZEw98ZK6MM3tkQkQuJ5uv5iK1hP44IrycRW O8rVRs0Tn+k41NrOIobZDjDkHbgUFHu3Ma5Qx4SY0dtRaK7h6v1vAJ5re24UTLdV cQrhFVCDvTUI2cBRUUc33TvyGPwJMBvJuQCwITKveu6cYgOEqf9tTVDhSQvUZ90e eLP/y6cNjg558fbHnp7IjoV/mel76t4q/exbTJrZLxhN5lRQYL1GRPlvT0pPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJgNkT0xAwO7ZZhfBHYMxqmnuW+owHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3wac+3XEEM7F6UYxyriuCK/rTefMA5f1DW Cm2hW9Odlxvt1W6+PlBfIetzZTPNPGviItiNuFQiJwE3LKAws9FsDC39NKKtq+7L h8sVvJ5x5FB/CMunqfnHKu/fIv/TtWjIKH/wfn/JTcCtTwDRODhfLQimyvB4SvCb fCvUasSGtC/29vZmp/oeR7z7dcWpviNQ1necacFEHP34EjG7X1TQ9EfMToOxgujI KAEhShzh1WrPVukqhXeDYu0Bi/mQZ8JVF9sv3gdjwqBzIN7BVsP4bcMeLhHkcMR/ 1Gh/lsmOwNaKS5191eQwomXmExj3kPR+F8jveb2WqxzIXccDTfw= -----END CERTIFICATE-----Generated at Mon Jun 30 01:01:10 2025 by rpki-client