$ rpki-client -vvf repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft File: 52D962F5A9CABE2F4089548951269E5BD5F3249D.mft (raw, json) Hash identifier: 02nOXZVhyo+7Wojks1SiXErUnwjrk8CWuD401edne4A= Subject key identifier: A2:46:AE:C8:1A:D5:F7:BE:AE:14:28:36:D9:4B:3F:9B:3A:27:D3:1F Authority key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Certificate issuer: /CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Certificate serial: 685947C129E71B92714AA41A46420F7B32CB961D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft Manifest number: 5B Signing time: Sat 10 May 2025 15:50:01 +0000 Manifest this update: Sat 10 May 2025 15:45:01 +0000 Manifest next update: Tue 13 May 2025 20:56:01 +0000 Files and hashes: 1: 52D962F5A9CABE2F4089548951269E5BD5F3249D.crl (hash: bfZrTwADYSNQ8iQf2Y44sFQRkZzvWPntK8X+GHg1LSs=) 2: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: YC5+nsrmWedLDnN0PaZMpSlGmxCfT//FJoWJkorFOm8=) 3: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: kIpsRTz8rsVh7INCm035H5PFs4vQWvdsdTQtSQQkCfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 20:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:59:47:c1:29:e7:1b:92:71:4a:a4:1a:46:42:0f:7b:32:cb:96:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Validity Not Before: May 10 15:45:01 2025 GMT Not After : May 13 20:56:01 2025 GMT Subject: CN=A246AEC81AD5F7BEAE142836D94B3F9B3A27D31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5a:c1:16:24:9c:58:8e:75:f7:5c:02:26:97: 6d:f6:6f:c2:65:9a:e6:01:49:9a:36:e1:77:3b:b1: 8d:5f:20:01:a3:08:55:3b:ea:97:99:bb:f3:1b:54: a5:a5:2e:c5:64:ec:2e:f5:ff:c2:ee:85:34:ff:ef: bc:a5:93:2c:c8:6a:c9:01:13:7b:6e:20:7a:18:a3: 81:4a:1b:79:ef:fe:3c:41:86:0e:b1:c8:78:9e:a4: 15:da:67:ea:00:72:33:02:04:93:31:d9:6d:67:d0: 88:60:7c:59:ae:45:ae:3b:24:88:bb:f1:11:18:1a: 8a:a8:32:55:09:d7:ae:e6:03:31:83:81:00:ad:36: 02:6d:ca:13:3f:13:56:68:c2:27:29:08:77:99:19: 46:1a:d3:17:38:d4:57:c4:e8:ea:df:56:9f:67:cd: b9:75:7e:25:ab:3d:39:2b:0f:ce:2f:2d:d5:a8:15: bf:a4:14:5b:24:ca:e5:43:4d:09:2e:3e:2e:a8:44: 26:a6:0c:2f:d0:b1:3b:46:cd:26:cf:95:6d:ed:75: e4:c1:35:85:29:8d:81:60:c3:8b:02:df:b4:bf:ce: 86:92:65:60:cb:b0:55:4e:d5:bb:d3:1e:e6:5f:a4: f8:d6:4f:52:49:73:f7:05:c5:d1:f7:cc:9a:ed:91: 81:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:46:AE:C8:1A:D5:F7:BE:AE:14:28:36:D9:4B:3F:9B:3A:27:D3:1F X509v3 Authority Key Identifier: keyid:52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ba:09:3c:57:35:9e:3e:ab:6c:4f:e2:c1:8e:32:a5:81:ec: 60:ea:f7:85:a9:5d:e8:a4:c1:39:5d:5d:06:a9:25:45:3c:b6: ad:86:d9:94:c4:eb:e0:d4:73:c9:fa:c4:56:e3:00:99:e7:91: 61:7e:59:a2:2e:1d:93:2f:5b:29:6a:25:2c:53:b8:28:cc:17: b9:27:2d:44:04:5c:c4:a0:2e:84:ce:08:ad:c5:3e:2f:39:e9: a0:29:d6:6a:a8:56:68:c3:cd:c1:fb:a5:b7:fe:57:93:c2:e7: cb:c5:bf:08:3e:d1:35:6b:98:73:a5:22:32:b1:79:c2:84:43: 95:68:3d:06:8a:81:65:06:97:1c:b8:20:77:01:61:b7:31:e1: 2e:87:61:06:8f:30:2c:94:fe:c3:ae:e9:c5:0d:06:39:f5:59: f1:29:92:9f:eb:3e:b2:5c:24:c2:24:cd:d3:5c:1a:e2:06:54: 14:5e:cf:2c:b9:1d:4f:22:00:c1:f7:79:b7:d5:31:88:30:e8: ae:3a:d0:f6:d0:c6:0a:23:8e:f3:49:c3:5a:bb:ec:8d:9f:7e: d8:16:c9:94:1f:65:71:ff:29:8b:fd:ee:a2:ad:78:b5:dc:bc: 5f:b2:5c:b9:55:1d:c3:44:ae:81:a2:fd:f4:e6:d8:a8:86:3c: 26:53:37:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaFlHwSnnG5JxSqQaRkIPezLLlh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJE NUYzMjQ5RDAeFw0yNTA1MTAxNTQ1MDFaFw0yNTA1MTMyMDU2MDFaMDMxMTAvBgNV BAMTKEEyNDZBRUM4MUFENUY3QkVBRTE0MjgzNkQ5NEIzRjlCM0EyN0QzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkWsEWJJxYjnX3XAIml232b8Jl muYBSZo24Xc7sY1fIAGjCFU76peZu/MbVKWlLsVk7C71/8LuhTT/77ylkyzIaskB E3tuIHoYo4FKG3nv/jxBhg6xyHiepBXaZ+oAcjMCBJMx2W1n0IhgfFmuRa47JIi7 8REYGoqoMlUJ167mAzGDgQCtNgJtyhM/E1ZowicpCHeZGUYa0xc41FfE6OrfVp9n zbl1fiWrPTkrD84vLdWoFb+kFFskyuVDTQkuPi6oRCamDC/QsTtGzSbPlW3tdeTB NYUpjYFgw4sC37S/zoaSZWDLsFVO1bvTHuZfpPjWT1JJc/cFxdH3zJrtkYFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUokauyBrV976uFCg22Us/mzon0x8wHwYDVR0j BBgwFoAUUtli9anKvi9AiVSJUSaeW9XzJJ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMC81MkQ5NjJGNUE5 Q0FCRTJGNDA4OTU0ODk1MTI2OUU1QkQ1RjMyNDlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJENUYz MjQ5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlF NUJENUYzMjQ5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE26CTxXNZ4+q2xP4sGOMqWB7GDq94WpXeik wTldXQapJUU8tq2G2ZTE6+DUc8n6xFbjAJnnkWF+WaIuHZMvWylqJSxTuCjMF7kn LUQEXMSgLoTOCK3FPi856aAp1mqoVmjDzcH7pbf+V5PC58vFvwg+0TVrmHOlIjKx ecKEQ5VoPQaKgWUGlxy4IHcBYbcx4S6HYQaPMCyU/sOu6cUNBjn1WfEpkp/rPrJc JMIkzdNcGuIGVBRezyy5HU8iAMH3ebfVMYgw6K460PbQxgojjvNJw1q77I2fftgW yZQfZXH/KYv97qKteLXcvF+yXLlVHcNEroGi/fTm2KiGPCZTN6k= -----END CERTIFICATE-----Generated at Sat May 10 22:23:29 2025 by rpki-client