$ rpki-client -vvf repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft File: 52D962F5A9CABE2F4089548951269E5BD5F3249D.mft (raw, json) Hash identifier: unQn+vDLSLRv3ecrQgh4Hi4EcQaWXcffYrwxrjc+YSE= Subject key identifier: 80:9E:43:0F:C3:84:CD:B0:AE:B4:8A:B5:BF:5E:56:F3:FE:75:04:F1 Authority key identifier: 52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D Certificate issuer: /CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Certificate serial: 750B6BB3192476ACBDC4ED9301316B81CDC52F77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft Manifest number: 73 Signing time: Wed 02 Jul 2025 15:20:01 +0000 Manifest this update: Wed 02 Jul 2025 15:15:01 +0000 Manifest next update: Sat 05 Jul 2025 23:02:01 +0000 Files and hashes: 1: 3130332e3139312e3135342e302f32342d3234203d3e20313439393236.roa (hash: kIpsRTz8rsVh7INCm035H5PFs4vQWvdsdTQtSQQkCfE=) 2: 52D962F5A9CABE2F4089548951269E5BD5F3249D.crl (hash: cL76sGw5IT/WMjyndvxtp2KDu/qDFnMsfJ1xjJXpWrk=) 3: 3130332e3139312e3135352e302f32342d3234203d3e20313439393236.roa (hash: YC5+nsrmWedLDnN0PaZMpSlGmxCfT//FJoWJkorFOm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 23:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:0b:6b:b3:19:24:76:ac:bd:c4:ed:93:01:31:6b:81:cd:c5:2f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52D962F5A9CABE2F4089548951269E5BD5F3249D Validity Not Before: Jul 2 15:15:01 2025 GMT Not After : Jul 5 23:02:01 2025 GMT Subject: CN=809E430FC384CDB0AEB48AB5BF5E56F3FE7504F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d4:42:70:6e:61:ae:4a:51:6f:17:9c:96:70: a9:b1:18:32:49:c2:84:2b:30:05:b9:48:6f:59:83: 74:a4:da:af:36:f4:0a:3f:9d:33:83:18:51:cb:b9: 22:0d:7c:22:32:4b:ca:00:91:00:03:18:15:35:82: 7f:13:28:ac:b1:56:1d:e9:20:8e:d2:ed:23:f7:f1: 12:7f:2b:83:30:97:e1:9c:c1:62:5e:18:84:5c:ef: 54:f4:2b:af:7f:46:f1:79:6e:5e:79:79:17:78:aa: 88:1c:5a:c5:67:14:ca:af:6c:c8:26:70:6a:cc:a2: b7:32:22:db:df:96:ac:3c:cc:c0:6f:b6:ff:7d:b7: 2e:23:fc:4d:5c:2e:89:7c:8e:92:55:a4:99:49:26: 57:83:ad:a5:76:da:6d:5f:59:9d:68:95:b8:5c:22: f0:06:66:29:bc:6b:cb:9c:81:95:0f:35:05:64:c3: d9:88:88:49:72:4c:f9:6b:36:29:0c:15:ec:f8:12: 8b:65:c7:57:6f:22:10:9f:7e:a2:24:58:3c:ea:3c: 87:c5:e1:2e:00:5d:6b:79:ba:24:e6:b5:3d:4b:27: 86:30:1b:ed:a7:b1:ad:76:4c:d4:39:0c:89:20:52: 32:f6:04:84:b3:e1:4d:1a:5c:99:0a:e3:d1:8a:a3: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9E:43:0F:C3:84:CD:B0:AE:B4:8A:B5:BF:5E:56:F3:FE:75:04:F1 X509v3 Authority Key Identifier: keyid:52:D9:62:F5:A9:CA:BE:2F:40:89:54:89:51:26:9E:5B:D5:F3:24:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52D962F5A9CABE2F4089548951269E5BD5F3249D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5eabacd-28eb-4b96-8610-dbb4b06fc8bd/0/52D962F5A9CABE2F4089548951269E5BD5F3249D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:dc:5e:a6:f3:a5:39:36:67:a0:68:32:08:24:1a:67:58:2d: d4:a7:41:a1:cc:a3:10:95:57:55:85:5c:07:29:3b:71:ca:65: 5a:14:a2:19:2f:59:b1:85:f3:f2:9e:0f:2b:6b:d3:0e:31:d5: b4:16:57:06:ca:ae:87:f2:86:c8:d1:ed:78:12:34:4e:f1:18: e9:a9:cf:3d:ab:e0:f8:2b:e5:3d:65:76:86:31:f7:f5:eb:e1: 6d:bd:e5:a7:06:56:9d:a1:11:8c:f4:61:52:92:41:d5:9d:78: 41:93:3a:35:59:df:e8:94:d0:26:5f:23:93:75:5e:1b:30:d6: 9b:69:33:50:62:61:9a:23:d9:ce:87:fa:9e:36:7c:95:0d:a8: fc:b7:1e:3e:d5:bc:28:37:44:5e:88:12:41:40:ed:01:f2:ef: 84:c3:50:b7:9e:03:da:f6:b4:10:d0:23:15:e3:f3:18:db:96: bb:1a:b9:8e:85:48:d8:41:45:86:23:5d:f6:a7:c3:2e:31:af: fa:4d:15:7d:fd:36:9c:91:3e:4f:8e:ac:c9:47:b2:0f:86:05: 9f:09:a3:ab:ab:a8:09:f4:79:b3:eb:e0:49:56:13:7a:23:cf: 6a:72:39:98:28:b5:ef:c3:bb:6a:7e:d4:20:b4:02:2d:df:5d: fb:7d:0f:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQtrsxkkdqy9xO2TATFrgc3FL3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJE NUYzMjQ5RDAeFw0yNTA3MDIxNTE1MDFaFw0yNTA3MDUyMzAyMDFaMDMxMTAvBgNV BAMTKDgwOUU0MzBGQzM4NENEQjBBRUI0OEFCNUJGNUU1NkYzRkU3NTA0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj1EJwbmGuSlFvF5yWcKmxGDJJ woQrMAW5SG9Zg3Sk2q829Ao/nTODGFHLuSINfCIyS8oAkQADGBU1gn8TKKyxVh3p II7S7SP38RJ/K4Mwl+GcwWJeGIRc71T0K69/RvF5bl55eRd4qogcWsVnFMqvbMgm cGrMorcyItvflqw8zMBvtv99ty4j/E1cLol8jpJVpJlJJleDraV22m1fWZ1olbhc IvAGZim8a8ucgZUPNQVkw9mIiElyTPlrNikMFez4Eotlx1dvIhCffqIkWDzqPIfF 4S4AXWt5uiTmtT1LJ4YwG+2nsa12TNQ5DIkgUjL2BISz4U0aXJkK49GKo6uLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgJ5DD8OEzbCutIq1v15W8/51BPEwHwYDVR0j BBgwFoAUUtli9anKvi9AiVSJUSaeW9XzJJ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NWVhYmFjZC0yOGViLTRiOTYtODYxMC1kYmI0YjA2ZmM4YmQvMC81MkQ5NjJGNUE5 Q0FCRTJGNDA4OTU0ODk1MTI2OUU1QkQ1RjMyNDlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlFNUJENUYz MjQ5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjVlYWJhY2QtMjhlYi00Yjk2LTg2 MTAtZGJiNGIwNmZjOGJkLzAvNTJEOTYyRjVBOUNBQkUyRjQwODk1NDg5NTEyNjlF NUJENUYzMjQ5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfcXqbzpTk2Z6BoMggkGmdYLdSnQaHMoxCV V1WFXAcpO3HKZVoUohkvWbGF8/KeDytr0w4x1bQWVwbKrofyhsjR7XgSNE7xGOmp zz2r4Pgr5T1ldoYx9/Xr4W295acGVp2hEYz0YVKSQdWdeEGTOjVZ3+iU0CZfI5N1 Xhsw1ptpM1BiYZoj2c6H+p42fJUNqPy3Hj7VvCg3RF6IEkFA7QHy74TDULeeA9r2 tBDQIxXj8xjblrsauY6FSNhBRYYjXfanwy4xr/pNFX39NpyRPk+OrMlHsg+GBZ8J o6urqAn0ebPr4ElWE3ojz2pyOZgote/Du2p+1CC0Ai3fXft9D+4= -----END CERTIFICATE-----Generated at Thu Jul 3 13:17:06 2025 by rpki-client