$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: ShXFxOcSjS5IcR5qCmhiZ+ouIV8ir/PXT5yupVQnXus= Subject key identifier: 73:AC:67:B1:55:F7:EE:A9:2A:FD:36:31:2A:E5:3A:BB:B3:CC:96:D1 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 496F1325570ED13844033EEBDE21A27A375E7D4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 0145 Signing time: Sun 29 Jun 2025 14:12:14 +0000 Manifest this update: Sun 29 Jun 2025 14:07:14 +0000 Manifest next update: Thu 03 Jul 2025 00:47:14 +0000 Files and hashes: 1: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: eEDNdM+OeMTCGk65RANbDjHhQU9slQ4haaWeb0YK/zs=) 2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: hXkfYf+nz9ZnfdREym/fTXbtiX2Nu0w5Ce/fSSjfGRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6f:13:25:57:0e:d1:38:44:03:3e:eb:de:21:a2:7a:37:5e:7d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: Jun 29 14:07:14 2025 GMT Not After : Jul 3 00:47:14 2025 GMT Subject: CN=73AC67B155F7EEA92AFD36312AE53ABBB3CC96D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:78:09:58:bd:b0:7d:c2:97:11:5e:65:09:86: 48:b0:45:95:d8:ec:5e:ad:d9:19:6b:f3:e4:9c:3c: 71:a8:e9:7f:2f:d4:b1:f5:34:39:1a:e6:dd:d1:13: 82:a4:25:db:6c:d8:8c:00:31:3b:3b:2d:c2:38:05: 73:4b:98:4c:44:41:fa:68:ce:0b:7c:08:1a:1c:21: 10:3c:5a:94:57:16:a6:00:5f:e7:19:28:56:37:d8: 3f:ba:59:00:f4:89:93:67:99:5a:d7:0e:25:c5:a5: 0d:a8:de:dc:1d:68:7c:a6:b6:41:ab:1b:dc:d0:8d: c0:57:09:27:9c:62:8b:86:e2:3b:a1:f6:da:0b:82: c5:69:86:cc:18:0b:bf:57:19:78:65:13:39:04:7c: 26:c1:1d:39:17:d6:b1:d5:69:22:64:1d:43:eb:b6: e8:52:66:9e:dd:53:6d:a1:0b:4a:d8:d9:ea:c8:5b: ef:25:79:43:fa:f7:27:1c:8c:74:7f:6b:7d:5c:eb: f7:74:94:f6:a5:01:f3:4a:bc:0a:00:89:28:18:1e: ce:0c:b2:27:e5:80:b1:d2:70:24:f0:12:a3:01:eb: 15:82:1e:54:20:6c:8f:ad:41:d7:93:bb:6c:4d:1d: ac:88:7e:e7:a0:12:d8:ce:eb:0c:55:97:52:03:7f: 1e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AC:67:B1:55:F7:EE:A9:2A:FD:36:31:2A:E5:3A:BB:B3:CC:96:D1 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:22:ad:41:cf:33:6c:00:76:a6:8c:f7:43:9e:38:40:5c:0f: 3b:c3:ee:f4:7e:dc:cd:68:4e:01:d5:49:3f:0f:6d:b6:71:73: 55:ad:f5:9c:ab:3a:55:f5:ba:60:82:75:14:62:17:e9:91:1d: a7:ff:c2:66:d8:e6:16:b3:b7:1d:14:e5:e4:e5:69:24:dd:a2: 92:95:c5:51:54:33:35:1d:f1:57:56:9f:8a:70:00:62:48:8c: 8b:71:a2:d8:07:11:7f:ef:7d:6e:f9:4d:1a:c2:ec:85:fa:18: 49:79:f6:6e:d0:08:f1:87:7a:ba:cb:74:4f:b9:af:a5:ad:c3: c8:d6:04:1b:cc:da:f2:d9:20:65:2e:f4:f6:3a:35:97:09:4e: 05:e9:a8:2c:4a:75:14:06:e8:46:fa:b1:ce:e1:a6:a6:33:6b: 46:b8:36:5e:c5:e0:4e:12:a2:73:19:af:36:c6:e1:c4:4f:44: ef:02:67:21:25:fa:9d:12:29:17:d5:24:7a:51:7c:f7:7d:45: 46:5c:ab:64:9a:1d:aa:db:37:b8:25:b2:e7:fb:4f:ab:f2:3e: 01:53:b1:15:15:15:54:9c:ba:37:fb:4b:f9:d9:31:44:96:9c: 1f:1f:31:b7:ec:e8:3c:56:79:55:87:b4:6d:5f:17:04:21:d9: cd:d9:c4:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSW8TJVcO0ThEAz7r3iGiejdefU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTA2MjkxNDA3MTRaFw0yNTA3MDMwMDQ3MTRaMDMxMTAvBgNV BAMTKDczQUM2N0IxNTVGN0VFQTkyQUZEMzYzMTJBRTUzQUJCQjNDQzk2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeAlYvbB9wpcRXmUJhkiwRZXY 7F6t2Rlr8+ScPHGo6X8v1LH1NDka5t3RE4KkJdts2IwAMTs7LcI4BXNLmExEQfpo zgt8CBocIRA8WpRXFqYAX+cZKFY32D+6WQD0iZNnmVrXDiXFpQ2o3twdaHymtkGr G9zQjcBXCSecYouG4juh9toLgsVphswYC79XGXhlEzkEfCbBHTkX1rHVaSJkHUPr tuhSZp7dU22hC0rY2erIW+8leUP69yccjHR/a31c6/d0lPalAfNKvAoAiSgYHs4M siflgLHScCTwEqMB6xWCHlQgbI+tQdeTu2xNHayIfuegEtjO6wxVl1IDfx7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc6xnsVX37qkq/TYxKuU6u7PMltEwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsirUHPM2wAdqaM90OeOEBcDzvD7vR+3M1o TgHVST8PbbZxc1Wt9ZyrOlX1umCCdRRiF+mRHaf/wmbY5haztx0U5eTlaSTdopKV xVFUMzUd8VdWn4pwAGJIjItxotgHEX/vfW75TRrC7IX6GEl59m7QCPGHerrLdE+5 r6Wtw8jWBBvM2vLZIGUu9PY6NZcJTgXpqCxKdRQG6Eb6sc7hpqYza0a4Nl7F4E4S onMZrzbG4cRPRO8CZyEl+p0SKRfVJHpRfPd9RUZcq2SaHarbN7glsuf7T6vyPgFT sRUVFVScujf7S/nZMUSWnB8fMbfs6DxWeVWHtG1fFwQh2c3ZxPQ= -----END CERTIFICATE-----Generated at Mon Jun 30 19:37:03 2025 by rpki-client