$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft (raw, json) Hash identifier: wVWOIJOKLOBh+WOtyQwuJ9uubga5AwhuB3gnUMWrvC8= Subject key identifier: 1F:A4:1F:B7:D0:3B:C6:FB:F5:2C:B4:DB:E8:A3:F4:9C:F2:9F:08:A6 Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Certificate issuer: /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Certificate serial: 4DFFA25F5E1A44801E87BB89CFB955552D2CF141 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft Manifest number: 02F7 Signing time: Sun 29 Jun 2025 08:01:57 +0000 Manifest this update: Sun 29 Jun 2025 07:56:57 +0000 Manifest next update: Wed 02 Jul 2025 13:39:57 +0000 Files and hashes: 1: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw=) 2: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl (hash: ixXJEBfWZlzSiXGCIuiJowCTa53FfoClyp2LwJ+rnpw=) 3: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs=) 4: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ff:a2:5f:5e:1a:44:80:1e:87:bb:89:cf:b9:55:55:2d:2c:f1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Validity Not Before: Jun 29 07:56:57 2025 GMT Not After : Jul 2 13:39:57 2025 GMT Subject: CN=1FA41FB7D03BC6FBF52CB4DBE8A3F49CF29F08A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:28:a8:de:14:c4:92:05:0a:53:93:fb:5c: 43:2a:cc:fd:9f:bc:e4:b2:65:43:3a:5a:c9:e6:3f: 05:5e:0b:73:f3:a1:5e:16:c3:31:be:11:7e:8d:0f: 09:51:fc:81:fd:3f:f7:40:d5:35:05:2f:fe:96:0b: eb:87:71:65:bc:4f:4b:42:90:bf:55:2a:d3:b0:09: 2f:f8:28:02:28:63:0c:ca:31:9f:28:89:87:e6:6f: 64:4d:4d:88:ab:30:ab:38:d3:0f:ae:71:cf:d3:5c: 15:5a:c7:62:5c:53:2b:da:32:0e:7b:14:84:cb:0f: 93:01:32:ab:7f:73:2d:da:cb:64:44:e6:f4:ce:de: e8:42:91:6b:92:b0:70:8e:e9:ca:93:41:6f:66:61: 72:6f:1d:9c:6a:21:a1:a6:f5:95:14:3c:f7:39:50: 90:b1:e3:2d:eb:44:1e:4b:c1:5f:6b:47:c6:b4:30: c8:aa:82:32:fb:d4:49:29:b8:58:ab:ec:23:02:11: 1a:52:fa:c1:3f:21:5d:6a:48:b8:ff:6c:b1:f4:54: 53:65:4d:fd:61:eb:02:f5:97:30:84:fb:c7:6e:dd: 29:3e:52:45:2c:04:60:4e:2f:7b:81:84:08:f7:a2: 81:14:92:fd:aa:1d:e9:1c:b9:b0:4f:99:0b:9b:b0: 2b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A4:1F:B7:D0:3B:C6:FB:F5:2C:B4:DB:E8:A3:F4:9C:F2:9F:08:A6 X509v3 Authority Key Identifier: keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:85:58:d6:a8:0d:b0:e8:b1:2e:e6:76:c8:f0:08:79:7f:3e: 49:75:0d:f3:4f:0b:24:ef:fe:26:9d:e2:fa:c2:ec:d5:b0:ff: 1d:ce:32:d2:af:d4:16:58:46:f5:62:db:40:7c:af:3c:96:c7: 80:1b:da:81:90:f2:e0:38:28:1a:d1:da:38:80:a7:44:17:31: fc:45:9c:e1:90:d3:a2:04:08:81:75:e4:a0:fe:65:8f:a4:c6: 32:22:df:2c:f3:27:e7:56:d0:7e:ed:ee:eb:91:53:54:d2:9b: 82:30:80:9d:e0:ba:43:ac:e0:22:00:5d:a2:78:5f:02:c2:89: 8b:14:44:e0:8c:37:4b:53:45:e6:b4:40:8e:2b:54:b2:93:f0: e6:71:49:5b:47:3d:20:c2:bc:34:9a:d8:c9:5a:4c:78:8c:1d: a6:e2:20:bc:e6:61:39:53:3f:1d:c8:2d:ec:b1:47:4b:4e:9e: be:48:1b:55:a2:ef:3f:32:62:d0:4d:db:5a:b1:9d:27:9c:5f: ee:30:a4:94:7a:a7:0d:3f:a3:34:25:98:b9:6b:05:48:e2:92: 65:c7:c2:18:73:c7:c5:fa:a3:fd:13:ea:ab:b6:54:9d:c2:65: 3d:15:e3:bb:46:e4:d5:a6:9b:82:b9:7b:fb:8f:7f:3d:c9:c8: 94:a6:ad:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTf+iX14aRIAeh7uJz7lVVS0s8UEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE QkM1RkY0QzAeFw0yNTA2MjkwNzU2NTdaFw0yNTA3MDIxMzM5NTdaMDMxMTAvBgNV BAMTKDFGQTQxRkI3RDAzQkM2RkJGNTJDQjREQkU4QTNGNDlDRjI5RjA4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXyio3hTEkgUKU5P7XEMqzP2f vOSyZUM6WsnmPwVeC3PzoV4WwzG+EX6NDwlR/IH9P/dA1TUFL/6WC+uHcWW8T0tC kL9VKtOwCS/4KAIoYwzKMZ8oiYfmb2RNTYirMKs40w+ucc/TXBVax2JcUyvaMg57 FITLD5MBMqt/cy3ay2RE5vTO3uhCkWuSsHCO6cqTQW9mYXJvHZxqIaGm9ZUUPPc5 UJCx4y3rRB5LwV9rR8a0MMiqgjL71EkpuFir7CMCERpS+sE/IV1qSLj/bLH0VFNl Tf1h6wL1lzCE+8du3Sk+UkUsBGBOL3uBhAj3ooEUkv2qHekcubBPmQubsCtXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH6Qft9A7xvv1LLTb6KP0nPKfCKYwHwYDVR0j BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1 RkY0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2 RENEQkM1RkY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2FWNaoDbDosS7mdsjwCHl/Pkl1DfNPCyTv /iad4vrC7NWw/x3OMtKv1BZYRvVi20B8rzyWx4Ab2oGQ8uA4KBrR2jiAp0QXMfxF nOGQ06IECIF15KD+ZY+kxjIi3yzzJ+dW0H7t7uuRU1TSm4IwgJ3gukOs4CIAXaJ4 XwLCiYsUROCMN0tTRea0QI4rVLKT8OZxSVtHPSDCvDSa2MlaTHiMHabiILzmYTlT Px3ILeyxR0tOnr5IG1Wi7z8yYtBN21qxnSecX+4wpJR6pw0/ozQlmLlrBUjikmXH whhzx8X6o/0T6qu2VJ3CZT0V47tG5NWmm4K5e/uPfz3JyJSmrW8= -----END CERTIFICATE-----Generated at Sun Jun 29 19:27:22 2025 by rpki-client