$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: IeQIcu/UxUbObW5qKOCUUMJohAixV3MxsZzSuJrXlv4= Subject key identifier: 1A:D9:E0:F5:66:C6:A7:54:3E:1D:89:C3:8B:15:A3:1D:5A:50:70:54 Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 15307F61BE0D5E95F79ED0863A9F7467AC570F20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 03D5 Signing time: Wed 06 Aug 2025 05:01:49 +0000 Manifest this update: Wed 06 Aug 2025 04:56:48 +0000 Manifest next update: Sat 09 Aug 2025 14:56:48 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: 1XR6habQAAAELVISrA/NifA5EcBQlWuuSriN6x668HY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:30:7f:61:be:0d:5e:95:f7:9e:d0:86:3a:9f:74:67:ac:57:0f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Aug 6 04:56:48 2025 GMT Not After : Aug 9 14:56:48 2025 GMT Subject: CN=1AD9E0F566C6A7543E1D89C38B15A31D5A507054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:64:86:84:60:64:84:70:de:15:e4:64:ed: 0d:0e:7d:c0:a0:14:44:db:fa:90:da:7f:81:68:17: d3:c3:ab:46:12:81:08:56:21:e6:36:fa:d2:c0:d9: 47:cb:4f:70:82:99:a0:54:f9:d5:a8:0b:0f:7f:0a: 20:8a:01:69:91:8c:c9:cc:a9:e7:c3:a5:c2:0e:b0: 4b:48:77:20:96:32:f4:83:70:2b:1c:4f:6e:48:e6: b6:34:a9:2c:b2:2d:26:31:7d:69:65:40:ea:74:b4: 29:74:b5:62:ff:f6:ad:a8:86:d2:ea:3f:07:8d:0b: bf:a2:29:7c:3e:80:46:1e:ad:e6:ea:83:b8:06:d7: e3:7c:cc:0e:cd:9b:b6:35:3b:7d:8e:29:43:ce:84: 8e:dd:7f:26:e4:24:d5:d1:08:21:5c:66:d2:9c:6a: 7e:2e:c4:06:a8:25:53:08:3b:9b:0b:47:29:a6:58: 62:6d:c9:dd:a2:57:84:4c:7a:97:06:b4:6a:df:97: 8f:a0:f8:7f:99:02:0e:7e:e7:f0:27:4e:f5:cf:e2: 2f:26:40:fb:75:20:1f:0c:f7:07:19:43:92:73:2d: f1:28:ec:4c:58:e4:7f:9f:1a:ba:98:e3:87:af:a6: 1c:f2:15:f5:fd:a1:5d:2e:93:f4:fb:f7:39:e3:37: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D9:E0:F5:66:C6:A7:54:3E:1D:89:C3:8B:15:A3:1D:5A:50:70:54 X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ed:1a:7f:e4:8b:7f:54:17:60:d3:fd:df:29:59:0a:a6:2e: a0:38:36:49:a3:a5:62:7e:90:c9:67:59:d5:32:81:3f:d5:74: af:f0:0b:12:22:59:c2:de:0c:63:72:2d:fb:ff:71:e5:97:83: b0:f6:04:41:80:d6:82:9f:ae:43:ee:0c:fd:2d:35:fb:73:10: 4e:5d:a0:cc:b8:0b:89:c8:d8:ee:46:9e:25:19:21:4f:e1:4e: d6:8c:91:ca:7b:d0:f4:a2:12:cf:09:5a:95:c0:74:b5:85:91: 53:71:21:bc:c1:21:b3:81:cb:8d:fb:98:97:2f:b4:e1:f2:60: 2c:db:b7:01:41:1a:a2:3f:cd:a5:03:ed:7b:41:ed:6f:d0:46: c8:b5:38:2f:39:0b:43:52:4c:30:e9:8c:20:4f:90:94:97:7a: f2:17:36:9e:2d:bc:4a:e8:e7:fe:18:78:2e:a8:23:04:35:83: 2a:3e:81:7c:af:48:5f:27:15:47:13:9f:47:34:f2:9d:bf:c8: 35:6a:4c:f8:af:fe:e8:eb:a1:1c:65:d1:fa:c1:7e:75:32:9f: 68:9b:47:3d:25:25:c8:f3:39:3c:92:b8:54:c3:e9:ce:bd:7e: a0:5e:75:0b:8a:a7:ac:45:93:79:5b:96:f7:75:2c:a2:6d:ce: c6:8e:73:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTB/Yb4NXpX3ntCGOp90Z6xXDyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTA4MDYwNDU2NDhaFw0yNTA4MDkxNDU2NDhaMDMxMTAvBgNV BAMTKDFBRDlFMEY1NjZDNkE3NTQzRTFEODlDMzhCMTVBMzFENUE1MDcwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0RGSGhGBkhHDeFeRk7Q0OfcCg FETb+pDaf4FoF9PDq0YSgQhWIeY2+tLA2UfLT3CCmaBU+dWoCw9/CiCKAWmRjMnM qefDpcIOsEtIdyCWMvSDcCscT25I5rY0qSyyLSYxfWllQOp0tCl0tWL/9q2ohtLq PweNC7+iKXw+gEYerebqg7gG1+N8zA7Nm7Y1O32OKUPOhI7dfybkJNXRCCFcZtKc an4uxAaoJVMIO5sLRymmWGJtyd2iV4RMepcGtGrfl4+g+H+ZAg5+5/AnTvXP4i8m QPt1IB8M9wcZQ5JzLfEo7ExY5H+fGrqY44evphzyFfX9oV0uk/T79znjN5sdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGtng9WbGp1Q+HYnDixWjHVpQcFQwHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHtGn/ki39UF2DT/d8pWQqmLqA4NkmjpWJ+ kMlnWdUygT/VdK/wCxIiWcLeDGNyLfv/ceWXg7D2BEGA1oKfrkPuDP0tNftzEE5d oMy4C4nI2O5GniUZIU/hTtaMkcp70PSiEs8JWpXAdLWFkVNxIbzBIbOBy437mJcv tOHyYCzbtwFBGqI/zaUD7XtB7W/QRsi1OC85C0NSTDDpjCBPkJSXevIXNp4tvEro 5/4YeC6oIwQ1gyo+gXyvSF8nFUcTn0c08p2/yDVqTPiv/ujroRxl0frBfnUyn2ib Rz0lJcjzOTySuFTD6c69fqBedQuKp6xFk3lblvd1LKJtzsaOc4Q= -----END CERTIFICATE-----Generated at Thu Aug 7 04:03:45 2025 by rpki-client