$ rpki-client -vvf repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft File: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft (raw, json) Hash identifier: sOGSzQN9ZupxGKMlHvBknk4SP2M1xUNlXtq/QId7T3w= Subject key identifier: 7F:AF:8E:0F:F0:E8:36:0F:44:E1:AC:B0:BF:FE:FE:7D:05:EB:9F:F4 Authority key identifier: 52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB Certificate issuer: /CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Certificate serial: 0EB59FB59E3F59D1ED8849C45F2C578947DFA296 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft Manifest number: 03BE Signing time: Mon 16 Jun 2025 14:11:47 +0000 Manifest this update: Mon 16 Jun 2025 14:06:47 +0000 Manifest next update: Thu 19 Jun 2025 17:25:47 +0000 Files and hashes: 1: 52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl (hash: XbpKcNdZFtq34eXmrsP5WSqAinfj5uXWx7vdiHUzOZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b5:9f:b5:9e:3f:59:d1:ed:88:49:c4:5f:2c:57:89:47:df:a2:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52DC1412C6708ADA13DE89F150FA8C5BEF205DCB Validity Not Before: Jun 16 14:06:47 2025 GMT Not After : Jun 19 17:25:47 2025 GMT Subject: CN=7FAF8E0FF0E8360F44E1ACB0BFFEFE7D05EB9FF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:8e:47:7d:8a:9b:41:3e:ae:58:18:c8:bd: fe:3d:54:02:98:e3:3b:f7:bd:ff:dd:03:3c:2d:e2: 62:49:51:cc:a2:f2:bc:42:51:d0:59:92:5d:9e:3b: ab:dd:a4:cb:1d:1c:74:d2:6c:32:62:00:2f:9e:f7: 94:19:da:fb:de:69:ac:78:08:0d:ec:75:71:c9:80: d6:80:74:ab:fd:bb:64:2a:dc:99:fb:15:dc:15:89: dd:82:b9:16:33:ce:07:af:5c:6e:bf:d4:ea:49:54: 66:18:e2:f3:1f:f1:32:cd:bf:3e:7d:a2:93:10:17: 14:c4:7d:51:53:e1:f2:60:34:1b:e0:00:e5:1c:7f: cd:ed:ea:df:bc:3a:09:2f:c3:80:24:fa:1c:af:18: 92:6e:6a:c0:8d:f7:bf:d7:af:62:81:0c:0d:ce:a9: 19:ad:2a:2a:3d:5b:13:b0:6a:f8:6c:08:ff:91:a9: 11:6f:d7:32:e0:4f:5e:09:22:55:48:16:bc:f7:6c: 05:ff:42:8e:59:c6:01:46:17:6f:68:7e:79:64:6b: 5d:ea:cb:6c:29:4a:9f:c3:8e:5d:1f:e7:d3:a6:04: e6:dc:05:e8:55:ac:e4:cf:51:38:6f:b3:03:f7:84: c0:27:43:2a:d0:8f:15:dc:1b:3f:d1:2a:ca:0d:4c: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AF:8E:0F:F0:E8:36:0F:44:E1:AC:B0:BF:FE:FE:7D:05:EB:9F:F4 X509v3 Authority Key Identifier: keyid:52:DC:14:12:C6:70:8A:DA:13:DE:89:F1:50:FA:8C:5B:EF:20:5D:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0fe163c-14d5-4e31-ac20-c04e3e44c34f/0/52DC1412C6708ADA13DE89F150FA8C5BEF205DCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f5:66:13:84:f7:c8:3e:5f:74:36:78:b2:f5:11:0a:09:f0: 99:9d:58:fc:59:4d:f9:97:fe:f0:b0:33:47:6d:89:be:74:b3: e0:4b:b7:83:b4:6e:27:dc:37:52:26:41:5f:30:53:fa:4b:9d: 82:ac:ad:0e:99:6b:6c:31:fa:e0:04:63:63:41:0d:6e:67:88: 80:8a:df:07:2e:fe:54:c6:51:df:e6:8b:c8:c3:7e:30:1f:0d: 7d:88:45:13:f1:b4:07:99:a9:a6:c5:eb:2d:50:12:00:35:e1: a1:71:aa:11:bd:b6:0f:0e:50:39:72:28:f0:e0:b1:ba:c5:88: 97:c8:ee:52:5d:85:28:17:a6:17:9f:a1:25:a0:a8:e2:cf:50: a8:91:47:84:f4:61:f3:ff:88:56:51:85:4b:dc:21:76:55:d5: 08:41:54:9b:6c:20:ac:f0:fb:e4:64:10:45:cc:79:89:e4:a4: f9:df:ec:df:66:80:0f:a8:dc:a1:72:46:36:38:b1:04:20:87: e2:a1:bf:7f:36:60:3c:29:21:b7:1b:fe:c1:23:19:80:b2:74: 9d:05:fb:65:39:fd:55:d4:fc:5c:51:aa:27:90:73:e0:52:05: 8c:94:76:f4:8b:0e:da:63:c4:e9:1b:dc:24:c2:94:ee:b4:6a: cc:13:25:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDrWftZ4/WdHtiEnEXyxXiUffopYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJF RjIwNURDQjAeFw0yNTA2MTYxNDA2NDdaFw0yNTA2MTkxNzI1NDdaMDMxMTAvBgNV BAMTKDdGQUY4RTBGRjBFODM2MEY0NEUxQUNCMEJGRkVGRTdEMDVFQjlGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0o5HfYqbQT6uWBjIvf49VAKY 4zv3vf/dAzwt4mJJUcyi8rxCUdBZkl2eO6vdpMsdHHTSbDJiAC+e95QZ2vveaax4 CA3sdXHJgNaAdKv9u2Qq3Jn7FdwVid2CuRYzzgevXG6/1OpJVGYY4vMf8TLNvz59 opMQFxTEfVFT4fJgNBvgAOUcf83t6t+8Ogkvw4Ak+hyvGJJuasCN97/Xr2KBDA3O qRmtKio9WxOwavhsCP+RqRFv1zLgT14JIlVIFrz3bAX/Qo5ZxgFGF29ofnlka13q y2wpSp/Djl0f59OmBObcBehVrOTPUThvswP3hMAnQyrQjxXcGz/RKsoNTECbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf6+OD/DoNg9E4aywv/7+fQXrn/QwHwYDVR0j BBgwFoAUUtwUEsZwitoT3onxUPqMW+8gXcswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGZlMTYzYy0xNGQ1LTRlMzEtYWMyMC1jMDRlM2U0NGMzNGYvMC81MkRDMTQxMkM2 NzA4QURBMTNERTg5RjE1MEZBOEM1QkVGMjA1RENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThDNUJFRjIw NURDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBmZTE2M2MtMTRkNS00ZTMxLWFj MjAtYzA0ZTNlNDRjMzRmLzAvNTJEQzE0MTJDNjcwOEFEQTEzREU4OUYxNTBGQThD NUJFRjIwNURDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABD1ZhOE98g+X3Q2eLL1EQoJ8JmdWPxZTfmX /vCwM0dtib50s+BLt4O0bifcN1ImQV8wU/pLnYKsrQ6Za2wx+uAEY2NBDW5niICK 3wcu/lTGUd/mi8jDfjAfDX2IRRPxtAeZqabF6y1QEgA14aFxqhG9tg8OUDlyKPDg sbrFiJfI7lJdhSgXphefoSWgqOLPUKiRR4T0YfP/iFZRhUvcIXZV1QhBVJtsIKzw ++RkEEXMeYnkpPnf7N9mgA+o3KFyRjY4sQQgh+Khv382YDwpIbcb/sEjGYCydJ0F +2U5/VXU/FxRqieQc+BSBYyUdvSLDtpjxOkb3CTClO60aswTJfc= -----END CERTIFICATE-----Generated at Tue Jun 17 00:16:56 2025 by rpki-client