$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: Wmas1hqcVIppx1JcbK5TERAYCb68+8UyxtbuAK9Ff6A= Subject key identifier: B9:0F:7C:85:6E:79:D8:1F:FF:D7:59:57:78:05:A7:62:39:23:E6:69 Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 6E71B060BAC10DD0DAB588FB825A94328FB4BB29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: D4 Signing time: Sat 14 Jun 2025 08:50:58 +0000 Manifest this update: Sat 14 Jun 2025 08:45:58 +0000 Manifest next update: Tue 17 Jun 2025 17:13:58 +0000 Files and hashes: 1: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: y479SCuavJqefd5MbgHvGdIcGr6fV04Nbs7afeAjg5Y=) 2: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) 3: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 17:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:71:b0:60:ba:c1:0d:d0:da:b5:88:fb:82:5a:94:32:8f:b4:bb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Jun 14 08:45:58 2025 GMT Not After : Jun 17 17:13:58 2025 GMT Subject: CN=B90F7C856E79D81FFFD759577805A7623923E669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:bf:d9:80:ca:b0:4a:8f:6b:30:95:4e:f4: 30:69:6c:32:26:1a:a7:0c:00:70:dd:08:f7:e1:bb: cd:27:90:a2:84:d6:30:4b:08:b7:3c:e4:f7:52:0c: fa:76:14:0c:72:e4:7f:7d:5d:63:64:e3:bf:42:28: 70:09:dd:c9:3d:82:9c:a0:30:9b:45:58:72:a9:67: e7:f8:f7:47:a8:dc:a7:fe:3e:90:02:cd:8b:df:fc: 42:49:b1:bb:d3:75:1c:3f:ca:ac:d6:43:e1:27:a0: b0:28:fd:ac:45:81:33:f0:27:f8:f8:b9:30:36:7e: 52:6c:bd:77:dd:82:20:cf:4d:70:36:ea:b0:90:ca: 8b:f0:36:52:04:92:8a:de:63:7c:55:18:cd:2d:e8: 20:d1:70:30:1a:ae:a5:35:53:42:a4:b1:ce:48:65: 23:86:0f:36:7f:ce:f7:7a:cf:47:9b:62:24:3f:85: 89:24:93:9e:5e:54:b7:04:05:ff:2e:3e:64:93:fb: 9a:53:12:9b:59:dc:74:1b:3d:6b:fc:78:77:04:17: 2f:80:63:c1:a8:e7:ff:ad:07:e9:80:53:1f:ab:b4: ae:14:33:0c:d9:78:43:b8:15:8b:e4:5d:6f:e3:a3: bc:39:94:81:e4:ad:d0:d5:f4:35:25:90:3e:d3:6c: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0F:7C:85:6E:79:D8:1F:FF:D7:59:57:78:05:A7:62:39:23:E6:69 X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e3:ea:35:bc:76:6b:75:6d:89:8c:f3:af:75:8a:e9:f6:5d: f5:7b:97:c8:56:41:09:81:1a:8c:ed:ee:4f:ee:60:b7:bd:a8: e8:bc:47:4d:26:d9:15:32:63:51:67:12:89:5a:bb:f4:73:2c: d4:04:ef:d7:7d:a7:40:c3:e7:e3:3e:37:bc:89:26:ce:a3:ff: 64:27:06:29:cc:93:2a:ef:fd:88:95:1b:11:e3:02:f5:44:2c: 15:63:c1:c3:e1:f0:ae:53:8e:68:3d:14:8b:b2:83:93:e2:7d: 4c:25:c4:5d:e1:ff:98:07:5a:41:78:5b:59:83:57:a7:18:5b: 3f:ea:a0:5d:56:f5:78:e3:34:f7:ce:6b:f2:ab:c3:83:d6:e8: 0e:81:a8:aa:17:6c:6f:69:95:fc:17:c2:c2:7e:e1:87:ce:2c: 0b:8c:a6:8d:b4:ff:72:ee:0d:c7:d9:c6:e4:de:86:99:33:1b: 23:e2:e3:b6:7b:e0:3f:b5:32:6a:d2:b8:92:25:77:09:03:b5: 14:3b:6c:38:9d:87:eb:fb:c2:cc:ef:ff:70:b6:a6:c8:99:c1: 83:ca:4a:92:bc:7c:6c:1a:d3:ea:3c:cf:d3:bc:9c:1f:c9:c0: c1:95:d2:da:f9:6e:e9:68:26:2a:c9:c6:bc:04:bd:71:aa:9e: 76:fd:e8:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnGwYLrBDdDatYj7glqUMo+0uykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTA2MTQwODQ1NThaFw0yNTA2MTcxNzEzNThaMDMxMTAvBgNV BAMTKEI5MEY3Qzg1NkU3OUQ4MUZGRkQ3NTk1Nzc4MDVBNzYyMzkyM0U2NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeL/ZgMqwSo9rMJVO9DBpbDIm GqcMAHDdCPfhu80nkKKE1jBLCLc85PdSDPp2FAxy5H99XWNk479CKHAJ3ck9gpyg MJtFWHKpZ+f490eo3Kf+PpACzYvf/EJJsbvTdRw/yqzWQ+EnoLAo/axFgTPwJ/j4 uTA2flJsvXfdgiDPTXA26rCQyovwNlIEkoreY3xVGM0t6CDRcDAarqU1U0Kksc5I ZSOGDzZ/zvd6z0ebYiQ/hYkkk55eVLcEBf8uPmST+5pTEptZ3HQbPWv8eHcEFy+A Y8Go5/+tB+mAUx+rtK4UMwzZeEO4FYvkXW/jo7w5lIHkrdDV9DUlkD7TbBGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQ98hW552B//11lXeAWnYjkj5mkwHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITj6jW8dmt1bYmM8691iun2XfV7l8hWQQmB Gozt7k/uYLe9qOi8R00m2RUyY1FnEolau/RzLNQE79d9p0DD5+M+N7yJJs6j/2Qn BinMkyrv/YiVGxHjAvVELBVjwcPh8K5Tjmg9FIuyg5PifUwlxF3h/5gHWkF4W1mD V6cYWz/qoF1W9XjjNPfOa/Krw4PW6A6BqKoXbG9plfwXwsJ+4YfOLAuMpo20/3Lu DcfZxuTehpkzGyPi47Z74D+1MmrSuJIldwkDtRQ7bDidh+v7wszv/3C2psiZwYPK SpK8fGwa0+o8z9O8nB/JwMGV0tr5buloJirJxrwEvXGqnnb96IU= -----END CERTIFICATE-----Generated at Sun Jun 15 15:24:17 2025 by rpki-client