$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: tf68flEMpfafPiQ8Jtjtgy9AT87ZaOQIPT+Es01qb5Y= Subject key identifier: 55:80:98:E0:8F:6C:F0:DE:95:62:2D:5E:9C:69:08:68:A8:33:70:DE Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 4B5DDB4772F800BB60BD6FEAC9D9AF48F437034B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: BF Signing time: Tue 29 Apr 2025 14:50:59 +0000 Manifest this update: Tue 29 Apr 2025 14:45:59 +0000 Manifest next update: Fri 02 May 2025 18:59:59 +0000 Files and hashes: 1: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) 2: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: ZrNyfwkl1NIsN6ALLBMO/IV6s0p2WVViYfDTZMcixxo=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5d:db:47:72:f8:00:bb:60:bd:6f:ea:c9:d9:af:48:f4:37:03:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Apr 29 14:45:59 2025 GMT Not After : May 2 18:59:59 2025 GMT Subject: CN=558098E08F6CF0DE95622D5E9C690868A83370DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:4d:59:85:18:50:46:3f:d3:ae:1a:c4:65: c2:25:49:98:dd:2e:c7:5d:79:0b:25:7b:76:6e:2f: 6a:d6:49:8f:b2:5c:43:94:80:bc:2c:61:30:2a:14: 33:b3:d0:7c:8d:f5:78:84:8e:d7:d0:59:fb:05:1b: 56:8b:c1:5b:40:d3:39:b8:70:db:3c:0f:bc:56:3b: 94:f3:18:da:56:4c:25:ce:7d:ce:7a:68:64:23:82: ea:23:b6:db:3a:40:7b:03:9f:bf:b6:4b:60:a7:33: ff:4e:ee:a2:7b:c3:dd:ba:2e:1c:bf:18:80:4b:ac: 6c:42:c8:bc:e0:c5:4f:99:b2:db:c5:19:43:bd:0a: 85:c2:42:d8:6e:6f:31:22:da:18:e1:b5:58:65:89: a3:d0:2f:a5:8f:ed:e8:56:4b:59:96:36:48:94:09: 4e:f9:21:d1:a7:bb:da:5d:dc:7e:fa:f7:62:53:cf: a4:b8:9f:d5:e8:7e:a1:63:b3:7a:05:e6:74:34:e2: 91:8e:9d:8c:97:04:d8:3e:55:ef:61:f2:9a:99:97: a5:0c:9f:ab:fb:03:ea:70:40:a1:89:48:f0:7c:b7: 78:f9:76:a8:51:63:17:64:d8:c6:fb:b5:62:4d:a7: fa:c2:54:33:75:47:ab:33:98:36:6c:bb:77:7b:45: 48:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:80:98:E0:8F:6C:F0:DE:95:62:2D:5E:9C:69:08:68:A8:33:70:DE X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ef:71:25:7d:44:15:cf:5a:b9:f2:27:a5:5a:c1:ff:7a:c1: 30:1a:ec:8a:68:8a:b5:35:c0:6d:3b:93:e0:a2:81:b9:42:e7: ee:d8:c5:28:0f:39:f7:1e:c0:9c:62:58:cf:cd:43:b3:71:8e: 36:84:0e:c3:d3:48:4e:d5:81:3e:c0:c1:e3:86:3b:22:b8:da: d9:b8:ec:ab:7c:ff:f5:53:ff:eb:77:3f:6c:e3:31:13:b9:22: 1e:55:e3:b3:e9:82:58:73:3b:79:0c:f5:bf:89:de:9d:95:cc: 8c:bb:74:8b:15:1f:cc:a6:4b:97:d3:99:e9:f1:1d:45:ad:32: 89:00:14:72:c6:44:b6:57:a8:f4:99:88:87:72:1a:d0:c9:79: 70:1b:af:d6:9e:15:96:c6:41:32:15:01:7b:79:d8:00:98:d3: 19:14:54:5e:9e:32:19:76:2b:f0:68:ac:2f:c8:91:13:01:61: b8:76:26:65:57:6c:7a:a3:74:34:34:8d:57:f5:9c:b3:f3:21: 02:9b:1a:c4:ec:cf:99:46:eb:cb:77:16:83:59:cc:e6:ea:16: f8:a0:c7:b9:5d:27:cf:97:de:df:b5:18:55:f7:54:79:e6:f3: 67:9a:76:5b:40:40:d3:04:c8:49:de:ff:a2:8e:c5:be:8e:11: a2:11:6d:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS13bR3L4ALtgvW/qydmvSPQ3A0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTA0MjkxNDQ1NTlaFw0yNTA1MDIxODU5NTlaMDMxMTAvBgNV BAMTKDU1ODA5OEUwOEY2Q0YwREU5NTYyMkQ1RTlDNjkwODY4QTgzMzcwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU8k1ZhRhQRj/TrhrEZcIlSZjd LsddeQsle3ZuL2rWSY+yXEOUgLwsYTAqFDOz0HyN9XiEjtfQWfsFG1aLwVtA0zm4 cNs8D7xWO5TzGNpWTCXOfc56aGQjguojtts6QHsDn7+2S2CnM/9O7qJ7w926Lhy/ GIBLrGxCyLzgxU+ZstvFGUO9CoXCQthubzEi2hjhtVhliaPQL6WP7ehWS1mWNkiU CU75IdGnu9pd3H7692JTz6S4n9XofqFjs3oF5nQ04pGOnYyXBNg+Ve9h8pqZl6UM n6v7A+pwQKGJSPB8t3j5dqhRYxdk2Mb7tWJNp/rCVDN1R6szmDZsu3d7RUgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYCY4I9s8N6VYi1enGkIaKgzcN4wHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPvcSV9RBXPWrnyJ6Vawf96wTAa7IpoirU1 wG07k+CigblC5+7YxSgPOfcewJxiWM/NQ7NxjjaEDsPTSE7VgT7AweOGOyK42tm4 7Kt8//VT/+t3P2zjMRO5Ih5V47PpglhzO3kM9b+J3p2VzIy7dIsVH8ymS5fTmenx HUWtMokAFHLGRLZXqPSZiIdyGtDJeXAbr9aeFZbGQTIVAXt52ACY0xkUVF6eMhl2 K/BorC/IkRMBYbh2JmVXbHqjdDQ0jVf1nLPzIQKbGsTsz5lG68t3FoNZzObqFvig x7ldJ8+X3t+1GFX3VHnm82eadltAQNMEyEne/6KOxb6OEaIRbTg= -----END CERTIFICATE-----Generated at Wed Apr 30 08:17:24 2025 by rpki-client