$ rpki-client -vvf repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft File: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft (raw, json) Hash identifier: b7TLfr1rc8MYMoo6/zNH8EvFG82RjYHAaXGEWNNEw3A= Subject key identifier: AE:5C:E5:F8:A2:BE:19:DF:43:3B:7F:86:AD:7A:87:9A:9A:25:4F:5E Authority key identifier: 52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE Certificate issuer: /CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Certificate serial: 3582670FF81FF63310B330731DB01747CF1F9D69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft Manifest number: EB Signing time: Tue 05 Aug 2025 08:11:01 +0000 Manifest this update: Tue 05 Aug 2025 08:06:01 +0000 Manifest next update: Fri 08 Aug 2025 12:37:01 +0000 Files and hashes: 1: 52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl (hash: BLOH0BOw1LUrZ24JjMcmbGrAfN3IpRjcKkCVqSlPMfM=) 2: 3231302e38372e3131322e302f32342d3234203d3e20313532303533.roa (hash: KmvZNHMkYGjniiDVsPzoqz85biHBg1yoTLWktyy3KyI=) 3: 3231302e38372e3131332e302f32342d3234203d3e20313532303533.roa (hash: M/ahzHC3ODRI/WG3tVFzAKjzCsCePhBkrqbTyrlIMdA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 12:37:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:82:67:0f:f8:1f:f6:33:10:b3:30:73:1d:b0:17:47:cf:1f:9d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52C34A755DF981FDF13789624A2BE028AB5B5DAE Validity Not Before: Aug 5 08:06:01 2025 GMT Not After : Aug 8 12:37:01 2025 GMT Subject: CN=AE5CE5F8A2BE19DF433B7F86AD7A879A9A254F5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ae:99:67:80:4d:55:b1:48:83:73:07:16:5b: f8:f9:6a:21:21:d5:6f:84:a7:dc:98:0a:70:5d:d7: df:65:4d:fd:06:94:8a:26:c5:fb:a5:d7:d3:a2:aa: 4b:79:4c:ef:bb:8a:40:3e:2d:14:07:0b:4f:37:6c: 40:63:39:6f:ad:76:7a:3d:1b:7a:a3:a6:35:98:3d: 02:e1:ba:79:72:ab:be:c5:f2:67:b9:f9:81:47:df: 9c:12:28:a0:8d:88:dd:c2:9e:2c:49:0c:de:b6:f1: b8:b7:75:cf:72:7b:81:17:ec:bb:d9:bd:35:7a:62: 95:ac:28:63:d4:57:3a:14:fd:29:13:22:58:f0:58: c4:69:e7:41:20:2f:be:7b:8f:c9:3c:e8:80:ad:43: 5a:65:e1:8d:27:a0:78:48:cf:b5:01:31:12:82:55: a2:0e:df:d3:41:59:24:3b:cf:27:e2:47:f8:01:3b: ee:6b:a8:0b:19:b7:dc:85:07:1d:fc:94:60:54:d0: 10:7d:2c:9f:fb:b4:a4:2e:84:47:98:d6:f9:20:73: a0:5b:2b:26:68:0a:c7:80:e2:a0:9c:ce:10:a5:82: 05:15:58:ff:bb:69:bb:03:e9:82:2e:fa:03:1f:9b: 41:3c:c3:84:6b:dd:41:7e:a9:8e:22:8c:c3:bc:06: 9a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5C:E5:F8:A2:BE:19:DF:43:3B:7F:86:AD:7A:87:9A:9A:25:4F:5E X509v3 Authority Key Identifier: keyid:52:C3:4A:75:5D:F9:81:FD:F1:37:89:62:4A:2B:E0:28:AB:5B:5D:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52C34A755DF981FDF13789624A2BE028AB5B5DAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1ee3765-0abb-4ba3-a00d-cbcec8399928/0/52C34A755DF981FDF13789624A2BE028AB5B5DAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:02:d2:1c:cf:63:2e:33:f6:97:a8:14:5a:54:59:40:93:01: 09:a9:88:08:42:ba:7f:36:46:8a:6a:3e:e4:84:3e:a7:c1:b6: 0e:d9:8b:6c:b0:ba:03:83:dd:87:39:77:4b:b0:2e:8a:ec:b3: d3:1e:89:a3:07:8f:f6:18:d6:4c:ca:ab:3d:2a:54:48:27:7e: 3d:00:49:06:8e:98:0a:a9:cf:fa:ba:a7:9a:70:93:9e:7e:a6: ae:7d:7d:95:bd:de:b6:46:b1:82:17:2c:73:d3:d0:17:2d:08: a1:9d:9d:e3:52:5f:89:e1:ea:7e:64:6f:66:be:4e:b3:cf:9c: d6:2c:2b:78:d5:14:b3:93:52:79:ff:d3:eb:de:10:aa:ba:a4: 2f:04:21:94:e3:27:4f:02:df:17:11:3b:d8:0a:35:a7:ea:84: d4:89:5a:e2:16:74:da:e1:60:22:a5:96:d8:7a:0a:93:db:55: 8e:2d:a9:50:3e:bf:ec:af:3f:80:54:5a:7b:06:cd:69:9c:8f: dc:41:2a:03:37:95:a2:1f:d6:f4:db:bc:32:d2:c3:42:a5:2d: 5d:e7:f2:2a:b6:ed:88:c0:5a:33:62:04:59:66:4d:c6:ae:3f: fa:2c:1a:e7:7a:b4:98:29:5f:ad:22:3a:59:c8:4f:f8:ca:e5: a6:b6:05:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYJnD/gf9jMQszBzHbAXR88fnWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhB QjVCNURBRTAeFw0yNTA4MDUwODA2MDFaFw0yNTA4MDgxMjM3MDFaMDMxMTAvBgNV BAMTKEFFNUNFNUY4QTJCRTE5REY0MzNCN0Y4NkFEN0E4NzlBOUEyNTRGNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhrplngE1VsUiDcwcWW/j5aiEh 1W+Ep9yYCnBd199lTf0GlIomxful19Oiqkt5TO+7ikA+LRQHC083bEBjOW+tdno9 G3qjpjWYPQLhunlyq77F8me5+YFH35wSKKCNiN3CnixJDN628bi3dc9ye4EX7LvZ vTV6YpWsKGPUVzoU/SkTIljwWMRp50EgL757j8k86ICtQ1pl4Y0noHhIz7UBMRKC VaIO39NBWSQ7zyfiR/gBO+5rqAsZt9yFBx38lGBU0BB9LJ/7tKQuhEeY1vkgc6Bb KyZoCseA4qCczhClggUVWP+7absD6YIu+gMfm0E8w4Rr3UF+qY4ijMO8BpqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrlzl+KK+Gd9DO3+GrXqHmpolT14wHwYDVR0j BBgwFoAUUsNKdV35gf3xN4liSivgKKtbXa4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MWVlMzc2NS0wYWJiLTRiYTMtYTAwZC1jYmNlYzgzOTk5MjgvMC81MkMzNEE3NTVE Rjk4MUZERjEzNzg5NjI0QTJCRTAyOEFCNUI1REFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUwMjhBQjVC NURBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTFlZTM3NjUtMGFiYi00YmEzLWEw MGQtY2JjZWM4Mzk5OTI4LzAvNTJDMzRBNzU1REY5ODFGREYxMzc4OTYyNEEyQkUw MjhBQjVCNURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgC0hzPYy4z9peoFFpUWUCTAQmpiAhCun82 RopqPuSEPqfBtg7Zi2ywugOD3Yc5d0uwLorss9MeiaMHj/YY1kzKqz0qVEgnfj0A SQaOmAqpz/q6p5pwk55+pq59fZW93rZGsYIXLHPT0BctCKGdneNSX4nh6n5kb2a+ TrPPnNYsK3jVFLOTUnn/0+veEKq6pC8EIZTjJ08C3xcRO9gKNafqhNSJWuIWdNrh YCKllth6CpPbVY4tqVA+v+yvP4BUWnsGzWmcj9xBKgM3laIf1vTbvDLSw0KlLV3n 8iq27YjAWjNiBFlmTcauP/osGud6tJgpX60iOlnIT/jK5aa2BWg= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:19 2025 by rpki-client