$ rpki-client -vvf repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft File: 52F21143C125B54D950A82C78B375D1FEFC27145.mft (raw, json) Hash identifier: wXeY/F2Epuz6hSNFhwtSoau01aNB3lQjE+ijC6cj8VI= Subject key identifier: A1:0D:AF:04:43:91:6A:DC:93:F0:B7:C6:6D:5F:D9:31:13:1D:4F:D4 Authority key identifier: 52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 Certificate issuer: /CN=52F21143C125B54D950A82C78B375D1FEFC27145 Certificate serial: 681D1B43ED4B4BCA02BE6969C3759BA6C50522C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft Manifest number: 012B Signing time: Fri 02 May 2025 01:52:14 +0000 Manifest this update: Fri 02 May 2025 01:47:14 +0000 Manifest next update: Mon 05 May 2025 02:00:14 +0000 Files and hashes: 1: 52F21143C125B54D950A82C78B375D1FEFC27145.crl (hash: 6a0LlTUcIfTZ5IR9Yd8rkwU2hwkLQ8wPFGvaRCWre3U=) 2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: hXkfYf+nz9ZnfdREym/fTXbtiX2Nu0w5Ce/fSSjfGRo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 02:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1d:1b:43:ed:4b:4b:ca:02:be:69:69:c3:75:9b:a6:c5:05:22:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52F21143C125B54D950A82C78B375D1FEFC27145 Validity Not Before: May 2 01:47:14 2025 GMT Not After : May 5 02:00:14 2025 GMT Subject: CN=A10DAF0443916ADC93F0B7C66D5FD931131D4FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:42:8f:bd:34:d1:27:21:4e:b3:39:f4:8e:80: 47:94:82:17:a3:dd:e6:1c:8b:05:6f:c2:e8:24:e3: 17:f1:bf:0f:87:8b:f4:4d:92:67:cb:f8:f1:05:e5: 6a:97:60:fe:f3:b8:93:77:f5:c0:45:9a:af:b0:ec: 2d:38:ca:93:d9:c7:ab:c9:69:d7:fe:14:d3:6e:60: a0:4a:d9:e6:1f:25:21:a3:82:94:a0:07:ad:cd:c9: 22:0b:2a:38:75:30:2c:30:c5:e3:4a:45:1a:60:0e: ef:83:35:cd:46:da:da:ec:b1:e8:0a:0b:46:0f:14: a6:57:63:8c:a1:49:c7:01:9d:39:cd:cd:cd:80:4a: 62:40:29:99:4e:27:cb:10:3e:e4:b3:af:cf:33:93: a9:2d:01:db:f7:f4:f7:35:05:7f:76:40:de:90:cf: 5b:f2:1d:ca:af:4d:3a:7a:89:e4:73:35:7c:bd:33: 3f:f0:03:a7:f3:12:ad:71:9f:2b:d2:b6:66:fb:cf: 73:15:43:a5:77:3b:64:c7:8c:d8:fa:20:e0:8c:12: 05:04:6b:48:e4:37:3f:a5:15:46:40:f6:c1:94:7b: 5d:d3:24:28:0d:33:25:14:64:87:e3:f5:49:b2:3b: b7:b6:55:3e:a1:71:f8:9d:f9:1a:0a:1e:7f:6d:4a: 06:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0D:AF:04:43:91:6A:DC:93:F0:B7:C6:6D:5F:D9:31:13:1D:4F:D4 X509v3 Authority Key Identifier: keyid:52:F2:11:43:C1:25:B5:4D:95:0A:82:C7:8B:37:5D:1F:EF:C2:71:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52F21143C125B54D950A82C78B375D1FEFC27145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/52F21143C125B54D950A82C78B375D1FEFC27145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8f:4b:7b:6d:0b:3e:15:f2:d7:b1:72:b8:ec:64:b2:e3:1f: 45:d4:c9:63:72:1f:08:42:89:0e:78:22:83:58:5b:75:99:e0: f4:51:df:c7:ae:b5:c6:77:61:9e:98:74:eb:5b:d8:7d:0f:3d: d3:aa:69:c5:3f:c4:06:a2:e8:67:71:64:24:27:3b:34:a6:e8: f4:c8:56:cb:34:ed:65:dc:4d:7a:d6:a4:6f:4c:09:49:ed:9e: 9a:bd:83:ea:18:e3:e7:cc:99:29:0f:24:8c:b8:f5:69:c3:14: 43:b4:cf:f8:c2:04:0b:a8:6d:4b:2f:51:9f:52:bd:d1:81:af: fa:35:f6:c9:a3:bf:62:0d:5c:24:17:69:50:ef:6a:13:58:9d: e6:8e:43:ad:dd:7d:3b:3c:a1:10:b5:a6:ff:83:86:e6:9d:33: 73:bb:75:da:27:c6:bc:ec:7f:82:56:99:44:6b:fd:24:40:ce: 91:21:a6:80:c9:df:21:d0:7e:ee:c3:fd:a5:6c:2e:ad:7a:30: 46:09:43:ef:93:dc:9a:ae:7a:1b:ed:ff:38:a4:95:ba:f0:2e: 33:66:94:ef:59:d2:8e:ce:22:99:09:0f:cb:7e:0f:ca:97:b5: 3e:84:b7:d2:87:7c:9a:16:89:a4:e5:2e:a9:28:dd:7d:41:db: dd:0b:18:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaB0bQ+1LS8oCvmlpw3WbpsUFIsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZF RkMyNzE0NTAeFw0yNTA1MDIwMTQ3MTRaFw0yNTA1MDUwMjAwMTRaMDMxMTAvBgNV BAMTKEExMERBRjA0NDM5MTZBREM5M0YwQjdDNjZENUZEOTMxMTMxRDRGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQo+9NNEnIU6zOfSOgEeUghej 3eYciwVvwugk4xfxvw+Hi/RNkmfL+PEF5WqXYP7zuJN39cBFmq+w7C04ypPZx6vJ adf+FNNuYKBK2eYfJSGjgpSgB63NySILKjh1MCwwxeNKRRpgDu+DNc1G2trssegK C0YPFKZXY4yhSccBnTnNzc2ASmJAKZlOJ8sQPuSzr88zk6ktAdv39Pc1BX92QN6Q z1vyHcqvTTp6ieRzNXy9Mz/wA6fzEq1xnyvStmb7z3MVQ6V3O2THjNj6IOCMEgUE a0jkNz+lFUZA9sGUe13TJCgNMyUUZIfj9UmyO7e2VT6hcfid+RoKHn9tSgbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoQ2vBEORatyT8LfGbV/ZMRMdT9QwHwYDVR0j BBgwFoAUUvIRQ8EltU2VCoLHizddH+/CcUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZWM1NTNiNi05ZTU3LTQwYmQtOGQ5Ni1hOWZkYWRhZGQ3YmUvMC81MkYyMTE0M0Mx MjVCNTREOTUwQTgyQzc4QjM3NUQxRkVGQzI3MTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVEMUZFRkMy NzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNTJGMjExNDNDMTI1QjU0RDk1MEE4MkM3OEIzNzVE MUZFRkMyNzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiPS3ttCz4V8texcrjsZLLjH0XUyWNyHwhC iQ54IoNYW3WZ4PRR38eutcZ3YZ6YdOtb2H0PPdOqacU/xAai6GdxZCQnOzSm6PTI Vss07WXcTXrWpG9MCUntnpq9g+oY4+fMmSkPJIy49WnDFEO0z/jCBAuobUsvUZ9S vdGBr/o19smjv2INXCQXaVDvahNYneaOQ63dfTs8oRC1pv+DhuadM3O7ddonxrzs f4JWmURr/SRAzpEhpoDJ3yHQfu7D/aVsLq16MEYJQ++T3Jquehvt/ziklbrwLjNm lO9Z0o7OIpkJD8t+D8qXtT6Et9KHfJoWiaTlLqko3X1B290LGGQ= -----END CERTIFICATE-----Generated at Fri May 2 09:33:54 2025 by rpki-client