$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft (raw, json) Hash identifier: xROLaUwRvqvneUNtBtNy4snf0UcbPSOOC41N+VGWyRA= Subject key identifier: 72:54:21:E9:29:46:BC:45:98:7F:06:07:FB:C4:15:3D:99:98:21:F6 Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Certificate issuer: /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Certificate serial: 1D8D7700CD22B90C6E58A0335858D2FC6FA465EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft Manifest number: 0308 Signing time: Wed 06 Aug 2025 14:32:07 +0000 Manifest this update: Wed 06 Aug 2025 14:27:07 +0000 Manifest next update: Sun 10 Aug 2025 02:27:07 +0000 Files and hashes: 1: 3130332e3136312e3139342e302f32342d3234203d3e20313431363232.roa (hash: byxFPyjiQJT5Oo5JN6VrZseWPHWMRktKnANVfaiZKVo=) 2: 3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (hash: 3Jf6rjo7oK98mb2AwseOoU04Ietp18eSMPo87t19+zs=) 3: 3130332e3136312e3139342e302f32332d3233203d3e20313431363232.roa (hash: oZleMN4XSuVHyPBpWgeFkCol07oh2xMRlYa+Uzesyrw=) 4: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl (hash: vwnK73uk47HZb4tzAV8S+UQFXUutHF7zLvSVl6aqSYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8d:77:00:cd:22:b9:0c:6e:58:a0:33:58:58:d2:fc:6f:a4:65:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Validity Not Before: Aug 6 14:27:07 2025 GMT Not After : Aug 10 02:27:07 2025 GMT Subject: CN=725421E92946BC45987F0607FBC4153D999821F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:5a:fa:b7:d3:15:2b:1a:e1:2b:59:0d:42: 78:ba:a8:e3:33:47:63:c4:d7:0a:c9:0c:77:b8:9c: 20:d0:da:05:24:1d:c4:5d:29:2e:56:62:ff:b1:ab: a4:7a:4c:8c:c7:9d:0c:bf:28:e5:ee:99:47:f3:5a: f6:b8:5a:c3:b2:49:80:d5:ab:42:a4:1d:56:00:f1: d8:67:d4:b3:94:83:e2:3b:c4:26:a3:14:b9:44:81: c1:29:07:93:23:51:10:4d:ea:68:18:3b:8e:0d:67: 1b:e7:cb:b6:15:aa:2b:52:eb:fd:01:72:6a:e3:36: 5d:9f:14:a7:b2:9b:57:e9:85:df:42:bf:c0:64:50: f5:62:b0:56:54:eb:87:85:e7:7f:a8:0b:b7:aa:57: f9:8b:6d:18:12:b7:ca:14:ec:2c:14:52:88:a3:17: 46:d1:be:78:30:68:72:37:ee:d8:f7:71:45:e1:fa: a5:3f:e0:43:b8:4d:93:cb:3e:f6:c7:c5:0d:bf:cd: 53:d5:95:04:b4:23:d9:6c:7c:30:6d:12:4b:fc:ac: 04:00:a2:fa:7b:39:10:e8:81:34:c8:95:c7:de:34: b4:ba:25:7b:7b:70:b0:2a:a1:e1:ad:e4:b2:ac:5a: 6f:27:96:8b:dd:fa:c3:3d:7a:87:51:a0:dc:01:c1: a6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:54:21:E9:29:46:BC:45:98:7F:06:07:FB:C4:15:3D:99:98:21:F6 X509v3 Authority Key Identifier: keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9d:ec:24:7c:5d:3d:06:c6:56:a2:b9:31:c7:a1:04:d5:3d: fd:8c:17:d1:95:f6:02:07:38:9a:7c:c1:d8:05:55:42:c6:89: fe:6d:1a:79:84:79:6d:dc:be:a8:ee:8e:32:75:28:c6:96:0d: 00:b9:cc:1f:82:53:18:41:80:4b:23:b4:1b:69:81:85:90:fd: 0a:01:4d:f8:67:94:ce:26:97:18:23:e3:61:be:29:b1:5a:68: bd:1f:15:c0:7e:d0:ed:a3:4a:c0:27:fe:9d:78:7b:28:13:cf: 5c:c7:c7:ef:f0:ba:fc:80:d0:4a:35:ea:42:22:45:6c:fa:44: 69:06:66:0f:ed:2c:01:ed:05:e8:01:50:54:0b:7a:76:5e:f4: ea:7c:b4:7b:8c:e3:2f:8a:5f:0b:5e:db:9d:47:ad:b1:ca:6a: 16:d5:dc:d1:76:95:f2:f7:31:a1:26:29:6f:be:bc:cc:a1:99: 57:08:f1:47:0e:cf:cb:b2:d4:fd:a4:e9:3d:7b:14:9d:7e:57: d8:cc:ed:7e:58:7b:f8:b8:99:0c:bb:15:ff:0f:cd:5f:b0:30: e4:42:d0:65:15:e3:18:f8:28:c5:5a:38:c1:77:e9:cb:70:b6: e1:9d:8e:52:b6:fe:3b:3e:cc:df:bc:a5:18:e7:49:84:8c:b4: ba:0f:dd:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHY13AM0iuQxuWKAzWFjS/G+kZeowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENE QkM1RkY0QzAeFw0yNTA4MDYxNDI3MDdaFw0yNTA4MTAwMjI3MDdaMDMxMTAvBgNV BAMTKDcyNTQyMUU5Mjk0NkJDNDU5ODdGMDYwN0ZCQzQxNTNEOTk5ODIxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn91r6t9MVKxrhK1kNQni6qOMz R2PE1wrJDHe4nCDQ2gUkHcRdKS5WYv+xq6R6TIzHnQy/KOXumUfzWva4WsOySYDV q0KkHVYA8dhn1LOUg+I7xCajFLlEgcEpB5MjURBN6mgYO44NZxvny7YVqitS6/0B cmrjNl2fFKeym1fphd9Cv8BkUPVisFZU64eF53+oC7eqV/mLbRgSt8oU7CwUUoij F0bRvngwaHI37tj3cUXh+qU/4EO4TZPLPvbHxQ2/zVPVlQS0I9lsfDBtEkv8rAQA ovp7ORDogTTIlcfeNLS6JXt7cLAqoeGt5LKsWm8nlovd+sM9eodRoNwBwabFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUclQh6SlGvEWYfwYH+8QVPZmYIfYwHwYDVR0j BBgwFoAUBS7lnB1BSad98VVTEcBW3NvF/0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Y2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMC8wNTJFRTU5QzFE NDE0OUE3N0RGMTU1NTMxMUMwNTZEQ0RCQzVGRjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2RENEQkM1 RkY0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2NiZmIyMjgtZmQwNS00YWZkLTg3 YmQtZWQ1ODBiNTUwMzZmLzAvMDUyRUU1OUMxRDQxNDlBNzdERjE1NTUzMTFDMDU2 RENEQkM1RkY0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADud7CR8XT0GxlaiuTHHoQTVPf2MF9GV9gIH OJp8wdgFVULGif5tGnmEeW3cvqjujjJ1KMaWDQC5zB+CUxhBgEsjtBtpgYWQ/QoB TfhnlM4mlxgj42G+KbFaaL0fFcB+0O2jSsAn/p14eygTz1zHx+/wuvyA0Eo16kIi RWz6RGkGZg/tLAHtBegBUFQLenZe9Op8tHuM4y+KXwte251HrbHKahbV3NF2lfL3 MaEmKW++vMyhmVcI8UcOz8uy1P2k6T17FJ1+V9jM7X5Ye/i4mQy7Ff8PzV+wMORC 0GUV4xj4KMVaOMF36ctwtuGdjlK2/js+zN+8pRjnSYSMtLoP3d8= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:31 2025 by rpki-client