$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: 5fP51CW4unTq7eOnqR/lo1eSWe3eA4+aL+XZWRsAPgI= Subject key identifier: 6E:11:53:14:23:E3:CB:F9:4B:5E:DA:73:C3:80:F0:B1:52:34:A9:21 Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 3B192CECC2D3930445E672D254F7668F10F09B4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 03A1 Signing time: Wed 05 Nov 2025 02:12:21 +0000 Manifest this update: Wed 05 Nov 2025 02:07:21 +0000 Manifest next update: Sat 08 Nov 2025 03:25:21 +0000 Files and hashes: 1: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: xkZOaX63H5BryKGqL8AwLdSp2kI6VgQXz7JksSpcOXo=) 2: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: NZRvAk91/qS+2e4QEna7jFq1miR9hnIOcdT25pcAymk=) 3: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: HXG6M2lkHdM7H0q8sMHL2RuqzQnwYr9btslEMX8iQ9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 03:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:19:2c:ec:c2:d3:93:04:45:e6:72:d2:54:f7:66:8f:10:f0:9b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: Nov 5 02:07:21 2025 GMT Not After : Nov 8 03:25:21 2025 GMT Subject: CN=6E11531423E3CBF94B5EDA73C380F0B15234A921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1d:46:b2:38:fc:3e:99:31:e8:9a:97:5d:bb: f9:40:6a:2c:bb:b8:21:85:6c:dd:87:16:0f:62:ac: 73:8c:cf:70:6e:7c:2c:f2:af:80:37:eb:dd:b7:27: 73:c1:01:74:8a:99:40:d8:5a:3a:88:3e:2a:c4:1d: 6d:e7:6e:a9:0d:26:0d:5c:40:83:cd:bd:3a:b9:f1: ae:61:7f:1a:f9:78:79:fd:91:4f:87:68:81:fd:6c: 83:d7:cd:41:4c:1c:f5:b4:f8:d1:54:74:32:a1:0c: 59:11:70:d6:f6:64:32:46:70:2b:8d:3b:da:37:3d: 67:dc:5a:8c:1f:34:41:eb:d6:84:8c:f1:be:5b:ad: a6:39:5b:fc:de:53:da:46:91:99:06:11:72:01:85: 80:52:de:af:f7:d8:dd:7b:6a:88:a3:51:ae:2f:58: 5a:37:b8:92:dc:9e:32:34:5c:87:ae:e4:ef:5b:3f: dc:3f:3d:12:26:57:e9:0e:c5:66:ff:e6:bd:ff:50: 5f:9b:c7:05:72:8c:af:bb:e2:81:be:3d:15:92:27: 09:2d:b6:ef:0f:4a:f9:c3:2c:a5:ac:b0:5b:2f:7a: c2:32:b6:1e:f4:07:bf:48:a5:aa:b0:ab:c2:ec:e8: e2:45:d7:e4:8a:0c:15:6f:98:76:78:57:ff:8a:5a: 82:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:11:53:14:23:E3:CB:F9:4B:5E:DA:73:C3:80:F0:B1:52:34:A9:21 X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3c:df:10:ec:61:27:e8:64:39:5b:76:c9:41:b6:2f:bd:42: cd:b5:33:01:ea:d3:02:3a:68:58:90:1d:3b:ae:b2:15:c8:e1: c7:11:cd:29:33:ce:1f:69:ce:28:b0:8b:64:8b:6d:2a:26:83: a0:f5:b7:52:9d:9c:30:8c:07:60:ef:fc:30:06:ce:e5:a1:b0: 1f:b2:e7:21:fe:c0:f2:1c:1e:1b:05:42:12:c0:75:e4:bf:50: de:c8:cf:5d:25:be:e8:ec:3f:47:92:4f:d1:e4:58:f5:84:c2: 44:3b:8c:8a:f3:ab:f0:e7:2a:15:42:87:42:97:59:e3:64:89: ac:18:80:1f:ce:f7:27:db:5b:a3:f1:f6:7a:fd:de:f1:cb:5d: 5e:fb:fb:1f:3b:cd:51:23:7e:53:fc:98:7f:b3:bc:02:08:6c: 52:2e:9e:36:0f:39:9b:11:da:0b:a4:8a:8e:1a:f4:40:4d:fe: 95:e2:86:b0:b0:5d:45:6a:0d:d0:75:3a:94:1c:37:a9:db:49: 86:7a:42:52:15:59:c2:4e:fc:6f:cd:8f:a7:35:af:87:bb:a7: 94:2f:9f:3c:24:5f:0c:fa:48:ab:2e:d6:ee:01:b6:dd:dc:8d: de:b1:b7:2e:f3:fb:3b:b0:11:11:21:31:41:ee:fe:74:ab:c5: 1f:24:61:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOxks7MLTkwRF5nLSVPdmjxDwm0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNTExMDUwMjA3MjFaFw0yNTExMDgwMzI1MjFaMDMxMTAvBgNV BAMTKDZFMTE1MzE0MjNFM0NCRjk0QjVFREE3M0MzODBGMEIxNTIzNEE5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHUayOPw+mTHompddu/lAaiy7 uCGFbN2HFg9irHOMz3BufCzyr4A36923J3PBAXSKmUDYWjqIPirEHW3nbqkNJg1c QIPNvTq58a5hfxr5eHn9kU+HaIH9bIPXzUFMHPW0+NFUdDKhDFkRcNb2ZDJGcCuN O9o3PWfcWowfNEHr1oSM8b5braY5W/zeU9pGkZkGEXIBhYBS3q/32N17aoijUa4v WFo3uJLcnjI0XIeu5O9bP9w/PRImV+kOxWb/5r3/UF+bxwVyjK+74oG+PRWSJwkt tu8PSvnDLKWssFsvesIyth70B79Ipaqwq8Ls6OJF1+SKDBVvmHZ4V/+KWoLjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbhFTFCPjy/lLXtpzw4DwsVI0qSEwHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGk83xDsYSfoZDlbdslBti+9Qs21MwHq0wI6 aFiQHTuushXI4ccRzSkzzh9pziiwi2SLbSomg6D1t1KdnDCMB2Dv/DAGzuWhsB+y 5yH+wPIcHhsFQhLAdeS/UN7Iz10lvujsP0eST9HkWPWEwkQ7jIrzq/DnKhVCh0KX WeNkiawYgB/O9yfbW6Px9nr93vHLXV77+x87zVEjflP8mH+zvAIIbFIunjYPOZsR 2gukio4a9EBN/pXihrCwXUVqDdB1OpQcN6nbSYZ6QlIVWcJO/G/Nj6c1r4e7p5Qv nzwkXwz6SKsu1u4Btt3cjd6xty7z+zuwEREhMUHu/nSrxR8kYeE= -----END CERTIFICATE-----Generated at Wed Nov 5 23:52:10 2025 by rpki-client