$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: KmxpMtjiTHzM4cdSmZGu8+WMFRGU3UvLqRq9mkP5B0E= Subject key identifier: 9F:15:92:2D:18:6C:34:07:8C:57:98:DD:18:FD:74:9A:E9:6A:C1:80 Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 3A53DCFEE248B7DE162694B7C99C06BF0C50E7D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 04F4 Signing time: Mon 04 Aug 2025 23:51:15 +0000 Manifest this update: Mon 04 Aug 2025 23:46:15 +0000 Manifest next update: Fri 08 Aug 2025 09:15:15 +0000 Files and hashes: 1: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 2: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) 3: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) 4: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) 5: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: dZgKpYZ7d/fGBrZjpvAnLPzFaQrORpq1OsTgVO/QZWY=) 6: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) 7: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:53:dc:fe:e2:48:b7:de:16:26:94:b7:c9:9c:06:bf:0c:50:e7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Aug 4 23:46:15 2025 GMT Not After : Aug 8 09:15:15 2025 GMT Subject: CN=9F15922D186C34078C5798DD18FD749AE96AC180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:06:2b:68:3a:ff:0a:6d:32:3e:34:b9:e4: c6:6f:33:47:bc:1b:29:fd:b5:1c:0e:ff:82:60:8c: 5f:b4:81:b5:f5:dc:52:fc:b9:8e:fe:77:51:9b:2e: 39:f2:b0:36:33:0b:98:db:c4:19:cc:07:47:02:e2: 60:c8:86:25:3e:40:06:f1:9d:01:4e:81:e3:ca:8d: 63:9e:2e:d0:9b:28:f6:fc:d4:f3:1b:95:42:dd:f0: 5b:c4:21:b3:3e:bf:a8:bf:f5:a1:07:ba:4e:57:f4: ff:3b:3f:5b:84:95:07:bb:b2:54:36:94:1e:d4:7a: 7b:ca:7b:c7:86:98:7f:ad:26:32:d4:59:9e:7d:16: 33:08:f8:f2:75:7d:a3:6f:30:3b:fa:d2:3c:60:4c: 0c:83:c9:f9:c7:3d:db:87:e5:76:fc:04:60:d7:35: 8d:ac:24:97:37:69:da:16:03:95:71:bc:35:4f:35: 26:41:a9:a5:0e:a1:0c:89:6c:44:98:c7:8b:ce:58: 72:79:78:fd:2b:89:82:af:74:a9:9f:f0:14:09:64: ec:f7:5d:07:7e:ef:ad:4a:cb:3a:3a:fc:cf:1e:d0: 5b:cf:78:b8:35:f9:24:fa:40:db:d1:88:6d:a1:33: 6b:4e:28:5d:68:ba:a0:c0:ba:80:ee:ca:ba:d8:94: 04:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:15:92:2D:18:6C:34:07:8C:57:98:DD:18:FD:74:9A:E9:6A:C1:80 X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:56:34:bf:68:07:93:d4:dd:07:75:79:55:55:97:e8:00:53: 77:95:90:63:aa:dd:48:cb:ec:8f:9c:fc:73:64:3f:8d:44:18: aa:20:b7:46:5a:78:8a:09:3b:80:8d:1c:72:50:1c:b6:a9:4a: 8c:13:1f:13:ec:e8:a3:80:a9:24:8e:7f:46:e2:9a:36:b4:77: 9e:de:75:fd:2b:9f:59:da:42:db:4c:58:f6:f3:3c:5d:b6:5d: fa:d4:c0:dd:9e:e6:da:12:f3:1a:dc:1a:2e:77:8f:8e:20:cc: d5:dd:07:b4:41:7f:26:21:1e:4c:2d:7e:f5:ef:38:24:51:60: c5:b6:49:b5:f1:78:19:f0:10:9b:f6:02:c1:0d:d8:98:a2:9b: 9c:4c:a3:83:27:fd:68:ea:5d:be:62:04:6f:54:fb:af:6e:dd: b1:5b:ff:2d:d1:fc:1f:55:b4:62:07:1b:79:3d:6c:0f:70:69: 2e:06:26:22:8f:a5:2d:36:47:83:2c:02:00:14:26:c1:18:c2: 8b:6c:1f:8e:af:90:41:ca:78:ad:4e:bc:8f:d6:9e:23:61:91: fe:11:9d:a6:d8:2e:01:81:98:70:d4:aa:85:bc:6a:8e:51:44: 0f:a1:bc:e9:6b:15:da:3f:dc:24:1a:11:2c:e7:2f:88:fd:97: 77:7d:4b:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlPc/uJIt94WJpS3yZwGvwxQ59cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNTA4MDQyMzQ2MTVaFw0yNTA4MDgwOTE1MTVaMDMxMTAvBgNV BAMTKDlGMTU5MjJEMTg2QzM0MDc4QzU3OThERDE4RkQ3NDlBRTk2QUMxODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtgYraDr/Cm0yPjS55MZvM0e8 Gyn9tRwO/4JgjF+0gbX13FL8uY7+d1GbLjnysDYzC5jbxBnMB0cC4mDIhiU+QAbx nQFOgePKjWOeLtCbKPb81PMblULd8FvEIbM+v6i/9aEHuk5X9P87P1uElQe7slQ2 lB7UenvKe8eGmH+tJjLUWZ59FjMI+PJ1faNvMDv60jxgTAyDyfnHPduH5Xb8BGDX NY2sJJc3adoWA5VxvDVPNSZBqaUOoQyJbESYx4vOWHJ5eP0riYKvdKmf8BQJZOz3 XQd+761Kyzo6/M8e0FvPeLg1+ST6QNvRiG2hM2tOKF1ouqDAuoDuyrrYlAQXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnxWSLRhsNAeMV5jdGP10mulqwYAwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRWNL9oB5PU3Qd1eVVVl+gAU3eVkGOq3UjL 7I+c/HNkP41EGKogt0ZaeIoJO4CNHHJQHLapSowTHxPs6KOAqSSOf0bimja0d57e df0rn1naQttMWPbzPF22XfrUwN2e5toS8xrcGi53j44gzNXdB7RBfyYhHkwtfvXv OCRRYMW2SbXxeBnwEJv2AsEN2Jiim5xMo4Mn/WjqXb5iBG9U+69u3bFb/y3R/B9V tGIHG3k9bA9waS4GJiKPpS02R4MsAgAUJsEYwotsH46vkEHKeK1OvI/WniNhkf4R nabYLgGBmHDUqoW8ao5RRA+hvOlrFdo/3CQaESznL4j9l3d9S3g= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:51 2025 by rpki-client