$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: GsR/bwgaAbO2bPr6iRCx5kzStli0fVrzOOD7VtDOxl4= Subject key identifier: A3:A8:B0:EA:85:CE:C1:23:DE:91:1E:25:06:4B:E6:E9:36:23:89:9F Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 5C2C301AF7487E33C522FFAE53A9B3646167DF30 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 0450 Signing time: Mon 28 Apr 2025 03:41:54 +0000 Manifest this update: Mon 28 Apr 2025 03:36:54 +0000 Manifest next update: Thu 01 May 2025 14:00:54 +0000 Files and hashes: 1: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: VYk0jX+OGoB4/7D73QnDw8fy7xRRmNePMPCehWSGzIk=) 2: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: NnBFli84jNMIBDBMNq+D25uIynDWqxxKW2NwfNdru0M=) 3: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: lHTsTof/PNGszwdGhXov2w7APdsIH8W3gFH+4Kr5Ebc=) 4: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: z/eXMs9mS1DfyQh4Im/qLS47C/jyUxWG9CNZqbqlq2w=) 5: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: gsd+S7j+gYENBbS9EyZfuvkGD3/9iVqdRz0LDMNsbm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2c:30:1a:f7:48:7e:33:c5:22:ff:ae:53:a9:b3:64:61:67:df:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Apr 28 03:36:54 2025 GMT Not After : May 1 14:00:54 2025 GMT Subject: CN=A3A8B0EA85CEC123DE911E25064BE6E93623899F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4d:72:56:9e:90:41:a1:e8:f5:9b:52:6a:04: 7b:c1:9a:c4:ea:89:65:13:54:25:ef:76:5a:2f:50: 17:a2:f6:94:5e:ac:71:4e:a6:86:c6:e6:1a:73:5c: 3f:db:79:c3:53:11:7e:fa:af:5b:6c:8a:21:96:0e: 7f:e3:c8:7e:a0:04:8e:ea:df:c1:51:3b:af:7d:a7: f8:6a:f4:27:3b:5f:8e:c0:9b:c4:85:27:90:f3:d9: 76:03:e8:0b:e6:0a:a0:09:b5:d6:a3:b6:ce:fa:99: 3e:fd:9e:ca:89:19:09:cf:f9:c2:19:c1:79:a9:b0: a1:aa:45:84:c8:cd:7e:17:7f:19:ca:bd:9f:70:12: 77:6a:99:ac:77:9f:d6:ef:5e:a4:37:6e:6f:21:fa: d5:b0:7c:ed:bb:32:0c:e6:67:8c:76:e0:9d:e0:4c: 21:5c:a9:16:40:29:a1:e0:d0:d3:71:47:e1:72:fe: c5:91:de:42:03:64:91:72:21:13:32:08:20:ba:3e: 4e:93:6c:b1:c1:0e:f0:4e:ea:38:df:90:e8:6d:33: 5b:86:e0:44:1f:d6:15:f4:e9:c0:85:26:8b:c9:12: f0:73:54:26:38:68:c3:7e:8f:b9:6c:eb:00:35:43: 9d:93:71:ef:8e:fe:fd:14:ce:1a:4b:9a:19:4b:2c: ec:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A8:B0:EA:85:CE:C1:23:DE:91:1E:25:06:4B:E6:E9:36:23:89:9F X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f2:e6:e5:39:7c:2b:ba:5c:ee:30:22:4e:7e:6b:42:7f:75: a6:95:f3:a4:ca:e5:12:8a:35:a2:a4:07:f8:77:21:21:53:39: 9b:d7:69:20:50:29:d0:a0:de:ac:a8:df:f4:71:87:0b:2c:64: 36:c1:c5:ea:f1:64:5b:d3:ab:0d:69:e7:1f:c4:ee:c4:59:a0: fc:06:bd:55:8d:d6:ac:4d:33:74:af:c2:84:a9:2c:cd:22:65: 99:4a:b3:0a:7e:b4:a1:e6:b5:47:c9:ca:45:f9:89:87:e7:8e: ac:94:a2:74:31:f8:a4:3d:3c:91:98:89:cf:dc:77:94:63:c8: ac:7c:65:57:19:8e:8f:32:0d:52:cf:48:45:9c:ed:8b:cb:aa: 57:c5:fd:05:5c:0d:26:60:2d:64:de:9e:ea:8d:06:bd:08:f7: 7e:6f:cc:dc:2b:82:c4:5b:a3:d7:cd:06:0e:0d:4a:28:98:f2: 7f:62:34:87:d1:7a:c8:c6:11:39:3d:fd:1f:4c:22:97:ee:50: 32:c0:f6:53:40:02:f8:94:de:5d:39:5f:06:f2:e1:bd:8a:40: 3b:a5:c4:c7:92:7b:de:1b:a2:f6:18:53:bc:70:b3:5a:7e:6f: fd:76:55:2b:4b:ed:d0:0b:83:b4:99:7d:37:d6:7b:6e:eb:5b: 19:c2:5c:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCwwGvdIfjPFIv+uU6mzZGFn3zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNTA0MjgwMzM2NTRaFw0yNTA1MDExNDAwNTRaMDMxMTAvBgNV BAMTKEEzQThCMEVBODVDRUMxMjNERTkxMUUyNTA2NEJFNkU5MzYyMzg5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTXJWnpBBoej1m1JqBHvBmsTq iWUTVCXvdlovUBei9pRerHFOpobG5hpzXD/becNTEX76r1tsiiGWDn/jyH6gBI7q 38FRO699p/hq9Cc7X47Am8SFJ5Dz2XYD6AvmCqAJtdajts76mT79nsqJGQnP+cIZ wXmpsKGqRYTIzX4XfxnKvZ9wEndqmax3n9bvXqQ3bm8h+tWwfO27MgzmZ4x24J3g TCFcqRZAKaHg0NNxR+Fy/sWR3kIDZJFyIRMyCCC6Pk6TbLHBDvBO6jjfkOhtM1uG 4EQf1hX06cCFJovJEvBzVCY4aMN+j7ls6wA1Q52Tce+O/v0UzhpLmhlLLOw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo6iw6oXOwSPekR4lBkvm6TYjiZ8wHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzy5uU5fCu6XO4wIk5+a0J/daaV86TK5RKK NaKkB/h3ISFTOZvXaSBQKdCg3qyo3/RxhwssZDbBxerxZFvTqw1p5x/E7sRZoPwG vVWN1qxNM3SvwoSpLM0iZZlKswp+tKHmtUfJykX5iYfnjqyUonQx+KQ9PJGYic/c d5RjyKx8ZVcZjo8yDVLPSEWc7YvLqlfF/QVcDSZgLWTenuqNBr0I935vzNwrgsRb o9fNBg4NSiiY8n9iNIfResjGETk9/R9MIpfuUDLA9lNAAviU3l05Xwby4b2KQDul xMeSe94bovYYU7xws1p+b/12VStL7dALg7SZfTfWe27rWxnCXKQ= -----END CERTIFICATE-----Generated at Wed Apr 30 02:35:36 2025 by rpki-client