$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: gjdvT5g637Nct4TLTx/Q+2Gj+4Rq9kV82Kr7wo3da8o= Subject key identifier: 5B:22:4E:61:CC:DA:63:48:A4:2D:9B:1F:93:2C:91:08:4B:05:04:78 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 4A7599494801D4DBF8DFAE6EB6775F0DBBCFA6EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 02DF Signing time: Wed 18 Jun 2025 11:20:54 +0000 Manifest this update: Wed 18 Jun 2025 11:15:54 +0000 Manifest next update: Sat 21 Jun 2025 14:08:54 +0000 Files and hashes: 1: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: EPaL0UKwT22fP4X501t7wLPoPJnc9GguRirJyBjRExs=) 2: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: Zt0zsxB+w7cKXBve2x/yKfK+K8HKfAC08Q972W/V9wQ=) 3: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: CnXMmVk77qU3n1s+zcvccpt4f5iYEiQUQVFxKO62rc8=) 4: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: iQrfW4vm6eczOWBsSobvUfreWvjyzuZNC1OGl7c8Sx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:75:99:49:48:01:d4:db:f8:df:ae:6e:b6:77:5f:0d:bb:cf:a6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Jun 18 11:15:54 2025 GMT Not After : Jun 21 14:08:54 2025 GMT Subject: CN=5B224E61CCDA6348A42D9B1F932C91084B050478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:e6:d1:c2:c3:4b:85:45:ba:4c:18:ca:a9: 52:f0:8b:2d:5e:6e:a2:4a:12:29:d9:3b:e7:cc:7f: bf:53:d8:e5:54:b4:f9:ce:58:d2:99:ac:70:9e:d3: 12:f0:91:f7:70:12:23:4b:3f:b9:36:da:ea:5f:bd: 31:74:ed:9b:9c:73:52:2d:a5:b7:c7:96:1a:0a:a2: 14:e9:45:3b:c5:57:30:86:23:23:63:35:d8:ae:66: 08:c7:2f:39:af:9d:4b:59:e8:7f:57:b1:59:79:fe: 2c:96:17:66:c4:88:62:8a:5b:fe:b2:70:c6:a0:23: 2b:44:9f:3b:b0:bb:33:a4:6d:17:9f:a1:9a:de:3e: f2:23:ea:a1:98:28:a6:a9:b9:14:38:f5:49:aa:77: 82:be:5e:fc:af:8e:f2:7e:fb:df:d1:2c:93:56:f2: 83:8d:60:1a:3f:77:60:46:46:2f:b2:1c:d6:5e:b6: 9a:fe:36:b0:28:2a:98:9a:40:bb:02:fe:65:0c:0e: aa:74:7f:a6:06:e5:97:7b:a1:ac:43:f1:ab:e5:35: 64:ab:8c:ae:2d:3d:56:5a:06:62:75:2d:1c:54:e6: da:55:b7:87:f2:d8:76:70:01:de:dc:a1:29:20:df: 81:0f:9e:52:13:78:e5:a2:22:f0:92:a0:76:dd:7b: 29:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:22:4E:61:CC:DA:63:48:A4:2D:9B:1F:93:2C:91:08:4B:05:04:78 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:cd:3c:03:8f:35:ed:c4:d4:f5:25:2f:a0:02:7d:a3:86:71: 6a:8c:6b:74:34:0b:b6:63:72:d9:dc:85:55:99:cd:b5:8c:90: 9f:c6:91:47:01:50:21:75:10:b5:83:95:b4:c6:1c:fd:66:41: 1b:a0:6b:11:d2:5c:7a:38:86:f5:d3:3d:20:a1:33:5b:64:f2: 85:43:3f:30:e2:04:93:77:8c:2e:14:d4:a1:fa:d9:47:29:34: 85:d4:b5:c1:d0:99:f7:24:c0:80:a9:e1:35:88:24:54:b3:14: 1a:db:3f:4d:8f:4e:84:13:d0:30:45:60:23:a9:0a:64:a4:59: 98:bc:2c:e8:dd:10:1c:85:cc:c6:cd:4b:37:62:22:f4:68:c2: 1e:4d:00:11:93:3e:a5:c9:32:6c:21:50:fa:29:d2:65:38:c4: 26:75:f9:94:7e:db:9a:ee:f2:88:7f:3a:32:c7:09:05:0d:15: 30:ac:32:82:30:00:a2:10:b5:81:5c:b9:14:b8:a3:f6:fc:0f: 9c:24:a3:2a:d6:d4:a3:61:10:ee:8f:cd:36:56:17:6b:6b:15: 1d:4a:f4:9a:2b:74:3c:eb:ea:bf:b2:fb:73:c9:32:26:17:01: 60:a0:cc:15:95:dc:e6:c9:de:f4:95:f4:0f:33:9c:37:81:99: 7a:d7:6b:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnWZSUgB1Nv4365utndfDbvPpuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTA2MTgxMTE1NTRaFw0yNTA2MjExNDA4NTRaMDMxMTAvBgNV BAMTKDVCMjI0RTYxQ0NEQTYzNDhBNDJEOUIxRjkzMkM5MTA4NEIwNTA0NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhebRwsNLhUW6TBjKqVLwiy1e bqJKEinZO+fMf79T2OVUtPnOWNKZrHCe0xLwkfdwEiNLP7k22upfvTF07Zucc1It pbfHlhoKohTpRTvFVzCGIyNjNdiuZgjHLzmvnUtZ6H9XsVl5/iyWF2bEiGKKW/6y cMagIytEnzuwuzOkbRefoZrePvIj6qGYKKapuRQ49Umqd4K+XvyvjvJ++9/RLJNW 8oONYBo/d2BGRi+yHNZetpr+NrAoKpiaQLsC/mUMDqp0f6YG5Zd7oaxD8avlNWSr jK4tPVZaBmJ1LRxU5tpVt4fy2HZwAd7coSkg34EPnlITeOWiIvCSoHbdeylLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWyJOYczaY0ikLZsfkyyRCEsFBHgwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDNPAOPNe3E1PUlL6ACfaOGcWqMa3Q0C7Zj ctnchVWZzbWMkJ/GkUcBUCF1ELWDlbTGHP1mQRugaxHSXHo4hvXTPSChM1tk8oVD PzDiBJN3jC4U1KH62UcpNIXUtcHQmfckwICp4TWIJFSzFBrbP02PToQT0DBFYCOp CmSkWZi8LOjdEByFzMbNSzdiIvRowh5NABGTPqXJMmwhUPop0mU4xCZ1+ZR+25ru 8oh/OjLHCQUNFTCsMoIwAKIQtYFcuRS4o/b8D5wkoyrW1KNhEO6PzTZWF2trFR1K 9JordDzr6r+y+3PJMiYXAWCgzBWV3ObJ3vSV9A8znDeBmXrXa7k= -----END CERTIFICATE-----Generated at Thu Jun 19 11:00:58 2025 by rpki-client