$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: ffKTmzE+0bKKCIdaZwK5EXWTZm7OXBELAvSu2xGQEwo= Subject key identifier: 2A:FB:72:BA:83:98:5C:F4:76:43:09:99:11:3F:3A:52:2E:AA:4C:18 Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 2A292A386CC85685A0C6C63E79F9F282D595990B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 04A8 Signing time: Tue 17 Jun 2025 10:01:14 +0000 Manifest this update: Tue 17 Jun 2025 09:56:14 +0000 Manifest next update: Fri 20 Jun 2025 17:28:14 +0000 Files and hashes: 1: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 77mfnCgSnucw48UKGT/imJpoab+aR/Q7MW67xLB0DdM=) 2: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: c3P2M0VXOcWc/kMqDxRrBxNZgSYKuvObUT8WGdbC1Pw=) 3: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: KkTouaQIcHRH3kO0UJSw8M35JUcCJTGxZ9jZlFLdN6g=) 4: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: WZ4shpL3C8pc0Q1RN+DNNZqdwp4SqV96kPD82gjGY24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 17:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:29:2a:38:6c:c8:56:85:a0:c6:c6:3e:79:f9:f2:82:d5:95:99:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Jun 17 09:56:14 2025 GMT Not After : Jun 20 17:28:14 2025 GMT Subject: CN=2AFB72BA83985CF476430999113F3A522EAA4C18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f5:b5:7f:a5:16:97:44:f5:98:d4:44:ef:4d: 19:4a:61:72:77:61:43:bd:63:b0:3b:40:d1:71:0f: 24:26:5b:72:21:2e:ac:3e:5d:2f:99:51:f5:27:92: 52:d7:c2:48:dd:00:24:45:44:c0:e5:72:9f:3c:1c: b3:b6:f9:99:67:43:57:ff:93:36:fe:ff:fa:8f:70: 70:f7:f4:56:7f:7c:fd:d5:de:6b:30:54:6f:7f:2f: c2:1f:af:67:1e:16:4a:56:bc:1a:bb:71:ca:6a:77: a6:40:26:44:cf:06:1f:49:6f:5e:4f:8c:fa:1a:b6: f5:a9:d1:8d:3f:72:1c:7e:59:6b:e3:f7:43:ef:b2: 62:8e:15:72:ef:c5:72:91:f5:10:fa:6b:0c:1a:21: e9:71:fc:c4:ac:05:4e:cf:49:c0:da:cd:76:0d:df: 49:f8:04:c1:54:79:73:e7:3c:b2:bd:49:2f:fc:c2: 55:24:41:1e:02:56:ae:51:48:36:af:5f:1c:95:22: b7:fb:2c:63:26:1c:f2:9b:f7:fb:ef:e9:27:87:c4: c8:bc:6b:b0:37:13:29:a2:5d:3e:18:08:83:9b:fa: 07:2a:6e:2d:3a:f0:2d:5e:36:bf:44:bb:9f:1f:b9: 38:5f:bd:60:c9:a6:ab:1b:40:ff:89:d3:56:87:1f: 82:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FB:72:BA:83:98:5C:F4:76:43:09:99:11:3F:3A:52:2E:AA:4C:18 X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:84:26:60:f9:90:4f:6e:49:83:0a:c9:aa:ae:9d:75:4a:1f: 0a:d0:44:75:51:3b:cf:e8:35:ae:26:02:37:14:dd:28:32:b2: a8:4a:37:d2:bb:a0:ee:ae:02:5b:d4:42:bb:54:9d:f5:ca:05: 25:3c:1c:d9:9c:2d:26:2b:79:e5:47:16:32:fa:2c:49:f6:a4: ff:2b:df:72:1c:a6:cc:df:28:09:2d:da:f1:09:e0:c9:a9:6b: f3:48:e8:f4:60:d4:26:b3:18:00:68:7f:5a:e5:c2:44:60:27: cb:96:2c:5b:3b:7e:38:91:82:d7:af:f9:b4:cf:9a:e7:4a:9b: 91:1d:f4:e8:f8:6c:dd:57:70:7d:7f:ce:81:56:9f:f9:f6:e5: 49:0d:a8:e3:46:de:e1:ce:f7:e5:59:a4:2d:a1:69:cf:fa:f5: 90:ce:47:04:6a:14:ce:19:4d:87:f4:f5:c6:9e:ba:fe:b7:27: fe:52:26:2d:7c:b8:0d:16:ec:f1:f9:ea:c1:d0:5f:d6:11:13: 36:b5:5c:72:ce:a6:17:fa:30:ee:60:04:2f:26:c1:f8:b2:8a: 88:20:6f:9b:2f:18:9a:26:28:4f:e4:53:2a:b9:9d:0c:22:bd: a5:f5:b8:05:a2:1b:f0:92:90:27:8d:a5:db:bd:23:10:5f:cb: 16:9d:0d:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKikqOGzIVoWgxsY+efnygtWVmQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTA2MTcwOTU2MTRaFw0yNTA2MjAxNzI4MTRaMDMxMTAvBgNV BAMTKDJBRkI3MkJBODM5ODVDRjQ3NjQzMDk5OTExM0YzQTUyMkVBQTRDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm9bV/pRaXRPWY1ETvTRlKYXJ3 YUO9Y7A7QNFxDyQmW3IhLqw+XS+ZUfUnklLXwkjdACRFRMDlcp88HLO2+ZlnQ1f/ kzb+//qPcHD39FZ/fP3V3mswVG9/L8Ifr2ceFkpWvBq7ccpqd6ZAJkTPBh9Jb15P jPoatvWp0Y0/chx+WWvj90PvsmKOFXLvxXKR9RD6awwaIelx/MSsBU7PScDazXYN 30n4BMFUeXPnPLK9SS/8wlUkQR4CVq5RSDavXxyVIrf7LGMmHPKb9/vv6SeHxMi8 a7A3EymiXT4YCIOb+gcqbi068C1eNr9Eu58fuThfvWDJpqsbQP+J01aHH4LTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKvtyuoOYXPR2QwmZET86Ui6qTBgwHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImEJmD5kE9uSYMKyaqunXVKHwrQRHVRO8/o Na4mAjcU3SgysqhKN9K7oO6uAlvUQrtUnfXKBSU8HNmcLSYreeVHFjL6LEn2pP8r 33IcpszfKAkt2vEJ4Mmpa/NI6PRg1CazGABof1rlwkRgJ8uWLFs7fjiRgtev+bTP mudKm5Ed9Oj4bN1XcH1/zoFWn/n25UkNqONG3uHO9+VZpC2hac/69ZDORwRqFM4Z TYf09caeuv63J/5SJi18uA0W7PH56sHQX9YREza1XHLOphf6MO5gBC8mwfiyiogg b5svGJomKE/kUyq5nQwivaX1uAWiG/CSkCeNpdu9IxBfyxadDek= -----END CERTIFICATE-----Generated at Wed Jun 18 07:32:51 2025 by rpki-client