$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: Gc0r0QtjOnu9oi47WRVeoo4gVq/H96vUX+Q4XaMB56A= Subject key identifier: C1:C1:88:4B:E8:21:EF:59:E9:48:F0:CB:39:BF:A9:C7:E9:79:9F:BB Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 1B8DB2CB487DE54AC23605D2766516F2265DBDB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 04C0 Signing time: Wed 06 Aug 2025 14:11:14 +0000 Manifest this update: Wed 06 Aug 2025 14:06:14 +0000 Manifest next update: Sat 09 Aug 2025 16:17:14 +0000 Files and hashes: 1: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=) 2: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: qPxs+M9MtoTt9S8tDn9kTv+/cyUC0OkcNk4mEKPcYs0=) 3: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=) 4: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8d:b2:cb:48:7d:e5:4a:c2:36:05:d2:76:65:16:f2:26:5d:bd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Aug 6 14:06:14 2025 GMT Not After : Aug 9 16:17:14 2025 GMT Subject: CN=C1C1884BE821EF59E948F0CB39BFA9C7E9799FBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:de:a3:03:fc:9e:25:ec:15:0c:58:f7:75: 6c:ad:24:71:5e:af:93:e6:30:38:85:e9:0a:a1:cc: b4:87:c4:07:af:9f:21:1b:45:60:63:f8:d9:84:01: dc:5b:99:26:ea:1a:b0:cf:c5:bd:d1:9e:e1:f4:8d: 6f:6a:1f:5c:c0:1c:e4:6d:79:1e:a5:6b:0d:0b:00: 4f:67:53:a3:51:b0:4d:2b:8c:1c:d3:6c:a3:0f:a3: 9b:8b:83:d8:61:bb:a2:4f:24:02:39:3a:90:59:fa: 03:3c:f4:56:d4:64:c6:65:69:86:56:76:03:e7:90: 31:30:d1:ca:8a:5c:b3:73:ce:75:3a:44:e1:7d:ba: 34:86:16:51:e5:1c:b1:eb:36:df:f6:99:df:68:a6: e1:64:60:a7:e6:06:06:62:e6:46:23:db:78:cf:d1: 57:4f:f6:45:60:5d:ca:9c:3f:5c:5e:ff:5f:a0:a4: 98:d9:96:fc:ea:3e:2d:f7:ba:05:83:64:d5:8e:0a: 91:b9:d8:36:60:74:e0:d1:7d:19:47:08:a3:28:6c: 8a:56:86:26:30:72:35:5c:c0:6b:48:24:c8:a0:d5: bb:9d:79:56:1b:6d:70:16:17:ba:d0:4a:63:24:bb: 65:59:2d:8c:91:6a:c9:fc:67:3d:0f:2f:f1:28:a5: 7b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C1:88:4B:E8:21:EF:59:E9:48:F0:CB:39:BF:A9:C7:E9:79:9F:BB X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:eb:60:20:a9:e3:97:47:f1:00:78:18:c3:e0:7a:be:be:bb: c9:1d:95:1b:bd:72:be:83:f1:74:9c:c4:78:8b:0a:21:42:67: 00:88:48:4e:80:96:aa:77:9e:d1:48:5a:6f:99:49:46:89:8f: 4d:58:f8:ea:d6:f5:fc:dc:60:10:bc:d2:3f:e4:64:89:96:48: 66:a9:38:47:28:ac:95:8a:a9:5f:06:d7:0a:1d:b3:f7:90:1f: 83:e0:fa:08:1f:99:1b:fd:3e:61:c1:af:fc:52:1e:01:05:01: b0:65:de:2d:8f:27:c0:a9:95:97:d3:78:69:c0:40:e6:2a:ac: 51:64:f6:8a:c0:57:52:61:cf:7b:be:aa:0b:79:a8:6a:26:0b: ba:74:13:49:75:46:d3:20:b1:39:6c:80:77:ea:be:a2:3c:af: c0:af:74:91:93:cc:11:f9:04:70:dd:a6:65:3d:0f:bf:0f:1a: 60:9a:ed:de:46:ae:5a:cc:e9:2f:0e:c4:69:e6:ef:b0:c7:3d: 50:97:5b:97:8f:88:9c:86:ec:00:05:be:1c:8c:4f:3f:9d:b4: 3a:65:d5:d4:dd:6c:1a:ed:59:23:c7:75:03:0d:8f:f7:32:93: 66:a4:3c:06:c4:4f:73:56:1d:fe:95:fa:ea:b4:84:3a:41:a6: b8:ab:49:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG42yy0h95UrCNgXSdmUW8iZdvbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTA4MDYxNDA2MTRaFw0yNTA4MDkxNjE3MTRaMDMxMTAvBgNV BAMTKEMxQzE4ODRCRTgyMUVGNTlFOTQ4RjBDQjM5QkZBOUM3RTk3OTlGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJod6jA/yeJewVDFj3dWytJHFe r5PmMDiF6QqhzLSHxAevnyEbRWBj+NmEAdxbmSbqGrDPxb3RnuH0jW9qH1zAHORt eR6law0LAE9nU6NRsE0rjBzTbKMPo5uLg9hhu6JPJAI5OpBZ+gM89FbUZMZlaYZW dgPnkDEw0cqKXLNzznU6ROF9ujSGFlHlHLHrNt/2md9opuFkYKfmBgZi5kYj23jP 0VdP9kVgXcqcP1xe/1+gpJjZlvzqPi33ugWDZNWOCpG52DZgdODRfRlHCKMobIpW hiYwcjVcwGtIJMig1budeVYbbXAWF7rQSmMku2VZLYyRasn8Zz0PL/EopXsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwcGIS+gh71npSPDLOb+px+l5n7swHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3rYCCp45dH8QB4GMPger6+u8kdlRu9cr6D 8XScxHiLCiFCZwCISE6Alqp3ntFIWm+ZSUaJj01Y+OrW9fzcYBC80j/kZImWSGap OEcorJWKqV8G1wods/eQH4Pg+ggfmRv9PmHBr/xSHgEFAbBl3i2PJ8CplZfTeGnA QOYqrFFk9orAV1Jhz3u+qgt5qGomC7p0E0l1RtMgsTlsgHfqvqI8r8CvdJGTzBH5 BHDdpmU9D78PGmCa7d5GrlrM6S8OxGnm77DHPVCXW5ePiJyG7AAFvhyMTz+dtDpl 1dTdbBrtWSPHdQMNj/cyk2akPAbET3NWHf6V+uq0hDpBprirSb0= -----END CERTIFICATE-----Generated at Thu Aug 7 04:29:47 2025 by rpki-client