$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft File: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft (raw, json) Hash identifier: hnpYBub44IyF3eDphbIpG/Vvn7+kZGafOtOsj+Hdtw0= Subject key identifier: 56:3E:A4:FC:D3:73:F6:F6:F4:AD:E5:FB:D3:1B:99:2B:EE:12:21:F9 Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 Certificate issuer: /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Certificate serial: 36FEA55CEAAE5AA3735CF3688874C1AAF362BC4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft Manifest number: 01E3 Signing time: Fri 08 Aug 2025 11:10:53 +0000 Manifest this update: Fri 08 Aug 2025 11:05:53 +0000 Manifest next update: Mon 11 Aug 2025 18:05:53 +0000 Files and hashes: 1: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl (hash: RU1x/sqvq8g/ulFT7vkS1Vl9PycH4U7Yap1Vh/3splI=) 2: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: buLsY1iWxn5uAX/tlzA+XQSdGjGRQVTlyaSVt5UiGA8=) 3: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: LKby0ViyWSUSxyx6by+Sa+3JQIcYE0HMocb+PoIEh0U=) 4: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: wWf96mUt4wCBbqfalQK0TLTz6ApBKN5hLe7UYoC3TzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:fe:a5:5c:ea:ae:5a:a3:73:5c:f3:68:88:74:c1:aa:f3:62:bc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Validity Not Before: Aug 8 11:05:53 2025 GMT Not After : Aug 11 18:05:53 2025 GMT Subject: CN=563EA4FCD373F6F6F4ADE5FBD31B992BEE1221F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9c:80:c3:01:d9:72:04:8c:cd:cc:20:6f:0f: 2c:17:ea:cc:13:33:29:72:82:f9:51:d5:43:88:5f: 19:3f:18:2d:54:2a:4e:05:b1:4c:cb:07:d7:bd:fd: 14:2b:ea:88:a2:e2:ff:58:8f:79:f9:8c:53:90:53: 1f:50:a5:ed:cb:21:b5:f9:74:79:8b:da:1c:75:64: a6:fe:c7:d8:5d:b4:d3:0a:c6:36:b5:7e:79:40:83: 48:c5:17:e0:58:80:71:b3:7c:d3:fe:2b:1d:13:e5: 49:1f:3b:0c:43:ed:00:a9:79:28:35:4f:bc:7c:fe: d8:53:be:d2:1a:72:93:20:e8:7b:30:31:f1:56:d7: dd:a2:ff:ba:05:b2:0a:10:a9:56:66:02:1f:0a:6d: a3:2a:d4:f1:37:d9:db:e8:18:58:f1:69:44:ee:b8: 65:be:bc:83:fe:13:cc:71:e8:cb:eb:8d:66:b2:9b: b7:ae:10:b0:61:6f:d1:15:f3:d1:6a:b9:19:d3:80: 79:d2:fc:a2:5a:ff:90:e2:cc:cc:7e:04:a5:29:fb: 07:30:1a:ab:90:ca:6b:82:fe:d0:6b:8f:1c:70:d4: 7f:67:98:c0:e1:91:ce:a8:84:bb:d8:a6:6e:b7:d0: ec:c2:db:bb:de:e9:36:da:12:7d:99:43:c3:bd:cb: 52:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:3E:A4:FC:D3:73:F6:F6:F4:AD:E5:FB:D3:1B:99:2B:EE:12:21:F9 X509v3 Authority Key Identifier: keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:56:25:e9:46:ff:7a:40:6e:e1:9f:72:0a:fa:9b:b9:48:c5: 8d:a6:bd:2d:b7:80:11:6a:bd:74:63:5e:79:29:2d:8e:41:95: 83:93:e6:9c:b7:68:a2:3c:96:c9:a2:dc:bb:c3:55:3b:7e:99: fa:7e:3f:4c:19:3e:10:82:26:2f:4d:13:21:73:86:f2:2e:06: dd:33:6b:62:40:d1:5b:08:e1:da:c5:39:bf:b3:de:0a:ff:78: 65:f6:19:ae:1d:35:8a:2a:2a:c1:b2:9c:3f:3c:a7:ba:dc:b2: a7:b0:36:f6:79:12:5f:a3:d3:0f:64:84:79:25:cd:bd:3c:66: 36:7c:26:93:ea:9f:16:ad:a6:bd:83:4c:c8:4a:b9:a5:b0:1f: ee:1a:41:3c:2a:99:08:f2:d0:5f:f0:40:75:ef:3d:0f:ca:53: 36:cb:24:e3:c9:a0:08:b3:ae:ad:af:ff:38:0f:5d:63:ff:9e: 5d:f7:b8:5a:2d:2e:f2:b9:a9:b6:46:42:7c:7d:4e:d8:43:fb: 01:47:fd:ad:31:b1:61:ae:40:a0:bc:12:14:c6:3c:76:7a:86: 1a:d5:98:b6:20:b6:3c:3c:64:2a:d1:ee:4a:22:56:12:b9:26: 7d:b4:1c:3d:b8:0b:0b:89:66:ca:4a:13:4f:29:ac:82:1e:63: d2:ea:65:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNv6lXOquWqNzXPNoiHTBqvNivE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3 MzQyMEUzODAeFw0yNTA4MDgxMTA1NTNaFw0yNTA4MTExODA1NTNaMDMxMTAvBgNV BAMTKDU2M0VBNEZDRDM3M0Y2RjZGNEFERTVGQkQzMUI5OTJCRUUxMjIxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgnIDDAdlyBIzNzCBvDywX6swT MylygvlR1UOIXxk/GC1UKk4FsUzLB9e9/RQr6oii4v9Yj3n5jFOQUx9Qpe3LIbX5 dHmL2hx1ZKb+x9hdtNMKxja1fnlAg0jFF+BYgHGzfNP+Kx0T5UkfOwxD7QCpeSg1 T7x8/thTvtIacpMg6HswMfFW192i/7oFsgoQqVZmAh8KbaMq1PE32dvoGFjxaUTu uGW+vIP+E8xx6MvrjWaym7euELBhb9EV89FquRnTgHnS/KJa/5DizMx+BKUp+wcw GquQymuC/tBrjxxw1H9nmMDhkc6ohLvYpm630OzC27ve6TbaEn2ZQ8O9y1KLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVj6k/NNz9vb0reX70xuZK+4SIfkwHwYDVR0j BBgwFoAU5Rp39dv7FrFgbeGk/239BXNCDjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDBlMWYyMC1iMGNkLTQ2OWItOTEwNi0xZWEwMDA3OTVmOWYvMC9FNTFBNzdGNURC RkIxNkIxNjA2REUxQTRGRjZERkQwNTczNDIwRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3MzQy MEUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZE MDU3MzQyMEUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtWJelG/3pAbuGfcgr6m7lIxY2mvS23gBFq vXRjXnkpLY5BlYOT5py3aKI8lsmi3LvDVTt+mfp+P0wZPhCCJi9NEyFzhvIuBt0z a2JA0VsI4drFOb+z3gr/eGX2Ga4dNYoqKsGynD88p7rcsqewNvZ5El+j0w9khHkl zb08ZjZ8JpPqnxatpr2DTMhKuaWwH+4aQTwqmQjy0F/wQHXvPQ/KUzbLJOPJoAiz rq2v/zgPXWP/nl33uFotLvK5qbZGQnx9TthD+wFH/a0xsWGuQKC8EhTGPHZ6hhrV mLYgtjw8ZCrR7koiVhK5Jn20HD24CwuJZspKE08prIIeY9LqZag= -----END CERTIFICATE-----Generated at Sat Aug 9 01:23:06 2025 by rpki-client