$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: /M0H2A1wTySAcx0kqJDjFuaBL5Q7oqZv1Mmj1TYN5bA= Subject key identifier: 22:5E:AB:A9:7B:02:99:0F:4D:46:7E:01:EC:7B:B5:FE:17:54:BD:FC Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 092ABA79A205E740C93BD2DDA37F7600DABD12ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 039B Signing time: Wed 22 Oct 2025 04:12:24 +0000 Manifest this update: Wed 22 Oct 2025 04:07:24 +0000 Manifest next update: Sat 25 Oct 2025 14:52:24 +0000 Files and hashes: 1: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: bGW6+8fJv3+Vj0UFipVPVB3yFdsvnfMrjilwwWe9Jxo=) 2: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: NZRvAk91/qS+2e4QEna7jFq1miR9hnIOcdT25pcAymk=) 3: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: HXG6M2lkHdM7H0q8sMHL2RuqzQnwYr9btslEMX8iQ9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:2a:ba:79:a2:05:e7:40:c9:3b:d2:dd:a3:7f:76:00:da:bd:12:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: Oct 22 04:07:24 2025 GMT Not After : Oct 25 14:52:24 2025 GMT Subject: CN=225EABA97B02990F4D467E01EC7BB5FE1754BDFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:71:e7:3d:25:e8:f1:48:d6:85:94:dc:d8:ae: 42:30:fc:60:99:35:af:fa:24:5c:21:2f:99:04:32: f2:66:c4:5e:7e:97:83:2e:3c:56:69:41:3f:1e:df: 82:46:88:ce:b6:27:9d:e1:d2:3f:ac:2c:43:fd:51: 5a:27:9a:7a:78:a9:9e:13:57:a4:a9:88:8c:08:57: 49:f4:74:02:7e:d8:57:99:90:86:0e:79:38:a7:25: 4c:73:27:5a:d8:98:0a:ed:33:2a:19:b1:c3:8c:f4: 95:6a:95:b1:cb:d5:99:58:57:00:73:83:25:e3:b1: 53:a3:ce:0e:36:f4:3e:d2:fe:56:c6:2e:56:7e:54: a0:ab:37:19:13:22:a4:fe:60:ee:b8:df:68:28:e1: 33:01:d2:4c:6d:aa:5b:56:1c:d4:98:ba:cc:9d:58: d3:4e:94:ac:e6:e7:2c:94:e0:ad:60:1a:31:65:27: 9c:d1:fa:58:49:c2:ec:75:87:a0:8d:4a:b2:60:dc: 80:41:af:8b:22:e7:f6:39:34:33:cd:ff:95:d0:5b: bc:14:bb:9b:15:06:e2:81:66:d0:a5:1d:a6:ad:19: 8d:36:6e:18:45:8a:81:e6:cd:26:68:25:4d:30:8d: d7:88:33:e9:00:9a:41:43:7a:86:e4:97:3d:cc:97: e7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5E:AB:A9:7B:02:99:0F:4D:46:7E:01:EC:7B:B5:FE:17:54:BD:FC X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e4:e4:dd:c6:ab:8f:6b:11:2e:47:df:1a:86:50:04:a7:cd: cf:b7:34:ca:f8:81:b0:7e:d0:d8:a7:ab:25:58:3d:a1:af:87: 3e:3e:e7:20:2f:a3:74:27:5e:f4:71:d0:18:b5:c9:1d:48:05: 55:d3:04:fd:e0:12:17:84:26:4f:e6:06:ad:0c:0b:f2:fa:64: aa:a7:c4:40:16:03:32:6a:fb:db:1b:28:06:98:50:d7:3b:d7: b3:92:a2:7e:5f:ab:83:eb:af:8f:82:7e:56:68:b9:e4:64:09: 14:69:65:16:32:6a:be:55:2b:cd:1a:60:19:6c:16:4d:ca:34: 36:04:cc:36:75:cb:43:0a:e3:02:24:24:25:b9:31:02:0f:af: 24:e1:c8:2e:60:b6:14:98:db:d0:a3:bc:61:d6:2f:16:a5:ca: 5c:29:17:6a:06:10:5b:68:68:92:6d:4e:ee:9d:87:b3:bf:1c: e2:d1:51:1d:b5:24:24:39:b5:08:1a:d3:e2:94:39:27:65:80: 09:4f:e8:60:9f:f2:cf:9e:4b:a3:d9:78:1c:af:92:cb:b5:2c: 7a:d9:35:66:9c:17:cb:0d:cc:f5:84:ed:dd:3e:78:86:04:87: 50:d4:c2:a7:5a:53:c9:1e:7e:8a:06:dc:25:bb:53:09:9e:62: 83:e4:ee:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSq6eaIF50DJO9Ldo392ANq9Eu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNTEwMjIwNDA3MjRaFw0yNTEwMjUxNDUyMjRaMDMxMTAvBgNV BAMTKDIyNUVBQkE5N0IwMjk5MEY0RDQ2N0UwMUVDN0JCNUZFMTc1NEJERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUcec9JejxSNaFlNzYrkIw/GCZ Na/6JFwhL5kEMvJmxF5+l4MuPFZpQT8e34JGiM62J53h0j+sLEP9UVonmnp4qZ4T V6SpiIwIV0n0dAJ+2FeZkIYOeTinJUxzJ1rYmArtMyoZscOM9JVqlbHL1ZlYVwBz gyXjsVOjzg429D7S/lbGLlZ+VKCrNxkTIqT+YO6432go4TMB0kxtqltWHNSYusyd WNNOlKzm5yyU4K1gGjFlJ5zR+lhJwux1h6CNSrJg3IBBr4si5/Y5NDPN/5XQW7wU u5sVBuKBZtClHaatGY02bhhFioHmzSZoJU0wjdeIM+kAmkFDeobklz3Ml+ehAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIl6rqXsCmQ9NRn4B7Hu1/hdUvfwwHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/k5N3Gq49rES5H3xqGUASnzc+3NMr4gbB+ 0NinqyVYPaGvhz4+5yAvo3QnXvRx0Bi1yR1IBVXTBP3gEheEJk/mBq0MC/L6ZKqn xEAWAzJq+9sbKAaYUNc717OSon5fq4Prr4+CflZoueRkCRRpZRYyar5VK80aYBls Fk3KNDYEzDZ1y0MK4wIkJCW5MQIPryThyC5gthSY29CjvGHWLxalylwpF2oGEFto aJJtTu6dh7O/HOLRUR21JCQ5tQga0+KUOSdlgAlP6GCf8s+eS6PZeByvksu1LHrZ NWacF8sNzPWE7d0+eIYEh1DUwqdaU8kefooG3CW7UwmeYoPk7og= -----END CERTIFICATE-----Generated at Thu Oct 23 05:02:45 2025 by rpki-client