$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: +7GrOHlEI5WCuUs5DaNem0w6Qpiwdrzuj3o3GI4F6JE= Subject key identifier: 51:7E:41:20:85:25:6F:E8:03:60:8D:A3:E6:A5:A9:90:1B:6A:D7:43 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 17A72CF81E57FA77EF11A21196E6B80AD2AEABD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 02F0 Signing time: Thu 24 Jul 2025 22:50:53 +0000 Manifest this update: Thu 24 Jul 2025 22:45:53 +0000 Manifest next update: Mon 28 Jul 2025 03:39:53 +0000 Files and hashes: 1: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) 2: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: iQrfW4vm6eczOWBsSobvUfreWvjyzuZNC1OGl7c8Sx8=) 3: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: NPTNkAFeiU4perz1lh+B9xb1IjABewQG5b/Cldme2U8=) 4: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: V9ySKdxSEPF7snLR+t6llAFsTmxnJG3Orvmf6zUfJiI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 03:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a7:2c:f8:1e:57:fa:77:ef:11:a2:11:96:e6:b8:0a:d2:ae:ab:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Jul 24 22:45:53 2025 GMT Not After : Jul 28 03:39:53 2025 GMT Subject: CN=517E412085256FE803608DA3E6A5A9901B6AD743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:d7:f0:ec:05:e0:94:0f:f2:24:07:f5:4f: a7:dd:93:41:58:f3:9c:c6:d9:09:1a:a5:9e:74:97: 82:94:f6:0f:99:54:43:c0:1a:07:5c:a8:6b:7d:82: f4:11:ba:eb:b3:a4:89:f6:d0:28:bc:7b:cd:73:4c: 6f:8e:9d:75:71:92:fc:1c:1b:46:66:dd:81:c1:70: 24:c8:3c:60:2b:85:01:bd:a9:db:ea:ec:59:0c:88: 5b:9b:95:fb:90:45:6c:65:16:01:6c:51:80:37:77: 0a:e7:ea:1a:20:8e:db:ee:13:10:12:78:97:80:e2: 8d:24:42:2e:73:02:00:27:dc:f9:03:52:6e:68:b1: 55:f1:3e:96:bf:fa:90:77:ef:1c:c6:12:98:cf:68: da:c9:5e:ea:24:b2:74:ee:fa:c3:79:fb:c2:0d:73: 6a:5d:19:a6:b3:e6:62:00:df:fc:12:c3:9e:a1:37: d3:4d:b0:8c:b4:67:47:ac:7a:dd:83:c3:42:79:75: 1e:c6:fc:5a:71:cb:4e:21:ca:d4:54:eb:59:b6:ac: 27:03:cd:34:61:7a:23:cd:3f:d5:ec:23:1f:18:28: a5:88:b2:c3:a4:03:b9:a5:56:25:25:b3:12:3c:33: 4a:2a:a7:df:48:cf:45:ba:14:0b:f9:05:a5:3b:95: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7E:41:20:85:25:6F:E8:03:60:8D:A3:E6:A5:A9:90:1B:6A:D7:43 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:41:33:43:03:eb:21:b7:33:e1:d9:55:72:93:c3:ff:df:cd: 7d:17:8e:4b:b1:4b:36:9b:8c:12:7f:ec:13:65:b5:54:4a:ab: ab:0b:c0:15:56:f4:8a:e4:c9:cc:ff:1d:e7:62:dc:0b:b6:ae: 67:1f:c9:7a:fe:2f:b0:ff:c9:ad:8e:94:4f:25:0b:09:a1:33: e7:23:28:97:ab:d4:0e:05:b9:73:17:b9:f0:f9:99:2a:67:4a: 98:c7:ed:ca:5f:ce:b8:9e:e9:38:da:53:e9:52:ff:75:bd:de: 9f:3f:34:ef:15:0e:63:2e:b6:64:b0:3f:cb:f1:e4:55:74:4a: 5e:b0:ce:dc:6f:e0:04:6f:38:00:17:94:94:62:cd:54:fa:44: 22:c0:51:43:04:52:36:50:1e:d9:c3:c9:48:85:c2:ca:41:08: f1:96:97:6b:bc:bd:23:47:50:f0:1e:f4:92:97:00:c2:1d:fb: 76:55:57:e5:fe:46:c7:c8:5e:73:d4:7b:2a:01:36:86:27:d2: 4e:0d:a9:64:be:1b:79:f4:d3:bf:2c:2a:b1:a4:be:02:f0:10: 22:d7:2c:52:fe:22:2b:95:45:ce:7e:41:69:e1:17:e5:ea:aa: ae:dc:e4:3f:7e:e7:5d:cb:ee:f3:52:89:bc:31:44:25:7c:14: 7b:90:54:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6cs+B5X+nfvEaIRlua4CtKuq9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTA3MjQyMjQ1NTNaFw0yNTA3MjgwMzM5NTNaMDMxMTAvBgNV BAMTKDUxN0U0MTIwODUyNTZGRTgwMzYwOERBM0U2QTVBOTkwMUI2QUQ3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZtfw7AXglA/yJAf1T6fdk0FY 85zG2QkapZ50l4KU9g+ZVEPAGgdcqGt9gvQRuuuzpIn20Ci8e81zTG+OnXVxkvwc G0Zm3YHBcCTIPGArhQG9qdvq7FkMiFublfuQRWxlFgFsUYA3dwrn6hogjtvuExAS eJeA4o0kQi5zAgAn3PkDUm5osVXxPpa/+pB37xzGEpjPaNrJXuoksnTu+sN5+8IN c2pdGaaz5mIA3/wSw56hN9NNsIy0Z0eset2Dw0J5dR7G/Fpxy04hytRU61m2rCcD zTRheiPNP9XsIx8YKKWIssOkA7mlViUlsxI8M0oqp99Iz0W6FAv5BaU7lcxbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUX5BIIUlb+gDYI2j5qWpkBtq10MwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMdBM0MD6yG3M+HZVXKTw//fzX0XjkuxSzab jBJ/7BNltVRKq6sLwBVW9Irkycz/Hedi3Au2rmcfyXr+L7D/ya2OlE8lCwmhM+cj KJer1A4FuXMXufD5mSpnSpjH7cpfzrie6TjaU+lS/3W93p8/NO8VDmMutmSwP8vx 5FV0Sl6wztxv4ARvOAAXlJRizVT6RCLAUUMEUjZQHtnDyUiFwspBCPGWl2u8vSNH UPAe9JKXAMId+3ZVV+X+RsfIXnPUeyoBNoYn0k4NqWS+G3n0078sKrGkvgLwECLX LFL+IiuVRc5+QWnhF+Xqqq7c5D9+513L7vNSibwxRCV8FHuQVBc= -----END CERTIFICATE-----Generated at Fri Jul 25 06:47:43 2025 by rpki-client