$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: tx/W59yY8q9cSptk6EmcOgQplaMsdO+QqUYOidcmboc= Subject key identifier: DF:D4:D7:FA:9D:58:22:FA:4B:1F:E1:F5:79:B6:20:06:C3:31:D4:C3 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 121784B4B737437B761AE064824AC44E1655E210 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 02EF Signing time: Tue 22 Jul 2025 14:30:52 +0000 Manifest this update: Tue 22 Jul 2025 14:25:52 +0000 Manifest next update: Fri 25 Jul 2025 22:45:52 +0000 Files and hashes: 1: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: iQrfW4vm6eczOWBsSobvUfreWvjyzuZNC1OGl7c8Sx8=) 2: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) 3: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: Shiagmq19gDDHoJUO3Z6UXS1Dgr50uWcT37wsfrxsX0=) 4: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: NPTNkAFeiU4perz1lh+B9xb1IjABewQG5b/Cldme2U8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:17:84:b4:b7:37:43:7b:76:1a:e0:64:82:4a:c4:4e:16:55:e2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Jul 22 14:25:52 2025 GMT Not After : Jul 25 22:45:52 2025 GMT Subject: CN=DFD4D7FA9D5822FA4B1FE1F579B62006C331D4C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:0c:69:5a:f2:8c:b2:a2:41:d6:27:02:97: c1:02:7e:42:c7:1d:ba:00:53:0f:03:1a:e2:ae:26: 2a:58:75:bf:1f:97:aa:71:36:b1:bc:40:91:ed:f3: e8:74:65:53:a0:50:13:01:7f:f2:c2:0f:fd:66:5b: 6d:bb:09:d0:e1:c8:82:e3:5f:19:e3:c7:df:26:ba: 90:85:bd:e8:08:48:eb:e9:7d:e5:3e:01:ff:eb:0c: e8:20:30:20:90:23:af:28:24:74:01:d5:95:48:10: d7:22:f2:e5:60:df:d8:05:43:25:99:76:49:12:22: b6:66:55:9e:8c:4e:03:93:30:78:c4:bf:44:2a:bd: cc:a5:b5:51:f9:b9:43:da:11:71:4d:e2:47:31:32: b6:f2:07:fa:ac:b6:38:66:52:f6:0b:d4:6c:ab:09: 2d:3c:74:8f:8d:1c:db:b6:65:5e:49:57:a8:67:40: f5:ba:e9:bc:ce:e3:5c:5a:23:d7:0e:25:57:cc:a7: 4e:a4:47:59:9f:4a:ea:0b:aa:1b:08:13:70:fa:70: e6:54:bc:e3:ba:65:c3:66:ae:84:ff:89:6b:bf:26: 9f:b5:21:ad:20:d3:57:98:2f:9f:bd:80:18:30:69: e7:2d:9d:fb:a2:d2:ba:ca:23:82:a9:cf:36:f3:51: 06:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D4:D7:FA:9D:58:22:FA:4B:1F:E1:F5:79:B6:20:06:C3:31:D4:C3 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cb:af:75:68:f4:f4:e7:58:fa:7c:40:9e:a2:bd:84:ad:02: 40:3d:61:78:69:97:db:49:39:99:b8:51:c4:bd:71:c6:7a:6f: 4c:af:3b:90:82:7b:c1:88:fc:cc:4a:a5:14:13:d7:9c:33:aa: 22:2f:87:01:5b:ca:28:2d:32:89:81:76:42:ff:8b:91:6f:9e: 57:9f:9b:82:61:5c:8a:bf:6b:73:a3:f5:db:fd:9a:2e:85:23: 9a:4a:16:87:4c:75:83:46:b9:e6:54:b3:fe:30:99:34:fb:09: 94:a5:ca:c2:ed:b9:8a:be:e4:c9:fc:eb:77:24:b4:7c:49:c2: 34:90:1e:18:60:ee:a2:a7:35:62:f1:6c:42:48:b4:b2:c8:15: ea:df:e4:26:8e:64:79:6e:28:b6:2c:88:c5:f2:0c:1f:ac:39: 11:b5:6a:65:6f:b8:a8:88:76:a7:fa:42:a0:f2:14:2f:cc:cc: 51:9c:89:e7:2b:bb:9c:6a:b9:9c:66:c8:d0:73:9e:dc:65:7e: 70:87:9e:12:60:4d:4e:38:8c:bd:63:78:f2:86:7e:7f:57:6e: 40:77:27:c4:a1:b9:0d:00:a7:27:aa:1f:df:34:76:74:18:07: a3:c5:44:38:7d:17:0e:51:ec:91:c5:e9:34:34:14:93:97:2a: 8b:8b:a1:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEheEtLc3Q3t2GuBkgkrEThZV4hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTA3MjIxNDI1NTJaFw0yNTA3MjUyMjQ1NTJaMDMxMTAvBgNV BAMTKERGRDREN0ZBOUQ1ODIyRkE0QjFGRTFGNTc5QjYyMDA2QzMzMUQ0QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcrQxpWvKMsqJB1icCl8ECfkLH HboAUw8DGuKuJipYdb8fl6pxNrG8QJHt8+h0ZVOgUBMBf/LCD/1mW227CdDhyILj Xxnjx98mupCFvegISOvpfeU+Af/rDOggMCCQI68oJHQB1ZVIENci8uVg39gFQyWZ dkkSIrZmVZ6MTgOTMHjEv0QqvcyltVH5uUPaEXFN4kcxMrbyB/qstjhmUvYL1Gyr CS08dI+NHNu2ZV5JV6hnQPW66bzO41xaI9cOJVfMp06kR1mfSuoLqhsIE3D6cOZU vOO6ZcNmroT/iWu/Jp+1Ia0g01eYL5+9gBgwaectnfui0rrKI4KpzzbzUQZPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU39TX+p1YIvpLH+H1ebYgBsMx1MMwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzLr3Vo9PTnWPp8QJ6ivYStAkA9YXhpl9tJ OZm4UcS9ccZ6b0yvO5CCe8GI/MxKpRQT15wzqiIvhwFbyigtMomBdkL/i5Fvnlef m4JhXIq/a3Oj9dv9mi6FI5pKFodMdYNGueZUs/4wmTT7CZSlysLtuYq+5Mn863ck tHxJwjSQHhhg7qKnNWLxbEJItLLIFerf5CaOZHluKLYsiMXyDB+sORG1amVvuKiI dqf6QqDyFC/MzFGciecru5xquZxmyNBzntxlfnCHnhJgTU44jL1jePKGfn9XbkB3 J8ShuQ0ApyeqH980dnQYB6PFRDh9Fw5R7JHF6TQ0FJOXKouLoRo= -----END CERTIFICATE-----Generated at Thu Jul 24 12:10:02 2025 by rpki-client