$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: 3+PXV/l1p2qRvn4PyzBMMprlj0px5x1FwqQBXHjfo5I= Subject key identifier: F7:DB:79:92:74:E4:8A:24:AE:BF:3A:2B:5A:F4:74:35:94:96:38:72 Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 54BB9AFE514D77FE2F899A8030083887DD134D5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 04B7 Signing time: Sun 20 Jul 2025 23:51:13 +0000 Manifest this update: Sun 20 Jul 2025 23:46:13 +0000 Manifest next update: Thu 24 Jul 2025 10:26:13 +0000 Files and hashes: 1: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: 1M4wpB55utsrODQq/1HcifX5s/MvQ5vhZhLlkiYjzEM=) 2: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 77mfnCgSnucw48UKGT/imJpoab+aR/Q7MW67xLB0DdM=) 3: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: c3P2M0VXOcWc/kMqDxRrBxNZgSYKuvObUT8WGdbC1Pw=) 4: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: WZ4shpL3C8pc0Q1RN+DNNZqdwp4SqV96kPD82gjGY24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:bb:9a:fe:51:4d:77:fe:2f:89:9a:80:30:08:38:87:dd:13:4d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Jul 20 23:46:13 2025 GMT Not After : Jul 24 10:26:13 2025 GMT Subject: CN=F7DB799274E48A24AEBF3A2B5AF4743594963872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:97:a7:64:0c:15:71:03:9e:45:9a:47:7d:96: 79:d2:b5:46:62:f5:57:de:fb:d5:c7:2c:d0:1a:18: 14:75:55:b7:05:85:96:46:48:9d:1a:38:2b:1c:0d: 94:3a:74:06:9d:f7:ec:72:8f:62:7f:ff:8a:73:29: 7d:07:4d:71:2a:74:11:b5:f5:83:73:83:2c:66:c3: 16:94:23:24:d1:28:e2:87:1e:df:fe:85:d9:e3:87: 99:a8:27:1a:23:5b:1c:80:4b:e5:98:4b:2a:c7:c9: 66:05:2b:98:2b:96:c3:05:ce:12:c2:59:d3:ab:fb: f2:3c:5c:7e:13:39:03:ce:28:71:4f:d7:1d:43:1b: c5:2f:e5:5e:5d:d6:c1:b5:8d:b7:12:ba:df:c5:47: a1:b2:c5:82:1a:78:6c:72:7a:cc:fd:15:04:0c:68: b0:79:d7:d3:2b:0b:ce:01:19:43:24:8b:b4:9b:75: 02:4a:65:a5:85:0c:de:33:16:3b:55:dd:1d:e3:a4: bf:d0:b8:7e:1b:6f:a0:5b:95:67:7e:b5:4f:87:eb: d1:16:e3:65:71:73:e4:b7:91:40:44:02:cf:02:e6: 95:04:83:d9:d6:71:e1:6b:51:ea:fd:5c:11:e8:67: 01:a9:4a:60:dd:44:53:0f:42:a6:61:0a:d5:25:fd: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DB:79:92:74:E4:8A:24:AE:BF:3A:2B:5A:F4:74:35:94:96:38:72 X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6f:86:b5:68:9a:81:03:7d:dc:f4:71:38:7d:41:0a:9c:a2: 47:50:c3:6b:a9:a5:a1:11:f8:0f:c0:3b:c4:32:31:04:45:b7: 41:00:51:8b:a1:84:ea:0b:a1:5a:11:4d:85:9b:a8:75:dd:39: e8:f5:b0:a3:34:78:a3:a8:b9:9d:fd:45:b5:77:0a:3c:66:30: 13:34:f1:d9:96:f9:4b:9b:f2:9a:60:1a:f5:40:0c:8c:31:57: 3a:64:95:53:31:fe:d8:71:48:07:24:48:8c:a7:c2:d4:25:e1: 6e:5f:cf:bd:ac:ef:ed:d8:7c:8d:a9:42:39:0a:45:40:11:5d: 06:ef:a1:e7:57:a3:1c:61:f4:4d:60:ab:36:e8:c7:8c:f0:09: 83:f4:5f:f4:cb:f8:b3:60:06:23:3b:1d:fb:8d:05:26:fb:00: 6f:79:ea:ee:ea:25:8d:63:1b:5a:51:ce:56:c8:01:c5:84:45: 61:c5:27:5d:89:28:a8:1e:c5:75:95:2c:90:d5:d3:a7:51:0e: db:3b:93:38:5a:84:72:8f:73:04:5b:e4:65:20:af:d2:5e:f5: b0:71:56:c3:65:78:4b:6d:e5:e5:d2:a5:8f:f9:4d:73:83:12: 07:4b:a7:d6:5e:06:32:4e:c9:8e:7a:c2:ab:2f:09:4a:b8:65: c3:49:fe:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVLua/lFNd/4viZqAMAg4h90TTV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTA3MjAyMzQ2MTNaFw0yNTA3MjQxMDI2MTNaMDMxMTAvBgNV BAMTKEY3REI3OTkyNzRFNDhBMjRBRUJGM0EyQjVBRjQ3NDM1OTQ5NjM4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZl6dkDBVxA55Fmkd9lnnStUZi 9Vfe+9XHLNAaGBR1VbcFhZZGSJ0aOCscDZQ6dAad9+xyj2J//4pzKX0HTXEqdBG1 9YNzgyxmwxaUIyTRKOKHHt/+hdnjh5moJxojWxyAS+WYSyrHyWYFK5grlsMFzhLC WdOr+/I8XH4TOQPOKHFP1x1DG8Uv5V5d1sG1jbcSut/FR6GyxYIaeGxyesz9FQQM aLB519MrC84BGUMki7SbdQJKZaWFDN4zFjtV3R3jpL/QuH4bb6BblWd+tU+H69EW 42Vxc+S3kUBEAs8C5pUEg9nWceFrUer9XBHoZwGpSmDdRFMPQqZhCtUl/Xb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU99t5knTkiiSuvzorWvR0NZSWOHIwHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVvhrVomoEDfdz0cTh9QQqcokdQw2uppaER +A/AO8QyMQRFt0EAUYuhhOoLoVoRTYWbqHXdOej1sKM0eKOouZ39RbV3CjxmMBM0 8dmW+Uub8ppgGvVADIwxVzpklVMx/thxSAckSIynwtQl4W5fz72s7+3YfI2pQjkK RUARXQbvoedXoxxh9E1gqzbox4zwCYP0X/TL+LNgBiM7HfuNBSb7AG956u7qJY1j G1pRzlbIAcWERWHFJ12JKKgexXWVLJDV06dRDts7kzhahHKPcwRb5GUgr9Je9bBx VsNleEtt5eXSpY/5TXODEgdLp9ZeBjJOyY56wqsvCUq4ZcNJ/gs= -----END CERTIFICATE-----Generated at Tue Jul 22 04:37:15 2025 by rpki-client