$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: MoxLsykyKWHWJbYyS1J2h4hEDIk5zktnYBjuDXsPqUM= Subject key identifier: B3:16:D8:45:60:D2:BB:BF:FD:A6:5E:02:C1:D0:D1:D2:7A:25:AF:66 Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 6ED9A7537FC2750176E9E97A6B60B5E233E5A94E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 035D Signing time: Thu 05 Jun 2025 08:02:22 +0000 Manifest this update: Thu 05 Jun 2025 07:57:22 +0000 Manifest next update: Sun 08 Jun 2025 09:14:22 +0000 Files and hashes: 1: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: Hdrlhsf3xuMxBBZCz8rCA/NMPSUU0M8b/tlHZe6Gdpo=) 2: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: HXG6M2lkHdM7H0q8sMHL2RuqzQnwYr9btslEMX8iQ9s=) 3: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: NZRvAk91/qS+2e4QEna7jFq1miR9hnIOcdT25pcAymk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 09:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d9:a7:53:7f:c2:75:01:76:e9:e9:7a:6b:60:b5:e2:33:e5:a9:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: Jun 5 07:57:22 2025 GMT Not After : Jun 8 09:14:22 2025 GMT Subject: CN=B316D84560D2BBBFFDA65E02C1D0D1D27A25AF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:22:40:34:d0:a4:3f:53:9d:35:02:bf:2e:23: fe:2e:9e:11:24:da:ef:ec:66:55:17:6d:97:67:9b: 52:75:0e:ff:ed:68:33:ea:33:e2:58:90:de:1c:ef: 4d:a1:8e:d9:ba:95:01:10:9b:90:86:05:d4:bf:cd: 7e:67:68:07:36:9f:b5:50:f9:e7:93:3e:87:6d:66: 37:eb:d0:22:06:8e:dd:6b:64:98:4b:5c:23:f5:1c: 76:f3:cf:d1:91:4c:65:70:26:38:a1:96:4b:ea:77: 1a:8b:13:70:1d:91:d5:a7:de:29:5d:49:9a:c9:45: 4d:16:5c:49:1b:ec:ba:d7:86:06:7a:1d:d8:ea:32: e2:11:41:0d:f2:9d:b4:f9:f8:83:22:31:81:0e:b5: 19:79:50:77:a6:36:24:15:8a:a2:97:1c:d1:e4:f8: 06:6b:f6:14:e9:8f:da:fc:21:51:2f:06:8a:62:e5: c9:16:f0:86:d6:88:08:c9:ad:23:16:c5:c1:4f:81: 33:cc:83:8f:f5:b9:79:fe:2f:fc:12:ce:f9:0d:22: 87:67:c1:0a:db:13:00:a9:a1:f7:30:58:a4:5d:85: cb:3e:1a:6b:19:bf:79:5e:d0:b2:bf:a1:2a:e8:6e: e9:28:c0:4d:a7:05:76:f6:1b:5a:d3:61:50:ed:b2: 3b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:16:D8:45:60:D2:BB:BF:FD:A6:5E:02:C1:D0:D1:D2:7A:25:AF:66 X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:86:d2:3e:d1:64:e0:cb:04:dd:00:06:0e:6c:dd:ad:11:93: ef:e0:8d:64:a1:0f:62:64:b1:16:f3:2d:8b:2b:f2:39:83:42: d4:5a:c7:f7:11:26:df:a4:8c:31:b7:7a:08:47:8f:9a:3d:b9: 21:b2:1d:22:5f:b1:f5:a2:79:9f:b9:f8:f1:1c:03:87:92:95: de:b2:72:72:52:0d:32:a7:9f:a5:4d:1f:30:f9:9c:e9:f2:73: fd:d8:9e:3f:b3:56:a4:3d:d7:0a:0c:b1:13:b1:34:2a:56:27: 00:e3:68:10:9c:d2:91:c8:2c:1e:e7:80:6a:0d:fd:30:35:45: a4:0e:41:3b:5c:96:28:6e:2f:fb:e3:f8:ee:c1:df:ca:68:cd: 03:4f:f6:34:c0:15:4b:d3:be:40:e6:3d:4a:45:af:89:3e:8a: 81:2c:eb:84:83:03:db:2d:39:b9:af:b2:61:76:3e:6b:51:b7: 13:17:0c:9e:5c:1e:06:4b:a1:6f:b4:76:b5:e1:d2:90:81:ba: 27:ea:8a:37:b5:4c:44:25:4f:21:42:e5:ca:27:ff:fa:59:00: 0c:ba:9c:ba:5b:4f:8e:72:38:a2:4d:07:50:1a:c8:0b:2e:d5: d9:93:a6:d4:9f:39:c3:50:6f:3d:c8:2c:47:fe:6e:38:29:3d: 0f:3b:eb:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbtmnU3/CdQF26el6a2C14jPlqU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNTA2MDUwNzU3MjJaFw0yNTA2MDgwOTE0MjJaMDMxMTAvBgNV BAMTKEIzMTZEODQ1NjBEMkJCQkZGREE2NUUwMkMxRDBEMUQyN0EyNUFGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPIkA00KQ/U501Ar8uI/4unhEk 2u/sZlUXbZdnm1J1Dv/taDPqM+JYkN4c702hjtm6lQEQm5CGBdS/zX5naAc2n7VQ +eeTPodtZjfr0CIGjt1rZJhLXCP1HHbzz9GRTGVwJjihlkvqdxqLE3AdkdWn3ild SZrJRU0WXEkb7LrXhgZ6HdjqMuIRQQ3ynbT5+IMiMYEOtRl5UHemNiQViqKXHNHk +AZr9hTpj9r8IVEvBopi5ckW8IbWiAjJrSMWxcFPgTPMg4/1uXn+L/wSzvkNIodn wQrbEwCpofcwWKRdhcs+GmsZv3le0LK/oSrobukowE2nBXb2G1rTYVDtsjufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsxbYRWDSu7/9pl4CwdDR0nolr2YwHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2G0j7RZODLBN0ABg5s3a0Rk+/gjWShD2Jk sRbzLYsr8jmDQtRax/cRJt+kjDG3eghHj5o9uSGyHSJfsfWieZ+5+PEcA4eSld6y cnJSDTKnn6VNHzD5nOnyc/3Ynj+zVqQ91woMsROxNCpWJwDjaBCc0pHILB7ngGoN /TA1RaQOQTtclihuL/vj+O7B38pozQNP9jTAFUvTvkDmPUpFr4k+ioEs64SDA9st ObmvsmF2PmtRtxMXDJ5cHgZLoW+0drXh0pCBuifqije1TEQlTyFC5con//pZAAy6 nLpbT45yOKJNB1AayAsu1dmTptSfOcNQbz3ILEf+bjgpPQ876yI= -----END CERTIFICATE-----Generated at Sat Jun 7 04:21:51 2025 by rpki-client