$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: 1cShqdlImEUbm49b3O4BqR+DT0tu6yr3Tcag0PXyguY= Subject key identifier: 41:83:CB:D1:83:ED:39:62:7A:FB:33:5F:FB:FA:97:90:86:4E:9E:C0 Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 2DE86EE4639AC4A6A29FA6E05C5315C28F2FC1A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 04D9 Signing time: Wed 04 Jun 2025 08:21:14 +0000 Manifest this update: Wed 04 Jun 2025 08:16:14 +0000 Manifest next update: Sat 07 Jun 2025 18:55:14 +0000 Files and hashes: 1: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) 2: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) 3: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) 4: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 5: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) 6: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: bRS5A3BpC08VdsjEqgaWWQvN3eFTFEjFJeP4af31Y94=) 7: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e8:6e:e4:63:9a:c4:a6:a2:9f:a6:e0:5c:53:15:c2:8f:2f:c1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Jun 4 08:16:14 2025 GMT Not After : Jun 7 18:55:14 2025 GMT Subject: CN=4183CBD183ED39627AFB335FFBFA9790864E9EC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:78:81:46:0e:88:c1:44:57:8d:fd:81:7a: c3:aa:aa:3a:9d:8e:e8:dd:98:83:33:94:18:44:5f: e6:ce:5a:4e:a4:b2:40:d4:ff:af:09:6b:50:93:e8: eb:35:fd:47:d8:21:59:07:3e:66:be:5b:64:7d:fe: 7f:80:69:74:46:2e:6d:85:bd:a4:49:3b:28:8f:b9: 4f:96:e6:8b:a0:91:a6:b3:3e:2a:6d:a5:e5:90:d1: 4c:19:e2:03:ec:66:d8:bf:cc:20:6b:2e:b2:d0:b9: 49:f5:b3:b1:9c:ad:19:d4:a4:f3:eb:a5:8b:9d:48: 7b:6c:dc:19:04:e1:72:56:44:67:dd:7a:85:e7:42: 04:dd:09:58:94:43:26:f0:01:85:3b:a2:f4:86:81: e3:77:f5:6b:3b:de:31:f3:f1:8c:df:62:16:2a:a1: c7:e9:cf:50:cb:4a:0c:ce:e4:4e:c3:de:65:ba:55: 1a:fa:22:bd:f4:db:6f:76:c5:3b:ba:9d:c5:22:5d: 1e:d4:80:f3:d7:92:ae:f4:20:71:2f:34:3d:80:dd: 79:b4:0f:08:86:56:01:f4:88:d4:82:cf:98:ca:df: cf:d3:d8:e0:0f:f4:81:98:91:69:6d:12:e3:88:ad: 9a:1d:36:0c:fd:41:14:38:a8:7d:8b:a0:a1:4e:59: ae:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:83:CB:D1:83:ED:39:62:7A:FB:33:5F:FB:FA:97:90:86:4E:9E:C0 X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:f5:41:3e:a4:ca:44:69:b5:b6:29:4c:c7:a0:23:f0:cd:d3: b3:84:53:91:64:d1:39:81:cd:a6:75:03:77:be:30:21:54:8c: 03:4d:b8:7c:7a:84:c5:b9:9a:f2:96:1c:86:e5:b0:2c:9e:60: 35:fb:53:87:0c:43:9b:2f:b9:94:29:24:77:36:93:ed:6d:cf: f7:4b:2b:74:fd:87:42:ce:be:67:77:0d:d9:94:ca:4a:6d:63: 0a:26:5f:31:5e:c6:89:57:e6:31:41:ed:43:dd:b8:41:19:20: 0b:89:0f:53:e7:5c:cf:97:c7:87:bc:72:52:63:c7:72:f7:93: c2:58:f8:6b:4b:7c:b0:2d:07:29:e4:2f:1e:e3:16:7b:7b:af: 7c:3d:b5:90:5b:3c:5a:31:e8:08:3d:5e:6c:9e:c4:b0:e1:80: 00:90:3a:14:0e:89:bf:9e:fe:b0:f2:8f:34:c4:78:59:98:75: 4d:f3:a1:32:f9:82:b3:88:b4:81:b0:34:00:46:3b:71:0c:5c: e2:19:b8:ed:fa:de:6d:9d:8b:4e:2f:71:7a:c8:bf:b3:6a:e2: 2a:b9:51:02:c2:b5:ae:54:fc:71:ad:28:2f:55:59:9d:9b:22: 46:30:ae:7b:09:bd:4b:75:c5:ac:05:e2:b1:b3:93:18:5e:8f: 0e:85:b3:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULehu5GOaxKain6bgXFMVwo8vwacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNTA2MDQwODE2MTRaFw0yNTA2MDcxODU1MTRaMDMxMTAvBgNV BAMTKDQxODNDQkQxODNFRDM5NjI3QUZCMzM1RkZCRkE5NzkwODY0RTlFQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhniBRg6IwURXjf2BesOqqjqd jujdmIMzlBhEX+bOWk6kskDU/68Ja1CT6Os1/UfYIVkHPma+W2R9/n+AaXRGLm2F vaRJOyiPuU+W5ougkaazPiptpeWQ0UwZ4gPsZti/zCBrLrLQuUn1s7GcrRnUpPPr pYudSHts3BkE4XJWRGfdeoXnQgTdCViUQybwAYU7ovSGgeN39Ws73jHz8YzfYhYq ocfpz1DLSgzO5E7D3mW6VRr6Ir302292xTu6ncUiXR7UgPPXkq70IHEvND2A3Xm0 DwiGVgH0iNSCz5jK38/T2OAP9IGYkWltEuOIrZodNgz9QRQ4qH2LoKFOWa55AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYPL0YPtOWJ6+zNf+/qXkIZOnsAwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHv1QT6kykRptbYpTMegI/DN07OEU5Fk0TmB zaZ1A3e+MCFUjANNuHx6hMW5mvKWHIblsCyeYDX7U4cMQ5svuZQpJHc2k+1tz/dL K3T9h0LOvmd3DdmUykptYwomXzFexolX5jFB7UPduEEZIAuJD1PnXM+Xx4e8clJj x3L3k8JY+GtLfLAtBynkLx7jFnt7r3w9tZBbPFox6Ag9XmyexLDhgACQOhQOib+e /rDyjzTEeFmYdU3zoTL5grOItIGwNABGO3EMXOIZuO363m2di04vcXrIv7Nq4iq5 UQLCta5U/HGtKC9VWZ2bIkYwrnsJvUt1xawF4rGzkxhejw6Fs+k= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:37 2025 by rpki-client