$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: AgJhtd5YrIV/yljgyoQm2LDPPuLKZUwa/hTHpjkYXQ0= Subject key identifier: 3D:B4:AE:18:20:5B:FB:65:8B:A6:B5:0D:4A:9C:07:C8:DF:EB:0B:EC Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 60FB2944D0D2D418F5F7D7AC0F276BB77AC4F1FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 048B Signing time: Fri 05 Sep 2025 06:31:59 +0000 Manifest this update: Fri 05 Sep 2025 06:26:59 +0000 Manifest next update: Mon 08 Sep 2025 17:48:59 +0000 Files and hashes: 1: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: QCfD8qeAQE97bNj4JFmZ7141O7lTEcCS9gxeLKd+OXI=) 2: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: c0jEtUhY3CCnihYNexzABK/peyf3Gx5R2jF1ZOsdS10=) 3: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: JEJ2gtjqR3xoAWSFfThnnAX4k9LDg24aEZrng1n0P04=) 4: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: SZcb1mBv7DekH6untdETGe0D1z9cA9VcoDjOf2l6JsU=) 5: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: m9FCdzflAjey1KIEl5BXzag9ygZYtpebb+l9x0XewQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fb:29:44:d0:d2:d4:18:f5:f7:d7:ac:0f:27:6b:b7:7a:c4:f1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Sep 5 06:26:59 2025 GMT Not After : Sep 8 17:48:59 2025 GMT Subject: CN=3DB4AE18205BFB658BA6B50D4A9C07C8DFEB0BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:ed:21:13:f1:e3:f5:b2:e4:02:9e:ee:81: 60:8c:4c:88:4d:10:bd:45:c9:87:d7:98:99:c0:0f: 8f:2e:e2:0a:b4:53:73:2e:ff:47:64:9d:fc:9d:a9: 8c:0c:9c:7d:f0:73:cb:2c:1f:df:3e:d0:97:7f:67: 3c:90:11:f8:3d:a1:27:4e:f8:90:a1:5e:0d:06:e9: a4:4a:6f:ab:38:31:49:47:17:07:ef:25:e8:de:d7: 28:52:24:69:da:e6:99:77:73:d8:aa:ee:3a:4d:f3: 56:af:e7:db:c7:88:70:cd:fe:54:aa:57:a1:fe:74: b2:d6:8a:92:b7:04:2b:a5:28:7f:f2:8a:23:6f:a2: 6b:b9:85:0a:7f:0b:0d:d8:7d:89:a6:29:ab:26:9a: 15:0c:81:54:b2:76:b3:6d:5a:d6:09:e0:3b:94:16: d4:bf:47:f1:e6:dc:2e:fa:d0:ee:c5:13:e0:9b:62: 8e:6b:e3:20:17:18:b4:7b:c5:87:ce:de:24:10:c9: 26:df:89:94:72:fe:de:ad:11:30:8a:15:f0:1d:df: 15:cc:3e:36:7c:fc:8a:56:bb:47:a7:2a:24:9e:59: 7e:c6:96:f6:cb:f6:11:bd:f8:47:dd:50:11:f8:84: 09:3d:ae:db:eb:33:8b:39:c0:23:de:52:06:c0:66: f6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B4:AE:18:20:5B:FB:65:8B:A6:B5:0D:4A:9C:07:C8:DF:EB:0B:EC X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c5:b7:f0:59:a4:5b:a8:a7:f0:93:51:67:4e:22:d0:b1:2f: 4a:00:7e:35:82:cf:f3:f1:7f:b8:c1:21:34:fa:e8:51:45:02: ba:d3:9b:2c:b6:9a:79:31:3d:66:61:c5:6e:d9:50:8f:94:a0: 72:37:b5:d4:41:69:df:2e:39:1d:e1:07:ea:c2:54:50:1a:2f: 08:de:ae:ee:3d:e5:3b:1c:5e:e1:45:26:0f:18:cd:43:42:d9: a2:f2:6c:9d:2f:8a:19:af:70:31:8d:0e:de:5b:ba:25:2f:bc: 16:23:01:cf:40:c8:b6:ee:60:31:5d:e1:1c:fc:4d:ed:7f:54: 94:68:2d:c3:ea:42:8f:49:b5:db:cf:35:67:b5:a5:b9:d7:55: 13:0b:31:a8:21:06:ab:4f:7a:6b:2a:0a:48:be:f6:af:0f:1a: d2:db:ec:2b:1e:06:20:18:4e:10:21:8d:70:85:14:71:18:8b: d3:8e:22:5a:52:fc:47:2a:06:3b:71:a3:66:95:b5:f7:12:50: 56:d2:b3:01:f6:2c:eb:77:d6:6d:d1:e3:32:0c:f5:b1:7b:bb: d8:f7:c0:e9:74:65:4d:89:23:b9:84:c4:d3:8f:6e:d5:f1:8a: 10:07:54:0e:8f:d1:34:40:03:f7:0c:ab:5b:67:23:3a:be:d6: fa:ba:35:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPspRNDS1Bj199esDydrt3rE8f8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNTA5MDUwNjI2NTlaFw0yNTA5MDgxNzQ4NTlaMDMxMTAvBgNV BAMTKDNEQjRBRTE4MjA1QkZCNjU4QkE2QjUwRDRBOUMwN0M4REZFQjBCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIp+0hE/Hj9bLkAp7ugWCMTIhN EL1FyYfXmJnAD48u4gq0U3Mu/0dknfydqYwMnH3wc8ssH98+0Jd/ZzyQEfg9oSdO +JChXg0G6aRKb6s4MUlHFwfvJeje1yhSJGna5pl3c9iq7jpN81av59vHiHDN/lSq V6H+dLLWipK3BCulKH/yiiNvomu5hQp/Cw3YfYmmKasmmhUMgVSydrNtWtYJ4DuU FtS/R/Hm3C760O7FE+CbYo5r4yAXGLR7xYfO3iQQySbfiZRy/t6tETCKFfAd3xXM PjZ8/IpWu0enKiSeWX7GlvbL9hG9+EfdUBH4hAk9rtvrM4s5wCPeUgbAZvbdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPbSuGCBb+2WLprUNSpwHyN/rC+wwHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPFt/BZpFuop/CTUWdOItCxL0oAfjWCz/Px f7jBITT66FFFArrTmyy2mnkxPWZhxW7ZUI+UoHI3tdRBad8uOR3hB+rCVFAaLwje ru495TscXuFFJg8YzUNC2aLybJ0vihmvcDGNDt5buiUvvBYjAc9AyLbuYDFd4Rz8 Te1/VJRoLcPqQo9JtdvPNWe1pbnXVRMLMaghBqtPemsqCki+9q8PGtLb7CseBiAY ThAhjXCFFHEYi9OOIlpS/EcqBjtxo2aVtfcSUFbSswH2LOt31m3R4zIM9bF7u9j3 wOl0ZU2JI7mExNOPbtXxihAHVA6P0TRAA/cMq1tnIzq+1vq6NaQ= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:50 2025 by rpki-client