$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: gWe2MoT7iybvOlvwDWMgOsxvzLK7uOWw9kSOWsj4LUw= Subject key identifier: CE:D8:35:4D:3B:C8:D8:3E:22:C6:FC:4B:70:06:D9:4A:92:F4:AC:B0 Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 54E4CF8AD01ED704F2245792F2646F957993884E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 0462 Signing time: Sat 07 Jun 2025 12:21:57 +0000 Manifest this update: Sat 07 Jun 2025 12:16:57 +0000 Manifest next update: Tue 10 Jun 2025 13:46:57 +0000 Files and hashes: 1: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: z/eXMs9mS1DfyQh4Im/qLS47C/jyUxWG9CNZqbqlq2w=) 2: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: VYk0jX+OGoB4/7D73QnDw8fy7xRRmNePMPCehWSGzIk=) 3: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: gsd+S7j+gYENBbS9EyZfuvkGD3/9iVqdRz0LDMNsbm4=) 4: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: NnBFli84jNMIBDBMNq+D25uIynDWqxxKW2NwfNdru0M=) 5: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: o3G0tUPiMC/kUB+gQUL43ZTqDQ+kPqFMx9B5j32NnbU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 13:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e4:cf:8a:d0:1e:d7:04:f2:24:57:92:f2:64:6f:95:79:93:88:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Jun 7 12:16:57 2025 GMT Not After : Jun 10 13:46:57 2025 GMT Subject: CN=CED8354D3BC8D83E22C6FC4B7006D94A92F4ACB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:c2:3f:a7:5b:53:f4:13:d6:2b:d6:92:37: 71:a1:de:cd:c2:5f:a9:b0:b4:1d:19:09:50:69:20: 38:d6:c0:56:2d:14:59:d2:ba:15:fd:b4:52:84:f7: f1:9f:ed:df:b8:5a:c6:f1:4a:dd:d1:d7:8a:4b:d1: 72:58:17:11:08:e0:78:ff:01:f3:d9:c9:dd:2f:8b: af:22:47:e8:22:77:b5:2a:5a:44:52:38:21:09:90: 4c:df:87:33:de:41:4f:54:dc:32:37:e6:85:a8:12: 36:4f:4e:74:0d:7b:0b:ba:0a:f8:24:24:bf:8c:74: 23:8c:a7:9d:6f:30:f0:54:6e:61:cd:9b:56:b7:a3: 56:a1:1d:e2:87:53:fb:f3:8b:af:d2:0a:8f:5a:f1: 14:7c:b5:64:81:0d:9e:81:fb:9c:fe:c3:2e:83:c5: b6:ab:81:4a:4f:e6:62:3f:ce:33:9c:1b:9d:b4:a9: 19:d0:95:c3:31:63:a5:af:28:be:25:af:ea:36:1c: ed:0c:7f:0b:66:b6:c6:2b:b2:5f:2d:41:8a:d6:a4: e8:52:09:96:44:4d:0a:ae:47:05:3f:07:bf:c9:ee: a2:3a:82:4b:46:ee:98:c8:62:48:f5:4b:10:3a:0b: 87:ba:96:88:1f:d1:d8:ae:36:c2:d8:65:d3:25:81: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:35:4D:3B:C8:D8:3E:22:C6:FC:4B:70:06:D9:4A:92:F4:AC:B0 X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:83:3b:57:f1:1a:52:a3:cf:ef:89:38:e1:22:ca:a7:5f:ae: 37:89:83:b7:ba:bc:ea:86:09:09:d2:ac:a9:6d:ae:5e:9a:b7: 52:95:de:b5:1d:c8:bb:97:ff:a9:f7:64:70:40:83:e7:af:4b: 44:1d:55:43:35:12:28:a0:da:48:23:13:cc:b7:55:d6:17:fa: 31:eb:b0:dd:a0:83:d2:a2:b5:a4:18:f9:72:8a:d1:89:5e:4e: 1f:27:0a:0a:a0:eb:28:84:fd:e8:9c:e7:b8:17:0c:a3:1f:aa: 43:f1:54:16:8c:e4:04:c3:82:e5:58:55:49:2d:95:f2:35:43: 4f:77:4f:9b:c9:cb:ca:49:1e:53:4d:1d:57:38:fd:83:f2:49: 6c:0b:59:f4:06:c7:f6:5d:90:ed:25:e9:e7:d5:92:95:df:c7: 3f:08:b3:e0:31:42:e2:44:f2:42:e7:5c:4b:5a:99:20:30:bf: dd:cf:5f:51:5a:01:2b:02:1f:bd:fc:e5:f1:bd:78:9a:cf:ce: ff:3b:a4:c1:a5:84:fe:bc:1a:f3:50:02:13:18:49:11:e0:70: 92:28:0c:15:7c:3b:68:4f:9e:27:40:b0:39:27:5d:db:4e:ff: 99:0b:46:12:df:5b:2c:60:e3:b1:8d:4f:6b:58:5d:42:df:63: 45:2d:3d:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOTPitAe1wTyJFeS8mRvlXmTiE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNTA2MDcxMjE2NTdaFw0yNTA2MTAxMzQ2NTdaMDMxMTAvBgNV BAMTKENFRDgzNTREM0JDOEQ4M0UyMkM2RkM0QjcwMDZEOTRBOTJGNEFDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAksI/p1tT9BPWK9aSN3Gh3s3C X6mwtB0ZCVBpIDjWwFYtFFnSuhX9tFKE9/Gf7d+4WsbxSt3R14pL0XJYFxEI4Hj/ AfPZyd0vi68iR+gid7UqWkRSOCEJkEzfhzPeQU9U3DI35oWoEjZPTnQNewu6Cvgk JL+MdCOMp51vMPBUbmHNm1a3o1ahHeKHU/vzi6/SCo9a8RR8tWSBDZ6B+5z+wy6D xbargUpP5mI/zjOcG520qRnQlcMxY6WvKL4lr+o2HO0MfwtmtsYrsl8tQYrWpOhS CZZETQquRwU/B7/J7qI6gktG7pjIYkj1SxA6C4e6logf0diuNsLYZdMlgXB/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUztg1TTvI2D4ixvxLcAbZSpL0rLAwHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKDO1fxGlKjz++JOOEiyqdfrjeJg7e6vOqG CQnSrKltrl6at1KV3rUdyLuX/6n3ZHBAg+evS0QdVUM1Eiig2kgjE8y3VdYX+jHr sN2gg9KitaQY+XKK0YleTh8nCgqg6yiE/eic57gXDKMfqkPxVBaM5ATDguVYVUkt lfI1Q093T5vJy8pJHlNNHVc4/YPySWwLWfQGx/ZdkO0l6efVkpXfxz8Is+AxQuJE 8kLnXEtamSAwv93PX1FaASsCH7385fG9eJrPzv87pMGlhP68GvNQAhMYSRHgcJIo DBV8O2hPnidAsDknXdtO/5kLRhLfWyxg47GNT2tYXULfY0UtPds= -----END CERTIFICATE-----Generated at Sun Jun 8 03:14:27 2025 by rpki-client