$ rpki-client -vvf repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft File: C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft (raw, json) Hash identifier: gJxhdohqyclKaCZLMQjF3R7RdUenMi68FNmzY/yRD8U= Subject key identifier: 0D:76:14:8E:24:15:1F:2D:56:84:0E:45:B8:F3:BD:7E:95:FE:A2:9D Authority key identifier: C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F Certificate issuer: /CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Certificate serial: 17A388C2D919DCDEECA7B5AA255D17581BA984C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft Manifest number: 044C Signing time: Sat 19 Apr 2025 05:21:55 +0000 Manifest this update: Sat 19 Apr 2025 05:16:55 +0000 Manifest next update: Tue 22 Apr 2025 08:35:55 +0000 Files and hashes: 1: 3130332e3231342e3138352e302f32342d3234203d3e203634303239.roa (hash: z/eXMs9mS1DfyQh4Im/qLS47C/jyUxWG9CNZqbqlq2w=) 2: 3130332e3231342e3138372e302f32342d3234203d3e203634303239.roa (hash: VYk0jX+OGoB4/7D73QnDw8fy7xRRmNePMPCehWSGzIk=) 3: 3130332e3231342e3138342e302f32342d3234203d3e203634303239.roa (hash: gsd+S7j+gYENBbS9EyZfuvkGD3/9iVqdRz0LDMNsbm4=) 4: C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl (hash: ZwBVhhF+pbjmIC1q+dAzeYGMA5/chye5xbnxRMjulCw=) 5: 3130332e3231342e3138362e302f32342d3234203d3e203634303239.roa (hash: NnBFli84jNMIBDBMNq+D25uIynDWqxxKW2NwfNdru0M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a3:88:c2:d9:19:dc:de:ec:a7:b5:aa:25:5d:17:58:1b:a9:84:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C51F648FDD8891397EA20B34F6DE036DC2234E2F Validity Not Before: Apr 19 05:16:55 2025 GMT Not After : Apr 22 08:35:55 2025 GMT Subject: CN=0D76148E24151F2D56840E45B8F3BD7E95FEA29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:30:64:95:00:14:3f:a0:b4:5b:b0:35:37: af:00:df:64:c8:08:1b:77:6c:a8:df:8c:ad:8e:9e: cb:c1:13:20:3f:fc:77:08:0f:97:e6:ba:33:af:24: 79:58:0f:cb:00:34:e1:e0:c3:43:3a:a2:6a:d8:76: cd:df:27:97:11:30:d7:eb:6a:ec:28:40:cf:46:db: 38:a2:cc:56:e6:7a:70:7d:e7:92:4a:57:45:7a:6f: 44:e8:1e:f6:88:46:d3:c3:53:ae:89:51:c0:da:4b: 60:4c:d8:98:4d:54:cb:85:f6:41:68:0f:ac:56:ff: e1:0b:06:b1:f5:00:ea:0d:40:75:5c:bc:ed:2b:66: a7:14:80:b7:96:ec:d8:aa:f9:e5:c0:fa:ba:cf:dc: 24:4a:9b:5d:81:0c:51:32:e8:b6:7b:4c:03:db:f1: 90:40:c9:34:88:d9:58:c1:f4:a6:55:fc:43:51:f2: 95:05:66:ed:a8:5d:f8:e2:3f:9d:54:97:60:c2:ac: 2d:69:1f:57:0a:9d:80:5d:95:b8:ac:12:38:df:ce: 4b:0e:ee:82:e9:e3:f1:9a:9b:50:76:e4:f9:6e:05: ab:8a:7f:ec:fe:90:a1:47:d4:b1:6f:6d:01:1e:fd: a0:f6:09:a6:e5:52:6e:91:a4:21:72:a8:0b:cd:5e: 13:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:76:14:8E:24:15:1F:2D:56:84:0E:45:B8:F3:BD:7E:95:FE:A2:9D X509v3 Authority Key Identifier: keyid:C5:1F:64:8F:DD:88:91:39:7E:A2:0B:34:F6:DE:03:6D:C2:23:4E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C51F648FDD8891397EA20B34F6DE036DC2234E2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6107fd8a-150f-453f-a0f5-57ead41ed032/0/C51F648FDD8891397EA20B34F6DE036DC2234E2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:80:c9:fe:02:43:c1:13:de:d5:a8:56:3c:15:56:8a:4c:be: 10:ea:26:0f:c9:70:c8:3e:71:98:fc:a3:8a:10:a7:04:01:1d: ec:1e:f3:a2:63:2d:db:80:3f:c5:e8:82:c3:3c:8f:ed:66:31: a1:81:08:d1:16:13:e1:21:0b:4e:08:1e:ef:c5:32:a7:26:71: a5:2a:d9:8f:30:81:2a:c8:36:eb:5f:81:ff:3a:95:4f:b1:4c: 4b:ca:6e:9b:87:33:b7:c1:29:18:95:d8:b9:30:8b:7e:7d:1d: 0d:05:fa:f6:e0:0a:56:2e:b0:ae:0b:81:56:6d:d8:5c:5f:e6: fc:bd:8f:bb:79:ea:41:05:8b:95:7c:25:75:e1:2d:42:14:13: 67:94:1a:5c:9f:a6:50:32:70:15:93:ff:f5:fd:cc:4a:b5:29: c6:0e:ab:d9:5a:3d:d7:3e:45:1b:b0:2f:e8:5c:da:a4:0a:fa: fb:73:4b:07:a7:2d:02:86:6f:5c:b5:52:5f:84:40:69:23:51: 6c:97:67:94:ae:c6:34:fb:e1:14:67:a2:6c:09:b2:9a:39:d3: a2:08:40:9b:77:dc:d8:ee:53:6d:7c:0e:76:fb:3c:13:86:e6: 46:73:2f:e1:75:ac:1f:53:a2:54:cb:66:4f:c5:5e:b2:32:cc: 1d:12:b3:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6OIwtkZ3N7sp7WqJV0XWBuphMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRD MjIzNEUyRjAeFw0yNTA0MTkwNTE2NTVaFw0yNTA0MjIwODM1NTVaMDMxMTAvBgNV BAMTKDBENzYxNDhFMjQxNTFGMkQ1Njg0MEU0NUI4RjNCRDdFOTVGRUEyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNzBklQAUP6C0W7A1N68A32TI CBt3bKjfjK2OnsvBEyA//HcID5fmujOvJHlYD8sANOHgw0M6omrYds3fJ5cRMNfr auwoQM9G2ziizFbmenB955JKV0V6b0ToHvaIRtPDU66JUcDaS2BM2JhNVMuF9kFo D6xW/+ELBrH1AOoNQHVcvO0rZqcUgLeW7Niq+eXA+rrP3CRKm12BDFEy6LZ7TAPb 8ZBAyTSI2VjB9KZV/ENR8pUFZu2oXfjiP51Ul2DCrC1pH1cKnYBdlbisEjjfzksO 7oLp4/Gam1B25PluBauKf+z+kKFH1LFvbQEe/aD2CablUm6RpCFyqAvNXhOJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDXYUjiQVHy1WhA5FuPO9fpX+op0wHwYDVR0j BBgwFoAUxR9kj92IkTl+ogs09t4DbcIjTi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTA3ZmQ4YS0xNTBmLTQ1M2YtYTBmNS01N2VhZDQxZWQwMzIvMC9DNTFGNjQ4RkRE ODg5MTM5N0VBMjBCMzRGNkRFMDM2REMyMjM0RTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAzNkRDMjIz NEUyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEwN2ZkOGEtMTUwZi00NTNmLWEw ZjUtNTdlYWQ0MWVkMDMyLzAvQzUxRjY0OEZERDg4OTEzOTdFQTIwQjM0RjZERTAz NkRDMjIzNEUyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyAyf4CQ8ET3tWoVjwVVopMvhDqJg/JcMg+ cZj8o4oQpwQBHewe86JjLduAP8XogsM8j+1mMaGBCNEWE+EhC04IHu/FMqcmcaUq 2Y8wgSrINutfgf86lU+xTEvKbpuHM7fBKRiV2Lkwi359HQ0F+vbgClYusK4LgVZt 2Fxf5vy9j7t56kEFi5V8JXXhLUIUE2eUGlyfplAycBWT//X9zEq1KcYOq9laPdc+ RRuwL+hc2qQK+vtzSwenLQKGb1y1Ul+EQGkjUWyXZ5SuxjT74RRnomwJspo506II QJt33NjuU218Dnb7PBOG5kZzL+F1rB9TolTLZk/FXrIyzB0SsyQ= -----END CERTIFICATE-----Generated at Sat Apr 19 12:33:10 2025 by rpki-client