$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: K1X/nE8ZFfGP8rXwW4yvglAfydrAyH77IESq5M6Mup4= Subject key identifier: AC:76:B5:45:3E:0B:CB:B8:A2:98:F8:DE:2D:EF:E0:06:0F:DC:24:E6 Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 0C90F4537BDE4D6410B4CA097D4CA3B8723456B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 0203 Signing time: Wed 04 Jun 2025 10:40:47 +0000 Manifest this update: Wed 04 Jun 2025 10:35:47 +0000 Manifest next update: Sat 07 Jun 2025 14:36:47 +0000 Files and hashes: 1: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: j0lcRKDX7Zai080pL+d3IVmhJOqrL+V2aEhEgUdciuo=) 2: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: vYykzZDz39M/ona/BO4XxrrV5CdqqXE2YRN4cymTk7A=) 3: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: PJJflVEuAqU1x1bzzs4n8zhyBWNQ4TBM8yQ5wwBc+Y8=) 4: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: pLboy3es15Aee5R8ozV3T/lLrbC6yjQ2R9cCybdnsq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:90:f4:53:7b:de:4d:64:10:b4:ca:09:7d:4c:a3:b8:72:34:56:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Jun 4 10:35:47 2025 GMT Not After : Jun 7 14:36:47 2025 GMT Subject: CN=AC76B5453E0BCBB8A298F8DE2DEFE0060FDC24E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5c:85:d2:4c:a6:45:2c:2f:69:c9:87:66:56: 61:b0:03:d4:7b:cf:03:3c:0b:17:9b:5e:9d:2b:91: 30:7e:2b:4a:4c:90:f0:20:a3:15:54:dc:07:f0:a9: 23:95:cb:04:1e:1c:02:55:9f:ae:41:8f:1e:48:60: 82:65:08:30:d4:54:f5:aa:e4:86:c8:3b:89:8a:bc: ec:bb:0d:2b:fd:5b:fe:cc:c2:27:db:f3:02:bb:01: 84:c5:dd:ad:01:d0:44:b5:66:41:98:bb:ef:2d:69: f6:5d:e4:95:1d:a3:24:6b:9a:07:45:58:46:2f:b5: e9:ac:d8:d2:29:9a:32:bf:b2:7d:93:fb:9f:2f:65: 30:ee:33:26:37:94:7e:3a:22:c7:be:67:56:c9:08: 4d:c9:ff:25:b3:93:bc:ff:13:1d:0d:79:96:d8:fc: 34:e6:62:b8:66:b2:a0:c5:b2:eb:d0:25:c1:cd:c7: 65:c3:57:7f:2e:3b:2d:8b:0b:fb:ff:a4:5c:c8:73: 20:4e:d2:58:1b:52:cc:d9:d7:1b:2a:52:68:68:bf: 60:4e:b5:a2:2c:ea:91:48:67:9f:13:58:c8:59:4c: ec:c6:c2:36:93:f3:1f:bb:0d:be:96:72:21:48:ec: 46:75:40:ab:19:2b:ee:19:4f:74:b1:26:1f:1f:da: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:76:B5:45:3E:0B:CB:B8:A2:98:F8:DE:2D:EF:E0:06:0F:DC:24:E6 X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:85:72:98:f9:cb:85:61:9d:a6:3a:33:96:65:02:5c:24:bc: 95:fe:f9:40:c4:96:04:e6:89:4d:03:4c:16:51:48:f5:a7:43: b6:bd:f2:62:3e:3e:d7:22:4b:9f:f7:5c:64:da:90:81:99:86: 04:b8:a0:1f:fd:32:a8:4a:36:5c:11:72:ea:3e:c9:ec:b0:26: 0d:fe:8a:70:30:50:84:77:5f:a1:4c:04:bf:8c:12:3a:94:73: b1:f4:f9:3a:4a:00:ad:1c:7d:6d:92:6f:b5:9b:e7:18:5d:63: 27:b4:c7:27:67:3b:d0:52:8c:cc:54:7b:94:ac:0e:f7:4e:a2: 5e:2b:f3:e3:2b:74:66:d8:d5:80:16:82:62:42:c3:33:23:e4: 0d:05:fb:f5:8c:6d:2e:30:33:f5:31:81:3f:6e:23:81:d5:d7: a4:42:a3:28:87:bd:7f:fa:4b:be:39:34:9a:65:4c:ad:58:7f: df:50:ae:c0:8c:e6:e3:bc:4a:95:a8:19:ac:57:67:6c:ef:4e: 19:41:a9:ab:5e:be:56:a7:ef:e8:39:89:38:18:84:94:04:d8: 93:c2:da:0c:58:23:44:25:47:6c:22:a8:6e:c6:2b:72:da:b5: 4d:81:be:07:02:bf:24:bd:ed:7d:ee:88:b9:69:2e:10:2f:f5: c3:c3:cc:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJD0U3veTWQQtMoJfUyjuHI0VrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNTA2MDQxMDM1NDdaFw0yNTA2MDcxNDM2NDdaMDMxMTAvBgNV BAMTKEFDNzZCNTQ1M0UwQkNCQjhBMjk4RjhERTJERUZFMDA2MEZEQzI0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXIXSTKZFLC9pyYdmVmGwA9R7 zwM8CxebXp0rkTB+K0pMkPAgoxVU3AfwqSOVywQeHAJVn65Bjx5IYIJlCDDUVPWq 5IbIO4mKvOy7DSv9W/7Mwifb8wK7AYTF3a0B0ES1ZkGYu+8tafZd5JUdoyRrmgdF WEYvtems2NIpmjK/sn2T+58vZTDuMyY3lH46Ise+Z1bJCE3J/yWzk7z/Ex0NeZbY /DTmYrhmsqDFsuvQJcHNx2XDV38uOy2LC/v/pFzIcyBO0lgbUszZ1xsqUmhov2BO taIs6pFIZ58TWMhZTOzGwjaT8x+7Db6WciFI7EZ1QKsZK+4ZT3SxJh8f2uPnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrHa1RT4Ly7iimPjeLe/gBg/cJOYwHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACOFcpj5y4VhnaY6M5ZlAlwkvJX++UDElgTm iU0DTBZRSPWnQ7a98mI+PtciS5/3XGTakIGZhgS4oB/9MqhKNlwRcuo+yeywJg3+ inAwUIR3X6FMBL+MEjqUc7H0+TpKAK0cfW2Sb7Wb5xhdYye0xydnO9BSjMxUe5Ss DvdOol4r8+MrdGbY1YAWgmJCwzMj5A0F+/WMbS4wM/UxgT9uI4HV16RCoyiHvX/6 S745NJplTK1Yf99QrsCM5uO8SpWoGaxXZ2zvThlBqatevlan7+g5iTgYhJQE2JPC 2gxYI0QlR2wiqG7GK3LatU2BvgcCvyS97X3uiLlpLhAv9cPDzGM= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:37 2025 by rpki-client