$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: SLE40uVs+2eI1yZdFCk3BrnS1Tbb9gePFF+MT+uJDV4= Subject key identifier: E9:22:33:2D:54:A0:7D:25:60:D3:61:27:3D:D9:06:42:D7:E2:97:E0 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 24E16FC748880F9B67F4583DC2C572A3643FF7DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 02D9 Signing time: Wed 04 Jun 2025 19:40:54 +0000 Manifest this update: Wed 04 Jun 2025 19:35:54 +0000 Manifest next update: Sun 08 Jun 2025 06:09:54 +0000 Files and hashes: 1: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: Zt0zsxB+w7cKXBve2x/yKfK+K8HKfAC08Q972W/V9wQ=) 2: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: L2RX3WZIoOzlkxtXODrdp4qra1xsJ9xQxGGHfQ7skKo=) 3: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: CnXMmVk77qU3n1s+zcvccpt4f5iYEiQUQVFxKO62rc8=) 4: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: iQrfW4vm6eczOWBsSobvUfreWvjyzuZNC1OGl7c8Sx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e1:6f:c7:48:88:0f:9b:67:f4:58:3d:c2:c5:72:a3:64:3f:f7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Jun 4 19:35:54 2025 GMT Not After : Jun 8 06:09:54 2025 GMT Subject: CN=E922332D54A07D2560D361273DD90642D7E297E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:73:32:c3:a8:79:5f:ff:0b:ef:10:49:80:05: 49:91:65:98:e1:ad:5f:db:1c:38:52:55:35:4d:d3: 61:b8:c7:5e:9b:81:a4:eb:1d:33:de:c8:c8:94:82: a2:30:64:a0:21:c0:a2:36:11:a7:e8:49:c8:2d:79: dd:ec:98:b7:5d:05:e8:50:c5:e3:40:20:a8:45:f4: 99:42:aa:a1:fd:24:8e:47:af:ad:72:4c:01:a0:68: f6:44:a3:c9:54:83:a4:a7:9d:ed:ae:c8:1b:15:92: 31:43:95:ea:be:60:0f:d8:f5:98:67:80:61:bf:36: 3f:81:95:c6:11:37:70:ce:93:a5:05:48:6f:f4:9f: a3:83:5d:e2:e2:c3:94:e8:c2:84:b0:34:6f:61:d6: b6:59:d6:e9:1d:65:99:87:4b:e0:1b:d3:7b:ec:84: 8d:a9:a7:47:ed:78:dc:0b:76:03:8a:c9:0f:73:fc: 77:c6:d3:0e:c8:29:8d:e7:ac:2a:87:5a:1b:63:a8: 10:59:73:08:3b:6b:4f:da:ab:d2:d7:24:6e:00:db: fb:cb:59:57:54:4e:1d:04:f7:1b:97:c3:82:8a:20: af:fd:78:03:76:60:15:3e:74:9d:a1:be:c0:d5:81: 19:eb:e1:89:e3:d2:88:8b:bb:4a:7d:ee:17:08:10: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:22:33:2D:54:A0:7D:25:60:D3:61:27:3D:D9:06:42:D7:E2:97:E0 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:29:bb:b1:18:01:fc:06:c7:0d:31:a5:3d:1d:57:c7:2c:b5: c1:1f:bb:9a:07:93:de:b5:dc:b8:74:d2:58:72:f7:fe:f6:62: 6c:80:37:5d:63:a9:c1:9d:21:68:bc:8f:dc:88:61:7d:ef:da: 11:ac:ef:d7:ee:ca:d7:c2:28:2e:dd:c9:50:ce:1d:e8:35:e7: 61:dc:87:2b:b3:09:25:74:02:89:2e:c3:c8:83:59:a4:0e:ff: 26:9d:22:a8:4e:2a:c6:6d:b7:ff:0e:2f:3f:22:7b:f3:41:d0: 40:84:00:f1:4a:df:cc:e1:b7:5e:5c:c6:7b:bf:2c:6c:5f:fe: cd:fc:4c:84:66:5d:90:1f:48:58:6e:29:56:7f:f0:81:84:b7: 73:92:bd:cc:fc:11:33:86:7f:db:96:53:9b:30:98:8c:64:ce: 83:f5:a3:24:af:79:07:9d:e1:08:5b:99:5f:2c:fc:00:b2:d4: c1:e5:7d:bd:26:6e:f1:e2:15:f4:7e:ce:84:d9:43:33:88:26: fc:82:1e:1c:89:bf:71:cb:24:d9:da:39:10:a8:b6:d3:d1:12: 0e:5b:17:18:52:44:41:a8:94:0b:6f:ad:c4:d0:4a:7f:a1:30: 72:0c:13:46:da:9f:bf:b5:e9:fb:93:60:da:09:4b:44:f6:d8: 1f:eb:d4:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOFvx0iID5tn9Fg9wsVyo2Q/99swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTA2MDQxOTM1NTRaFw0yNTA2MDgwNjA5NTRaMDMxMTAvBgNV BAMTKEU5MjIzMzJENTRBMDdEMjU2MEQzNjEyNzNERDkwNjQyRDdFMjk3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXczLDqHlf/wvvEEmABUmRZZjh rV/bHDhSVTVN02G4x16bgaTrHTPeyMiUgqIwZKAhwKI2EafoScgted3smLddBehQ xeNAIKhF9JlCqqH9JI5Hr61yTAGgaPZEo8lUg6Snne2uyBsVkjFDleq+YA/Y9Zhn gGG/Nj+BlcYRN3DOk6UFSG/0n6ODXeLiw5TowoSwNG9h1rZZ1ukdZZmHS+Ab03vs hI2pp0fteNwLdgOKyQ9z/HfG0w7IKY3nrCqHWhtjqBBZcwg7a0/aq9LXJG4A2/vL WVdUTh0E9xuXw4KKIK/9eAN2YBU+dJ2hvsDVgRnr4Ynj0oiLu0p97hcIENRBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6SIzLVSgfSVg02EnPdkGQtfil+AwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGspu7EYAfwGxw0xpT0dV8cstcEfu5oHk961 3Lh00lhy9/72YmyAN11jqcGdIWi8j9yIYX3v2hGs79fuytfCKC7dyVDOHeg152Hc hyuzCSV0Aokuw8iDWaQO/yadIqhOKsZtt/8OLz8ie/NB0ECEAPFK38zht15cxnu/ LGxf/s38TIRmXZAfSFhuKVZ/8IGEt3OSvcz8ETOGf9uWU5swmIxkzoP1oySveQed 4QhbmV8s/ACy1MHlfb0mbvHiFfR+zoTZQzOIJvyCHhyJv3HLJNnaORCottPREg5b FxhSREGolAtvrcTQSn+hMHIME0ban7+16fuTYNoJS0T22B/r1ME= -----END CERTIFICATE-----Generated at Fri Jun 6 17:15:25 2025 by rpki-client