$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: FfaK7Qs3RYkmusC3ruiChxV3TuzNgt53SP+m26ujMT0= Subject key identifier: 63:CD:C7:0C:C1:5B:3E:3E:6E:BC:50:10:02:50:5F:D8:92:D3:72:9A Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 07A4A5A03D988D21B695F78B2D59710E4787E916 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 04CE Signing time: Sat 06 Sep 2025 12:31:14 +0000 Manifest this update: Sat 06 Sep 2025 12:26:14 +0000 Manifest next update: Tue 09 Sep 2025 17:52:14 +0000 Files and hashes: 1: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=) 2: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=) 3: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: fH18kULdOIkaPCQnCH9lpQS+eLSY47W0l58E9XNopSk=) 4: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a4:a5:a0:3d:98:8d:21:b6:95:f7:8b:2d:59:71:0e:47:87:e9:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Sep 6 12:26:14 2025 GMT Not After : Sep 9 17:52:14 2025 GMT Subject: CN=63CDC70CC15B3E3E6EBC501002505FD892D3729A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:49:0d:af:ff:98:19:d6:06:21:6a:24:6b: 37:fc:d5:cc:a1:23:39:24:0d:9b:85:a5:b1:6b:d5: 89:b3:36:82:76:3e:d6:dd:1d:da:bc:1f:d6:88:17: 54:53:39:cf:0a:fc:e7:24:16:ed:78:26:33:65:57: 29:26:0a:1f:3f:a4:d4:e6:a2:fb:96:80:42:69:a5: f5:64:a4:da:a4:b4:4b:7b:4e:3f:f4:f7:a3:f3:ca: e2:41:a8:97:8a:63:3f:1b:19:16:3e:ef:40:6b:7e: 08:c3:ef:f3:8a:c5:7b:91:f9:a5:d0:dc:e4:e5:89: 28:10:7a:db:b9:d0:79:6e:74:9c:a7:c2:10:a2:57: 87:7f:90:f8:eb:16:a4:ca:e6:98:9f:6d:a2:ff:d3: 19:08:18:57:30:d6:7f:2e:e9:16:83:88:16:87:cd: a1:7e:94:1a:94:17:45:3c:28:7d:c2:19:e8:01:64: 12:41:94:c9:cf:93:3d:76:a3:c3:46:57:9b:38:96: 0c:15:33:8b:7d:6b:e8:d8:32:8f:6f:b1:c7:1e:d0: 0f:e4:56:88:21:f0:3f:18:10:e1:62:2d:1a:0d:48: 17:92:99:28:13:5b:c9:f7:24:15:aa:43:a8:2d:8c: 8f:11:f3:3e:43:60:d8:cb:49:b5:fc:2b:f8:bc:cd: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CD:C7:0C:C1:5B:3E:3E:6E:BC:50:10:02:50:5F:D8:92:D3:72:9A X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:a1:44:09:e4:61:71:51:bd:71:65:bc:78:b7:c0:e7:84:3c: 8f:ae:96:97:5f:ca:3d:93:8b:d9:7e:e6:d0:63:a2:fc:de:89: c1:ff:2f:3a:a1:97:25:ac:4c:e8:3a:ee:01:13:80:35:99:c7: 15:d6:46:f1:04:ac:34:3a:0b:98:12:15:7a:ff:9e:55:2d:6e: bd:86:d5:9c:42:5e:e9:b2:68:1a:ee:79:5c:f1:d8:48:02:00: 51:53:93:5d:c0:04:5a:e1:14:61:a7:6c:f6:80:b1:a8:e8:e3: 73:5e:03:d3:1c:46:64:60:4d:90:9c:5a:82:c7:9c:84:cc:3a: 9e:21:a4:a6:a8:c1:c0:9b:df:c5:ef:39:c2:49:0d:a8:18:75: e4:fa:ea:87:7c:f8:d3:a2:32:c2:7f:6e:c0:3c:2b:8d:66:fc: 29:ca:23:58:ae:a5:05:a9:3a:9a:ca:b6:18:8f:6a:83:36:1c: 01:e1:d8:25:35:8f:11:15:37:63:77:9d:80:f0:b4:3e:b3:af: d2:39:83:ea:ec:ac:eb:ea:9d:fc:f9:0a:e0:45:5d:9a:94:5d: 85:ee:47:c8:98:6f:9b:db:81:57:ad:bc:bc:97:de:cf:38:f5: 9c:e3:eb:02:65:12:fd:ae:dd:b2:aa:68:7d:df:bc:c2:80:a2: 52:1e:6c:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB6SloD2YjSG2lfeLLVlxDkeH6RYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTA5MDYxMjI2MTRaFw0yNTA5MDkxNzUyMTRaMDMxMTAvBgNV BAMTKDYzQ0RDNzBDQzE1QjNFM0U2RUJDNTAxMDAyNTA1RkQ4OTJEMzcyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSUkNr/+YGdYGIWokazf81cyh IzkkDZuFpbFr1YmzNoJ2PtbdHdq8H9aIF1RTOc8K/OckFu14JjNlVykmCh8/pNTm ovuWgEJppfVkpNqktEt7Tj/096PzyuJBqJeKYz8bGRY+70BrfgjD7/OKxXuR+aXQ 3OTliSgQetu50HludJynwhCiV4d/kPjrFqTK5pifbaL/0xkIGFcw1n8u6RaDiBaH zaF+lBqUF0U8KH3CGegBZBJBlMnPkz12o8NGV5s4lgwVM4t9a+jYMo9vscce0A/k Vogh8D8YEOFiLRoNSBeSmSgTW8n3JBWqQ6gtjI8R8z5DYNjLSbX8K/i8zTIpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY83HDMFbPj5uvFAQAlBf2JLTcpowHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyhRAnkYXFRvXFlvHi3wOeEPI+ulpdfyj2T i9l+5tBjovzeicH/LzqhlyWsTOg67gETgDWZxxXWRvEErDQ6C5gSFXr/nlUtbr2G 1ZxCXumyaBrueVzx2EgCAFFTk13ABFrhFGGnbPaAsajo43NeA9McRmRgTZCcWoLH nITMOp4hpKaowcCb38XvOcJJDagYdeT66od8+NOiMsJ/bsA8K41m/CnKI1iupQWp OprKthiPaoM2HAHh2CU1jxEVN2N3nYDwtD6zr9I5g+rsrOvqnfz5CuBFXZqUXYXu R8iYb5vbgVetvLyX3s849Zzj6wJlEv2u3bKqaH3fvMKAolIebEI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:08 2025 by rpki-client