$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: gIV1xrt9G5lLIx5qh/sYXfVkee+XRAq2NPWRSkTiVq0= Subject key identifier: 0B:BC:8D:68:50:06:5B:56:63:47:29:13:E8:AB:9C:1D:6F:9D:C1:E3 Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 2068AC06F96CEDE94E596759AD0D1200D7AF6891 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 0368 Signing time: Sun 29 Jun 2025 13:42:20 +0000 Manifest this update: Sun 29 Jun 2025 13:37:20 +0000 Manifest next update: Wed 02 Jul 2025 21:28:20 +0000 Files and hashes: 1: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: HXG6M2lkHdM7H0q8sMHL2RuqzQnwYr9btslEMX8iQ9s=) 2: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: iVPIdzUZDTtKEL2gPhtE9Kkd0V4ZJ9up6u54V9IkMSY=) 3: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: NZRvAk91/qS+2e4QEna7jFq1miR9hnIOcdT25pcAymk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:68:ac:06:f9:6c:ed:e9:4e:59:67:59:ad:0d:12:00:d7:af:68:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: Jun 29 13:37:20 2025 GMT Not After : Jul 2 21:28:20 2025 GMT Subject: CN=0BBC8D6850065B5663472913E8AB9C1D6F9DC1E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:1a:22:ed:67:83:18:32:e9:e7:84:db:b7: 9f:18:36:57:59:6d:e2:2c:79:1d:5c:e9:56:54:df: 74:0e:fb:0d:67:52:38:ea:d1:21:0c:ce:42:00:42: c8:d6:38:51:c7:68:7c:2e:84:29:3d:a6:ea:15:29: db:00:99:c3:88:c0:89:1d:30:80:f3:9a:2e:3e:66: de:2f:d3:17:e9:39:a7:b1:d4:9c:dc:27:9f:55:d0: 98:7d:8e:fc:b0:e4:32:f2:03:80:54:7c:7e:2f:b3: 30:cf:2a:20:02:43:2b:e2:57:fe:ff:66:20:8a:05: aa:ef:ec:1e:22:20:ad:2f:ca:1c:7f:fa:5a:83:45: 30:56:e5:7b:ed:08:fb:5c:8b:d6:8d:98:48:87:73: d4:36:47:f0:f6:ea:87:ea:b6:28:39:de:4e:a5:eb: 2e:62:65:9b:e5:bc:59:5e:ee:ce:2f:cd:9a:8c:7a: e6:3e:21:ee:8e:1e:60:e4:d7:e2:7a:c3:30:68:dd: af:05:55:4e:f3:4b:20:8e:57:d2:70:74:ba:5c:73: e3:c3:f1:5f:6c:e0:5f:af:e3:00:7e:25:ca:36:e5: da:a8:72:77:b6:d2:30:8f:ad:5e:0c:4d:fd:ab:55: 7a:7c:64:7e:02:37:c0:b7:4b:5a:5b:b6:e9:c5:b1: 11:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BC:8D:68:50:06:5B:56:63:47:29:13:E8:AB:9C:1D:6F:9D:C1:E3 X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:56:89:8d:99:b1:cb:ec:d4:04:81:38:f5:6e:84:53:fc:2c: 67:65:7c:06:81:b0:b7:22:a1:a0:86:a2:94:41:0a:9c:67:11: e6:17:f9:38:c0:bb:2c:20:20:9a:43:52:ab:0b:55:97:ca:88: 2f:23:35:41:bd:93:f8:5e:0a:0d:f1:d4:f0:f1:a3:1e:1f:6e: 4d:2f:54:56:40:45:c4:34:d9:2b:12:cc:ff:34:10:20:e2:e5: 93:7d:35:65:4b:4e:2d:4f:b1:fb:c1:a4:41:7f:ad:5e:69:47: 23:82:83:af:d6:68:d4:aa:ef:2a:e8:25:7b:c2:bf:01:3c:17: bc:06:b7:75:8c:93:e7:09:3b:db:1f:2a:70:d3:9a:ba:07:34: 87:cb:cd:77:2f:62:55:b5:f7:80:32:3b:8c:62:14:42:f2:e4: 8e:c9:d1:78:c5:f2:dd:ca:82:46:05:2c:e7:a4:8e:fb:4c:80: 18:84:73:6d:37:af:08:85:1f:25:4a:51:73:53:e8:d9:c0:81: 88:c9:7f:59:61:4e:bd:e8:1e:c6:5b:07:b8:06:a7:be:aa:c0: b7:c2:0f:96:47:39:20:57:02:3b:ca:41:05:28:36:fa:0d:cb: 5a:f3:51:3b:c1:57:32:b9:9c:51:2b:90:1b:8d:8f:cc:88:75: 15:09:5f:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGisBvls7elOWWdZrQ0SANevaJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNTA2MjkxMzM3MjBaFw0yNTA3MDIyMTI4MjBaMDMxMTAvBgNV BAMTKDBCQkM4RDY4NTAwNjVCNTY2MzQ3MjkxM0U4QUI5QzFENkY5REMxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPaxoi7WeDGDLp54Tbt58YNldZ beIseR1c6VZU33QO+w1nUjjq0SEMzkIAQsjWOFHHaHwuhCk9puoVKdsAmcOIwIkd MIDzmi4+Zt4v0xfpOaex1JzcJ59V0Jh9jvyw5DLyA4BUfH4vszDPKiACQyviV/7/ ZiCKBarv7B4iIK0vyhx/+lqDRTBW5XvtCPtci9aNmEiHc9Q2R/D26ofqtig53k6l 6y5iZZvlvFle7s4vzZqMeuY+Ie6OHmDk1+J6wzBo3a8FVU7zSyCOV9JwdLpcc+PD 8V9s4F+v4wB+Jco25dqocne20jCPrV4MTf2rVXp8ZH4CN8C3S1pbtunFsREXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC7yNaFAGW1ZjRykT6KucHW+dweMwHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9WiY2Zscvs1ASBOPVuhFP8LGdlfAaBsLci oaCGopRBCpxnEeYX+TjAuywgIJpDUqsLVZfKiC8jNUG9k/heCg3x1PDxox4fbk0v VFZARcQ02SsSzP80ECDi5ZN9NWVLTi1PsfvBpEF/rV5pRyOCg6/WaNSq7yroJXvC vwE8F7wGt3WMk+cJO9sfKnDTmroHNIfLzXcvYlW194AyO4xiFELy5I7J0XjF8t3K gkYFLOekjvtMgBiEc203rwiFHyVKUXNT6NnAgYjJf1lhTr3oHsZbB7gGp76qwLfC D5ZHOSBXAjvKQQUoNvoNy1rzUTvBVzK5nFErkBuNj8yIdRUJXz8= -----END CERTIFICATE-----Generated at Mon Jun 30 13:25:22 2025 by rpki-client