$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: OnkkI7z4NCug1u+NIIQoyOmS5RkcYiSdCAkSjt+s92M= Subject key identifier: 86:87:11:2B:51:0E:FB:A4:9E:46:A0:55:48:3A:3C:1E:6A:EA:B7:89 Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 1A75C8BA180A9C4053EB41E6F0FBED0BF8956EAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 039A Signing time: Mon 20 Oct 2025 01:32:24 +0000 Manifest this update: Mon 20 Oct 2025 01:27:24 +0000 Manifest next update: Thu 23 Oct 2025 04:07:24 +0000 Files and hashes: 1: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: HXG6M2lkHdM7H0q8sMHL2RuqzQnwYr9btslEMX8iQ9s=) 2: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: wEPB3QvajJhsbh+lNqI8sdwHn21NFc8yL60iJuPBR/k=) 3: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: NZRvAk91/qS+2e4QEna7jFq1miR9hnIOcdT25pcAymk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:75:c8:ba:18:0a:9c:40:53:eb:41:e6:f0:fb:ed:0b:f8:95:6e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: Oct 20 01:27:24 2025 GMT Not After : Oct 23 04:07:24 2025 GMT Subject: CN=8687112B510EFBA49E46A055483A3C1E6AEAB789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:35:cd:b8:93:86:cf:de:72:eb:b6:c3:a2:51: 9d:4b:8b:d4:b0:40:49:bb:f8:fa:f0:43:bd:35:5c: 44:f8:a9:62:a4:52:47:4f:5f:91:cb:51:48:6a:d4: de:62:27:dc:94:9c:74:77:51:9b:e3:ac:d4:67:2d: 3d:07:72:0c:c2:78:ed:2c:7d:50:44:43:85:cb:96: 57:7e:3f:10:a1:08:2d:0f:80:f1:a0:46:91:06:59: b4:82:dd:71:53:bf:6e:59:fd:6e:d7:a1:71:57:c5: 2d:77:f2:4c:c7:0a:1e:d7:7f:8c:1f:ec:bc:65:2e: e3:5d:cc:d9:eb:42:dc:5f:1b:e7:e6:91:e5:a8:9d: 82:e2:37:61:25:9d:de:0c:c8:96:47:2f:70:d6:3f: 5b:4d:87:14:db:e7:fe:6b:f7:a6:3a:ef:e3:01:89: c9:41:b9:8e:f0:f5:bc:59:ec:80:4b:ce:b5:9d:76: 57:6b:33:44:97:9b:d6:43:b4:df:dd:fb:de:c3:a2: 2a:f3:88:96:dc:b9:7a:ae:72:0e:6b:6e:2f:54:51: 78:c8:4f:48:f3:3a:b6:8d:8f:63:52:8f:5b:ab:2a: b9:d6:5a:85:f3:75:f4:66:5c:a9:11:c1:8c:68:94: d2:14:14:29:39:93:73:d9:1d:b9:5f:ae:04:af:ce: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:87:11:2B:51:0E:FB:A4:9E:46:A0:55:48:3A:3C:1E:6A:EA:B7:89 X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:09:ad:fa:54:e7:94:bb:5e:d6:7b:e8:af:b1:39:43:6f:73: d3:cc:84:69:f7:4b:08:fd:e3:da:76:9c:5b:6b:84:5b:fb:d8: 5b:7c:e1:90:68:2d:6c:c8:1e:a1:80:8e:2b:cd:8c:f6:15:17: e9:3a:e1:dd:2d:c8:59:28:fb:b3:89:aa:1b:4e:ca:98:65:cc: 6f:64:0e:ab:66:fb:23:67:c4:22:c7:41:11:f1:eb:5e:9a:a3: 64:1f:94:cb:4b:b5:5f:63:a8:d7:96:e3:f4:fc:aa:09:b4:da: 82:24:b0:b4:ff:15:18:d2:82:55:c9:8c:45:96:db:66:1c:23: b4:33:ef:46:c9:a3:00:61:32:bf:6d:24:df:bc:97:05:29:54: 89:7f:06:5a:bb:d8:66:c3:23:bd:ac:7a:90:02:0e:50:37:15: c2:18:e9:57:f8:b9:93:27:43:a6:48:94:af:b5:fa:d6:d0:37: 6d:8f:14:f4:ff:5f:7b:44:b9:ac:95:ee:5e:43:51:6c:1a:4e: ce:fb:4e:83:5b:5a:97:23:40:e8:9c:56:1c:b3:64:17:0e:d5: fa:bc:36:6d:4f:05:21:9c:9c:2b:1b:6e:31:80:80:42:3a:c5: 27:be:ff:b8:62:17:7c:57:f6:dd:02:ea:8e:5f:77:58:52:40: 2e:75:fa:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnXIuhgKnEBT60Hm8PvtC/iVbqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNTEwMjAwMTI3MjRaFw0yNTEwMjMwNDA3MjRaMDMxMTAvBgNV BAMTKDg2ODcxMTJCNTEwRUZCQTQ5RTQ2QTA1NTQ4M0EzQzFFNkFFQUI3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiNc24k4bP3nLrtsOiUZ1Li9Sw QEm7+PrwQ701XET4qWKkUkdPX5HLUUhq1N5iJ9yUnHR3UZvjrNRnLT0HcgzCeO0s fVBEQ4XLlld+PxChCC0PgPGgRpEGWbSC3XFTv25Z/W7XoXFXxS138kzHCh7Xf4wf 7LxlLuNdzNnrQtxfG+fmkeWonYLiN2Elnd4MyJZHL3DWP1tNhxTb5/5r96Y67+MB iclBuY7w9bxZ7IBLzrWddldrM0SXm9ZDtN/d+97DoirziJbcuXqucg5rbi9UUXjI T0jzOraNj2NSj1urKrnWWoXzdfRmXKkRwYxolNIUFCk5k3PZHblfrgSvzg5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhocRK1EO+6SeRqBVSDo8Hmrqt4kwHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYJrfpU55S7XtZ76K+xOUNvc9PMhGn3Swj9 49p2nFtrhFv72Ft84ZBoLWzIHqGAjivNjPYVF+k64d0tyFko+7OJqhtOyphlzG9k Dqtm+yNnxCLHQRHx616ao2QflMtLtV9jqNeW4/T8qgm02oIksLT/FRjSglXJjEWW 22YcI7Qz70bJowBhMr9tJN+8lwUpVIl/Blq72GbDI72sepACDlA3FcIY6Vf4uZMn Q6ZIlK+1+tbQN22PFPT/X3tEuayV7l5DUWwaTs77ToNbWpcjQOicVhyzZBcO1fq8 Nm1PBSGcnCsbbjGAgEI6xSe+/7hiF3xX9t0C6o5fd1hSQC51+hI= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:23 2025 by rpki-client