$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: KFuVV4Q1gXKa7UIwIsXE5q2Piv0mLWt9ZStPyn6d59s= Subject key identifier: 3C:F6:E0:C2:E8:0C:1E:74:A1:5F:DD:C7:0A:56:0A:90:99:D9:45:5C Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 15E99EDF0E3AA95ED1992C274BE48656C93361F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 04CE Signing time: Sun 11 May 2025 14:21:13 +0000 Manifest this update: Sun 11 May 2025 14:16:13 +0000 Manifest next update: Wed 14 May 2025 21:52:13 +0000 Files and hashes: 1: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: txolTLSTXE7ODx/u5tuDDDCNUIZtYjDew9/efServ68=) 2: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: oczcaZYOYYIYRn6ousrA3WWkKW+BTkz6df77S6Uf1wc=) 3: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: EGpM1j1rOJjD5lYy5Wchuv/jogF+E++xxQSb4XFGRlo=) 4: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: U43WoSNbXdcBa1UWb8d2YU9Hoj0ZL679eSTM/whmqA4=) 5: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: itCBvlenhfkmaHmcUDy/3wulfqyiEA7xaF9EOQF9bE4=) 6: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: Ob3pXqV5fT3Qb/wUwMvuoxur/OUYsZ0HgXFBn0KdRIs=) 7: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: m1XWyT0e9T5E7FtX9EWKRd4erO5NAGL0dJ8kV06SJiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 19:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:e9:9e:df:0e:3a:a9:5e:d1:99:2c:27:4b:e4:86:56:c9:33:61:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: May 11 14:16:13 2025 GMT Not After : May 14 21:52:13 2025 GMT Subject: CN=3CF6E0C2E80C1E74A15FDDC70A560A9099D9455C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:11:8f:3f:5f:df:aa:a7:be:6c:a5:f7:95: 52:2c:cb:98:1f:59:d9:11:b5:db:12:12:47:4c:89: 1c:71:eb:37:06:bc:f1:b5:59:fe:e7:5e:92:cd:80: 54:dc:ce:39:c7:b1:13:c5:12:59:de:33:9f:9e:0a: a8:f3:50:66:f9:39:da:01:b8:67:9b:a5:ce:4d:b7: 14:6c:c2:ae:84:d1:71:0b:5b:58:78:b5:a5:2d:c6: 93:8c:1d:54:e4:38:a5:27:ff:02:f6:44:aa:97:dd: ad:c7:bc:d2:36:e9:78:3a:96:69:52:b6:f5:20:50: 45:18:fa:0d:ab:9f:8d:80:82:c1:2e:40:8c:42:25: a7:b0:ba:ec:9e:e6:a2:6a:b6:c5:7a:cd:8e:a0:e5: 76:ca:f6:0d:50:5f:2a:95:fc:d5:a7:c5:5a:5b:5b: 53:b4:5d:ff:42:30:fa:11:0d:60:5c:82:3e:b3:b7: 1e:ba:40:f0:73:79:11:a5:09:69:a3:f0:c9:6b:de: 27:68:39:4e:63:bc:3e:bb:0c:29:42:e3:0e:f0:fb: d8:e0:07:9e:6f:46:60:f0:d6:34:94:53:4d:09:72: 49:10:e4:2c:f3:ac:6a:cf:0c:75:9d:a3:83:3a:45: 51:65:54:e8:12:82:4e:4d:e8:2f:fd:80:f1:e4:58: ad:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F6:E0:C2:E8:0C:1E:74:A1:5F:DD:C7:0A:56:0A:90:99:D9:45:5C X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ef:b9:fb:ac:55:f8:89:72:da:b8:29:63:9e:d4:4e:3c:14: 54:8f:7e:35:05:14:3c:fc:62:e6:d7:93:c2:0f:d0:67:9b:20: 44:4f:7b:3d:82:64:30:24:71:b1:29:e8:76:da:44:2a:8e:bb: 44:61:28:91:47:7a:25:84:71:21:c7:47:cf:f1:b7:9e:f4:60: e0:53:66:73:38:c8:a1:18:e7:a8:cb:3f:c6:5b:08:b2:f3:8d: db:ab:a3:d6:1f:4f:8d:48:e8:ac:9e:1f:57:7e:19:09:b1:23: 14:ce:b3:ec:5d:fa:2c:1f:57:8a:b8:be:0b:7d:70:71:ab:d0: 79:fa:0d:50:96:44:92:10:d6:ed:32:08:f1:76:70:ab:6f:c0: 5a:9b:33:ea:e3:ce:64:21:fb:76:dc:cc:b0:35:1b:14:13:9f: 97:86:f9:03:a3:ab:3b:fd:e7:30:3b:9e:8b:b8:93:ce:b8:95: e5:01:22:d1:ec:08:f6:c7:2a:31:4b:b5:09:36:71:cd:66:82: 3e:5a:da:be:26:bc:1e:37:65:7b:44:74:02:3b:d1:67:7b:35: 79:31:bc:01:bb:ad:9d:e4:66:f9:fc:cb:c9:1c:59:2f:26:d7: c6:15:0f:35:8f:87:07:3c:14:1b:98:e6:0c:e2:35:38:8a:4a: c7:8b:d0:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFeme3w46qV7RmSwnS+SGVskzYfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNTA1MTExNDE2MTNaFw0yNTA1MTQyMTUyMTNaMDMxMTAvBgNV BAMTKDNDRjZFMEMyRTgwQzFFNzRBMTVGRERDNzBBNTYwQTkwOTlEOTQ1NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW0xGPP1/fqqe+bKX3lVIsy5gf WdkRtdsSEkdMiRxx6zcGvPG1Wf7nXpLNgFTczjnHsRPFElneM5+eCqjzUGb5OdoB uGebpc5NtxRswq6E0XELW1h4taUtxpOMHVTkOKUn/wL2RKqX3a3HvNI26Xg6lmlS tvUgUEUY+g2rn42AgsEuQIxCJaewuuye5qJqtsV6zY6g5XbK9g1QXyqV/NWnxVpb W1O0Xf9CMPoRDWBcgj6ztx66QPBzeRGlCWmj8Mlr3idoOU5jvD67DClC4w7w+9jg B55vRmDw1jSUU00JckkQ5CzzrGrPDHWdo4M6RVFlVOgSgk5N6C/9gPHkWK2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPPbgwugMHnShX93HClYKkJnZRVwwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrvufusVfiJctq4KWOe1E48FFSPfjUFFDz8 YubXk8IP0GebIERPez2CZDAkcbEp6HbaRCqOu0RhKJFHeiWEcSHHR8/xt570YOBT ZnM4yKEY56jLP8ZbCLLzjduro9YfT41I6KyeH1d+GQmxIxTOs+xd+iwfV4q4vgt9 cHGr0Hn6DVCWRJIQ1u0yCPF2cKtvwFqbM+rjzmQh+3bczLA1GxQTn5eG+QOjqzv9 5zA7nou4k864leUBItHsCPbHKjFLtQk2cc1mgj5a2r4mvB43ZXtEdAI70Wd7NXkx vAG7rZ3kZvn8y8kcWS8m18YVDzWPhwc8FBuY5gziNTiKSseL0Bk= -----END CERTIFICATE-----Generated at Sun May 11 20:19:54 2025 by rpki-client