$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: npiASJD+bw3HZUFVwVTbcUL5zRXdPhsAnKB69Wsg7WY= Subject key identifier: 2C:3D:F2:1F:9E:D0:35:78:6A:41:66:9F:B5:4F:36:E4:B4:97:4E:56 Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 4BD916DCF80FAE13E102660B2BD18857AC674F77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 04E3 Signing time: Fri 27 Jun 2025 06:31:13 +0000 Manifest this update: Fri 27 Jun 2025 06:26:13 +0000 Manifest next update: Mon 30 Jun 2025 18:05:13 +0000 Files and hashes: 1: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) 2: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) 3: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: ZMZQVcg83Q2AIZ/9upbos4sVmkKZX7UXHwRMbgFPpnk=) 4: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) 5: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 6: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) 7: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 18:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d9:16:dc:f8:0f:ae:13:e1:02:66:0b:2b:d1:88:57:ac:67:4f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Jun 27 06:26:13 2025 GMT Not After : Jun 30 18:05:13 2025 GMT Subject: CN=2C3DF21F9ED035786A41669FB54F36E4B4974E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:7e:45:4e:36:bd:e0:37:c9:60:48:55:60: 9b:37:3f:38:cb:7f:e6:3f:8a:e8:6f:b5:52:03:f7: f4:0a:49:1e:11:ab:79:98:5b:90:92:a9:bd:c5:96: 73:f6:e9:10:91:a8:33:c9:ea:66:df:af:8a:52:a0: 02:ca:9e:c4:44:ac:88:82:cc:de:82:78:99:c3:42: 05:a3:1f:45:57:92:5a:3c:d5:31:9a:4f:aa:82:2a: f9:bd:5c:bb:13:c2:1e:8e:1c:e9:1b:bc:23:20:0a: f4:e9:b7:00:12:b6:2b:11:6a:c3:c9:93:24:73:39: 64:c8:bc:45:94:74:8f:72:15:1e:16:9b:f9:ca:b0: d1:45:36:b4:0b:a4:20:e1:0a:53:65:04:77:06:3e: 6e:36:7f:ae:cb:20:c7:5f:c7:03:05:56:84:2a:13: 27:e5:bc:47:49:9a:40:41:f2:34:7b:54:e2:22:2d: 26:3f:7d:91:4a:af:70:58:31:62:11:0b:8b:9c:c6: 06:9e:c2:29:32:46:eb:e4:31:e7:72:da:11:6b:18: c1:d8:91:cb:a3:56:58:cb:d5:6f:d3:73:f6:f2:7e: c9:7e:75:8c:57:36:93:b3:bf:b6:88:b8:3f:ee:01: 2a:79:4e:87:77:4a:34:2f:78:87:c8:ab:ba:6c:8e: 2e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3D:F2:1F:9E:D0:35:78:6A:41:66:9F:B5:4F:36:E4:B4:97:4E:56 X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ed:d4:6f:24:d3:73:b9:44:60:27:48:84:bb:98:5c:6e:32: fd:ba:39:e2:b9:f2:c7:94:a0:e8:1f:db:96:55:07:0b:e4:ad: c8:9b:6f:d3:5c:cc:44:e8:c5:3c:c5:4a:f5:6e:f6:80:30:11: f3:d7:6f:22:50:56:70:aa:67:fd:5f:d5:ec:56:fc:13:f8:66: d7:ed:5b:26:39:e4:44:a9:c1:fc:4c:7d:fd:a8:a7:4c:87:bd: 81:b8:fb:1d:88:c7:a1:d5:85:12:d7:46:0a:d3:09:ec:72:3e: 23:ca:7b:f9:9a:03:58:c9:09:94:01:dc:84:4d:f3:8e:a5:97: fc:4e:35:5a:f7:fe:01:09:90:50:fa:b2:64:bf:8b:11:39:28: f6:f8:f5:5a:f0:3a:41:36:5b:f4:0b:83:5a:44:fe:d9:8d:4d: 52:70:14:70:ce:df:ff:fb:fd:3d:da:33:62:17:0e:31:a6:45: fc:b3:71:d8:92:04:a0:86:12:81:13:9e:b5:06:5c:35:56:86: 9f:6e:19:3d:84:ac:33:f6:51:d5:3a:6b:c1:fa:d4:c8:aa:8f: 88:c6:ee:53:e2:f8:2b:0f:60:93:ca:49:09:09:22:6f:db:df: 67:48:ab:2d:6f:18:7d:e0:97:d4:59:ec:ba:20:04:ee:42:6f: cf:bd:73:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9kW3PgPrhPhAmYLK9GIV6xnT3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNTA2MjcwNjI2MTNaFw0yNTA2MzAxODA1MTNaMDMxMTAvBgNV BAMTKDJDM0RGMjFGOUVEMDM1Nzg2QTQxNjY5RkI1NEYzNkU0QjQ5NzRFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCji35FTja94DfJYEhVYJs3PzjL f+Y/iuhvtVID9/QKSR4Rq3mYW5CSqb3FlnP26RCRqDPJ6mbfr4pSoALKnsRErIiC zN6CeJnDQgWjH0VXklo81TGaT6qCKvm9XLsTwh6OHOkbvCMgCvTptwAStisRasPJ kyRzOWTIvEWUdI9yFR4Wm/nKsNFFNrQLpCDhClNlBHcGPm42f67LIMdfxwMFVoQq EyflvEdJmkBB8jR7VOIiLSY/fZFKr3BYMWIRC4ucxgaewikyRuvkMedy2hFrGMHY kcujVljL1W/Tc/byfsl+dYxXNpOzv7aIuD/uASp5Tod3SjQveIfIq7psji6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULD3yH57QNXhqQWaftU825LSXTlYwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHt1G8k03O5RGAnSIS7mFxuMv26OeK58seU oOgf25ZVBwvkrcibb9NczEToxTzFSvVu9oAwEfPXbyJQVnCqZ/1f1exW/BP4Ztft WyY55ESpwfxMff2op0yHvYG4+x2Ix6HVhRLXRgrTCexyPiPKe/maA1jJCZQB3IRN 846ll/xONVr3/gEJkFD6smS/ixE5KPb49VrwOkE2W/QLg1pE/tmNTVJwFHDO3//7 /T3aM2IXDjGmRfyzcdiSBKCGEoETnrUGXDVWhp9uGT2ErDP2UdU6a8H61Miqj4jG 7lPi+CsPYJPKSQkJIm/b32dIqy1vGH3gl9RZ7LogBO5Cb8+9czc= -----END CERTIFICATE-----Generated at Sun Jun 29 18:43:40 2025 by rpki-client