$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: 7ZwYu7J2JsE8iYr2zkVZ62WpHAUF197lEhGHJG+t748= Subject key identifier: FE:30:FF:6F:9A:33:20:F0:77:3D:15:C8:7D:96:4E:01:C5:45:8D:A6 Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 2B7D78BBA238313C4C9668933C3CD0F6D9616237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 0515 Signing time: Sun 19 Oct 2025 17:01:15 +0000 Manifest this update: Sun 19 Oct 2025 16:56:15 +0000 Manifest next update: Wed 22 Oct 2025 23:29:15 +0000 Files and hashes: 1: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: sXAxkCrtPyH+TBPiwV/5sH15o8s+DhwQmuU/+uwzcmU=) 2: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) 3: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) 4: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) 5: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 6: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) 7: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7d:78:bb:a2:38:31:3c:4c:96:68:93:3c:3c:d0:f6:d9:61:62:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Oct 19 16:56:15 2025 GMT Not After : Oct 22 23:29:15 2025 GMT Subject: CN=FE30FF6F9A3320F0773D15C87D964E01C5458DA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0d:9f:8c:43:2a:76:81:28:d1:ab:e8:a0:43: bf:a7:a3:fc:9e:b1:4e:3a:1a:a6:b2:eb:ed:e0:a8: cb:b8:a9:df:3d:09:6a:f6:a0:b3:c4:31:6e:b8:e7: f1:4f:60:40:12:36:a9:45:6b:9b:b2:6b:b4:5e:8e: 6f:b6:b9:23:a7:89:89:91:27:f1:a8:ab:c2:42:b2: 3a:b1:2b:b8:5d:d5:9c:c3:f4:3c:24:1b:37:d7:00: 11:18:52:3a:d8:3a:c2:5d:6f:d7:90:01:31:3b:68: f7:15:a9:ad:e9:ee:6e:2b:53:58:0f:bc:ed:4b:9a: f3:d1:94:35:45:38:95:9e:3f:c0:b3:5d:97:12:4a: 5f:43:b8:73:a6:eb:66:ab:38:e3:39:b4:ef:33:8e: ef:62:54:07:80:1e:31:4b:25:5f:06:81:49:f2:5d: c3:14:55:2f:01:02:77:e4:45:df:87:bb:0a:cc:b9: 7c:00:ce:2a:01:51:c3:6e:31:64:3f:b9:f0:53:7f: 5b:77:8c:88:d0:de:bd:a1:6a:a5:3e:28:3a:f2:09: fa:e9:36:e1:f6:24:87:4a:18:1c:4e:b0:a1:07:57: 9d:6b:fd:78:70:cb:c9:4b:c3:08:f7:29:9f:d1:8b: 26:41:36:f6:10:d2:9f:c9:c6:89:27:c6:e8:58:77: c4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:30:FF:6F:9A:33:20:F0:77:3D:15:C8:7D:96:4E:01:C5:45:8D:A6 X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a2:60:6c:3f:f9:ca:ce:fd:f4:f2:d6:ac:7b:2c:91:e3:96: b0:53:89:8d:4d:d7:c5:ed:34:35:18:4a:01:41:07:be:b9:73: 85:7a:36:a3:47:de:e0:cb:34:56:c4:2f:b7:52:92:93:66:b8: f3:3b:c6:bb:e1:3a:e9:32:09:3b:14:85:cb:a9:10:e9:8b:ed: 48:5a:ea:86:3f:6a:0a:0e:45:a4:ca:bf:49:b8:e0:02:bb:19: 8e:17:9e:b0:8d:d5:d7:65:1e:72:c0:8b:38:78:39:81:2a:55: e5:06:dd:f6:51:bd:d2:74:bf:d1:b8:40:c5:d3:29:f1:fa:2d: 94:9a:aa:50:fa:20:74:9e:7c:0e:23:71:67:2d:88:07:ce:3b: a5:e8:31:c7:3b:4a:95:ce:62:25:f3:4e:32:ec:75:70:41:a4: b2:58:f9:07:c3:99:26:0a:f7:56:e5:d1:20:78:b5:48:81:7c: eb:94:34:e8:43:62:b6:44:49:42:5c:79:1f:9b:d1:ba:41:42: 75:da:24:6b:2b:00:a5:c0:aa:56:8f:dd:94:bb:f2:05:73:22: b5:35:74:4c:04:44:bb:ee:c8:b2:e0:d5:dd:43:66:f3:78:a0: 7e:8e:cb:cc:07:30:16:52:bc:76:75:42:4a:9e:4a:f9:df:94: c6:ff:6b:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK314u6I4MTxMlmiTPDzQ9tlhYjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNTEwMTkxNjU2MTVaFw0yNTEwMjIyMzI5MTVaMDMxMTAvBgNV BAMTKEZFMzBGRjZGOUEzMzIwRjA3NzNEMTVDODdEOTY0RTAxQzU0NThEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiDZ+MQyp2gSjRq+igQ7+no/ye sU46Gqay6+3gqMu4qd89CWr2oLPEMW645/FPYEASNqlFa5uya7Rejm+2uSOniYmR J/Goq8JCsjqxK7hd1ZzD9DwkGzfXABEYUjrYOsJdb9eQATE7aPcVqa3p7m4rU1gP vO1LmvPRlDVFOJWeP8CzXZcSSl9DuHOm62arOOM5tO8zju9iVAeAHjFLJV8GgUny XcMUVS8BAnfkRd+HuwrMuXwAzioBUcNuMWQ/ufBTf1t3jIjQ3r2haqU+KDryCfrp NuH2JIdKGBxOsKEHV51r/Xhwy8lLwwj3KZ/RiyZBNvYQ0p/JxoknxuhYd8TXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/jD/b5ozIPB3PRXIfZZOAcVFjaYwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCiYGw/+crO/fTy1qx7LJHjlrBTiY1N18Xt NDUYSgFBB765c4V6NqNH3uDLNFbEL7dSkpNmuPM7xrvhOukyCTsUhcupEOmL7Uha 6oY/agoORaTKv0m44AK7GY4XnrCN1ddlHnLAizh4OYEqVeUG3fZRvdJ0v9G4QMXT KfH6LZSaqlD6IHSefA4jcWctiAfOO6XoMcc7SpXOYiXzTjLsdXBBpLJY+QfDmSYK 91bl0SB4tUiBfOuUNOhDYrZESUJceR+b0bpBQnXaJGsrAKXAqlaP3ZS78gVzIrU1 dEwERLvuyLLg1d1DZvN4oH6Oy8wHMBZSvHZ1QkqeSvnflMb/azE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:25 2025 by rpki-client