$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: esgmVoXzfVQ9LB07kwEJyaoam+ETGPkEC5NKZH6DsEc= Subject key identifier: 36:A4:80:DD:35:1B:26:3B:AE:CF:A8:A4:E8:59:F5:59:B7:62:65:E3 Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 0678998AAADE2051E25024691A621D3928514002 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 04FB Signing time: Thu 21 Aug 2025 15:51:14 +0000 Manifest this update: Thu 21 Aug 2025 15:46:14 +0000 Manifest next update: Mon 25 Aug 2025 02:33:14 +0000 Files and hashes: 1: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) 2: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) 3: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) 4: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) 5: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 6: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) 7: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: QcnqgSUOZGOCMNDBBVXPHlb57QddFyXPHTjQooXbYFU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:78:99:8a:aa:de:20:51:e2:50:24:69:1a:62:1d:39:28:51:40:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Aug 21 15:46:14 2025 GMT Not After : Aug 25 02:33:14 2025 GMT Subject: CN=36A480DD351B263BAECFA8A4E859F559B76265E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:40:82:9f:e5:dd:c8:95:fd:ad:cd:57:e3:27: ca:4c:51:e0:25:e9:6f:20:fd:6d:e0:39:93:8e:0b: 0d:ff:75:c4:da:a2:19:4b:63:ee:e8:bf:da:eb:d4: f4:7f:ae:07:14:16:39:cb:76:4e:2c:2b:28:c0:09: 49:5d:72:00:3d:d2:f4:13:71:bd:c9:2d:05:43:aa: ca:42:f5:9b:5a:2f:d2:6b:e5:46:d8:1d:85:d1:f1: 83:ea:c6:5d:45:c5:1c:07:3e:d7:10:2a:41:c1:70: 1e:a3:51:d6:25:2b:0c:19:21:47:14:4a:fc:9e:a0: 67:16:3e:86:95:93:65:05:ae:bd:ea:53:94:3e:2a: b7:5d:76:06:43:90:86:62:fc:8c:e1:74:c0:03:57: f0:af:2d:ee:20:b8:a1:60:1d:ac:e7:7b:7c:39:bc: ac:69:ba:30:8b:44:48:46:44:ac:23:4f:7c:db:4a: 67:29:7f:a1:c8:75:ee:29:dd:98:93:50:e5:0c:5d: ae:67:50:e3:d9:19:c9:90:e2:a3:a5:cc:0a:06:ca: e7:c3:56:a3:eb:ea:32:c6:eb:0f:d2:c2:08:15:19: f1:29:ad:1a:88:7e:0f:7d:4d:0f:e9:e1:17:f7:2c: 3b:2c:6a:81:fb:a6:86:fa:8c:bf:79:b6:05:9f:37: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A4:80:DD:35:1B:26:3B:AE:CF:A8:A4:E8:59:F5:59:B7:62:65:E3 X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:a5:ac:0a:0f:4c:11:ed:38:9c:d8:5f:60:dd:af:ed:77:77: b9:31:e5:95:33:7b:aa:03:90:49:f6:63:38:7b:e2:6f:f8:55: 6c:ca:20:ba:26:cf:e7:56:44:56:d5:5f:bb:50:43:c8:f6:16: 13:c6:6b:6e:a5:0e:79:b3:da:d9:a3:80:a9:e9:76:dc:7c:77: ba:24:1a:3c:7e:24:3e:49:de:a4:ec:03:b6:ef:39:82:d0:55: 3d:c4:70:52:de:64:fe:2f:95:ad:b5:1a:be:6f:ef:de:11:0b: 20:88:e1:16:65:6f:e2:5b:a1:ec:1a:5c:f2:74:0e:04:5d:4e: a8:f8:a6:b8:d6:3d:eb:e7:7a:a5:60:ea:91:ce:12:d1:3a:ba: cf:82:4c:74:27:1d:3d:52:56:f7:71:0a:20:2f:b1:cf:68:d8: d5:45:93:7b:de:86:d3:e4:0f:9d:30:3e:48:2d:9e:c6:9c:41: fe:1c:29:04:58:57:9a:99:0d:08:40:31:ce:34:a1:9b:5c:24: 20:f3:2d:ff:40:93:a2:4e:56:16:53:11:d6:be:a0:c9:65:64: 26:9e:e2:e4:1a:6d:bc:e9:f0:cc:4c:aa:ad:31:e2:16:97:73: 95:9b:9e:4c:f2:d5:bd:74:3c:46:73:9d:9d:74:34:f5:4c:62: 51:51:40:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBniZiqreIFHiUCRpGmIdOShRQAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNTA4MjExNTQ2MTRaFw0yNTA4MjUwMjMzMTRaMDMxMTAvBgNV BAMTKDM2QTQ4MEREMzUxQjI2M0JBRUNGQThBNEU4NTlGNTU5Qjc2MjY1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQIKf5d3Ilf2tzVfjJ8pMUeAl 6W8g/W3gOZOOCw3/dcTaohlLY+7ov9rr1PR/rgcUFjnLdk4sKyjACUldcgA90vQT cb3JLQVDqspC9ZtaL9Jr5UbYHYXR8YPqxl1FxRwHPtcQKkHBcB6jUdYlKwwZIUcU SvyeoGcWPoaVk2UFrr3qU5Q+KrdddgZDkIZi/IzhdMADV/CvLe4guKFgHazne3w5 vKxpujCLREhGRKwjT3zbSmcpf6HIde4p3ZiTUOUMXa5nUOPZGcmQ4qOlzAoGyufD VqPr6jLG6w/SwggVGfEprRqIfg99TQ/p4Rf3LDssaoH7pob6jL95tgWfNxD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNqSA3TUbJjuuz6ik6Fn1WbdiZeMwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKlrAoPTBHtOJzYX2Ddr+13d7kx5ZUze6oD kEn2Yzh74m/4VWzKILomz+dWRFbVX7tQQ8j2FhPGa26lDnmz2tmjgKnpdtx8d7ok Gjx+JD5J3qTsA7bvOYLQVT3EcFLeZP4vla21Gr5v794RCyCI4RZlb+JboewaXPJ0 DgRdTqj4prjWPevneqVg6pHOEtE6us+CTHQnHT1SVvdxCiAvsc9o2NVFk3vehtPk D50wPkgtnsacQf4cKQRYV5qZDQhAMc40oZtcJCDzLf9Ak6JOVhZTEda+oMllZCae 4uQabbzp8MxMqq0x4haXc5Wbnkzy1b10PEZznZ10NPVMYlFRQDw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:28:22 2025 by rpki-client