$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: QjtBJldW9ep/ue36G+EbXwAiDetbmaTpdCE26PlBZ4w= Subject key identifier: DC:69:BD:50:D5:1B:A4:F2:A6:2C:B1:72:89:A6:3D:15:25:3B:85:9B Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 0DA2B35EC491483455A925390753CED09B84E1D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 020E Signing time: Sun 29 Jun 2025 04:30:46 +0000 Manifest this update: Sun 29 Jun 2025 04:25:46 +0000 Manifest next update: Wed 02 Jul 2025 10:04:46 +0000 Files and hashes: 1: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: PJJflVEuAqU1x1bzzs4n8zhyBWNQ4TBM8yQ5wwBc+Y8=) 2: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: j0lcRKDX7Zai080pL+d3IVmhJOqrL+V2aEhEgUdciuo=) 3: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: U0QRQNV91v3FmD+TpWoFwcY8xNRf8X7GQ1dFmzmNPo0=) 4: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: pLboy3es15Aee5R8ozV3T/lLrbC6yjQ2R9cCybdnsq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 10:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a2:b3:5e:c4:91:48:34:55:a9:25:39:07:53:ce:d0:9b:84:e1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Jun 29 04:25:46 2025 GMT Not After : Jul 2 10:04:46 2025 GMT Subject: CN=DC69BD50D51BA4F2A62CB17289A63D15253B859B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:41:60:e1:8a:f7:a4:50:51:96:2f:19:ab:6d: c3:8b:aa:1e:0a:2f:7e:79:f3:a1:0f:7a:f1:22:07: e9:49:1e:79:26:7a:27:36:55:73:a2:21:87:f7:0b: a6:cf:25:45:bc:2a:02:32:74:a1:12:8f:94:d8:43: 22:58:f6:ed:27:23:86:97:58:38:e4:d3:4e:89:08: 78:37:1f:b8:94:50:e0:58:2e:01:91:a8:29:8c:a4: b5:bb:1d:88:fe:c7:4f:f6:49:09:dc:2c:f5:e4:9c: 7f:01:8f:c3:d0:03:2e:50:fd:c9:88:d4:2e:15:c3: ea:d9:80:ea:8d:3d:6b:0d:fe:c3:04:5b:08:48:ad: 62:b9:d8:d5:ad:40:6e:29:f0:c4:b1:3f:46:be:dd: 08:76:4e:fe:38:2e:04:d4:a2:df:56:19:f8:7e:21: 9c:77:a3:ef:cf:a1:98:58:78:30:9c:11:ae:34:1e: 9c:97:24:0a:e9:ac:36:97:70:ba:73:30:fd:e2:1f: 64:e4:bf:19:20:43:4b:2e:24:e4:89:11:4f:f4:32: 3d:78:81:b9:bf:89:c2:fb:c3:a4:b0:fd:29:f7:07: f4:50:99:1c:30:97:db:d4:92:5d:0d:22:ca:78:89: 91:80:e5:7b:29:e5:a4:79:a9:87:c9:1d:c5:37:55: 23:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:69:BD:50:D5:1B:A4:F2:A6:2C:B1:72:89:A6:3D:15:25:3B:85:9B X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9e:60:7a:e3:96:c3:7b:bd:55:39:1d:f1:b8:e1:f1:dc:60: 21:f0:03:17:17:8f:44:cc:08:20:31:b0:83:4d:b1:45:39:ce: f6:7f:b1:ef:14:55:ab:fe:bd:c7:18:0b:e6:eb:f3:29:37:a2: 13:ce:dd:26:c3:11:a7:81:21:0b:f7:dc:e3:25:c5:98:ec:06: 73:60:04:7e:ae:7b:81:a8:0f:f4:d6:54:3d:68:85:4b:b7:7d: 39:99:cf:d7:5e:8e:0b:67:eb:1f:7c:8e:6c:e0:38:c4:6b:df: d6:50:7c:4d:f2:54:86:b8:f2:de:1d:16:5c:bf:f6:b8:0a:cd: 75:d0:4e:eb:92:35:e6:59:fa:78:08:44:47:3c:74:92:9a:4c: 9b:31:54:f3:2c:ce:60:6f:3a:8d:ab:2a:69:03:3c:3e:f4:0d: e9:08:12:a1:84:cd:6b:cf:3f:73:9a:26:7c:e2:61:93:73:08: 72:a6:ab:dc:12:40:d9:6c:68:7b:5b:81:6e:cc:22:82:f6:00: 1b:ac:66:67:58:12:2e:89:30:e2:a4:fd:e8:81:cd:25:80:21: ac:20:38:01:9a:ce:42:dc:cb:d2:15:46:d0:01:95:df:de:ce: 70:50:b1:56:05:30:86:99:71:da:ee:32:c5:51:3e:73:4e:b4: b0:89:e0:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDaKzXsSRSDRVqSU5B1PO0JuE4dIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNTA2MjkwNDI1NDZaFw0yNTA3MDIxMDA0NDZaMDMxMTAvBgNV BAMTKERDNjlCRDUwRDUxQkE0RjJBNjJDQjE3Mjg5QTYzRDE1MjUzQjg1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3QWDhivekUFGWLxmrbcOLqh4K L35586EPevEiB+lJHnkmeic2VXOiIYf3C6bPJUW8KgIydKESj5TYQyJY9u0nI4aX WDjk006JCHg3H7iUUOBYLgGRqCmMpLW7HYj+x0/2SQncLPXknH8Bj8PQAy5Q/cmI 1C4Vw+rZgOqNPWsN/sMEWwhIrWK52NWtQG4p8MSxP0a+3Qh2Tv44LgTUot9WGfh+ IZx3o+/PoZhYeDCcEa40HpyXJArprDaXcLpzMP3iH2TkvxkgQ0suJOSJEU/0Mj14 gbm/icL7w6Sw/Sn3B/RQmRwwl9vUkl0NIsp4iZGA5Xsp5aR5qYfJHcU3VSMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Gm9UNUbpPKmLLFyiaY9FSU7hZswHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeeYHrjlsN7vVU5HfG44fHcYCHwAxcXj0TM CCAxsINNsUU5zvZ/se8UVav+vccYC+br8yk3ohPO3SbDEaeBIQv33OMlxZjsBnNg BH6ue4GoD/TWVD1ohUu3fTmZz9dejgtn6x98jmzgOMRr39ZQfE3yVIa48t4dFly/ 9rgKzXXQTuuSNeZZ+ngIREc8dJKaTJsxVPMszmBvOo2rKmkDPD70DekIEqGEzWvP P3OaJnziYZNzCHKmq9wSQNlsaHtbgW7MIoL2ABusZmdYEi6JMOKk/eiBzSWAIawg OAGazkLcy9IVRtABld/eznBQsVYFMIaZcdruMsVRPnNOtLCJ4NA= -----END CERTIFICATE-----Generated at Mon Jun 30 08:50:45 2025 by rpki-client