$ rpki-client -vvf repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft File: 516450A151C5487FCC5911F4C18941CA895B07A5.mft (raw, json) Hash identifier: Kt19DTv7G+i6xTMeSkDHmsZOsFjFHbYeGD8mB5Rz4IU= Subject key identifier: 20:39:75:43:7A:59:6F:0D:52:F3:BD:E7:4B:CF:2D:F1:56:C6:DA:44 Authority key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Certificate issuer: /CN=516450A151C5487FCC5911F4C18941CA895B07A5 Certificate serial: 2BA159FBCADF4712CA2F5B3F0A17C0425450A88E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft Manifest number: 02FD Signing time: Fri 22 Aug 2025 11:40:54 +0000 Manifest this update: Fri 22 Aug 2025 11:35:54 +0000 Manifest next update: Mon 25 Aug 2025 18:15:54 +0000 Files and hashes: 1: 3130332e3134342e31382e302f32342d3234203d3e20313339343138.roa (hash: +9l9/c1oHNd6x+rotlaCAqAorgvfQYB/2M8mOFajTwg=) 2: 516450A151C5487FCC5911F4C18941CA895B07A5.crl (hash: W34BFb1aV4RAXx8HjQsOzPUKLNjiru/VNK57VX7FuUw=) 3: 3130332e3134342e31392e302f32342d3234203d3e20313339343138.roa (hash: NPTNkAFeiU4perz1lh+B9xb1IjABewQG5b/Cldme2U8=) 4: 323430353a363263303a3a2f33322d3332203d3e20313339343138.roa (hash: iQrfW4vm6eczOWBsSobvUfreWvjyzuZNC1OGl7c8Sx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a1:59:fb:ca:df:47:12:ca:2f:5b:3f:0a:17:c0:42:54:50:a8:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Validity Not Before: Aug 22 11:35:54 2025 GMT Not After : Aug 25 18:15:54 2025 GMT Subject: CN=203975437A596F0D52F3BDE74BCF2DF156C6DA44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:46:15:00:29:54:bb:94:fb:cb:a2:b0:7f: 57:dd:06:67:5d:ef:66:92:3d:bd:96:04:3c:f0:4c: ef:b9:db:c4:89:64:c1:e2:2d:0c:86:44:66:36:78: 0b:c3:e2:71:62:73:9f:0d:c5:bf:90:65:27:b5:c8: 83:02:9a:f0:d2:5c:0b:47:09:1c:67:20:5b:3a:58: df:f6:f4:16:f7:05:78:c5:17:d1:1c:40:cb:b4:83: 0a:8a:79:93:84:f2:eb:a8:6f:99:c3:91:b4:70:69: 6b:30:ea:3b:db:dd:4c:5f:0d:64:bd:46:8f:4b:fb: e0:73:0e:e8:46:c1:ff:13:7f:c5:f3:1d:a1:4b:b3: fc:d7:ef:2d:73:22:21:3a:fe:1a:63:07:25:9b:7e: 80:bb:b8:17:2e:10:61:0f:23:62:93:1d:30:82:86: 87:7b:34:43:de:99:06:ae:da:89:8f:c9:be:5d:6c: ef:e5:47:00:fd:e3:eb:0e:ca:09:f9:32:fe:2d:03: 59:13:24:b7:8e:37:29:d7:bb:75:e8:65:99:86:c4: 34:e1:6d:5b:30:e1:9b:78:76:07:54:7c:d2:c8:21: 0a:4e:06:81:d8:ba:aa:39:7e:eb:a8:d1:fe:cf:f8: c1:ed:97:d0:f8:2a:e5:cf:41:1f:bb:fa:f9:39:e0: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:75:43:7A:59:6F:0D:52:F3:BD:E7:4B:CF:2D:F1:56:C6:DA:44 X509v3 Authority Key Identifier: keyid:51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:24:ca:a2:87:01:15:3f:06:f9:4a:1d:37:17:3c:d2:c0:86: 07:88:f8:27:f3:d3:20:bb:fa:28:9e:bb:f2:05:44:bc:e8:ee: 6b:f0:ad:89:0c:d7:06:38:ef:86:52:1e:6b:1a:f7:9e:ff:52: d1:e7:a7:d6:49:66:5c:4a:60:21:a7:27:c8:29:eb:3e:ea:29: 03:9d:e8:c1:4f:92:2d:89:94:33:22:63:2b:1f:bc:68:43:f4: 17:45:71:cc:c6:9f:d5:e6:b1:6e:33:59:4a:0c:17:0b:5b:a7: 64:1d:cd:f4:c5:a4:f6:00:ae:3d:8a:80:37:2d:be:77:c9:df: a6:a4:a2:1e:a5:74:db:62:ad:49:9e:21:14:ae:e9:c4:1a:f0: 51:01:2b:cd:d0:07:ed:f6:e1:ef:b2:9b:cf:68:d7:d7:d9:6c: b3:fa:1a:41:f4:f2:6e:dd:fb:14:da:e5:70:87:82:0c:c7:a3: 52:64:46:d0:05:65:61:b0:a2:a5:cd:cf:dd:4b:21:51:6f:5b: c2:05:87:27:57:35:7e:0c:cc:cd:3a:bd:1c:85:09:ac:aa:b4: 5e:7b:54:2d:cc:40:f2:d4:1b:12:12:48:6b:e6:b6:2f:3d:2e: 02:be:09:7f:2d:3d:ab:06:db:a5:51:f0:eb:ca:07:29:6c:64: 37:2a:f4:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK6FZ+8rfRxLKL1s/ChfAQlRQqI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4 OTVCMDdBNTAeFw0yNTA4MjIxMTM1NTRaFw0yNTA4MjUxODE1NTRaMDMxMTAvBgNV BAMTKDIwMzk3NTQzN0E1OTZGMEQ1MkYzQkRFNzRCQ0YyREYxNTZDNkRBNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVEYVAClUu5T7y6Kwf1fdBmdd 72aSPb2WBDzwTO+528SJZMHiLQyGRGY2eAvD4nFic58Nxb+QZSe1yIMCmvDSXAtH CRxnIFs6WN/29Bb3BXjFF9EcQMu0gwqKeZOE8uuob5nDkbRwaWsw6jvb3UxfDWS9 Ro9L++BzDuhGwf8Tf8XzHaFLs/zX7y1zIiE6/hpjByWbfoC7uBcuEGEPI2KTHTCC hod7NEPemQau2omPyb5dbO/lRwD94+sOygn5Mv4tA1kTJLeONynXu3XoZZmGxDTh bVsw4Zt4dgdUfNLIIQpOBoHYuqo5fuuo0f7P+MHtl9D4KuXPQR+7+vk54PpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIDl1Q3pZbw1S873nS88t8VbG2kQwHwYDVR0j BBgwFoAUUWRQoVHFSH/MWRH0wYlByolbB6UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMC81MTY0NTBBMTUx QzU0ODdGQ0M1OTExRjRDMTg5NDFDQTg5NUIwN0E1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQxQ0E4OTVC MDdBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ1OThlOTktZTlmZi00YWJlLWIw OGUtMjI2ZmRkMDdmOWFlLzAvNTE2NDUwQTE1MUM1NDg3RkNDNTkxMUY0QzE4OTQx Q0E4OTVCMDdBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMkyqKHARU/BvlKHTcXPNLAhgeI+Cfz0yC7 +iieu/IFRLzo7mvwrYkM1wY474ZSHmsa957/UtHnp9ZJZlxKYCGnJ8gp6z7qKQOd 6MFPki2JlDMiYysfvGhD9BdFcczGn9XmsW4zWUoMFwtbp2QdzfTFpPYArj2KgDct vnfJ36akoh6ldNtirUmeIRSu6cQa8FEBK83QB+324e+ym89o19fZbLP6GkH08m7d +xTa5XCHggzHo1JkRtAFZWGwoqXNz91LIVFvW8IFhydXNX4MzM06vRyFCayqtF57 VC3MQPLUGxISSGvmti89LgK+CX8tPasG26VR8OvKBylsZDcq9D4= -----END CERTIFICATE-----Generated at Sat Aug 23 21:24:06 2025 by rpki-client