$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: tGIX+XWLbNJtZLM+qRTh+c7cTCbfLeVefTChYACmsP0= Subject key identifier: 6D:F5:E1:1E:14:DB:7E:2B:63:C6:E6:69:FF:8C:BE:3D:0F:64:5A:2E Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 36F830C6AFA2D6B0B35E1E507065B1400AE6FA35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 0497 Signing time: Sat 10 May 2025 08:01:13 +0000 Manifest this update: Sat 10 May 2025 07:56:13 +0000 Manifest next update: Tue 13 May 2025 08:31:13 +0000 Files and hashes: 1: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 77mfnCgSnucw48UKGT/imJpoab+aR/Q7MW67xLB0DdM=) 2: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: H7BEahDneGf77WQSWH4rsFkUpmm1+lSZgeUEK5CdIQw=) 3: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: WZ4shpL3C8pc0Q1RN+DNNZqdwp4SqV96kPD82gjGY24=) 4: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: c3P2M0VXOcWc/kMqDxRrBxNZgSYKuvObUT8WGdbC1Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f8:30:c6:af:a2:d6:b0:b3:5e:1e:50:70:65:b1:40:0a:e6:fa:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: May 10 07:56:13 2025 GMT Not After : May 13 08:31:13 2025 GMT Subject: CN=6DF5E11E14DB7E2B63C6E669FF8CBE3D0F645A2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6b:f4:d7:c2:8b:e0:90:27:0d:c0:84:db:9a: 99:7e:62:82:5c:84:e8:f3:e3:3f:88:a5:43:21:a6: ae:9c:44:c4:72:f7:96:db:fc:64:c4:a6:f3:db:46: b1:4c:4c:d5:3f:00:9e:88:e3:d8:bd:77:54:fe:cb: 13:53:8f:a0:27:39:84:a5:14:da:c8:8e:b0:13:99: 1f:03:11:e6:15:2d:85:8d:c6:71:d9:ec:6d:ff:a3: 21:1e:95:b1:d7:06:36:0a:15:de:74:50:7b:ef:a2: c6:84:09:51:c7:56:27:aa:8e:a5:3e:8b:d5:0d:21: f9:82:7f:da:43:cf:c1:5c:e7:c9:22:27:0f:e8:f0: 58:ca:5a:b9:e0:c4:f3:97:2c:40:3e:e4:3a:90:5a: c3:8b:db:31:68:21:65:88:ce:0a:df:10:3c:68:73: be:2e:61:9d:fe:f1:02:ee:7f:cd:f4:4e:0d:f3:e7: 52:71:95:c9:fb:4f:5c:70:f3:ac:87:eb:37:fe:48: e8:f8:52:34:5a:cb:22:8b:13:66:03:ac:c1:0e:ab: 97:62:a1:67:54:fe:55:7e:6c:bf:3e:95:08:9a:5c: 8d:35:7f:97:69:ce:ec:bf:d8:5c:27:64:c4:dd:ee: e9:fe:a2:4b:1b:4f:6e:12:96:0f:e5:04:57:be:e8: 8c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F5:E1:1E:14:DB:7E:2B:63:C6:E6:69:FF:8C:BE:3D:0F:64:5A:2E X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:15:4b:9d:ce:bf:cb:7c:d9:8a:42:a2:f0:e3:7d:c0:c5:2c: 98:96:db:70:fa:e9:c4:54:af:d7:c5:7d:bf:3c:63:b6:0c:ff: 00:9a:76:9a:00:f9:5e:0f:a5:a5:c0:c1:47:7b:96:1c:03:c7: 37:51:6e:5f:6e:5f:42:5d:f9:34:5a:07:37:99:f0:92:d8:04: bf:c0:fa:b8:61:16:43:41:46:59:79:1c:a8:a2:05:85:6b:8d: bc:60:d8:c3:ba:e5:0c:a2:43:08:4e:85:3b:e6:61:25:e7:5c: 37:08:7a:22:eb:49:27:c7:43:d0:3f:28:8b:27:c8:73:47:2c: 55:ae:6a:53:5c:bf:d0:12:45:a0:be:4d:13:31:62:ca:53:9f: 93:64:1b:b6:74:76:41:15:d3:d0:35:b4:00:70:f5:89:74:69: fd:31:ff:03:fc:d9:9b:70:9d:5b:96:ed:9a:a5:07:e3:6d:d4: a4:8b:1a:26:44:79:c0:a0:33:55:2f:f3:65:97:54:8e:a7:32: 78:b6:3c:d1:86:46:b7:80:ef:cf:99:6e:75:c2:87:89:44:92: 11:9b:1a:f6:65:48:11:7e:34:a8:b2:1e:4c:91:e6:bb:54:a9: ff:05:58:9a:f6:a8:d9:60:27:3a:6b:30:aa:c5:c1:07:af:25: a6:2f:3f:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvgwxq+i1rCzXh5QcGWxQArm+jUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTA1MTAwNzU2MTNaFw0yNTA1MTMwODMxMTNaMDMxMTAvBgNV BAMTKDZERjVFMTFFMTREQjdFMkI2M0M2RTY2OUZGOENCRTNEMEY2NDVBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfa/TXwovgkCcNwITbmpl+YoJc hOjz4z+IpUMhpq6cRMRy95bb/GTEpvPbRrFMTNU/AJ6I49i9d1T+yxNTj6AnOYSl FNrIjrATmR8DEeYVLYWNxnHZ7G3/oyEelbHXBjYKFd50UHvvosaECVHHVieqjqU+ i9UNIfmCf9pDz8Fc58kiJw/o8FjKWrngxPOXLEA+5DqQWsOL2zFoIWWIzgrfEDxo c74uYZ3+8QLuf830Tg3z51Jxlcn7T1xw86yH6zf+SOj4UjRayyKLE2YDrMEOq5di oWdU/lV+bL8+lQiaXI01f5dpzuy/2FwnZMTd7un+oksbT24Slg/lBFe+6IxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbfXhHhTbfitjxuZp/4y+PQ9kWi4wHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkVS53Ov8t82YpCovDjfcDFLJiW23D66cRU r9fFfb88Y7YM/wCadpoA+V4PpaXAwUd7lhwDxzdRbl9uX0Jd+TRaBzeZ8JLYBL/A +rhhFkNBRll5HKiiBYVrjbxg2MO65QyiQwhOhTvmYSXnXDcIeiLrSSfHQ9A/KIsn yHNHLFWualNcv9ASRaC+TRMxYspTn5NkG7Z0dkEV09A1tABw9Yl0af0x/wP82Ztw nVuW7ZqlB+Nt1KSLGiZEecCgM1Uv82WXVI6nMni2PNGGRreA78+ZbnXCh4lEkhGb GvZlSBF+NKiyHkyR5rtUqf8FWJr2qNlgJzprMKrFwQevJaYvP+8= -----END CERTIFICATE-----Generated at Sat May 10 19:36:54 2025 by rpki-client