$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: o9mLkb6kLHn7AM/OC99qwEkm5twG83os3zcoIFi5aY8= Subject key identifier: C2:8A:D6:4F:67:9C:80:75:F1:73:30:FA:3A:20:F4:00:70:E8:05:52 Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 63D070339488400B0548697CCFC7C28EA153C656 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 04AD Signing time: Sat 28 Jun 2025 21:31:13 +0000 Manifest this update: Sat 28 Jun 2025 21:26:13 +0000 Manifest next update: Wed 02 Jul 2025 04:55:13 +0000 Files and hashes: 1: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: WZ4shpL3C8pc0Q1RN+DNNZqdwp4SqV96kPD82gjGY24=) 2: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: 77mfnCgSnucw48UKGT/imJpoab+aR/Q7MW67xLB0DdM=) 3: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: ZvJm68x8KupeKXnqWUJxhFrPPczx76J+RbOh87aBAJM=) 4: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: c3P2M0VXOcWc/kMqDxRrBxNZgSYKuvObUT8WGdbC1Pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d0:70:33:94:88:40:0b:05:48:69:7c:cf:c7:c2:8e:a1:53:c6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Jun 28 21:26:13 2025 GMT Not After : Jul 2 04:55:13 2025 GMT Subject: CN=C28AD64F679C8075F17330FA3A20F40070E80552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:53:f9:1b:bd:79:75:b9:70:e3:22:80:ef:b0: 63:6f:14:fe:b3:ac:13:a5:09:2f:6d:c9:b0:31:be: 4b:1f:38:0e:78:80:84:d2:68:5f:5d:54:d8:99:83: 00:06:56:08:fe:21:cd:bc:84:ab:43:09:db:c4:d4: 43:f3:d1:8b:67:aa:a9:2a:bc:62:fd:b0:6e:bb:34: 8e:ac:ea:1c:01:1f:99:b2:31:fb:1e:92:ef:90:2e: f6:c0:01:ae:d0:98:4e:03:de:f0:2b:73:9a:8f:94: a4:4c:15:f6:51:de:8d:47:1c:ac:95:fd:1a:0a:97: 90:f2:0d:14:df:90:f9:24:54:a5:a4:0c:54:47:b4: 3d:47:ca:fb:53:15:fe:8b:f7:82:3a:b4:00:2c:50: b4:56:61:8e:0b:6f:30:63:00:a1:36:44:61:4c:56: 9c:9c:20:7e:21:6a:5e:c2:fd:c4:c6:11:e7:34:ff: 10:07:f2:df:20:a9:d9:ac:6b:6e:58:3b:a7:1f:17: c7:8c:f2:65:31:40:e7:bd:d4:ba:c1:58:2f:fb:34: df:54:4c:54:cc:66:0b:c5:63:01:07:45:a6:7b:8b: 07:be:55:d7:24:d2:82:b8:27:d0:9c:ec:55:36:7f: 93:74:27:e3:08:da:5a:84:0e:a3:d9:7b:47:7b:b3: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8A:D6:4F:67:9C:80:75:F1:73:30:FA:3A:20:F4:00:70:E8:05:52 X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c2:0e:a5:47:3e:b6:d6:f1:de:2e:3a:13:58:ce:63:5e:aa: dc:05:01:b7:2a:b9:1e:1a:26:93:ab:9a:45:aa:04:2b:9c:25: 02:81:01:30:67:3e:e8:3b:5f:10:04:93:34:98:9b:59:cc:04: 99:df:55:d5:18:63:2b:29:45:d9:5d:fa:98:c3:06:65:bd:dc: b4:9f:ef:84:10:cf:7e:d5:f2:40:72:2d:95:64:4a:01:c1:5a: 2b:4f:77:f9:2b:cc:af:a2:5d:57:52:fe:96:8d:5a:1d:a3:98: 9c:28:c6:56:9a:af:57:ed:c9:2d:3c:59:b7:a2:82:4c:26:9f: ce:04:05:21:c2:bb:54:b8:ac:70:9c:5d:db:e3:9b:2a:99:6f: 41:fd:36:5b:04:6b:72:3a:99:28:3d:ae:28:68:fb:39:74:c9: 5f:45:65:21:82:d2:8a:4b:07:2b:b9:5e:dc:84:c1:41:e9:2c: 7a:8f:a3:61:28:7a:9d:e6:5c:69:6d:ea:64:45:1f:61:4e:62: 1f:bc:55:54:fd:49:3a:1d:d5:25:c7:8b:c2:12:4f:80:d2:f2: 55:fa:e2:4f:75:65:69:a1:48:60:df:e4:25:d0:1f:af:b0:f4: b3:68:b0:79:be:c4:3e:33:7d:67:39:ec:f3:06:08:b2:a7:dd: 29:c4:cf:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9BwM5SIQAsFSGl8z8fCjqFTxlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTA2MjgyMTI2MTNaFw0yNTA3MDIwNDU1MTNaMDMxMTAvBgNV BAMTKEMyOEFENjRGNjc5QzgwNzVGMTczMzBGQTNBMjBGNDAwNzBFODA1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrU/kbvXl1uXDjIoDvsGNvFP6z rBOlCS9tybAxvksfOA54gITSaF9dVNiZgwAGVgj+Ic28hKtDCdvE1EPz0Ytnqqkq vGL9sG67NI6s6hwBH5myMfseku+QLvbAAa7QmE4D3vArc5qPlKRMFfZR3o1HHKyV /RoKl5DyDRTfkPkkVKWkDFRHtD1HyvtTFf6L94I6tAAsULRWYY4LbzBjAKE2RGFM VpycIH4hal7C/cTGEec0/xAH8t8gqdmsa25YO6cfF8eM8mUxQOe91LrBWC/7NN9U TFTMZgvFYwEHRaZ7iwe+Vdck0oK4J9Cc7FU2f5N0J+MI2lqEDqPZe0d7s0zBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUworWT2ecgHXxczD6OiD0AHDoBVIwHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzCDqVHPrbW8d4uOhNYzmNeqtwFAbcquR4a JpOrmkWqBCucJQKBATBnPug7XxAEkzSYm1nMBJnfVdUYYyspRdld+pjDBmW93LSf 74QQz37V8kByLZVkSgHBWitPd/krzK+iXVdS/paNWh2jmJwoxlaar1ftyS08Wbei gkwmn84EBSHCu1S4rHCcXdvjmyqZb0H9NlsEa3I6mSg9riho+zl0yV9FZSGC0opL Byu5XtyEwUHpLHqPo2Eoep3mXGlt6mRFH2FOYh+8VVT9STod1SXHi8IST4DS8lX6 4k91ZWmhSGDf5CXQH6+w9LNosHm+xD4zfWc57PMGCLKn3SnEz18= -----END CERTIFICATE-----Generated at Mon Jun 30 21:04:24 2025 by rpki-client