$ rpki-client -vvf repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft File: D51CE7B1B9196EF73BFF65318453095C925ECF91.mft (raw, json) Hash identifier: okcR7hakp30wosCxf+dvjAcz2jpd2YD04fO0Re+Ein4= Subject key identifier: 96:B4:88:84:D4:FC:8D:DD:3B:45:0E:DA:EF:BA:37:11:9D:2A:19:F8 Authority key identifier: D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 Certificate issuer: /CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Certificate serial: 4BBF2727423C1592F86B178F39096E94EB420840 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft Manifest number: 04C7 Signing time: Thu 21 Aug 2025 20:11:23 +0000 Manifest this update: Thu 21 Aug 2025 20:06:23 +0000 Manifest next update: Mon 25 Aug 2025 04:22:23 +0000 Files and hashes: 1: 3130332e3134362e3132382e302f32332d3233203d3e20313430303238.roa (hash: yKK3Hq8hEk1LGbPgkhx2NEZ4T23a1BRrLBg1d7QrEfc=) 2: D51CE7B1B9196EF73BFF65318453095C925ECF91.crl (hash: hOFXXklvsuJxf8X6cv3Hu1bTcOetLMYSILPHo0sC9vU=) 3: 3130332e3134362e3132392e302f32342d3234203d3e20313430303238.roa (hash: 1Ph7pIbfyLL/MFd5kaSHsFP+/qk1l1ex5P/+8l18KxM=) 4: 3130332e3134362e3132382e302f32342d3234203d3e20313430303238.roa (hash: gicJjzX38cvUlj+q/M4Y/XP1+pLgazBAyQOFz8mgKiM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bf:27:27:42:3c:15:92:f8:6b:17:8f:39:09:6e:94:eb:42:08:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D51CE7B1B9196EF73BFF65318453095C925ECF91 Validity Not Before: Aug 21 20:06:23 2025 GMT Not After : Aug 25 04:22:23 2025 GMT Subject: CN=96B48884D4FC8DDD3B450EDAEFBA37119D2A19F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:67:68:5f:a3:0e:63:92:60:a5:15:d6:c7:3b: 87:40:f3:27:e8:79:84:3d:2d:c3:5c:ba:3e:5f:ab: 5e:ab:e3:db:1a:ac:55:8b:5d:7a:64:0d:47:83:af: 60:4a:9d:00:83:5e:9b:b5:a7:f9:0b:c4:c3:f3:19: 94:87:cf:2a:03:95:c8:e1:3f:a9:ef:e6:c4:35:f0: 29:65:81:c4:4a:a3:58:37:3c:cd:26:01:57:76:e4: 40:d4:7c:6d:d5:3b:17:89:2b:a9:13:de:83:55:32: 94:77:39:19:3a:70:e5:ee:f6:76:78:22:d3:5e:23: a7:2a:b2:eb:e8:db:ce:27:b1:fb:c6:3b:37:78:fa: 59:a4:9d:19:94:72:75:40:de:01:d7:21:03:67:46: ae:50:ca:85:d5:16:b6:f0:6a:5e:ec:b4:1e:49:7a: ad:10:e7:ba:f0:e3:50:d3:ff:c1:b5:22:76:dd:01: 2a:8b:1e:db:85:86:0f:f2:ab:23:33:12:9d:b9:87: 4d:44:09:d6:f6:c2:f0:46:98:97:53:8e:ac:a5:cd: 12:bb:65:f2:a2:2f:56:21:3c:08:0c:ee:f1:76:ee: d2:fb:39:fb:4e:99:5f:dc:4d:1e:f6:8d:ac:6d:e9: 30:d4:86:d8:40:73:4b:46:6f:9d:5b:4e:12:01:4c: 8d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:88:84:D4:FC:8D:DD:3B:45:0E:DA:EF:BA:37:11:9D:2A:19:F8 X509v3 Authority Key Identifier: keyid:D5:1C:E7:B1:B9:19:6E:F7:3B:FF:65:31:84:53:09:5C:92:5E:CF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D51CE7B1B9196EF73BFF65318453095C925ECF91.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b42aa0a9-4588-4f87-ab89-f3b9dc6107b6/0/D51CE7B1B9196EF73BFF65318453095C925ECF91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d8:69:6d:1e:fd:ea:d2:4c:52:3a:3e:9b:37:ae:8b:32:92: e0:cc:e6:63:5b:6b:55:d9:3f:b8:6a:41:6c:15:ab:20:a9:c4: 3c:83:a2:dc:1a:3d:59:7d:76:72:da:08:16:38:fe:99:ba:35: 86:fc:a2:d1:ec:80:90:b2:d0:c0:83:a2:6d:dd:50:da:0c:4a: 4f:f1:2b:67:c3:24:f3:82:5e:f8:e6:82:dd:50:14:0e:53:66: ec:c3:c3:01:7a:b3:8f:93:36:61:52:19:d2:91:8e:38:66:30: 17:2d:38:22:ee:38:9a:77:32:24:00:64:cd:a7:2c:22:6f:cf: 4b:ce:bb:14:c3:dd:23:27:a9:78:88:0e:88:7a:13:e2:df:72: fe:d9:5f:0e:06:d9:f8:33:99:6e:0f:4c:4f:3b:cd:1c:5a:5d: a7:7c:fa:49:40:e4:84:68:d8:c5:58:a5:b3:9e:c1:14:6d:60: 21:0c:b3:82:39:78:e3:36:c0:82:d1:5d:c5:2e:20:51:cb:92: b4:88:63:b6:21:04:2c:dc:11:c8:7c:2f:72:91:d6:1d:87:9f: ef:cc:94:1a:9f:8d:25:55:bd:d8:53:1e:11:6f:6c:51:63:b3: a0:27:71:26:2c:2d:c5:6e:f4:98:c7:c1:d7:ca:34:ca:5a:0e: b8:ac:09:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS78nJ0I8FZL4axePOQlulOtCCEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5 MjVFQ0Y5MTAeFw0yNTA4MjEyMDA2MjNaFw0yNTA4MjUwNDIyMjNaMDMxMTAvBgNV BAMTKDk2QjQ4ODg0RDRGQzhEREQzQjQ1MEVEQUVGQkEzNzExOUQyQTE5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSZ2hfow5jkmClFdbHO4dA8yfo eYQ9LcNcuj5fq16r49sarFWLXXpkDUeDr2BKnQCDXpu1p/kLxMPzGZSHzyoDlcjh P6nv5sQ18CllgcRKo1g3PM0mAVd25EDUfG3VOxeJK6kT3oNVMpR3ORk6cOXu9nZ4 ItNeI6cqsuvo284nsfvGOzd4+lmknRmUcnVA3gHXIQNnRq5QyoXVFrbwal7stB5J eq0Q57rw41DT/8G1InbdASqLHtuFhg/yqyMzEp25h01ECdb2wvBGmJdTjqylzRK7 ZfKiL1YhPAgM7vF27tL7OftOmV/cTR72jaxt6TDUhthAc0tGb51bThIBTI05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlrSIhNT8jd07RQ7a77o3EZ0qGfgwHwYDVR0j BBgwFoAU1RznsbkZbvc7/2UxhFMJXJJez5EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDJhYTBhOS00NTg4LTRmODctYWI4OS1mM2I5ZGM2MTA3YjYvMC9ENTFDRTdCMUI5 MTk2RUY3M0JGRjY1MzE4NDUzMDk1QzkyNUVDRjkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5NUM5MjVF Q0Y5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQyYWEwYTktNDU4OC00Zjg3LWFi ODktZjNiOWRjNjEwN2I2LzAvRDUxQ0U3QjFCOTE5NkVGNzNCRkY2NTMxODQ1MzA5 NUM5MjVFQ0Y5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDYaW0e/erSTFI6Pps3rosykuDM5mNba1XZ P7hqQWwVqyCpxDyDotwaPVl9dnLaCBY4/pm6NYb8otHsgJCy0MCDom3dUNoMSk/x K2fDJPOCXvjmgt1QFA5TZuzDwwF6s4+TNmFSGdKRjjhmMBctOCLuOJp3MiQAZM2n LCJvz0vOuxTD3SMnqXiIDoh6E+Lfcv7ZXw4G2fgzmW4PTE87zRxaXad8+klA5IRo 2MVYpbOewRRtYCEMs4I5eOM2wILRXcUuIFHLkrSIY7YhBCzcEch8L3KR1h2Hn+/M lBqfjSVVvdhTHhFvbFFjs6AncSYsLcVu9JjHwdfKNMpaDrisCXY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:27 2025 by rpki-client