$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft File: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft (raw, json) Hash identifier: dkTPikXtNfpzxUp0n6RZLKAvB0oAMGepnenQuHBmLjo= Subject key identifier: 6A:79:F7:9E:D4:50:54:2C:D1:6F:E8:E0:B2:D2:3D:5A:FF:FF:B1:AC Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 Certificate issuer: /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Certificate serial: 188A52A361DC4972082CD4E5DCCD056974C76D36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft Manifest number: 0203 Signing time: Sat 18 Oct 2025 15:40:54 +0000 Manifest this update: Sat 18 Oct 2025 15:35:54 +0000 Manifest next update: Tue 21 Oct 2025 16:51:54 +0000 Files and hashes: 1: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl (hash: Ohz10ity51voIb4+673B+TXryjiLhwsrrgjqO47NjsQ=) 2: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: buLsY1iWxn5uAX/tlzA+XQSdGjGRQVTlyaSVt5UiGA8=) 3: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: wWf96mUt4wCBbqfalQK0TLTz6ApBKN5hLe7UYoC3TzQ=) 4: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: LKby0ViyWSUSxyx6by+Sa+3JQIcYE0HMocb+PoIEh0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8a:52:a3:61:dc:49:72:08:2c:d4:e5:dc:cd:05:69:74:c7:6d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Validity Not Before: Oct 18 15:35:54 2025 GMT Not After : Oct 21 16:51:54 2025 GMT Subject: CN=6A79F79ED450542CD16FE8E0B2D23D5AFFFFB1AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:4b:34:27:98:e7:82:5d:2b:02:2b:4f:21: 8d:25:77:3d:b5:13:b5:77:10:2b:39:e6:b6:75:20: 44:d4:b7:58:7a:0a:ab:cc:6e:de:c4:d7:69:9d:fa: 2a:d2:40:97:e5:c9:fe:96:7f:8b:7f:86:32:4f:40: 6e:42:8b:41:c4:50:59:1b:64:ff:7b:d1:a6:71:58: d5:09:b2:2d:b1:af:88:cf:66:ca:8f:47:e6:c7:78: 1f:8a:55:c5:dd:e9:aa:a4:6f:89:a8:0d:08:1f:80: ff:0d:53:71:33:f2:fc:b5:35:8a:3d:d7:e8:9d:14: ac:8b:4f:0b:94:f6:31:25:5c:43:fb:73:8a:14:a7: da:3c:73:51:c9:d5:6e:8f:b7:7c:4d:75:8e:a0:43: 12:0a:d6:af:41:47:89:18:17:e7:c0:14:67:d2:7f: a8:79:3c:a3:1b:c1:21:8b:0c:13:1c:0e:60:12:d3: 61:de:bb:63:2a:d0:a4:bc:9f:f0:09:2e:2a:ce:76: ae:77:ae:20:ac:93:d5:95:cb:19:64:af:f1:f1:2d: 1a:4f:f7:a8:44:2e:3b:10:b8:3b:29:be:e1:f4:df: 28:24:28:2f:03:3b:7a:e1:cb:9d:71:6a:c8:8b:a6: 73:bb:7c:04:f1:66:72:22:0b:80:0b:22:74:0c:47: 87:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:79:F7:9E:D4:50:54:2C:D1:6F:E8:E0:B2:D2:3D:5A:FF:FF:B1:AC X509v3 Authority Key Identifier: keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:2f:89:0d:39:1a:ea:f5:b4:27:0e:42:49:d5:d1:9f:23:03: 12:88:1a:0c:1f:31:28:53:43:4e:1f:21:84:a8:d7:a5:46:b2: 56:5a:0b:41:ee:e5:87:37:5a:9f:2f:b8:a3:36:c0:49:8a:7d: 74:5f:60:32:ed:96:b7:83:81:53:15:f5:2e:94:6d:34:d7:e3: f0:dc:58:d0:7c:f3:62:51:f9:33:bf:31:a1:06:40:87:46:93: 83:a6:1d:a9:3f:3e:8c:88:e0:92:81:a3:e7:b9:7c:fb:b8:63: 0d:0c:02:34:34:ef:8c:f6:ce:f9:15:a3:98:1f:da:7f:2c:48: 9f:d1:a1:93:7e:a8:92:6a:61:40:66:35:58:f4:eb:f0:a8:b6: 35:11:23:67:d9:a8:e6:71:eb:b2:2f:98:e6:1b:97:50:49:8b: 16:d7:f2:9c:73:36:df:58:8d:97:29:16:8a:54:38:83:d7:da: ec:ce:f0:85:ba:de:d1:95:12:1d:3e:18:46:6d:39:e1:3e:d0: 7e:c6:a0:58:67:e9:51:9f:bf:d9:bd:28:1b:f9:11:86:25:38: 8b:9e:57:ed:b9:e9:5b:df:84:f8:a8:6e:87:d1:d4:4e:7b:bd: 1a:56:06:3a:f8:6a:65:f6:fc:e1:a5:63:1c:c1:8a:b8:7a:c5: 25:e8:c8:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIpSo2HcSXIILNTl3M0FaXTHbTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3 MzQyMEUzODAeFw0yNTEwMTgxNTM1NTRaFw0yNTEwMjExNjUxNTRaMDMxMTAvBgNV BAMTKDZBNzlGNzlFRDQ1MDU0MkNEMTZGRThFMEIyRDIzRDVBRkZGRkIxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sUs0J5jngl0rAitPIY0ldz21 E7V3ECs55rZ1IETUt1h6CqvMbt7E12md+irSQJflyf6Wf4t/hjJPQG5Ci0HEUFkb ZP970aZxWNUJsi2xr4jPZsqPR+bHeB+KVcXd6aqkb4moDQgfgP8NU3Ez8vy1NYo9 1+idFKyLTwuU9jElXEP7c4oUp9o8c1HJ1W6Pt3xNdY6gQxIK1q9BR4kYF+fAFGfS f6h5PKMbwSGLDBMcDmAS02Heu2Mq0KS8n/AJLirOdq53riCsk9WVyxlkr/HxLRpP 96hELjsQuDspvuH03ygkKC8DO3rhy51xasiLpnO7fATxZnIiC4ALInQMR4e9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUann3ntRQVCzRb+jgstI9Wv//sawwHwYDVR0j BBgwFoAU5Rp39dv7FrFgbeGk/239BXNCDjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDBlMWYyMC1iMGNkLTQ2OWItOTEwNi0xZWEwMDA3OTVmOWYvMC9FNTFBNzdGNURC RkIxNkIxNjA2REUxQTRGRjZERkQwNTczNDIwRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3MzQy MEUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZE MDU3MzQyMEUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcviQ05Gur1tCcOQknV0Z8jAxKIGgwfMShT Q04fIYSo16VGslZaC0Hu5Yc3Wp8vuKM2wEmKfXRfYDLtlreDgVMV9S6UbTTX4/Dc WNB882JR+TO/MaEGQIdGk4OmHak/PoyI4JKBo+e5fPu4Yw0MAjQ074z2zvkVo5gf 2n8sSJ/RoZN+qJJqYUBmNVj06/CotjURI2fZqOZx67IvmOYbl1BJixbX8pxzNt9Y jZcpFopUOIPX2uzO8IW63tGVEh0+GEZtOeE+0H7GoFhn6VGfv9m9KBv5EYYlOIue V+256VvfhPiobofR1E57vRpWBjr4amX2/OGlYxzBirh6xSXoyA8= -----END CERTIFICATE-----Generated at Mon Oct 20 17:56:03 2025 by rpki-client