$ rpki-client -vvf repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft File: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft (raw, json) Hash identifier: j2kV3/UIwo77pFIqASw4Ld13gAUr6AEAt/MzJPbLElA= Subject key identifier: AF:8D:85:73:A7:41:14:8B:A5:A9:5A:A0:E6:F7:5C:29:B2:97:7F:5C Authority key identifier: E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 Certificate issuer: /CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Certificate serial: 7A3019CDC66162E456D9B9D2708A853943C9B9EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft Manifest number: 01E9 Signing time: Fri 22 Aug 2025 12:00:55 +0000 Manifest this update: Fri 22 Aug 2025 11:55:55 +0000 Manifest next update: Mon 25 Aug 2025 15:05:55 +0000 Files and hashes: 1: E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl (hash: MGYniN8OzBfC8bGwnWlty4x5XmDzKaDLeaDJ8HjpbIg=) 2: 3130332e3139312e37312e302f32342d3234203d3e20313439393134.roa (hash: wWf96mUt4wCBbqfalQK0TLTz6ApBKN5hLe7UYoC3TzQ=) 3: 3130332e3139312e37302e302f32332d3233203d3e20313439393134.roa (hash: buLsY1iWxn5uAX/tlzA+XQSdGjGRQVTlyaSVt5UiGA8=) 4: 3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (hash: LKby0ViyWSUSxyx6by+Sa+3JQIcYE0HMocb+PoIEh0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:30:19:cd:c6:61:62:e4:56:d9:b9:d2:70:8a:85:39:43:c9:b9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38 Validity Not Before: Aug 22 11:55:55 2025 GMT Not After : Aug 25 15:05:55 2025 GMT Subject: CN=AF8D8573A741148BA5A95AA0E6F75C29B2977F5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:5f:c7:cd:93:5b:19:8b:c6:73:be:df:0b: 5d:3d:39:6c:56:9f:c6:c3:4a:3f:54:74:7c:a8:00: d5:76:bc:a1:01:85:f9:18:6f:22:a8:b6:7e:87:d0: 78:fe:f3:ed:2c:38:6c:a3:05:c3:54:6b:84:bd:23: 8d:52:f6:fd:95:03:9f:9d:8d:87:2e:14:91:70:63: 5b:f0:f9:0a:1d:5c:4c:59:7f:19:f3:ca:03:3d:a8: 1c:a7:0e:2e:04:2e:04:b0:f2:f1:6b:f2:15:aa:35: c1:10:c9:96:2d:c1:e3:2f:b2:74:eb:b9:b4:e7:3c: e6:a9:87:5d:6e:6f:e1:40:69:7a:d1:1b:5d:c8:a2: 76:a2:3b:44:33:6b:12:bc:77:14:c8:d9:95:71:b9: ae:0a:c1:cd:a3:c6:86:a3:16:73:2a:a4:4d:a6:34: 06:72:3c:d2:37:ce:eb:3f:75:67:f1:3f:ed:0d:32: 2f:e2:a9:ce:e7:27:6b:a4:1d:72:dc:6f:c2:81:60: 52:3d:86:2c:a4:64:87:d5:ea:49:86:7a:22:fc:b4: ba:b0:2e:2c:4b:68:9b:c7:77:13:64:b7:b7:a3:d4: f4:cd:22:35:52:65:3f:7c:3f:08:29:f4:25:f8:85: ab:f2:5d:5e:91:2a:ec:80:0e:46:77:0c:51:fe:3d: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8D:85:73:A7:41:14:8B:A5:A9:5A:A0:E6:F7:5C:29:B2:97:7F:5C X509v3 Authority Key Identifier: keyid:E5:1A:77:F5:DB:FB:16:B1:60:6D:E1:A4:FF:6D:FD:05:73:42:0E:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/E51A77F5DBFB16B1606DE1A4FF6DFD0573420E38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:00:3a:32:c8:53:43:39:fd:69:2f:e9:8f:0b:af:f9:7f:d1: 6c:78:f3:6f:f3:34:33:76:1b:45:a4:ad:fb:81:08:44:4b:96: 77:cb:b8:f9:f1:99:1b:da:eb:90:b7:7c:fa:bb:7d:71:cc:58: 27:a1:48:35:a5:e9:68:8e:4d:a2:a2:5b:fd:2d:40:67:c7:4f: cb:00:e6:e4:32:be:50:83:18:cd:8e:19:2c:b4:f3:01:8f:cd: 95:57:9d:b7:c3:46:1a:5e:63:e3:76:14:ec:54:10:de:3b:05: 19:bd:42:12:ac:6a:b9:27:f3:7e:41:aa:e2:d0:bd:f4:d6:b3: 7b:23:ce:29:60:77:2d:16:5e:84:96:bf:f6:fb:a1:09:1c:68: 4b:7c:4e:1f:f1:66:47:77:80:3b:e4:1a:54:f4:28:94:6a:60: 89:74:da:29:5a:ff:53:ab:f6:8a:63:72:7e:c0:1e:73:57:ba: 7a:a0:ff:b2:04:c6:cf:7c:e5:2e:50:61:8a:db:b4:21:94:62: f0:cb:04:36:ba:1a:12:72:bf:1d:f9:21:93:7b:23:8b:05:45: 0c:c7:aa:75:f5:b5:81:0d:6b:f5:55:fd:c3:98:79:35:9e:f8: 4c:d8:bf:59:ea:50:1a:af:ce:ea:e3:7a:f0:1c:00:48:4c:bb: 99:7e:ea:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejAZzcZhYuRW2bnScIqFOUPJue8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3 MzQyMEUzODAeFw0yNTA4MjIxMTU1NTVaFw0yNTA4MjUxNTA1NTVaMDMxMTAvBgNV BAMTKEFGOEQ4NTczQTc0MTE0OEJBNUE5NUFBMEU2Rjc1QzI5QjI5NzdGNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSF/HzZNbGYvGc77fC109OWxW n8bDSj9UdHyoANV2vKEBhfkYbyKotn6H0Hj+8+0sOGyjBcNUa4S9I41S9v2VA5+d jYcuFJFwY1vw+QodXExZfxnzygM9qBynDi4ELgSw8vFr8hWqNcEQyZYtweMvsnTr ubTnPOaph11ub+FAaXrRG13IonaiO0QzaxK8dxTI2ZVxua4Kwc2jxoajFnMqpE2m NAZyPNI3zus/dWfxP+0NMi/iqc7nJ2ukHXLcb8KBYFI9hiykZIfV6kmGeiL8tLqw LixLaJvHdxNkt7ej1PTNIjVSZT98Pwgp9CX4havyXV6RKuyADkZ3DFH+PTr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr42Fc6dBFIulqVqg5vdcKbKXf1wwHwYDVR0j BBgwFoAU5Rp39dv7FrFgbeGk/239BXNCDjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDBlMWYyMC1iMGNkLTQ2OWItOTEwNi0xZWEwMDA3OTVmOWYvMC9FNTFBNzdGNURC RkIxNkIxNjA2REUxQTRGRjZERkQwNTczNDIwRTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZEMDU3MzQy MEUzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQwZTFmMjAtYjBjZC00NjliLTkx MDYtMWVhMDAwNzk1ZjlmLzAvRTUxQTc3RjVEQkZCMTZCMTYwNkRFMUE0RkY2REZE MDU3MzQyMEUzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUAOjLIU0M5/Wkv6Y8Lr/l/0Wx482/zNDN2 G0WkrfuBCERLlnfLuPnxmRva65C3fPq7fXHMWCehSDWl6WiOTaKiW/0tQGfHT8sA 5uQyvlCDGM2OGSy08wGPzZVXnbfDRhpeY+N2FOxUEN47BRm9QhKsarkn835BquLQ vfTWs3sjzilgdy0WXoSWv/b7oQkcaEt8Th/xZkd3gDvkGlT0KJRqYIl02ila/1Or 9opjcn7AHnNXunqg/7IExs985S5QYYrbtCGUYvDLBDa6GhJyvx35IZN7I4sFRQzH qnX1tYENa/VV/cOYeTWe+EzYv1nqUBqvzurjevAcAEhMu5l+6pI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:27:30 2025 by rpki-client