$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: Eivz5Qgsz1PHLUMik3EOL+hZU/Isnud8DrjiHUk+ZMg= Subject key identifier: C8:2E:B0:BB:C3:DA:61:A6:2B:4F:6C:9A:78:B8:01:F8:4D:32:78:4E Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 4AD950EE1278C5A213D61DE189EDE33C7A26F166 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 04E9 Signing time: Sat 28 Jun 2025 19:31:00 +0000 Manifest this update: Sat 28 Jun 2025 19:26:00 +0000 Manifest next update: Wed 02 Jul 2025 05:03:00 +0000 Files and hashes: 1: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: UlACxQWw1nO4TwhK7qKCX9lj8J/locmhw8iF+a1TJqk=) 2: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d9:50:ee:12:78:c5:a2:13:d6:1d:e1:89:ed:e3:3c:7a:26:f1:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Jun 28 19:26:00 2025 GMT Not After : Jul 2 05:03:00 2025 GMT Subject: CN=C82EB0BBC3DA61A62B4F6C9A78B801F84D32784E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:e1:b8:c9:1c:57:d4:0b:5e:31:be:2b:d7: 9e:fb:40:c9:98:f5:08:d1:28:e3:81:41:8f:4f:cc: 7d:96:f2:c8:d1:03:42:21:3b:db:58:7a:5a:23:99: fe:44:6c:f6:0a:2b:4f:75:3b:f9:cc:6c:b9:10:5b: 5f:a4:bd:9a:5a:8e:44:69:4c:aa:81:e9:d5:43:53: 9a:cb:8e:29:81:a3:6b:16:4f:2c:d7:7f:32:30:7b: 4d:73:c3:9b:ac:c8:fe:b3:04:37:82:3b:3f:f8:d0: 95:a1:c6:69:5b:7b:3a:8d:62:71:99:c3:3d:64:ae: 9c:b4:42:fa:92:77:21:e0:6b:90:0c:1f:99:c8:02: f3:11:0e:c6:d0:de:0f:d7:24:aa:84:d6:a6:da:4b: 1c:36:71:1a:52:51:db:59:bb:39:45:f7:d5:f9:ae: 64:3f:e6:2c:77:47:8e:52:f4:a9:ac:ce:0f:3f:33: b5:0a:fd:17:3d:ce:7c:7f:df:64:07:9a:05:f0:db: 5d:92:33:77:81:71:78:4c:6d:2f:74:fc:7a:de:56: 3b:f9:b2:95:ca:34:f5:62:6b:a9:ba:25:b4:3c:56: 67:88:fe:db:34:bd:fd:f6:4d:a5:64:78:86:8b:6e: 07:a2:04:1c:8d:e6:8b:56:98:49:24:40:0f:71:60: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2E:B0:BB:C3:DA:61:A6:2B:4F:6C:9A:78:B8:01:F8:4D:32:78:4E X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f3:33:56:7b:40:ba:d8:d2:e5:44:b0:84:4b:e7:3d:c5:13: fc:79:e4:93:e6:f3:be:91:55:54:27:d5:ec:ce:60:f9:11:82: f2:0a:58:0e:d6:cb:cf:f2:83:f0:c7:06:4d:c2:d5:82:3a:8d: 55:39:03:31:3f:b5:8f:5d:b1:e8:4f:64:51:0c:de:e2:fb:c2: ed:0f:63:42:ca:d9:47:0f:fa:3f:50:cf:7b:a8:21:19:24:a0: 21:5c:a6:5e:46:92:b5:18:a8:1f:3e:4e:67:50:8a:84:5c:a1: 71:1c:7f:3d:a9:2e:06:f0:0c:73:48:98:3f:bc:9d:08:f0:a3: 57:ca:49:8d:5f:9c:15:ab:a4:92:41:66:64:1e:12:22:45:ff: 09:0c:b9:04:e8:55:c9:6b:48:ce:bb:8f:34:ca:86:b2:19:77: 5e:ac:d8:42:16:8c:58:cb:0c:22:dd:6a:8b:dc:ef:2f:d4:7e: 74:cf:b4:4a:82:a7:ee:5d:fd:a4:2e:5e:02:24:43:6b:d9:45: 94:f1:29:8d:42:f9:dc:40:5f:28:3d:0f:11:3a:ff:14:a4:2e: e6:4d:29:78:6a:22:95:d7:db:44:77:76:73:4a:3d:28:4e:85: 59:52:b5:46:4e:23:82:ce:37:3e:7f:55:2f:36:df:1f:f6:6d: f7:97:0f:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStlQ7hJ4xaIT1h3hie3jPHom8WYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTA2MjgxOTI2MDBaFw0yNTA3MDIwNTAzMDBaMDMxMTAvBgNV BAMTKEM4MkVCMEJCQzNEQTYxQTYyQjRGNkM5QTc4QjgwMUY4NEQzMjc4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLA+G4yRxX1AteMb4r1577QMmY 9QjRKOOBQY9PzH2W8sjRA0IhO9tYelojmf5EbPYKK091O/nMbLkQW1+kvZpajkRp TKqB6dVDU5rLjimBo2sWTyzXfzIwe01zw5usyP6zBDeCOz/40JWhxmlbezqNYnGZ wz1krpy0QvqSdyHga5AMH5nIAvMRDsbQ3g/XJKqE1qbaSxw2cRpSUdtZuzlF99X5 rmQ/5ix3R45S9Kmszg8/M7UK/Rc9znx/32QHmgXw212SM3eBcXhMbS90/HreVjv5 spXKNPVia6m6JbQ8VmeI/ts0vf32TaVkeIaLbgeiBByN5otWmEkkQA9xYApTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyC6wu8PaYaYrT2yaeLgB+E0yeE4wHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrzM1Z7QLrY0uVEsIRL5z3FE/x55JPm876R VVQn1ezOYPkRgvIKWA7Wy8/yg/DHBk3C1YI6jVU5AzE/tY9dsehPZFEM3uL7wu0P Y0LK2UcP+j9Qz3uoIRkkoCFcpl5GkrUYqB8+TmdQioRcoXEcfz2pLgbwDHNImD+8 nQjwo1fKSY1fnBWrpJJBZmQeEiJF/wkMuQToVclrSM67jzTKhrIZd16s2EIWjFjL DCLdaovc7y/UfnTPtEqCp+5d/aQuXgIkQ2vZRZTxKY1C+dxAXyg9DxE6/xSkLuZN KXhqIpXX20R3dnNKPShOhVlStUZOI4LONz5/VS823x/2bfeXDyU= -----END CERTIFICATE-----Generated at Sun Jun 29 19:58:14 2025 by rpki-client