$ rpki-client -vvf repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft File: 454DBC52C30315358534B20532037D549238F4C9.mft (raw, json) Hash identifier: uG5KzLnAtVhcsmaNLMnNvGIvN7HeNuRkOkV+bcMLz/Y= Subject key identifier: 1A:2E:56:5E:1E:DC:0A:84:B9:F0:73:6B:1D:72:19:5E:53:5F:28:E4 Authority key identifier: 45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 Certificate issuer: /CN=454DBC52C30315358534B20532037D549238F4C9 Certificate serial: 164782780A614BBE01D9B3AC08528A5AE7444589 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft Manifest number: 3B Signing time: Wed 02 Jul 2025 19:21:42 +0000 Manifest this update: Wed 02 Jul 2025 19:16:42 +0000 Manifest next update: Sun 06 Jul 2025 07:11:42 +0000 Files and hashes: 1: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: HMKdgPohDB0xWBN1Oc1VU1UzcfxKyNuGEiE2CnpRGEY=) 2: 454DBC52C30315358534B20532037D549238F4C9.crl (hash: KH2G4y+2do5Hb89EIRmw+llximzjbeM0IHmn4maKAz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:47:82:78:0a:61:4b:be:01:d9:b3:ac:08:52:8a:5a:e7:44:45:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454DBC52C30315358534B20532037D549238F4C9 Validity Not Before: Jul 2 19:16:42 2025 GMT Not After : Jul 6 07:11:42 2025 GMT Subject: CN=1A2E565E1EDC0A84B9F0736B1D72195E535F28E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:71:d9:bd:6e:4f:21:df:8c:7b:3e:c4:0d: 0a:f4:9f:c2:c7:1d:50:75:d5:83:19:ec:9f:e7:ec: fa:4d:df:45:81:83:02:78:1f:4a:b0:d4:89:81:dd: 44:77:43:d1:f2:53:b0:7d:38:08:97:3c:c7:69:0c: 75:71:69:ec:49:7b:7b:89:7a:c6:b8:55:0c:25:65: bd:40:78:6a:b6:4a:ef:e1:0d:e7:f1:34:18:c3:e5: d5:b1:b2:27:35:a8:ca:31:2f:1e:bd:dd:37:8f:c1: b7:57:e6:39:3e:65:da:d1:9e:b1:90:84:3f:f7:de: 5e:92:b4:fe:00:1d:a4:07:dd:22:d5:33:8c:ad:10: ed:f9:27:bd:37:22:f3:17:70:a3:ef:06:5c:90:c5: 36:b9:52:05:84:c1:bd:e0:ad:02:50:55:17:1a:ec: 77:29:a0:63:ba:d2:1d:54:b8:a8:4f:95:77:a4:0c: 5f:3c:45:ed:d9:5b:b9:4a:84:0a:ca:c0:8e:86:24: 4e:37:f2:5a:03:3b:8e:86:58:e3:49:c0:2f:f4:bd: 35:4d:92:42:39:d4:2e:fd:d9:9e:ed:ed:14:7b:f1: 89:c4:dc:5c:f2:b0:a7:bd:ce:48:ef:73:52:b9:a3: c2:ef:00:85:48:64:24:f9:91:c0:ae:6a:50:af:20: eb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2E:56:5E:1E:DC:0A:84:B9:F0:73:6B:1D:72:19:5E:53:5F:28:E4 X509v3 Authority Key Identifier: keyid:45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d4:d8:d6:09:1f:77:4c:fd:44:38:b5:df:32:02:e9:f4:4b: 28:45:ba:3c:d8:07:3c:25:6a:c2:a2:2a:59:d5:5e:b9:70:66: 2f:67:17:1d:73:81:d2:16:d1:db:d3:35:ba:fb:98:7f:93:2a: 7b:8a:17:d7:66:fe:ef:8c:7d:f2:e5:4a:be:f6:1a:cf:0f:c8: 5e:c4:2b:69:aa:79:f5:74:b2:e9:2c:73:66:08:44:8b:13:b2: 5c:70:a1:99:8e:e9:58:3f:5f:af:cd:00:da:a0:23:04:29:3c: 4f:67:6d:99:9b:90:a5:1c:46:cb:20:ba:53:d7:d3:0d:84:e3: ac:a9:e2:57:3b:15:24:79:aa:ce:f6:88:a9:f6:49:0e:4d:cf: a0:ac:6d:7a:84:03:3b:57:29:2f:e8:17:61:f8:4f:f7:1f:1f: c3:5b:b2:d1:2b:b9:74:1e:41:76:4c:90:6b:4b:8b:e5:3b:a1: 8d:b1:4c:1a:47:f6:62:1f:ee:e5:ad:e6:1b:7d:ae:ea:69:e6: 9e:39:94:e6:a9:f5:4f:72:50:24:ac:f1:cd:c9:cb:18:89:7e: 01:2f:f9:7e:8c:48:63:e1:38:7a:3c:b9:eb:32:72:ae:f3:aa: b7:f0:d7:b7:8f:f3:50:d1:b6:ea:e1:43:e0:e5:92:3c:98:df: 9a:3b:a0:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkeCeAphS74B2bOsCFKKWudERYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5 MjM4RjRDOTAeFw0yNTA3MDIxOTE2NDJaFw0yNTA3MDYwNzExNDJaMDMxMTAvBgNV BAMTKDFBMkU1NjVFMUVEQzBBODRCOUYwNzM2QjFENzIxOTVFNTM1RjI4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfpHHZvW5PId+Mez7EDQr0n8LH HVB11YMZ7J/n7PpN30WBgwJ4H0qw1ImB3UR3Q9HyU7B9OAiXPMdpDHVxaexJe3uJ esa4VQwlZb1AeGq2Su/hDefxNBjD5dWxsic1qMoxLx693TePwbdX5jk+ZdrRnrGQ hD/33l6StP4AHaQH3SLVM4ytEO35J703IvMXcKPvBlyQxTa5UgWEwb3grQJQVRca 7HcpoGO60h1UuKhPlXekDF88Re3ZW7lKhArKwI6GJE438loDO46GWONJwC/0vTVN kkI51C792Z7t7RR78YnE3FzysKe9zkjvc1K5o8LvAIVIZCT5kcCualCvIOu9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGi5WXh7cCoS58HNrHXIZXlNfKOQwHwYDVR0j BBgwFoAURU28UsMDFTWFNLIFMgN9VJI49MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTc3OTViNi0wZGY1LTQ3MWItYjc4OC03MjVmOWVmN2MwOGQvMC80NTREQkM1MkMz MDMxNTM1ODUzNEIyMDUzMjAzN0Q1NDkyMzhGNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5MjM4 RjRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE3Nzk1YjYtMGRmNS00NzFiLWI3 ODgtNzI1ZjllZjdjMDhkLzAvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdE NTQ5MjM4RjRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbU2NYJH3dM/UQ4td8yAun0SyhFujzYBzwl asKiKlnVXrlwZi9nFx1zgdIW0dvTNbr7mH+TKnuKF9dm/u+MffLlSr72Gs8PyF7E K2mqefV0suksc2YIRIsTslxwoZmO6Vg/X6/NANqgIwQpPE9nbZmbkKUcRssgulPX 0w2E46yp4lc7FSR5qs72iKn2SQ5Nz6CsbXqEAztXKS/oF2H4T/cfH8NbstEruXQe QXZMkGtLi+U7oY2xTBpH9mIf7uWt5ht9rupp5p45lOap9U9yUCSs8c3JyxiJfgEv +X6MSGPhOHo8uesycq7zqrfw17eP81DRturhQ+DlkjyY35o7oOs= -----END CERTIFICATE-----Generated at Thu Jul 3 00:43:19 2025 by rpki-client