$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: 3c19KdKaxBhMzF44KLpIVwd+STcIqUwWbEYx9e32Y4M= Subject key identifier: 6F:CE:EA:BC:29:41:89:8E:49:30:EA:FA:1D:EA:3C:8A:FA:1F:78:3C Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 27864ABA46DCBE5FCA013A75A02F6BE7C75CCAC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: F4 Signing time: Mon 30 Jun 2025 19:41:27 +0000 Manifest this update: Mon 30 Jun 2025 19:36:27 +0000 Manifest next update: Fri 04 Jul 2025 02:39:27 +0000 Files and hashes: 1: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: K8NaZjX156AzJZCxAFCtUR2kv1eIuI1LvcL4WWNgNxE=) 2: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: k08Sq9y+e0JBLFkahJuKjCY8UDmOXzCXbCJPnDfG/eg=) 3: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: mj4+ExAOcisX/D8C0ijQLu5mCZ7+p55Rnyh9HAgeshE=) 4: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: 4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:86:4a:ba:46:dc:be:5f:ca:01:3a:75:a0:2f:6b:e7:c7:5c:ca:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Jun 30 19:36:27 2025 GMT Not After : Jul 4 02:39:27 2025 GMT Subject: CN=6FCEEABC2941898E4930EAFA1DEA3C8AFA1F783C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cb:3c:45:11:80:41:45:50:c9:e2:4e:40:24: 92:e2:43:f7:1f:2b:7b:ad:a4:e8:21:fc:0d:28:24: 8e:1d:d4:99:2c:1e:b0:37:f8:76:28:b8:36:82:e7: fa:ab:c8:28:b0:f1:dd:7d:64:d5:09:c9:50:74:a1: 29:ae:9b:1f:a3:e0:c1:e3:9b:32:c3:95:ca:c9:39: 25:8f:03:d8:a2:ff:b8:05:f9:a7:f7:fd:09:81:8d: da:0d:df:31:cc:7d:30:10:03:1d:af:95:52:0e:99: eb:5a:47:ce:e3:76:cc:70:3f:c7:fa:18:d6:e2:cd: 2c:b4:bc:68:05:72:29:07:a5:98:dd:94:4d:17:26: b6:e7:96:18:43:82:8f:fa:f2:59:92:da:26:37:62: f3:bb:63:2b:80:58:d2:68:01:28:8c:c7:e9:f1:be: dd:b0:9c:6c:b3:8e:2f:de:98:5c:3b:e4:37:92:f5: 66:9d:9d:6b:0f:06:82:e1:2d:4a:1c:0a:77:55:9f: 0e:ea:9e:e2:ac:56:2a:02:ed:a7:79:07:20:da:59: 34:99:66:17:92:9e:b2:e2:78:3b:17:ec:cc:37:73: 44:9d:50:94:5f:41:a7:2b:e5:ff:41:91:94:94:28: 91:b7:ac:64:22:83:45:64:4d:e8:49:96:6b:d7:3b: 62:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CE:EA:BC:29:41:89:8E:49:30:EA:FA:1D:EA:3C:8A:FA:1F:78:3C X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3b:6b:a2:fd:bb:d3:a8:f4:d9:91:4e:3d:d4:37:dd:2f:e3: 52:ec:16:f7:e6:ea:43:6d:b1:a4:30:f9:5f:50:68:b4:b3:5d: 49:87:5e:65:29:25:92:2a:a9:10:5f:08:20:74:2f:40:42:55: ed:64:65:08:d3:c6:9a:f5:91:99:62:d6:f6:2c:53:74:0e:a1: e0:08:43:de:b7:5e:61:8c:bd:d5:cd:4a:49:b5:57:ab:32:89: ae:62:64:20:9d:93:34:d9:ad:68:6b:26:b5:89:6e:ce:08:02: 15:e5:de:43:36:8c:1c:c2:97:4d:e4:1e:7a:09:e6:9d:13:6b: ea:d4:26:51:9f:e3:33:5b:b4:ec:49:2f:04:eb:3c:1a:99:5e: d5:67:f7:69:b5:47:6a:a7:29:a6:ee:0b:7d:48:b8:e7:d3:4c: 03:ee:d7:81:d2:3f:a6:82:df:d6:5d:95:ef:9e:7b:13:a4:63: 37:fe:44:c9:23:7b:7b:9d:16:ec:b9:4b:c2:18:fd:82:df:e5: 71:70:be:c8:02:2b:bd:6c:69:d5:b4:d4:a2:98:4d:22:7a:db: ca:4f:4e:89:4c:49:6c:91:7a:76:04:a6:b7:3b:cd:ab:8a:4f: bc:8d:ba:9a:dc:b7:e8:4a:fa:bb:bf:69:72:a2:c3:33:4f:ed: 98:d8:58:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ4ZKukbcvl/KATp1oC9r58dcyscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTA2MzAxOTM2MjdaFw0yNTA3MDQwMjM5MjdaMDMxMTAvBgNV BAMTKDZGQ0VFQUJDMjk0MTg5OEU0OTMwRUFGQTFERUEzQzhBRkExRjc4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyzxFEYBBRVDJ4k5AJJLiQ/cf K3utpOgh/A0oJI4d1JksHrA3+HYouDaC5/qryCiw8d19ZNUJyVB0oSmumx+j4MHj mzLDlcrJOSWPA9ii/7gF+af3/QmBjdoN3zHMfTAQAx2vlVIOmetaR87jdsxwP8f6 GNbizSy0vGgFcikHpZjdlE0XJrbnlhhDgo/68lmS2iY3YvO7YyuAWNJoASiMx+nx vt2wnGyzji/emFw75DeS9WadnWsPBoLhLUocCndVnw7qnuKsVioC7ad5ByDaWTSZ ZheSnrLieDsX7Mw3c0SdUJRfQacr5f9BkZSUKJG3rGQig0VkTehJlmvXO2IRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb87qvClBiY5JMOr6Heo8ivofeDwwHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHw7a6L9u9Oo9NmRTj3UN90v41LsFvfm6kNt saQw+V9QaLSzXUmHXmUpJZIqqRBfCCB0L0BCVe1kZQjTxpr1kZli1vYsU3QOoeAI Q963XmGMvdXNSkm1V6syia5iZCCdkzTZrWhrJrWJbs4IAhXl3kM2jBzCl03kHnoJ 5p0Ta+rUJlGf4zNbtOxJLwTrPBqZXtVn92m1R2qnKabuC31IuOfTTAPu14HSP6aC 39Zdle+eexOkYzf+RMkje3udFuy5S8IY/YLf5XFwvsgCK71sadW01KKYTSJ628pP TolMSWyRenYEprc7zauKT7yNuprct+hK+ru/aXKiwzNP7ZjYWEs= -----END CERTIFICATE-----Generated at Tue Jul 1 18:19:49 2025 by rpki-client