$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json) Hash identifier: KfwgQ4wRK3PyM7hbzZqhM89l8QT/Ojju8LewbBfeA2Q= Subject key identifier: 17:85:D4:35:B8:CA:5A:45:17:6C:C9:98:FD:04:9E:8C:C4:0B:CF:58 Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786 Certificate serial: 38CA5960D3D5C4F6DF81C20C28BBA74DE7470AD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft Manifest number: 01ED Signing time: Sat 28 Jun 2025 13:02:10 +0000 Manifest this update: Sat 28 Jun 2025 12:57:10 +0000 Manifest next update: Wed 02 Jul 2025 00:40:10 +0000 Files and hashes: 1: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: kiXH3Pu0t27AnAWyBI2IZ/rY20tibQS7bxbTz4PkUO0=) 2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: HzhAdkWVPqyzjRfrKdf+sGJ5e8Q6OGeF8fvX/eoLEO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ca:59:60:d3:d5:c4:f6:df:81:c2:0c:28:bb:a7:4d:e7:47:0a:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786 Validity Not Before: Jun 28 12:57:10 2025 GMT Not After : Jul 2 00:40:10 2025 GMT Subject: CN=1785D435B8CA5A45176CC998FD049E8CC40BCF58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:1b:e7:da:73:86:46:3a:1c:1f:e9:4d:99: 09:1c:e1:ce:55:68:47:f4:9a:56:5c:22:a3:b5:57: f6:9a:b8:01:db:85:a4:9a:6b:02:ea:8b:8d:5e:63: 2e:e4:67:38:01:bc:5e:bf:f3:bd:58:2f:f1:1a:62: 8a:47:e4:b9:56:fb:f1:2d:c2:8f:80:d2:95:ff:ca: 89:4e:98:0a:4d:ef:90:1c:12:3f:32:e1:d4:c0:af: d0:cb:d1:f0:54:7b:3c:6e:0d:92:02:e7:55:de:dc: 22:65:b3:64:d3:ce:72:f1:5f:51:29:55:6c:d5:ca: b3:ee:fe:31:d1:a0:a0:fd:ae:e2:39:05:b3:74:99: cb:36:29:57:d9:22:4d:79:21:a1:a6:0c:be:98:04: d1:48:e0:33:a1:dd:2d:57:75:69:91:59:bb:80:bb: 36:1d:1b:16:03:35:72:cb:59:79:84:59:73:0f:47: 5d:bf:4f:de:46:05:30:43:9a:e7:f1:45:af:c2:4a: 4b:a1:31:b3:f3:43:b1:7b:fc:a7:3a:a8:46:e0:0a: 31:cf:99:8d:1f:0e:17:37:60:b8:07:bd:eb:00:05: f6:42:e2:5f:fe:49:90:50:58:c8:1b:de:71:9d:12: c6:a4:bd:e1:66:38:b1:40:98:42:01:d4:f7:9f:b6: cc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:85:D4:35:B8:CA:5A:45:17:6C:C9:98:FD:04:9E:8C:C4:0B:CF:58 X509v3 Authority Key Identifier: keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:2b:98:59:05:e7:de:21:b1:e8:3e:4f:1e:d4:1b:f7:3e:81: 0b:9d:99:9d:bc:9c:85:3f:46:5e:2c:1d:a7:cf:54:07:e9:8d: d2:84:59:74:c7:4a:47:46:ab:a9:bc:fd:d0:17:b3:48:c9:6e: 1a:dc:f2:e5:c1:c7:5a:2c:31:47:4f:c3:c9:10:21:12:2e:50: be:1c:ef:97:ea:bf:e5:3f:18:c8:88:5f:d5:a0:ef:70:42:13: 97:4f:2f:5a:10:24:c2:77:63:89:0b:4d:87:51:44:b9:a5:0e: 88:a6:ae:57:ef:9a:87:77:d8:35:1c:c2:88:de:9b:f7:09:cd: 7f:40:f6:68:16:6e:1e:cf:3a:a0:f4:ae:85:10:3d:8e:79:4d: f4:bb:73:86:5e:af:c7:82:13:93:4e:ec:de:eb:69:23:9b:3f: 4a:eb:61:69:a8:ab:4f:b3:de:e8:75:ca:19:dd:ba:38:5f:c0: 87:41:c1:17:a5:bf:dd:b5:8e:97:0a:3c:d1:53:96:3c:45:e0: 38:81:32:1f:d7:5f:64:ac:f5:86:d2:2e:c9:ba:17:83:a2:50: 03:6e:8b:10:9f:c2:c4:09:17:d3:0a:0a:44:f3:7f:36:a8:ba: 7e:e4:da:3e:b6:e6:35:e6:a8:df:58:62:70:82:81:0d:9a:2c: 63:f0:8c:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMpZYNPVxPbfgcIMKLunTedHCtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF MzM5NTc4NjAeFw0yNTA2MjgxMjU3MTBaFw0yNTA3MDIwMDQwMTBaMDMxMTAvBgNV BAMTKDE3ODVENDM1QjhDQTVBNDUxNzZDQzk5OEZEMDQ5RThDQzQwQkNGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg+Rvn2nOGRjocH+lNmQkc4c5V aEf0mlZcIqO1V/aauAHbhaSaawLqi41eYy7kZzgBvF6/871YL/EaYopH5LlW+/Et wo+A0pX/yolOmApN75AcEj8y4dTAr9DL0fBUezxuDZIC51Xe3CJls2TTznLxX1Ep VWzVyrPu/jHRoKD9ruI5BbN0mcs2KVfZIk15IaGmDL6YBNFI4DOh3S1XdWmRWbuA uzYdGxYDNXLLWXmEWXMPR12/T95GBTBDmufxRa/CSkuhMbPzQ7F7/Kc6qEbgCjHP mY0fDhc3YLgHvesABfZC4l/+SZBQWMgb3nGdEsakveFmOLFAmEIB1PeftsyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4XUNbjKWkUXbMmY/QSejMQLz1gwHwYDVR0j BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5 NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4 MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcrmFkF594hseg+Tx7UG/c+gQudmZ28nIU/ Rl4sHafPVAfpjdKEWXTHSkdGq6m8/dAXs0jJbhrc8uXBx1osMUdPw8kQIRIuUL4c 75fqv+U/GMiIX9Wg73BCE5dPL1oQJMJ3Y4kLTYdRRLmlDoimrlfvmod32DUcwoje m/cJzX9A9mgWbh7POqD0roUQPY55TfS7c4Zer8eCE5NO7N7raSObP0rrYWmoq0+z 3uh1yhndujhfwIdBwRelv921jpcKPNFTljxF4DiBMh/XX2Ss9YbSLsm6F4OiUANu ixCfwsQJF9MKCkTzfzaoun7k2j625jXmqN9YYnCCgQ2aLGPwjPM= -----END CERTIFICATE-----Generated at Mon Jun 30 14:07:30 2025 by rpki-client