$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: h+FBE0ZTs92Y6TIfA9XBgx81a6jFw4clbJfxC7Z8Tr8= Subject key identifier: 4D:C8:C1:BD:41:CF:33:65:2A:A0:FC:66:3A:47:A3:2C:1A:7B:8A:31 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 0CF9D97014218E84A62149414C56243FE233F3EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 0213 Signing time: Tue 01 Jul 2025 03:31:00 +0000 Manifest this update: Tue 01 Jul 2025 03:26:00 +0000 Manifest next update: Fri 04 Jul 2025 04:31:00 +0000 Files and hashes: 1: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: 0kLovwX61yrBYW5yQJRnZMbES+Qtho9hFs9ZOeZiE9s=) 2: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 04:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f9:d9:70:14:21:8e:84:a6:21:49:41:4c:56:24:3f:e2:33:f3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Jul 1 03:26:00 2025 GMT Not After : Jul 4 04:31:00 2025 GMT Subject: CN=4DC8C1BD41CF33652AA0FC663A47A32C1A7B8A31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:28:a4:1b:d6:7c:10:77:85:e9:d0:7b:43:a5: 78:5c:e3:9b:6d:34:55:03:49:a7:4c:91:1a:4d:6f: dd:62:69:2d:2f:c8:bb:93:47:a4:46:3b:72:4d:ba: d3:5f:82:98:bf:cf:99:31:63:a8:e8:01:c4:0e:df: 27:2f:9f:72:79:e1:1b:fe:57:07:7e:f7:21:92:1e: 21:b4:d7:aa:3b:ae:79:0c:5a:08:c4:69:80:49:77: b0:ad:65:16:c9:0c:90:66:ab:72:79:2d:2b:d8:12: df:a5:b3:f7:9c:ee:ac:5c:45:f6:b9:d7:26:8f:62: 67:43:b6:f5:fe:09:a4:5c:de:c5:ac:e0:63:70:22: 3d:36:37:13:a0:6a:6d:1e:5b:e9:56:ed:52:ec:9f: a7:e7:43:6b:7f:89:fd:f4:54:bf:60:88:95:e5:f2: 1d:7d:8d:f6:27:e2:df:d6:6f:07:f0:75:db:da:1a: e3:f9:24:0c:d7:02:bc:7e:23:34:0b:d2:1c:f8:5c: 06:23:b8:7d:e8:d8:32:a9:d6:e2:81:ae:87:c7:1c: 55:0e:91:09:5a:29:57:ed:f3:a8:d1:57:c2:65:76: cd:f0:3d:7d:05:12:ab:a7:69:2f:fc:96:23:38:c5: 64:6c:80:73:9a:6d:b5:16:e8:a6:8b:a0:9d:bc:41: 90:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C8:C1:BD:41:CF:33:65:2A:A0:FC:66:3A:47:A3:2C:1A:7B:8A:31 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:c7:d4:5d:90:c8:00:1e:43:28:97:d0:8d:9d:0d:33:d3:98: e4:9c:4e:27:12:6d:88:8b:14:dd:e7:c8:9b:37:d4:b4:58:c7: 14:87:09:a2:f2:c8:5e:1b:58:28:7c:2a:4f:76:2a:08:9f:58: b2:d3:a7:1e:c0:16:93:0d:09:9f:3c:41:ae:73:88:d0:f3:66: fa:39:fd:f2:97:37:2b:dc:85:28:ab:0f:60:d4:16:b0:95:b8: 11:11:9d:12:a9:74:a6:43:99:2a:a5:23:16:e0:bf:de:4c:67: 10:67:af:2e:3d:76:0b:c6:5f:01:fa:9d:62:64:22:d2:ca:df: 6c:37:03:88:dc:2a:7d:71:b5:ad:b7:85:34:2e:97:33:28:34: ee:75:b5:51:8f:05:4a:76:1f:3c:3d:71:63:ff:07:de:46:b7: 37:5b:8d:3e:0b:5e:62:53:24:fa:7c:ef:9b:91:b8:1c:70:37: bd:cb:25:8a:f3:16:85:fe:2c:7d:13:d3:10:ad:38:48:03:24: d4:3b:4f:d9:02:ce:57:ee:41:7f:12:dc:7e:bc:be:a0:72:d0: 0c:e9:71:72:2a:90:c7:24:3f:8d:ef:3f:19:05:47:c9:c2:07: d0:15:da:f1:bf:a5:fe:8b:3d:21:8c:58:77:13:4f:62:bf:98: f9:f4:37:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPnZcBQhjoSmIUlBTFYkP+Iz8+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTA3MDEwMzI2MDBaFw0yNTA3MDQwNDMxMDBaMDMxMTAvBgNV BAMTKDREQzhDMUJENDFDRjMzNjUyQUEwRkM2NjNBNDdBMzJDMUE3QjhBMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYKKQb1nwQd4Xp0HtDpXhc45tt NFUDSadMkRpNb91iaS0vyLuTR6RGO3JNutNfgpi/z5kxY6joAcQO3ycvn3J54Rv+ Vwd+9yGSHiG016o7rnkMWgjEaYBJd7CtZRbJDJBmq3J5LSvYEt+ls/ec7qxcRfa5 1yaPYmdDtvX+CaRc3sWs4GNwIj02NxOgam0eW+lW7VLsn6fnQ2t/if30VL9giJXl 8h19jfYn4t/WbwfwddvaGuP5JAzXArx+IzQL0hz4XAYjuH3o2DKp1uKBrofHHFUO kQlaKVft86jRV8Jlds3wPX0FEqunaS/8liM4xWRsgHOabbUW6KaLoJ28QZD1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTcjBvUHPM2UqoPxmOkejLBp7ijEwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHH1F2QyAAeQyiX0I2dDTPTmOScTicSbYiL FN3nyJs31LRYxxSHCaLyyF4bWCh8Kk92KgifWLLTpx7AFpMNCZ88Qa5ziNDzZvo5 /fKXNyvchSirD2DUFrCVuBERnRKpdKZDmSqlIxbgv95MZxBnry49dgvGXwH6nWJk ItLK32w3A4jcKn1xta23hTQulzMoNO51tVGPBUp2Hzw9cWP/B95GtzdbjT4LXmJT JPp875uRuBxwN73LJYrzFoX+LH0T0xCtOEgDJNQ7T9kCzlfuQX8S3H68vqBy0Azp cXIqkMckP43vPxkFR8nCB9AV2vG/pf6LPSGMWHcTT2K/mPn0N5Y= -----END CERTIFICATE-----Generated at Wed Jul 2 11:37:54 2025 by rpki-client