$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: vsTiw7lHeDmBKFHjZw9Azw9LjSxIUVAh6+WRT1qsz/E= Subject key identifier: 9E:98:63:D1:8D:8E:52:18:29:35:DF:4D:A4:DF:9C:24:2E:80:F0:3A Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 767B6B154076D9C4A5B168448E7959AE5F7710BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 0161 Signing time: Sat 10 May 2025 08:11:48 +0000 Manifest this update: Sat 10 May 2025 08:06:48 +0000 Manifest next update: Tue 13 May 2025 08:48:48 +0000 Files and hashes: 1: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: DSPj0NOPaRhKMUTUSPM/0HiF7QNVxS+zIIv/WeNRdhE=) 2: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: KMcz9HndxaUeKt8rn5FI6Dp+4OSaacNz41TOKfq1iXs=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 0veKivESqTIR22CLe0BQKZVbkyyZLitqVchvnzV7aBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:48:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7b:6b:15:40:76:d9:c4:a5:b1:68:44:8e:79:59:ae:5f:77:10:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: May 10 08:06:48 2025 GMT Not After : May 13 08:48:48 2025 GMT Subject: CN=9E9863D18D8E52182935DF4DA4DF9C242E80F03A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:11:99:e5:c1:13:f2:2c:bc:71:ce:e1:44:19: 7b:cf:ec:1e:67:07:8b:ca:34:59:81:57:69:1b:71: 0d:07:38:4d:4d:d7:31:fe:5c:79:4b:55:db:d1:07: 15:91:be:db:c9:84:75:79:a5:82:f4:4f:5e:35:71: 8d:e1:9d:7b:8d:c2:1a:93:84:52:8e:79:2e:72:47: ea:b8:30:51:3a:70:92:63:5e:92:75:f3:ee:5d:71: ed:cc:c4:04:be:24:7b:cc:f3:f6:12:25:95:00:89: 68:b0:dd:c1:50:f4:fc:00:86:94:90:da:e6:03:80: 8a:e4:8f:26:e3:8a:2d:c3:d0:79:04:ea:23:bf:40: f9:eb:45:58:95:bc:00:f0:05:d7:10:e3:e5:85:76: 92:d3:ea:ed:e2:0b:28:d0:4c:89:51:d5:9d:00:b3: 81:23:be:88:aa:b8:b7:04:d2:2c:6d:8a:35:7c:a3: d1:22:27:f9:6e:a8:f4:21:e4:e4:db:d4:36:4e:f3: 62:9f:7c:1d:c9:8e:4e:49:f9:86:d6:94:db:5f:6a: eb:66:60:ae:42:c2:27:98:c5:eb:0f:3a:2b:66:e7: a7:1d:93:67:0f:4a:5f:8d:df:b5:3d:ac:c3:c8:21: ea:80:5f:23:3e:4f:13:f4:52:1c:59:b2:63:cd:6c: 97:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:98:63:D1:8D:8E:52:18:29:35:DF:4D:A4:DF:9C:24:2E:80:F0:3A X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5b:fa:a9:2e:01:b4:b3:54:cd:b1:50:4f:0f:1a:97:94:17: e1:12:ad:08:b6:fe:2c:76:90:e2:fb:1c:01:1a:45:c7:a7:8a: 1f:50:5b:91:ac:4f:94:dc:13:1d:d6:0e:b0:33:f1:79:3c:cb: 4b:73:f9:af:6c:1c:14:5d:2c:b6:53:0d:e5:20:40:a4:08:c5: 50:98:6c:b2:6a:c9:82:b0:73:a7:ea:0a:bc:31:68:dc:83:4f: 99:28:2d:7f:4a:30:56:c3:e1:11:9b:a3:d1:6a:de:b5:49:8c: 3f:f1:00:3b:0f:5c:ff:75:31:97:72:c7:a4:f7:9f:ab:3b:e5: 6c:cf:4c:aa:95:e8:5a:fb:82:7c:12:ea:0d:ce:60:79:0b:e5: e1:f0:b6:35:b0:f0:29:7f:2b:fe:1b:ca:49:e4:90:df:2b:da: c0:bd:82:cc:87:b3:5d:58:45:f6:02:7e:3d:97:32:75:f7:0e: d5:bf:a2:fc:90:6d:4a:74:f0:a6:ef:d9:6a:ea:3f:c5:bf:25: a5:17:55:f9:6d:7a:35:1e:b3:d7:cb:84:c9:fc:9c:f8:fe:ea: ae:ca:2c:8b:b1:fd:dd:ba:1c:36:03:a3:2f:e6:cf:2c:2d:e4: 8b:a5:95:94:b3:ec:00:4c:29:d2:2f:03:dc:96:a4:17:6d:44: f8:3a:1a:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdntrFUB22cSlsWhEjnlZrl93EL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNTA1MTAwODA2NDhaFw0yNTA1MTMwODQ4NDhaMDMxMTAvBgNV BAMTKDlFOTg2M0QxOEQ4RTUyMTgyOTM1REY0REE0REY5QzI0MkU4MEYwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEZnlwRPyLLxxzuFEGXvP7B5n B4vKNFmBV2kbcQ0HOE1N1zH+XHlLVdvRBxWRvtvJhHV5pYL0T141cY3hnXuNwhqT hFKOeS5yR+q4MFE6cJJjXpJ18+5dce3MxAS+JHvM8/YSJZUAiWiw3cFQ9PwAhpSQ 2uYDgIrkjybjii3D0HkE6iO/QPnrRViVvADwBdcQ4+WFdpLT6u3iCyjQTIlR1Z0A s4EjvoiquLcE0ixtijV8o9EiJ/luqPQh5OTb1DZO82KffB3Jjk5J+YbWlNtfautm YK5CwieYxesPOitm56cdk2cPSl+N37U9rMPIIeqAXyM+TxP0UhxZsmPNbJd3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnphj0Y2OUhgpNd9NpN+cJC6A8DowHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9b+qkuAbSzVM2xUE8PGpeUF+ESrQi2/ix2 kOL7HAEaRcenih9QW5GsT5TcEx3WDrAz8Xk8y0tz+a9sHBRdLLZTDeUgQKQIxVCY bLJqyYKwc6fqCrwxaNyDT5koLX9KMFbD4RGbo9Fq3rVJjD/xADsPXP91MZdyx6T3 n6s75WzPTKqV6Fr7gnwS6g3OYHkL5eHwtjWw8Cl/K/4byknkkN8r2sC9gsyHs11Y RfYCfj2XMnX3DtW/ovyQbUp08Kbv2WrqP8W/JaUXVfltejUes9fLhMn8nPj+6q7K LIux/d26HDYDoy/mzywt5IullZSz7ABMKdIvA9yWpBdtRPg6Gkg= -----END CERTIFICATE-----Generated at Mon May 12 07:43:50 2025 by rpki-client