$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: ZaplPYnWUIilnnkNcgo+BkxZ0DrxTXWTcL/mA7Z9gsY= Subject key identifier: F9:38:41:2B:8F:22:27:DE:39:91:17:6D:5C:AC:D9:76:A3:0E:C9:F9 Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 59D561F2B87447B747A24325F7C5802BFDED713F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 01C5 Signing time: Thu 08 May 2025 13:01:33 +0000 Manifest this update: Thu 08 May 2025 12:56:33 +0000 Manifest next update: Sun 11 May 2025 16:24:33 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: oBhfByz3+3JTSjxr3uFE3WYFnvHstOvWsy/WSqwkgl0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:d5:61:f2:b8:74:47:b7:47:a2:43:25:f7:c5:80:2b:fd:ed:71:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: May 8 12:56:33 2025 GMT Not After : May 11 16:24:33 2025 GMT Subject: CN=F938412B8F2227DE3991176D5CACD976A30EC9F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:ca:7c:33:c1:af:b8:84:3e:07:8b:bd:9a: 9a:a9:38:9f:a3:45:e7:ca:cc:e9:6c:4e:cf:3e:d9: 70:23:d1:16:dc:ec:6f:dd:5f:e2:ae:c7:36:4d:19: f3:ea:b3:c8:c1:df:02:e5:59:c0:fa:55:f1:2b:15: 5b:18:98:b0:16:51:09:93:c5:79:79:7b:1d:e6:76: d4:c6:eb:07:ef:81:4c:9a:c4:39:6a:3f:73:c6:4c: 10:eb:d3:ed:46:2e:d8:5b:da:ff:96:b5:db:f0:e6: ff:18:04:6c:9e:a0:1a:af:bb:1a:53:e3:8d:5e:0e: 4d:22:8b:c5:75:f1:3c:e7:bc:51:58:5d:08:27:a0: 07:fd:6d:90:95:35:52:d8:50:f4:7f:28:8f:6f:48: 98:9c:c7:ae:af:31:02:4b:49:46:b5:e8:52:be:9f: 18:95:f4:cb:4b:08:03:da:a7:25:38:79:9f:d8:89: e3:bf:df:93:1b:bb:3a:4a:c0:dc:bd:1c:86:d3:54: 83:41:4f:d7:07:2b:d3:d2:27:14:bb:cd:66:84:cc: b0:35:4e:b7:5a:e0:1d:04:c6:0a:8c:9b:58:9a:84: e4:3e:55:e2:d8:a3:69:bb:4e:0a:04:c4:2b:31:61: c6:49:a5:97:62:67:dc:0f:b4:00:48:18:41:08:0c: 26:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:38:41:2B:8F:22:27:DE:39:91:17:6D:5C:AC:D9:76:A3:0E:C9:F9 X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:08:ef:63:9a:ea:08:72:8a:d0:80:d8:aa:dd:c4:d3:4b:fc: 16:16:55:4e:b1:9b:9e:a5:6a:37:5d:e7:13:df:44:87:c5:7d: 86:36:d9:47:c7:32:f3:87:53:66:5e:9a:56:74:36:22:3b:e9: aa:b6:9c:a4:d6:2e:84:9f:6c:23:12:40:1c:2c:6e:4b:17:c1: 00:86:e0:a6:4e:b4:85:fe:b5:1e:9d:3c:a5:c1:2a:79:b9:0e: ff:59:3d:c3:dd:b3:d4:b3:16:d0:99:2e:d3:70:66:ce:72:a2: 24:c4:9b:31:9d:a0:1a:52:cb:f5:6a:96:46:77:0a:9a:e5:f5: 42:dc:e1:d8:a6:8a:b5:89:fb:5d:a9:57:a4:62:6d:c9:68:0d: 5a:2e:eb:8b:c5:dd:58:5f:e8:70:86:39:ef:c4:73:b2:fb:ec: f4:4f:b9:37:e7:39:b3:cf:8a:e0:0e:20:ee:74:56:3c:64:e9: 77:ee:3c:30:7d:74:9a:4c:04:69:ca:80:76:10:7d:82:71:db: 80:91:12:52:51:a9:bf:db:80:8d:a4:c5:7b:93:84:91:0b:90: 75:e2:dd:ec:ac:2a:83:2f:ee:a8:6a:ad:f5:f4:c2:81:16:97: 15:4e:f1:e1:cd:6f:a5:65:72:77:2f:cd:1b:5e:cc:54:4b:fc: 8b:96:e8:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWdVh8rh0R7dHokMl98WAK/3tcT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTA1MDgxMjU2MzNaFw0yNTA1MTExNjI0MzNaMDMxMTAvBgNV BAMTKEY5Mzg0MTJCOEYyMjI3REUzOTkxMTc2RDVDQUNEOTc2QTMwRUM5RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkqcp8M8GvuIQ+B4u9mpqpOJ+j RefKzOlsTs8+2XAj0Rbc7G/dX+KuxzZNGfPqs8jB3wLlWcD6VfErFVsYmLAWUQmT xXl5ex3mdtTG6wfvgUyaxDlqP3PGTBDr0+1GLthb2v+Wtdvw5v8YBGyeoBqvuxpT 441eDk0ii8V18TznvFFYXQgnoAf9bZCVNVLYUPR/KI9vSJicx66vMQJLSUa16FK+ nxiV9MtLCAPapyU4eZ/YieO/35MbuzpKwNy9HIbTVINBT9cHK9PSJxS7zWaEzLA1 Trda4B0ExgqMm1iahOQ+VeLYo2m7TgoExCsxYcZJpZdiZ9wPtABIGEEIDCYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ThBK48iJ945kRdtXKzZdqMOyfkwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsI72Oa6ghyitCA2KrdxNNL/BYWVU6xm56l ajdd5xPfRIfFfYY22UfHMvOHU2ZemlZ0NiI76aq2nKTWLoSfbCMSQBwsbksXwQCG 4KZOtIX+tR6dPKXBKnm5Dv9ZPcPds9SzFtCZLtNwZs5yoiTEmzGdoBpSy/VqlkZ3 Cprl9ULc4dimirWJ+12pV6RibcloDVou64vF3Vhf6HCGOe/Ec7L77PRPuTfnObPP iuAOIO50Vjxk6XfuPDB9dJpMBGnKgHYQfYJx24CRElJRqb/bgI2kxXuThJELkHXi 3eysKoMv7qhqrfX0woEWlxVO8eHNb6VlcncvzRtezFRL/IuW6I0= -----END CERTIFICATE-----Generated at Fri May 9 07:35:31 2025 by rpki-client