$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: Fhngw/rBIwmixOc1z5PVQ/eZVHQ188SbFKQsvbqTIAA= Subject key identifier: 1A:5B:75:32:42:FE:61:31:42:B9:13:86:EF:F2:FF:64:1C:2B:68:60 Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 758B98746569A601C9FD7E415B95EF9417E9DBA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 01DE Signing time: Wed 02 Jul 2025 20:21:42 +0000 Manifest this update: Wed 02 Jul 2025 20:16:42 +0000 Manifest next update: Sun 06 Jul 2025 00:04:42 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: Ekvc4+dEN6RBXbW6On1zf5r0vbLXI7EUBTnqwTHLicM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:8b:98:74:65:69:a6:01:c9:fd:7e:41:5b:95:ef:94:17:e9:db:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Jul 2 20:16:42 2025 GMT Not After : Jul 6 00:04:42 2025 GMT Subject: CN=1A5B753242FE613142B91386EFF2FF641C2B6860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:8a:b7:bb:1b:6e:9d:8e:ce:e9:71:7a:49: bb:6f:0d:fc:5a:92:11:24:0f:b8:bf:71:ea:25:c5: 5a:f1:fd:52:26:cb:f3:81:e9:88:02:cc:83:d2:76: 7c:35:f9:d2:60:c6:9c:fd:f3:9b:6d:cb:18:74:c2: be:65:ca:31:41:4e:4e:85:eb:67:37:1e:13:a0:2c: f5:03:58:75:73:1b:93:20:aa:b3:25:4f:aa:76:54: 2e:2d:4f:7f:0a:67:94:d9:ea:26:94:68:a4:32:94: 7a:62:dd:04:a6:5c:bc:8e:5d:90:9c:68:c8:e0:ee: 4a:ed:e2:64:2c:fb:50:ec:af:b5:23:68:b6:25:c6: ba:02:3c:d6:5d:ae:9d:1b:25:95:40:96:03:9e:be: 16:cd:fb:d9:b2:49:e7:4c:d2:ec:f1:06:3f:c5:77: c3:c8:37:a9:48:0a:e8:8c:ab:d1:58:23:fa:e4:38: 2c:73:e1:e2:fa:ab:29:e2:70:9f:da:f1:b2:54:8b: c4:36:f4:b4:10:c9:d7:d5:f6:6d:15:4d:eb:c2:ac: ac:61:70:dd:6e:fb:10:d1:d7:88:5b:fa:29:4d:13: a1:e3:fc:f2:fa:5c:63:f1:c8:50:82:e1:fd:00:08: 0a:7e:b6:fd:8e:3f:24:2b:e7:03:8b:8c:7c:f9:e6: ea:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5B:75:32:42:FE:61:31:42:B9:13:86:EF:F2:FF:64:1C:2B:68:60 X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e3:28:4d:f9:2d:7e:6d:31:c0:81:18:34:2c:0d:45:ea:be: d4:ff:72:db:3e:7b:76:de:1f:21:a7:b8:18:11:23:54:52:e9: 38:e6:cd:d6:f8:b2:27:b6:53:62:24:3f:b6:ac:e2:d0:c2:62: c7:23:b2:e7:3b:32:7a:d4:66:e2:d6:40:72:db:24:bf:ff:40: e6:4c:b6:f4:b0:53:5a:d3:60:bc:d6:6c:0e:35:a7:ed:3a:28: 39:e1:64:de:cb:2e:d4:7e:66:6f:10:ea:cf:21:fd:a6:87:2d: 01:2b:4b:b5:65:79:9e:bd:db:bd:d0:ea:b2:01:aa:ed:2f:ba: cf:78:9b:be:d4:21:a2:91:e4:b9:92:f4:8d:2a:1b:71:6f:69: 78:98:89:00:af:7e:7e:20:e6:aa:12:f7:15:55:d1:d6:d8:cd: 61:12:fb:43:45:43:83:a8:62:8e:85:ab:7a:89:85:34:3b:02: 1a:fe:2e:68:64:e8:dc:4a:c3:3a:c1:88:d0:30:ba:13:04:f8: 6c:3a:3d:9b:8a:43:18:09:13:e4:65:66:84:79:23:9c:d3:bf: a6:25:3a:60:a0:7e:aa:ba:d6:c0:dc:1c:75:e0:94:db:e6:19: 34:66:26:3a:15:64:dc:13:10:86:8a:c5:cb:27:36:b0:06:2c: b7:60:60:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYuYdGVppgHJ/X5BW5XvlBfp26gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTA3MDIyMDE2NDJaFw0yNTA3MDYwMDA0NDJaMDMxMTAvBgNV BAMTKDFBNUI3NTMyNDJGRTYxMzE0MkI5MTM4NkVGRjJGRjY0MUMyQjY4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxoq3uxtunY7O6XF6SbtvDfxa khEkD7i/ceolxVrx/VImy/OB6YgCzIPSdnw1+dJgxpz985ttyxh0wr5lyjFBTk6F 62c3HhOgLPUDWHVzG5MgqrMlT6p2VC4tT38KZ5TZ6iaUaKQylHpi3QSmXLyOXZCc aMjg7krt4mQs+1Dsr7UjaLYlxroCPNZdrp0bJZVAlgOevhbN+9mySedM0uzxBj/F d8PIN6lICuiMq9FYI/rkOCxz4eL6qynicJ/a8bJUi8Q29LQQydfV9m0VTevCrKxh cN1u+xDR14hb+ilNE6Hj/PL6XGPxyFCC4f0ACAp+tv2OPyQr5wOLjHz55uqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGlt1MkL+YTFCuROG7/L/ZBwraGAwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXjKE35LX5tMcCBGDQsDUXqvtT/cts+e3be HyGnuBgRI1RS6Tjmzdb4sie2U2IkP7as4tDCYscjsuc7MnrUZuLWQHLbJL//QOZM tvSwU1rTYLzWbA41p+06KDnhZN7LLtR+Zm8Q6s8h/aaHLQErS7VleZ69273Q6rIB qu0vus94m77UIaKR5LmS9I0qG3FvaXiYiQCvfn4g5qoS9xVV0dbYzWES+0NFQ4Oo Yo6Fq3qJhTQ7Ahr+Lmhk6NxKwzrBiNAwuhME+Gw6PZuKQxgJE+RlZoR5I5zTv6Yl OmCgfqq61sDcHHXglNvmGTRmJjoVZNwTEIaKxcsnNrAGLLdgYAQ= -----END CERTIFICATE-----Generated at Fri Jul 4 06:11:22 2025 by rpki-client