$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: 8YzFyle9/QceAfMBx8FsiohSJd91KeCVBo47ATNUnCQ= Subject key identifier: 65:0A:E8:40:1F:6A:B8:6B:27:FA:D3:CF:F0:DC:56:7B:15:0E:F5:47 Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 17A2B0C75CA2A04BCC1DF3AE12792DFFF156DDD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 0171 Signing time: Wed 07 May 2025 18:01:38 +0000 Manifest this update: Wed 07 May 2025 17:56:38 +0000 Manifest next update: Sun 11 May 2025 06:00:38 +0000 Files and hashes: 1: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 2: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: 5ZQeUTNwEVwnUzseZwdS5Pf8MIB9dzKBMopget2JkLE=) 3: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: UiT4seYGc2LRhlDHPZFCHvfBBtdW1FREPb29P5n03i8=) 4: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 5: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: EztX/pCLRjxuGDD5KwhPpuJplaVIMLa9IH/IjmNzx0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 03:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a2:b0:c7:5c:a2:a0:4b:cc:1d:f3:ae:12:79:2d:ff:f1:56:dd:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: May 7 17:56:38 2025 GMT Not After : May 11 06:00:38 2025 GMT Subject: CN=650AE8401F6AB86B27FAD3CFF0DC567B150EF547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:19:5b:a9:2c:99:9d:9e:46:32:8f:be:28: 1a:70:d6:16:68:bb:88:b7:62:61:8e:fa:c4:1d:f3: c0:6a:ce:ed:d5:5f:5e:02:54:08:f0:8c:52:7e:7b: 24:63:ae:28:06:23:e3:87:3b:b5:0d:85:3e:5b:7a: 5b:65:82:f4:d7:4b:85:51:b4:d8:66:a0:0a:08:3c: d8:d8:43:32:7a:ec:30:85:96:e3:df:9d:2f:43:f0: fc:94:ed:e2:45:b8:9e:5a:f9:50:88:a9:ae:80:b7: e3:19:84:1f:e1:17:08:22:f7:05:50:ba:0e:f1:f0: 4c:22:4f:21:b0:f5:f5:7f:54:4f:d3:29:2a:87:c1: a1:9d:cc:44:87:79:94:27:79:35:89:74:84:47:88: 94:15:a8:51:8a:ed:b4:56:a0:79:b7:df:6f:d3:7a: ef:c4:19:c5:be:99:66:2a:54:81:4a:16:b4:1c:e1: 58:80:2b:35:ef:cf:b5:84:d9:6b:41:da:c4:4e:b2: f9:28:76:24:12:16:8a:ff:72:7b:c4:d5:5a:66:fb: b2:f6:81:4c:1a:d1:2c:1c:ce:28:1f:9e:61:09:f8: 65:b2:23:29:e3:6a:b7:93:e0:4f:b1:cc:fb:8b:df: 83:d4:e7:eb:8f:f2:85:66:18:7a:cc:1e:1f:44:97: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0A:E8:40:1F:6A:B8:6B:27:FA:D3:CF:F0:DC:56:7B:15:0E:F5:47 X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:fa:66:84:32:7e:fd:cf:fa:0c:7f:f5:c3:f2:db:32:60:52: ce:5b:7c:d1:6c:2c:52:f0:3c:71:3d:21:6f:3f:5b:a6:55:fb: ef:f6:78:5e:5b:af:4f:26:fa:bb:ec:02:9b:19:c5:4c:51:d5: eb:8e:b8:d5:3f:68:74:a6:3c:2e:9c:3b:64:e7:fc:cd:9c:4e: c4:3a:56:1f:92:fd:85:b7:cf:4c:aa:7e:81:9a:56:74:cf:eb: 91:28:b3:21:73:1d:85:e3:30:14:f3:1b:0f:1f:4e:a4:4b:72: 63:0c:78:9f:f9:a4:26:2b:28:0c:87:f9:7d:d9:ff:16:5c:86: 58:9e:f3:c0:87:7e:b8:78:69:c1:73:84:62:3e:5a:b5:7b:d5: cc:6b:57:d2:e3:72:e8:c7:df:00:1f:d9:a4:8e:1b:76:8e:8c: 28:3c:f2:4f:58:1f:45:10:4a:de:80:2d:00:4b:35:2e:d4:ab: db:31:42:c9:6e:4a:2d:6e:ac:5f:0a:98:22:db:bb:2a:96:66: ee:f6:0e:47:c5:1b:ff:3b:29:43:f1:ba:a5:71:61:78:5a:17: 47:ec:f9:23:c5:d0:48:fd:59:4d:00:1e:29:1c:05:b0:cb:ea: 34:2e:3d:78:15:8f:7a:68:2d:52:d9:48:e9:3f:c5:75:b5:3f: 00:9f:a6:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6Kwx1yioEvMHfOuEnkt//FW3dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTA1MDcxNzU2MzhaFw0yNTA1MTEwNjAwMzhaMDMxMTAvBgNV BAMTKDY1MEFFODQwMUY2QUI4NkIyN0ZBRDNDRkYwREM1NjdCMTUwRUY1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCehBlbqSyZnZ5GMo++KBpw1hZo u4i3YmGO+sQd88Bqzu3VX14CVAjwjFJ+eyRjrigGI+OHO7UNhT5beltlgvTXS4VR tNhmoAoIPNjYQzJ67DCFluPfnS9D8PyU7eJFuJ5a+VCIqa6At+MZhB/hFwgi9wVQ ug7x8EwiTyGw9fV/VE/TKSqHwaGdzESHeZQneTWJdIRHiJQVqFGK7bRWoHm332/T eu/EGcW+mWYqVIFKFrQc4ViAKzXvz7WE2WtB2sROsvkodiQSFor/cnvE1Vpm+7L2 gUwa0SwczigfnmEJ+GWyIynjareT4E+xzPuL34PU5+uP8oVmGHrMHh9El3m5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZQroQB9quGsn+tPP8NxWexUO9UcwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD6ZoQyfv3P+gx/9cPy2zJgUs5bfNFsLFLw PHE9IW8/W6ZV++/2eF5br08m+rvsApsZxUxR1euOuNU/aHSmPC6cO2Tn/M2cTsQ6 Vh+S/YW3z0yqfoGaVnTP65EosyFzHYXjMBTzGw8fTqRLcmMMeJ/5pCYrKAyH+X3Z /xZchlie88CHfrh4acFzhGI+WrV71cxrV9LjcujH3wAf2aSOG3aOjCg88k9YH0UQ St6ALQBLNS7Uq9sxQsluSi1urF8KmCLbuyqWZu72DkfFG/87KUPxuqVxYXhaF0fs +SPF0Ej9WU0AHikcBbDL6jQuPXgVj3poLVLZSOk/xXW1PwCfpnw= -----END CERTIFICATE-----Generated at Thu May 8 00:13:24 2025 by rpki-client