$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: 4yRYFGH8+fc4uf+moeollwh36W1cgEXri9XP4xLhmM0= Subject key identifier: FF:B7:0B:D7:18:48:83:CB:7C:E5:31:F9:7B:C7:A9:16:1E:6F:AD:49 Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 1459E31CA48365C69EF911299BAFA0B48AD2E737 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 0188 Signing time: Sun 29 Jun 2025 17:21:18 +0000 Manifest this update: Sun 29 Jun 2025 17:16:18 +0000 Manifest next update: Wed 02 Jul 2025 23:27:18 +0000 Files and hashes: 1: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: UiT4seYGc2LRhlDHPZFCHvfBBtdW1FREPb29P5n03i8=) 2: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: KyyfIg0NubmC9VxusblXXOllAjO6aifwPQ8j+Ypuo7s=) 3: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 4: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 5: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: EztX/pCLRjxuGDD5KwhPpuJplaVIMLa9IH/IjmNzx0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 23:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:59:e3:1c:a4:83:65:c6:9e:f9:11:29:9b:af:a0:b4:8a:d2:e7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Jun 29 17:16:18 2025 GMT Not After : Jul 2 23:27:18 2025 GMT Subject: CN=FFB70BD7184883CB7CE531F97BC7A9161E6FAD49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:eb:57:f4:22:d2:61:25:d5:0d:86:cc:67:81: 63:2a:d6:49:e3:c7:90:9e:2d:da:6b:57:b0:f6:27: a2:99:dd:0c:1e:c3:fc:a2:40:ac:d8:d9:1d:ba:91: 71:fb:e8:b2:7c:13:59:0b:27:2c:cd:e7:2e:6b:17: 4e:a8:33:a2:a2:58:7a:ad:2b:c8:58:8f:c9:b9:36: 8d:7f:f4:ca:f0:7c:84:09:9c:82:a1:49:78:dd:70: 6c:2f:2b:b4:c9:5e:77:42:25:58:c7:45:bf:e5:31: 56:d8:05:53:51:78:22:a2:f9:d6:ce:bb:dc:79:a6: ce:91:8f:53:a8:89:5f:8e:0e:74:8a:51:94:54:fc: 89:da:76:bf:09:81:2f:34:fe:12:87:20:7d:ee:e3: d1:f8:36:77:e8:2f:08:b8:4b:75:9a:09:3a:f1:bd: 81:f6:38:5b:e4:fd:ad:13:51:05:66:e1:5c:2d:1c: 1c:7b:3d:4e:4b:ff:2a:5b:4a:ee:26:75:65:bd:9e: 5f:01:69:22:aa:2c:aa:6d:3a:7a:b1:43:8c:78:b4: 92:38:60:c4:e4:d5:a6:33:a8:35:b3:8f:da:68:d4: 62:b4:77:4f:07:7c:3e:ad:5f:7a:9e:4a:86:3b:2c: 34:9e:31:0b:c2:78:a1:f8:05:ab:b7:67:99:69:81: 85:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B7:0B:D7:18:48:83:CB:7C:E5:31:F9:7B:C7:A9:16:1E:6F:AD:49 X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:8a:88:f4:da:69:39:43:ab:b1:29:e4:2a:a3:fd:0b:2f:96: a9:ca:b9:50:aa:e9:23:d3:9e:68:f9:22:b1:01:7e:6e:6a:b1: da:d7:83:f8:95:7e:30:9f:73:f3:91:04:19:1f:1d:e9:68:57: 73:a3:87:47:6f:12:cc:b6:2d:da:40:c9:2c:04:00:0d:b1:e8: 82:2f:6a:3a:6e:f3:18:21:b6:ef:64:26:c9:ae:c2:9c:14:bd: a9:53:0f:87:fd:46:13:e3:66:39:44:23:5b:4e:f4:74:d5:6e: 44:75:d5:af:50:a0:ec:fc:08:35:4b:32:eb:0f:cc:f9:5d:dd: da:61:72:20:3a:e1:6c:0a:5b:ec:62:51:27:ea:98:ef:b6:73: 5a:45:97:96:16:ba:61:92:9c:be:02:0a:58:5c:ea:61:a4:1b: d5:bd:44:5f:96:a5:b9:e6:c4:7d:6f:5b:03:15:6d:46:fc:54: c2:9e:7a:71:2b:54:8b:55:d3:dc:67:c0:51:d9:45:a9:53:aa: 23:0e:e3:40:74:44:61:17:7a:ce:af:9c:23:a1:89:e1:ae:ae: 1d:24:d8:20:5e:ba:1b:ee:29:3d:62:b4:44:31:32:88:a0:9c: 0e:82:04:00:fd:3b:07:a3:80:4d:73:d8:53:9a:ce:23:e0:fc: dc:0b:2e:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFnjHKSDZcae+REpm6+gtIrS5zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTA2MjkxNzE2MThaFw0yNTA3MDIyMzI3MThaMDMxMTAvBgNV BAMTKEZGQjcwQkQ3MTg0ODgzQ0I3Q0U1MzFGOTdCQzdBOTE2MUU2RkFENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg61f0ItJhJdUNhsxngWMq1knj x5CeLdprV7D2J6KZ3Qwew/yiQKzY2R26kXH76LJ8E1kLJyzN5y5rF06oM6KiWHqt K8hYj8m5No1/9MrwfIQJnIKhSXjdcGwvK7TJXndCJVjHRb/lMVbYBVNReCKi+dbO u9x5ps6Rj1OoiV+ODnSKUZRU/Inadr8JgS80/hKHIH3u49H4NnfoLwi4S3WaCTrx vYH2OFvk/a0TUQVm4VwtHBx7PU5L/ypbSu4mdWW9nl8BaSKqLKptOnqxQ4x4tJI4 YMTk1aYzqDWzj9po1GK0d08HfD6tX3qeSoY7LDSeMQvCeKH4Bau3Z5lpgYXRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/7cL1xhIg8t85TH5e8epFh5vrUkwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABiKiPTaaTlDq7Ep5Cqj/QsvlqnKuVCq6SPT nmj5IrEBfm5qsdrXg/iVfjCfc/ORBBkfHeloV3Ojh0dvEsy2LdpAySwEAA2x6IIv ajpu8xghtu9kJsmuwpwUvalTD4f9RhPjZjlEI1tO9HTVbkR11a9QoOz8CDVLMusP zPld3dphciA64WwKW+xiUSfqmO+2c1pFl5YWumGSnL4CClhc6mGkG9W9RF+Wpbnm xH1vWwMVbUb8VMKeenErVItV09xnwFHZRalTqiMO40B0RGEXes6vnCOhieGurh0k 2CBeuhvuKT1itEQxMoignA6CBAD9OwejgE1z2FOaziPg/NwLLhc= -----END CERTIFICATE-----Generated at Mon Jun 30 05:11:57 2025 by rpki-client