$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: /65+YlkCXpmpEeUu3X/Z7w6e/MPN9idxi+rY86xbzoU= Subject key identifier: CD:4B:2A:EA:F4:1F:3A:1A:A9:E1:59:E1:31:7C:34:76:1B:FE:EF:F9 Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 785ACB937DA4F4BC80F9E12C9654D3AB0932C578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 01A0 Signing time: Fri 22 Aug 2025 07:32:17 +0000 Manifest this update: Fri 22 Aug 2025 07:27:17 +0000 Manifest next update: Mon 25 Aug 2025 15:59:17 +0000 Files and hashes: 1: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 2: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: qqFi1Go+ufRk202vU+li58lIyLZNJgVi/lH7h/h86hU=) 3: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 4: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: UiT4seYGc2LRhlDHPZFCHvfBBtdW1FREPb29P5n03i8=) 5: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: EztX/pCLRjxuGDD5KwhPpuJplaVIMLa9IH/IjmNzx0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5a:cb:93:7d:a4:f4:bc:80:f9:e1:2c:96:54:d3:ab:09:32:c5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Aug 22 07:27:17 2025 GMT Not After : Aug 25 15:59:17 2025 GMT Subject: CN=CD4B2AEAF41F3A1AA9E159E1317C34761BFEEFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:64:0f:14:6c:01:01:f6:16:37:e5:a6:65: 25:6d:99:53:80:78:32:1c:c5:ec:e0:77:0e:af:cb: d9:59:75:51:7c:e3:07:bb:02:b4:f3:04:08:1f:d4: 6f:3e:e8:21:e2:6e:9c:d7:8b:7d:cd:93:c1:ed:58: 3a:02:a4:9c:ee:ff:d7:9e:12:b8:e2:c9:02:03:4c: ea:fb:85:0c:d8:99:89:0e:5e:10:31:c3:77:fe:ea: ad:2f:f9:88:9f:d8:fd:76:a9:a3:81:04:43:f3:f2: 42:a4:e2:af:99:59:50:51:af:c3:93:9d:37:77:48: c5:13:0d:e2:fa:0c:f7:21:1a:42:5b:4d:4d:ad:f0: 56:e0:31:91:4a:83:ef:65:61:de:19:0b:f3:61:87: 82:b8:0f:34:33:ac:a2:ee:a0:f8:47:bb:7e:8b:a3: 1b:61:1f:d8:eb:f4:64:bd:aa:6e:0c:29:7b:1d:da: 79:f2:ec:ad:8d:1a:8d:df:dd:49:16:8c:6a:27:c6: ef:44:90:41:7b:e4:00:16:72:54:ea:29:fc:8c:9f: a1:05:0a:fc:69:41:b5:80:1f:57:da:11:8f:9d:8c: 80:30:20:a0:78:28:18:8e:81:10:ee:9a:b2:95:62: 41:49:9e:1a:43:6e:be:ce:c1:f8:5a:a3:5e:10:07: 32:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4B:2A:EA:F4:1F:3A:1A:A9:E1:59:E1:31:7C:34:76:1B:FE:EF:F9 X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:6f:9f:fe:3e:51:77:1a:7f:9f:02:da:95:c1:fa:88:b5:0d: ed:9b:a5:9f:62:4d:40:71:2a:32:55:32:44:c3:e3:6a:7d:79: 4c:74:b5:0c:8c:31:d1:51:31:4e:84:75:4a:40:7c:be:b6:ab: da:80:36:bd:09:03:60:29:e4:1d:74:2d:1d:ca:d7:c6:a9:f9: 8b:d2:05:a4:ac:8d:e2:91:01:97:fd:4c:5d:92:9b:73:ae:d6: fe:bc:fe:02:7c:b1:7b:cf:c9:d5:87:91:9a:bf:f0:c1:8c:64: a5:e6:77:9e:c8:99:6d:e4:1a:60:03:ac:b6:78:d0:d7:cf:e2: 37:42:48:af:62:23:91:4c:64:3c:80:67:fb:e5:65:e8:e5:93: 3b:17:b7:b5:d9:3e:99:b7:e4:cb:81:ed:18:8c:da:45:9b:fd: d1:78:a6:e4:65:35:87:ce:57:c1:32:a1:2d:37:e6:8e:dd:69: 05:f7:56:65:01:be:da:38:e0:79:e0:d3:5a:06:c4:0c:97:1b: d1:ce:8f:ec:81:fb:fa:68:8c:91:0d:d2:dd:15:a4:1b:9f:c0: d4:76:ec:40:4f:3f:3b:cf:47:19:22:9a:f5:ae:d2:7f:2e:23: 21:51:50:19:3e:06:b4:7a:04:9d:06:be:85:2c:71:20:d9:5e: 28:7c:dc:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeFrLk32k9LyA+eEsllTTqwkyxXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTA4MjIwNzI3MTdaFw0yNTA4MjUxNTU5MTdaMDMxMTAvBgNV BAMTKENENEIyQUVBRjQxRjNBMUFBOUUxNTlFMTMxN0MzNDc2MUJGRUVGRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cGQPFGwBAfYWN+WmZSVtmVOA eDIcxezgdw6vy9lZdVF84we7ArTzBAgf1G8+6CHibpzXi33Nk8HtWDoCpJzu/9ee ErjiyQIDTOr7hQzYmYkOXhAxw3f+6q0v+Yif2P12qaOBBEPz8kKk4q+ZWVBRr8OT nTd3SMUTDeL6DPchGkJbTU2t8FbgMZFKg+9lYd4ZC/Nhh4K4DzQzrKLuoPhHu36L oxthH9jr9GS9qm4MKXsd2nny7K2NGo3f3UkWjGonxu9EkEF75AAWclTqKfyMn6EF CvxpQbWAH1faEY+djIAwIKB4KBiOgRDumrKVYkFJnhpDbr7Owfhao14QBzJDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzUsq6vQfOhqp4VnhMXw0dhv+7/kwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM5vn/4+UXcaf58C2pXB+oi1De2bpZ9iTUBx KjJVMkTD42p9eUx0tQyMMdFRMU6EdUpAfL62q9qANr0JA2Ap5B10LR3K18ap+YvS BaSsjeKRAZf9TF2Sm3Ou1v68/gJ8sXvPydWHkZq/8MGMZKXmd57ImW3kGmADrLZ4 0NfP4jdCSK9iI5FMZDyAZ/vlZejlkzsXt7XZPpm35MuB7RiM2kWb/dF4puRlNYfO V8EyoS035o7daQX3VmUBvto44Hng01oGxAyXG9HOj+yB+/pojJEN0t0VpBufwNR2 7EBPPzvPRxkimvWu0n8uIyFRUBk+BrR6BJ0GvoUscSDZXih83DU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:18:45 2025 by rpki-client