$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft File: 455696A81F434F9A36D66F455F4B3C43855A18E1.mft (raw, json) Hash identifier: NYdkC9fGspOmh3SZa6OAi5qZ84rnqqrhwm5FyuAJ5TA= Subject key identifier: 35:17:03:13:A9:A1:A9:71:B8:2C:CF:FD:F0:24:7A:03:F4:62:5C:9A Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1 Certificate issuer: /CN=455696A81F434F9A36D66F455F4B3C43855A18E1 Certificate serial: 3DCAE66791822DDA6E4BB7391F9B264BD572018D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft Manifest number: 04E5 Signing time: Wed 07 May 2025 11:41:37 +0000 Manifest this update: Wed 07 May 2025 11:36:37 +0000 Manifest next update: Sat 10 May 2025 22:24:37 +0000 Files and hashes: 1: 323430333a666338303a383030303a3a2f33332d3333203d3e203633353031.roa (hash: pb+F8lpR9fsAHIJl8IH5JQ8/ORRQQoynvikl0Wj3k88=) 2: 36312e31342e3234382e302f32332d3233203d3e203633353031.roa (hash: amaiLzdUwTKVzjSqw0g7k3elFuztKVLABIV79JsIANU=) 3: 36312e31342e3235302e302f32342d3234203d3e203633353031.roa (hash: Wnvd+hNJhshnw3NYsyqqQV+AEc8in7sE0mF0z6UM9SU=) 4: 3130332e33392e35302e302f32332d3233203d3e203633353031.roa (hash: OU3nHib94s48uA3g9X8DWTlyuO1snSUoniGNoRGcx48=) 5: 323430333a666338303a3a2f33322d3332203d3e203633353031.roa (hash: afNx4W0YHI+FGXSr3UXPU8iDUBt3OUkuJ8t/pSrfUhU=) 6: 323430333a666338303a3a2f33342d3334203d3e203633353031.roa (hash: nG3chfwV+Uv+wOu8/Mbc8cZ3sZHKFh+jV2Aw0lzXOGk=) 7: 455696A81F434F9A36D66F455F4B3C43855A18E1.crl (hash: o3nQ2lH0wtzr8DubhbkU19xFH4o4NWmIyRmT6yHfh+A=) 8: 36312e31342e3234382e302f32322d3232203d3e203633353031.roa (hash: 8ipLlntRcAgzxP5NkTTo5hrXyepoS087CiJmQYhl9m8=) 9: 323430333a666338303a343030303a3a2f33342d3334203d3e203633353031.roa (hash: BgpyECI68sQoV8aBe+6ptXJeBAqLh0geF+YrfUUTPU4=) 10: 3130332e33392e34392e302f32342d3234203d3e203633353031.roa (hash: T0uqsccny6w5uIFMvPwhjUFoM1WgkL4ynljfpYrSaxU=) 11: 36312e31342e3234392e302f32342d3234203d3e203633353031.roa (hash: BAE11o0NNolz1vCRng0wsgmveTea1izoZwH4BvIVYDI=) 12: 36312e31342e3234382e302f32342d3234203d3e203633353031.roa (hash: x9tx1EpaNS31D3UkjT02Xkr/3T80TryD3KNPn1JTD1o=) 13: 3130332e33392e34382e302f32322d3232203d3e203633353031.roa (hash: A6pjxoYBsP+4Tk+8q7iouVenuRQkKTHNj6WcMg3Pf9c=) 14: 36312e31342e3235312e302f32342d3234203d3e203633353031.roa (hash: tDeUesIT5hmczsW6BTxsBHwiYbeaF0RWGWq+DrgqHBc=) 15: 3130332e33392e34382e302f32332d3233203d3e203633353031.roa (hash: xAj5k4gQH36iwnsSHbT7ZuwohzTRhZXNulaieAkFS4E=) 16: 323430333a666338303a383030303a3a2f33342d3334203d3e203633353031.roa (hash: Trj6p0Rlo/tfMth5LyvO1Kojs35zcKquO5MiMEWd1j8=) 17: 36312e31342e3235302e302f32332d3233203d3e203633353031.roa (hash: eQ2BGFsZMS7TyrKFqeRKrN7JCvqYfrtXrQJKQZqXEzQ=) 18: 3130332e33392e35312e302f32342d3234203d3e203633353031.roa (hash: sg5nBnWxJBKkEZJ0PAs8mBBGrjeVo6wvBbtdy0OldzE=) 19: 323430333a666338303a3a2f33332d3333203d3e203633353031.roa (hash: tAI9xyf8dG+NoUduCe3xRQ9ptepoIvsd6sJHK3fn9FI=) 20: 3130332e33392e34382e302f32342d3234203d3e203633353031.roa (hash: 24KwUjur3eaTdZ1F+9Eh0rruH/CABrpO4rp4v7oF/fI=) 21: 3130332e33392e35302e302f32342d3234203d3e203633353031.roa (hash: bzW3RG2JF3vL2qKqKSdhmutTN+wrGA8fL8X4tlKUJd0=) 22: 323430333a666338303a633030303a3a2f33342d3334203d3e203633353031.roa (hash: KAi90Yk2UdHOaKXHZIHDbTVI33QuVqpll9UtX+WnAS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 22:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ca:e6:67:91:82:2d:da:6e:4b:b7:39:1f:9b:26:4b:d5:72:01:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1 Validity Not Before: May 7 11:36:37 2025 GMT Not After : May 10 22:24:37 2025 GMT Subject: CN=35170313A9A1A971B82CCFFDF0247A03F4625C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7d:1c:ce:c8:0a:05:0f:ca:59:75:b3:32:85: 44:5c:0b:09:95:dc:5b:90:5a:b8:d8:ec:2e:7d:10: b1:00:c4:41:73:bc:0a:5e:96:35:17:8a:71:7a:36: f9:42:32:95:2e:ae:81:99:65:69:df:5c:cf:d6:22: 60:35:35:47:61:9c:71:85:39:84:bb:d5:e1:65:7b: eb:0d:fb:03:75:97:7b:b2:50:97:f7:9d:ed:9c:1d: ad:5b:8a:b5:d8:c7:f1:ef:d6:49:26:f7:54:2c:cd: 9a:bd:b2:18:90:59:41:c8:8c:1a:12:3e:13:0c:e0: 31:12:1d:0e:cc:b2:d8:4a:a6:e7:e5:96:ab:40:82: 58:4c:0d:2c:18:27:32:7b:0f:6d:75:8c:e8:28:5d: 1c:ad:c4:de:2a:fe:ce:d7:f4:5a:c6:48:55:2f:e8: db:de:5e:12:47:4f:9e:72:d0:8b:10:ba:25:84:f8: 14:41:54:ca:37:d5:63:d2:fe:38:38:93:f6:63:16: 0a:41:9f:0c:45:4d:bf:0c:bd:8e:8b:66:a0:82:d7: dc:a1:0c:8e:79:91:1f:38:2f:a4:96:67:db:0e:06: dd:64:4d:b6:ca:ec:97:d0:60:a1:97:e7:96:a9:d7: c8:83:10:e9:fc:e1:60:06:85:3a:62:07:a8:05:3f: a9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:17:03:13:A9:A1:A9:71:B8:2C:CF:FD:F0:24:7A:03:F4:62:5C:9A X509v3 Authority Key Identifier: keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:4f:f8:63:16:d3:ec:fa:dc:d3:99:35:d3:81:bc:b7:9b:1a: 20:4e:c0:30:94:cc:15:bf:23:b4:f1:85:99:fb:70:3f:7b:7a: 62:84:ed:25:67:24:28:e4:0f:9b:bb:a0:ec:88:6c:52:29:62: 25:4a:05:89:aa:0e:90:aa:92:08:73:32:2b:28:7b:fd:33:df: 87:ec:2a:5e:4d:57:28:b9:0d:be:60:5c:a4:14:6d:9c:dc:53: cf:f2:f5:b3:f1:46:65:fb:aa:27:75:12:7d:46:24:ce:6b:e2: 2f:76:57:90:3b:e7:7b:bd:5b:fa:cc:f7:e2:c6:e9:c8:38:7e: d9:21:3d:5b:cb:3c:18:c6:d5:02:ea:f3:8a:77:64:b8:8f:c6: 62:17:ea:6f:77:55:a9:5c:91:5d:9c:17:22:eb:39:76:d9:07: 4c:21:0b:01:31:0b:33:b2:38:be:86:33:80:e3:d1:28:3b:18: 3a:35:ed:b5:81:a3:24:2c:9c:aa:d9:67:38:20:5f:96:20:fb: b1:17:a9:be:6b:fd:f6:48:87:fb:61:88:ba:9c:7f:59:1b:5c: 38:ca:db:ee:ed:f6:ee:27:de:46:f5:81:cc:8b:d4:8a:f6:92: 73:b7:a2:b6:6e:1c:31:6f:7d:f0:52:93:c7:6e:0c:20:57:70: 67:57:a8:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPcrmZ5GCLdpuS7c5H5smS9VyAY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4 NTVBMThFMTAeFw0yNTA1MDcxMTM2MzdaFw0yNTA1MTAyMjI0MzdaMDMxMTAvBgNV BAMTKDM1MTcwMzEzQTlBMUE5NzFCODJDQ0ZGREYwMjQ3QTAzRjQ2MjVDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5fRzOyAoFD8pZdbMyhURcCwmV 3FuQWrjY7C59ELEAxEFzvApeljUXinF6NvlCMpUuroGZZWnfXM/WImA1NUdhnHGF OYS71eFle+sN+wN1l3uyUJf3ne2cHa1birXYx/Hv1kkm91QszZq9shiQWUHIjBoS PhMM4DESHQ7MsthKpufllqtAglhMDSwYJzJ7D211jOgoXRytxN4q/s7X9FrGSFUv 6NveXhJHT55y0IsQuiWE+BRBVMo31WPS/jg4k/ZjFgpBnwxFTb8MvY6LZqCC19yh DI55kR84L6SWZ9sOBt1kTbbK7JfQYKGX55ap18iDEOn84WAGhTpiB6gFP6nVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNRcDE6mhqXG4LM/98CR6A/RiXJowHwYDVR0j BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB MThFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQ5MThiMTUtZTYzZS00YjM4LWEw NWMtNjUwZmI0OWYwNTk0LzAvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjND NDM4NTVBMThFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJP+GMW0+z63NOZNdOBvLebGiBOwDCUzBW/ I7TxhZn7cD97emKE7SVnJCjkD5u7oOyIbFIpYiVKBYmqDpCqkghzMisoe/0z34fs Kl5NVyi5Db5gXKQUbZzcU8/y9bPxRmX7qid1En1GJM5r4i92V5A753u9W/rM9+LG 6cg4ftkhPVvLPBjG1QLq84p3ZLiPxmIX6m93ValckV2cFyLrOXbZB0whCwExCzOy OL6GM4Dj0Sg7GDo17bWBoyQsnKrZZzggX5Yg+7EXqb5r/fZIh/thiLqcf1kbXDjK 2+7t9u4n3kb1gcyL1Ir2knO3orZuHDFvffBSk8duDCBXcGdXqO4= -----END CERTIFICATE-----Generated at Thu May 8 20:47:53 2025 by rpki-client