$ rpki-client -vvf repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft File: C45A558750D6CF5BE02532DDE80326AEF5012912.mft (raw, json) Hash identifier: vTXGCgpLzITVgGR7ttGadSuE5kergyFHoJtUTWTbzFc= Subject key identifier: 79:31:2A:1A:BD:FB:86:96:33:94:8A:04:FE:71:22:A2:E7:97:2D:D3 Authority key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Certificate issuer: /CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Certificate serial: 6C8D2263B2A2AFB5877AAA67AB8C35D1DCF823F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft Manifest number: 033E Signing time: Sun 04 May 2025 12:21:13 +0000 Manifest this update: Sun 04 May 2025 12:16:13 +0000 Manifest next update: Wed 07 May 2025 13:47:13 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: Z5b7Vua54PJ7Om3JFRHBsES1fzMuzJN6IPDPQVO0+lM=) 2: C45A558750D6CF5BE02532DDE80326AEF5012912.crl (hash: LAONAtQ3qgw8qp1fUSrcEe4fd5/HFdpBGa6efA4Czwo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 13:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:8d:22:63:b2:a2:af:b5:87:7a:aa:67:ab:8c:35:d1:dc:f8:23:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Validity Not Before: May 4 12:16:13 2025 GMT Not After : May 7 13:47:13 2025 GMT Subject: CN=79312A1ABDFB869633948A04FE7122A2E7972DD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:20:4f:41:2f:70:61:57:0b:73:69:58:af: 5b:ab:58:c3:e1:7a:5f:5a:ee:ab:e4:00:0c:5f:81: 4d:5d:f4:08:71:e2:7a:f6:3c:be:ea:56:a7:e8:d7: 81:7a:f3:66:93:e5:15:59:2d:da:8c:88:91:11:f4: b9:39:47:62:ed:37:18:eb:19:e5:88:51:2f:91:4f: 9a:48:c5:40:c4:ef:5e:03:68:cd:a2:58:f8:d2:48: da:08:db:e5:ef:d5:31:f2:45:18:36:77:45:e1:7d: 2f:a0:6d:d1:9f:e5:ea:41:c3:d2:cf:b7:dc:94:f8: 95:eb:8e:39:88:ba:2f:87:61:09:87:83:4a:81:1b: 4a:7f:b3:f1:cb:3d:a4:34:80:09:33:94:b8:4b:0d: 1a:0b:b1:2e:49:4d:33:81:3d:eb:0f:2e:76:dd:cb: 9b:25:7c:6d:b8:e1:93:c8:73:7f:5c:0d:a4:6f:cc: 24:18:95:69:70:34:49:f2:4c:65:c0:c7:6d:50:37: 16:02:cb:8a:d7:99:71:9b:b2:24:e7:88:dc:2f:03: 85:5d:40:b6:80:e3:4b:62:00:fe:62:0f:eb:07:ab: b0:34:f7:e6:1a:53:90:a1:e7:c2:43:96:7d:c5:32: be:d6:21:c1:96:1a:7d:b1:35:8b:85:46:d3:05:f1: 8a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:31:2A:1A:BD:FB:86:96:33:94:8A:04:FE:71:22:A2:E7:97:2D:D3 X509v3 Authority Key Identifier: keyid:C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:5b:29:1b:0f:d1:29:6b:1b:d8:c9:bc:48:e6:6e:34:b6:66: 72:e5:fb:65:7f:87:64:5b:15:f9:83:59:05:44:e9:90:b4:ca: e8:aa:f4:ec:5b:7a:71:9f:ef:ff:8e:62:73:3e:c1:91:9b:17: 8c:73:d0:25:76:41:da:a9:0e:59:93:7a:f5:33:84:cf:1c:ae: 8c:08:37:fe:50:9d:d3:d2:d9:28:40:b4:27:a5:f9:65:41:33: a7:2e:ad:7a:aa:32:5e:79:d3:75:1b:3a:80:52:a1:bf:7a:16: 2b:db:bd:9b:60:fe:e4:9b:79:f7:0c:41:e6:8d:c1:5a:ca:47: 43:52:06:f9:ce:22:b2:b1:3e:5a:1a:43:87:cd:1a:86:af:52: 94:3b:dd:d2:e2:38:7f:fa:a7:1a:e1:f0:18:62:5c:67:81:b1: f6:31:68:21:7e:e5:41:58:52:a4:92:f0:93:a3:2f:9b:2c:73: 86:52:c4:ae:2d:9e:b9:69:60:01:2c:d4:78:c6:4c:80:f4:d7: 21:7a:aa:2d:03:59:21:c5:d1:90:46:a1:1d:e7:ac:b0:5e:c9: 40:4b:a3:46:ab:0a:ed:74:b1:36:d9:73:70:9a:81:7c:b0:d1: 04:ec:6f:1f:a0:1d:9e:c4:b6:ae:29:3d:4f:4e:ab:ac:ca:ec: 3c:4b:d7:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbI0iY7Kir7WHeqpnq4w10dz4I/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVG NTAxMjkxMjAeFw0yNTA1MDQxMjE2MTNaFw0yNTA1MDcxMzQ3MTNaMDMxMTAvBgNV BAMTKDc5MzEyQTFBQkRGQjg2OTYzMzk0OEEwNEZFNzEyMkEyRTc5NzJERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrHyBPQS9wYVcLc2lYr1urWMPh el9a7qvkAAxfgU1d9Ahx4nr2PL7qVqfo14F682aT5RVZLdqMiJER9Lk5R2LtNxjr GeWIUS+RT5pIxUDE714DaM2iWPjSSNoI2+Xv1THyRRg2d0XhfS+gbdGf5epBw9LP t9yU+JXrjjmIui+HYQmHg0qBG0p/s/HLPaQ0gAkzlLhLDRoLsS5JTTOBPesPLnbd y5slfG244ZPIc39cDaRvzCQYlWlwNEnyTGXAx21QNxYCy4rXmXGbsiTniNwvA4Vd QLaA40tiAP5iD+sHq7A09+YaU5Ch58JDln3FMr7WIcGWGn2xNYuFRtMF8YotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeTEqGr37hpYzlIoE/nEioueXLdMwHwYDVR0j BBgwFoAUxFpVh1DWz1vgJTLd6AMmrvUBKRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMC9DNDVBNTU4NzUw RDZDRjVCRTAyNTMyRERFODAzMjZBRUY1MDEyOTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVGNTAx MjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2 QUVGNTAxMjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZbKRsP0SlrG9jJvEjmbjS2ZnLl+2V/h2Rb FfmDWQVE6ZC0yuiq9OxbenGf7/+OYnM+wZGbF4xz0CV2QdqpDlmTevUzhM8crowI N/5QndPS2ShAtCel+WVBM6curXqqMl5503UbOoBSob96FivbvZtg/uSbefcMQeaN wVrKR0NSBvnOIrKxPloaQ4fNGoavUpQ73dLiOH/6pxrh8BhiXGeBsfYxaCF+5UFY UqSS8JOjL5ssc4ZSxK4tnrlpYAEs1HjGTID01yF6qi0DWSHF0ZBGoR3nrLBeyUBL o0arCu10sTbZc3CagXyw0QTsbx+gHZ7Etq4pPU9Oq6zK7DxL1zY= -----END CERTIFICATE-----Generated at Wed May 7 09:37:22 2025 by rpki-client