$ rpki-client -vvf repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft File: C45A558750D6CF5BE02532DDE80326AEF5012912.mft (raw, json) Hash identifier: Zmo+K4CckLmUC8qfHcWXmlcmTGinUtaNSUQUJdOGMSE= Subject key identifier: 7C:49:BF:BB:17:B9:8B:BD:54:5B:D9:90:63:BD:7F:05:55:58:12:DB Authority key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Certificate issuer: /CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Certificate serial: 3196FD28D05F66E8F8C3A5A5CC95788846F379D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft Manifest number: 0357 Signing time: Sat 28 Jun 2025 20:01:41 +0000 Manifest this update: Sat 28 Jun 2025 19:56:41 +0000 Manifest next update: Wed 02 Jul 2025 04:04:41 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: wKi20xV5IYiEYg1koyO2hLczrvapaQLTXfUibveAkFE=) 2: C45A558750D6CF5BE02532DDE80326AEF5012912.crl (hash: HT5Hszq5VqzPbPbWa4EbuOo8Ajj0UcNDhL5+Ib6nNcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:96:fd:28:d0:5f:66:e8:f8:c3:a5:a5:cc:95:78:88:46:f3:79:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Validity Not Before: Jun 28 19:56:41 2025 GMT Not After : Jul 2 04:04:41 2025 GMT Subject: CN=7C49BFBB17B98BBD545BD99063BD7F05555812DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:9d:d2:68:8f:02:12:06:f2:40:7e:99:4d: fa:5e:24:87:30:21:e6:44:52:8d:e2:ef:e7:d2:00: 64:cb:f9:93:15:4b:9f:27:b0:21:c9:7d:16:7b:e5: e3:ad:e4:f1:0e:21:3b:fd:89:7a:1e:28:4e:9b:17: 46:c4:72:45:33:47:d5:82:7a:79:88:e7:6a:11:74: 28:5a:f1:cb:03:37:54:9a:31:f9:11:36:f6:6c:41: 41:a4:94:ad:e0:81:69:06:07:4e:28:8f:36:c7:a5: eb:00:c8:07:1a:48:20:68:d3:af:fe:e8:56:92:ad: f8:b2:9b:aa:e7:a0:4a:69:1f:94:1a:61:ee:59:d0: bf:d4:73:b5:5f:2d:1d:a7:1a:72:28:e6:19:30:be: 79:6e:89:46:df:1b:17:8a:dd:69:b8:49:a0:fc:7e: 09:ff:25:48:52:1d:c6:37:a7:54:b1:1f:03:66:ec: 40:9e:62:2d:14:a3:5c:86:2a:50:c5:e8:c9:92:f2: 3b:f4:84:3a:18:5d:cf:a0:3c:f5:ed:6c:a0:6d:a8: 7a:7c:a1:5f:c1:11:5f:60:86:b0:f5:bd:19:09:e6: 3f:80:2e:12:b3:9c:cf:30:bc:f8:34:f6:df:af:73: 81:18:8a:a3:37:2b:73:77:69:63:ec:f6:c8:cc:a0: 2b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:49:BF:BB:17:B9:8B:BD:54:5B:D9:90:63:BD:7F:05:55:58:12:DB X509v3 Authority Key Identifier: keyid:C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:db:9e:93:bd:46:41:09:c4:7c:4d:11:3f:1b:dd:9e:42:0c: 32:96:46:71:64:70:63:c3:75:1a:d9:0c:cd:85:cb:36:18:85: a1:11:a9:21:31:e7:0b:a9:05:0a:7c:a9:3d:9a:61:9e:37:d5: 1a:d6:bc:37:86:d2:42:f5:2d:26:bb:c2:b0:56:54:d5:b7:45: 5b:be:f0:5d:a7:5f:09:c2:99:34:f6:5c:4a:65:68:af:c8:27: 96:31:b7:11:d3:39:9f:99:0d:75:bf:64:fd:0b:74:9b:be:fe: 25:60:10:61:5d:cb:83:4b:96:93:5e:1f:4d:03:cc:07:a0:59: fc:0a:40:44:4e:a1:48:2d:47:96:1e:dd:f3:6b:70:b1:11:7b: 9e:63:ab:e5:78:8f:69:b3:a7:62:a7:9b:5a:0b:60:c2:6e:4b: e5:ea:fe:ea:54:67:cb:31:a3:d9:60:73:28:64:59:d2:0e:6f: 12:82:2d:fe:70:d3:c2:bc:e5:71:3b:eb:fb:76:53:8e:13:77: ef:e4:ee:c2:18:30:a9:99:96:e1:69:67:f1:fb:ef:b1:a9:97: 4c:18:cc:ac:70:c0:55:72:12:a0:5e:fe:ce:06:9c:d2:ba:d3: d0:29:bf:43:5b:4a:4e:87:3f:17:ed:7d:c2:66:8d:e2:1f:a9: b8:e1:71:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZb9KNBfZuj4w6WlzJV4iEbzedYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVG NTAxMjkxMjAeFw0yNTA2MjgxOTU2NDFaFw0yNTA3MDIwNDA0NDFaMDMxMTAvBgNV BAMTKDdDNDlCRkJCMTdCOThCQkQ1NDVCRDk5MDYzQkQ3RjA1NTU1ODEyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz553SaI8CEgbyQH6ZTfpeJIcw IeZEUo3i7+fSAGTL+ZMVS58nsCHJfRZ75eOt5PEOITv9iXoeKE6bF0bEckUzR9WC enmI52oRdCha8csDN1SaMfkRNvZsQUGklK3ggWkGB04ojzbHpesAyAcaSCBo06/+ 6FaSrfiym6rnoEppH5QaYe5Z0L/Uc7VfLR2nGnIo5hkwvnluiUbfGxeK3Wm4SaD8 fgn/JUhSHcY3p1SxHwNm7ECeYi0Uo1yGKlDF6MmS8jv0hDoYXc+gPPXtbKBtqHp8 oV/BEV9ghrD1vRkJ5j+ALhKznM8wvPg09t+vc4EYiqM3K3N3aWPs9sjMoCtjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfEm/uxe5i71UW9mQY71/BVVYEtswHwYDVR0j BBgwFoAUxFpVh1DWz1vgJTLd6AMmrvUBKRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMC9DNDVBNTU4NzUw RDZDRjVCRTAyNTMyRERFODAzMjZBRUY1MDEyOTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVGNTAx MjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2 QUVGNTAxMjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvbnpO9RkEJxHxNET8b3Z5CDDKWRnFkcGPD dRrZDM2FyzYYhaERqSEx5wupBQp8qT2aYZ431RrWvDeG0kL1LSa7wrBWVNW3RVu+ 8F2nXwnCmTT2XEplaK/IJ5YxtxHTOZ+ZDXW/ZP0LdJu+/iVgEGFdy4NLlpNeH00D zAegWfwKQEROoUgtR5Ye3fNrcLERe55jq+V4j2mzp2Knm1oLYMJuS+Xq/upUZ8sx o9lgcyhkWdIObxKCLf5w08K85XE76/t2U44Td+/k7sIYMKmZluFpZ/H777Gpl0wY zKxwwFVyEqBe/s4GnNK609Apv0NbSk6HPxftfcJmjeIfqbjhcXo= -----END CERTIFICATE-----Generated at Sun Jun 29 18:15:50 2025 by rpki-client