$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft File: 45C9770C2C07C2696447FAA1E820E46170A3C56C.mft (raw, json) Hash identifier: aESFUpxBWAHLr1kMJ/vPV9TaFhC4qULJf22b8NnwLTY= Subject key identifier: E5:DC:EB:D2:C3:85:59:E5:90:03:BA:E8:F6:2A:F6:96:7B:92:DA:F8 Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 72A748F64256FD2151EDEBED39E92636EBD5BAAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft Manifest number: 0277 Signing time: Fri 09 May 2025 14:20:42 +0000 Manifest this update: Fri 09 May 2025 14:15:42 +0000 Manifest next update: Mon 12 May 2025 23:44:42 +0000 Files and hashes: 1: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: uUzFxXX9+YSqNUoc9f/VNA2O72vd2Y345REzg4qr7bE=) 2: 45C9770C2C07C2696447FAA1E820E46170A3C56C.crl (hash: cRoKcBA8dcPHVt4q4AwCL45FkkWZAqjMAXUHIRuTyhE=) 3: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: IpAhfyBk6UVvHL1CrMEsCPgMXpI9vxk9SZkiJxXgvQk=) 4: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: DFA3qBFACki/karT3fIlYISlkq7/i7wKwlvN+BCd6A4=) 5: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: XtJZn7ljJSfP6iL/MDjtfpVkviYKx4Xboir3grsNMCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 23:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:a7:48:f6:42:56:fd:21:51:ed:eb:ed:39:e9:26:36:eb:d5:ba:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: May 9 14:15:42 2025 GMT Not After : May 12 23:44:42 2025 GMT Subject: CN=E5DCEBD2C38559E59003BAE8F62AF6967B92DAF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:52:59:46:c4:25:ca:e1:32:30:15:80:23:04: 5d:ad:b0:3f:b9:6d:9a:2b:d0:51:07:49:aa:23:cc: ac:5b:8a:5e:5c:17:7a:3f:b4:31:75:cf:27:69:ed: eb:26:c5:b0:70:7e:01:28:f4:e1:39:6c:f6:42:bb: cc:66:8a:94:d3:8d:41:d9:a2:6e:e4:5c:1b:24:c6: b5:1d:5a:ec:14:8f:db:c5:80:e0:32:b5:f2:af:8b: 3e:62:3a:7f:74:e3:21:b2:f9:1d:84:32:05:7f:87: a1:76:2a:05:db:f4:fc:ea:83:67:63:65:ac:bc:82: 7d:ba:52:ee:f7:4e:d4:cb:92:e2:ae:c2:de:61:e2: 57:33:d7:bf:1b:9f:88:49:b6:ea:1a:21:e1:d3:b4: c4:ec:99:46:46:fa:90:18:ab:e6:96:b4:f6:db:96: 88:c1:78:13:54:d1:29:c5:6f:25:17:65:25:3c:a9: 51:f8:f2:93:9e:83:1c:0a:53:d6:ce:d5:f5:c6:15: f4:2b:c0:5d:b5:16:ec:c7:df:f9:a2:1f:5a:d2:f5: 66:63:32:a9:70:27:c2:97:1d:56:f3:63:d0:76:3b: 8d:7a:2e:81:b6:d3:14:ad:10:0a:81:e9:93:0d:16: e4:d6:ba:35:21:bb:69:df:6a:3b:e4:cc:04:ae:b9: 7d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DC:EB:D2:C3:85:59:E5:90:03:BA:E8:F6:2A:F6:96:7B:92:DA:F8 X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:df:1f:56:79:b3:12:37:09:bf:53:85:8d:14:86:60:b7:2d: 65:b6:3f:fe:02:f8:3f:76:c9:ee:03:b5:2d:d3:91:fc:68:c8: 4a:51:26:e4:83:73:89:8c:a6:2f:e1:51:65:14:d4:38:84:7d: e1:15:42:d4:9f:1b:5b:63:4e:b0:7e:58:9e:03:4b:ef:86:46: ae:21:33:38:aa:a6:ba:67:0a:98:6e:7a:d9:c8:47:50:c6:1b: 0d:7c:c0:24:3b:38:36:5a:20:9b:5c:fe:78:db:5a:27:9f:65: b5:83:a7:aa:15:1d:5f:d6:d1:b3:49:0f:f8:55:13:c1:92:17: 36:99:88:15:fd:bc:20:30:14:85:df:be:ac:0a:38:d0:af:db: a1:20:fd:52:b0:f5:b2:bb:0e:c9:3e:b5:69:77:04:88:a2:29: 60:57:92:34:b7:dd:b0:5e:fc:74:b4:bf:03:b9:bd:68:f7:b0: a5:57:14:3d:85:ab:b5:b0:71:6b:de:d6:ff:ba:9d:03:55:23: 6f:87:83:97:07:80:bf:33:1c:ca:6b:06:4f:86:9c:b0:08:00: 3a:d5:7a:49:2b:38:db:5d:b7:6d:a6:f6:95:c7:17:de:76:08: f6:ad:72:5b:d1:1e:b8:e6:d4:c6:f0:0b:96:59:88:e8:7b:30: c3:da:96:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcqdI9kJW/SFR7evtOekmNuvVuqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNTA1MDkxNDE1NDJaFw0yNTA1MTIyMzQ0NDJaMDMxMTAvBgNV BAMTKEU1RENFQkQyQzM4NTU5RTU5MDAzQkFFOEY2MkFGNjk2N0I5MkRBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnUllGxCXK4TIwFYAjBF2tsD+5 bZor0FEHSaojzKxbil5cF3o/tDF1zydp7esmxbBwfgEo9OE5bPZCu8xmipTTjUHZ om7kXBskxrUdWuwUj9vFgOAytfKviz5iOn904yGy+R2EMgV/h6F2KgXb9Pzqg2dj Zay8gn26Uu73TtTLkuKuwt5h4lcz178bn4hJtuoaIeHTtMTsmUZG+pAYq+aWtPbb lojBeBNU0SnFbyUXZSU8qVH48pOegxwKU9bO1fXGFfQrwF21FuzH3/miH1rS9WZj MqlwJ8KXHVbzY9B2O416LoG20xStEAqB6ZMNFuTWujUhu2nfajvkzASuuX1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5dzr0sOFWeWQA7ro9ir2lnuS2vgwHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0 NjE3MEEzQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/fH1Z5sxI3Cb9ThY0UhmC3LWW2P/4C+D92 ye4DtS3TkfxoyEpRJuSDc4mMpi/hUWUU1DiEfeEVQtSfG1tjTrB+WJ4DS++GRq4h MziqprpnCphuetnIR1DGGw18wCQ7ODZaIJtc/njbWiefZbWDp6oVHV/W0bNJD/hV E8GSFzaZiBX9vCAwFIXfvqwKONCv26Eg/VKw9bK7Dsk+tWl3BIiiKWBXkjS33bBe /HS0vwO5vWj3sKVXFD2Fq7WwcWve1v+6nQNVI2+Hg5cHgL8zHMprBk+GnLAIADrV ekkrONtdt22m9pXHF952CPatclvRHrjm1MbwC5ZZiOh7MMPalko= -----END CERTIFICATE-----Generated at Sat May 10 06:20:04 2025 by rpki-client