$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: xHeoMQdQ6UCMvv7oBwvz2FMZq8YECKa+8+RzoxBAsOA= Subject key identifier: E8:78:27:FB:35:99:6E:23:38:CA:0E:A4:DF:B9:8F:5F:9C:E8:0B:F9 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 56475E70ABDF40950FA645DAF9BD3A763E1F28B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 0104 Signing time: Sun 29 Jun 2025 13:52:12 +0000 Manifest this update: Sun 29 Jun 2025 13:47:12 +0000 Manifest next update: Wed 02 Jul 2025 23:44:12 +0000 Files and hashes: 1: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: +CwYkRTZgbAwIJq42dtTtN0JxChrPAUJAUwU2XdikNs=) 2: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: KQBwI3mDk7Di2Hgh9pZD8sQ4+9+63h0EFvm7NCb7Spk=) 3: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: +TpGrInw6MYBt52lteYHqPe/GHixGpWLSTXXOphuUSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 23:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:47:5e:70:ab:df:40:95:0f:a6:45:da:f9:bd:3a:76:3e:1f:28:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Jun 29 13:47:12 2025 GMT Not After : Jul 2 23:44:12 2025 GMT Subject: CN=E87827FB35996E2338CA0EA4DFB98F5F9CE80BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:80:6c:b1:41:79:79:03:f0:4a:56:d7:52: ad:f1:b6:b2:74:f7:5c:31:b6:60:b2:1a:3a:0f:7c: 56:03:c0:c4:aa:46:5f:a6:f0:1b:87:45:55:4d:e8: 7a:1a:4f:05:39:f9:d8:54:b8:82:12:60:00:f0:99: 95:d5:37:70:a3:0d:d0:fd:c4:24:0e:88:24:30:dc: fb:37:4a:28:f7:84:71:a9:9e:e6:c4:a0:ac:38:8a: 4d:48:74:85:4c:be:11:1b:3b:13:66:2e:39:30:d1: 3e:ad:22:86:d8:44:5e:76:79:5b:a4:25:67:06:79: 1d:b1:1d:46:c0:f4:ca:62:20:4a:48:9f:b5:04:1b: 16:94:94:90:be:b7:fb:2e:b7:0c:e6:f4:9c:a9:4b: a4:bb:97:84:94:0d:ea:86:4f:f9:96:4a:4a:73:95: e7:03:e0:79:79:5f:44:2b:57:d5:55:16:79:a9:74: 36:86:fd:21:b1:15:76:76:eb:cc:64:b3:76:fa:52: 06:be:d9:2b:de:a7:fa:15:5b:72:d6:99:4f:cc:9e: 2a:f2:61:57:16:9f:00:e5:56:f5:2f:51:ce:cc:da: b2:99:d5:ba:70:ae:18:ee:c1:d4:a8:70:cb:43:c5: f8:8d:32:67:f1:6d:c4:e5:cb:ab:56:74:4c:0d:b4: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:78:27:FB:35:99:6E:23:38:CA:0E:A4:DF:B9:8F:5F:9C:E8:0B:F9 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:29:60:f7:38:c3:33:2a:63:af:12:97:9a:50:e1:41:82:06: f4:a1:5a:44:dd:55:ed:4c:b9:f0:ff:36:d9:e2:39:7f:1b:3e: 8d:72:c7:94:b8:a9:30:3f:74:7f:47:b3:e0:7e:b4:f7:d4:e2: f7:b8:a7:be:c6:55:1a:46:16:30:a3:b2:cf:c0:d7:70:66:6f: 2b:c3:70:64:f7:09:9d:35:19:76:f6:f4:01:1f:0e:da:80:0a: 0d:b8:5e:86:9f:13:23:2c:6e:45:fb:6b:a8:bc:25:66:98:1e: 02:a9:05:7b:d2:a5:83:d4:d5:84:0e:b1:2e:ca:c9:e5:2f:7e: 2e:46:f8:93:61:4b:5f:f6:7f:ce:9f:36:b1:a7:58:53:49:55: d3:1c:26:27:1f:de:73:f9:0e:8b:5c:c8:b7:17:3a:4a:e7:5f: 8b:88:24:95:73:3f:08:9f:f0:71:c0:3c:a5:d1:9b:70:5f:ae: 41:3e:f2:1a:9b:5d:17:3e:92:a5:33:83:61:d4:5c:99:4c:c5: 40:d8:f2:66:91:55:d8:3e:6a:bc:84:4c:93:9b:ae:8f:b3:2d: 48:57:fe:70:a7:94:6c:45:f2:12:a6:5d:a2:c4:96:d4:50:7d: f3:a2:47:36:da:6b:6a:6e:23:3b:96:b3:3f:ea:18:20:d2:72: ee:39:35:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkdecKvfQJUPpkXa+b06dj4fKLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTA2MjkxMzQ3MTJaFw0yNTA3MDIyMzQ0MTJaMDMxMTAvBgNV BAMTKEU4NzgyN0ZCMzU5OTZFMjMzOENBMEVBNERGQjk4RjVGOUNFODBCRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgrYBssUF5eQPwSlbXUq3xtrJ0 91wxtmCyGjoPfFYDwMSqRl+m8BuHRVVN6HoaTwU5+dhUuIISYADwmZXVN3CjDdD9 xCQOiCQw3Ps3Sij3hHGpnubEoKw4ik1IdIVMvhEbOxNmLjkw0T6tIobYRF52eVuk JWcGeR2xHUbA9MpiIEpIn7UEGxaUlJC+t/sutwzm9JypS6S7l4SUDeqGT/mWSkpz lecD4Hl5X0QrV9VVFnmpdDaG/SGxFXZ268xks3b6Uga+2Svep/oVW3LWmU/Mniry YVcWnwDlVvUvUc7M2rKZ1bpwrhjuwdSocMtDxfiNMmfxbcTly6tWdEwNtCgFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Hgn+zWZbiM4yg6k37mPX5zoC/kwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANYpYPc4wzMqY68Sl5pQ4UGCBvShWkTdVe1M ufD/NtniOX8bPo1yx5S4qTA/dH9Hs+B+tPfU4ve4p77GVRpGFjCjss/A13BmbyvD cGT3CZ01GXb29AEfDtqACg24XoafEyMsbkX7a6i8JWaYHgKpBXvSpYPU1YQOsS7K yeUvfi5G+JNhS1/2f86fNrGnWFNJVdMcJicf3nP5DotcyLcXOkrnX4uIJJVzPwif 8HHAPKXRm3BfrkE+8hqbXRc+kqUzg2HUXJlMxUDY8maRVdg+aryETJObro+zLUhX /nCnlGxF8hKmXaLEltRQffOiRzbaa2puIzuWsz/qGCDScu45NVI= -----END CERTIFICATE-----Generated at Mon Jun 30 16:27:55 2025 by rpki-client