$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: gKu/REmgHVFsyAmAvPXMRxSvvnRm0O/t6NskQ9OFEjA= Subject key identifier: 46:5C:9E:FE:EE:F0:45:4B:83:A1:57:55:77:67:7C:EA:27:45:6F:B1 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 4557CA49CEF53D163DA672561BAE9321D5C4EFB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: ED Signing time: Fri 09 May 2025 07:12:15 +0000 Manifest this update: Fri 09 May 2025 07:07:15 +0000 Manifest next update: Mon 12 May 2025 11:21:15 +0000 Files and hashes: 1: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: 6IGbgdmrqT5Uv05RYnrKlJKJ3nlBcl8fl7iTWreA9nE=) 2: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: KQBwI3mDk7Di2Hgh9pZD8sQ4+9+63h0EFvm7NCb7Spk=) 3: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: +TpGrInw6MYBt52lteYHqPe/GHixGpWLSTXXOphuUSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:57:ca:49:ce:f5:3d:16:3d:a6:72:56:1b:ae:93:21:d5:c4:ef:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: May 9 07:07:15 2025 GMT Not After : May 12 11:21:15 2025 GMT Subject: CN=465C9EFEEEF0454B83A1575577677CEA27456FB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:ce:c9:11:7a:06:b1:0e:44:71:73:9c:5f: 33:6e:89:5f:17:48:8e:4e:6c:26:2b:1c:b2:2e:79: aa:0a:0d:3f:5b:b6:74:a5:d8:35:d2:4f:d8:17:88: d7:dc:b0:c0:c1:cd:7d:46:59:a0:60:c2:a7:2f:b9: 73:a5:9f:52:a1:ba:1a:0a:5a:32:f3:78:f5:49:bc: 4b:66:ff:c2:ee:50:b1:20:f9:b8:70:85:f9:ee:9e: 84:fd:98:78:84:89:f9:3a:cf:c6:1f:87:2c:e1:5b: 26:fd:13:c9:3f:6a:94:51:f3:34:9a:ca:51:38:27: 5b:f9:7f:46:2e:8a:d0:83:1f:76:ef:5e:f5:6e:31: e3:2f:bb:69:b8:32:9b:31:ba:e9:d6:b0:3d:f0:94: 5d:0d:f6:5b:e9:a5:7d:ed:a2:b1:38:ef:f4:8e:83: 8e:9d:12:0a:f7:9b:53:2d:39:be:66:61:e6:84:b7: b8:54:32:e7:dd:06:50:89:5a:67:d7:3a:a5:b5:00: 5f:79:fc:28:b4:fd:96:3b:9c:a7:7a:41:63:9e:04: 43:60:cc:36:da:20:38:d3:ee:e2:46:2d:64:24:6e: 93:f5:3a:53:48:73:d0:86:89:6f:ce:98:d4:92:0c: e7:4a:84:48:06:ea:48:16:48:53:de:c2:c8:a6:0a: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5C:9E:FE:EE:F0:45:4B:83:A1:57:55:77:67:7C:EA:27:45:6F:B1 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e0:c5:cc:5d:36:a2:8b:99:fa:82:51:ab:89:f4:7c:d5:f6: 35:da:62:af:ca:a6:48:00:e4:f1:f7:f0:e4:70:c9:e5:22:9a: f2:57:39:ca:c2:17:f5:5e:8b:04:b5:8e:bf:84:36:00:76:69: 8d:48:a8:28:b1:23:30:b0:ab:3e:c4:0e:16:fe:af:21:8c:03: 26:40:d9:78:af:cb:45:77:16:ee:26:e5:3d:3c:00:49:b0:cf: 9a:71:7f:f1:02:e6:cb:3a:bd:61:6f:f4:27:26:35:14:ca:8f: 62:ea:fd:53:d6:ea:e4:b6:dd:32:23:c0:07:a5:e2:da:9a:53: 6a:06:97:00:02:f6:ec:b8:c9:ba:93:8d:6a:c6:37:b5:c8:74: 3d:79:74:29:aa:7b:cd:34:2b:57:d0:c6:e2:1d:61:72:c3:8b: c1:4e:df:3c:4d:f4:f7:c4:19:c3:7a:50:90:59:aa:2a:79:e4: 0c:e2:c3:8b:50:d9:58:d1:9f:b6:6a:67:06:95:2c:24:96:d4: b8:41:41:e0:e1:cb:49:a1:61:87:ed:0b:42:5a:ff:bf:7e:45: 24:47:cc:2c:66:5b:67:9a:df:6a:5b:dc:36:35:42:63:1c:34: 5c:41:c5:46:59:b2:af:e1:05:3b:f4:80:21:47:32:4e:e5:aa: b9:1d:f5:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVfKSc71PRY9pnJWG66TIdXE77gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTA1MDkwNzA3MTVaFw0yNTA1MTIxMTIxMTVaMDMxMTAvBgNV BAMTKDQ2NUM5RUZFRUVGMDQ1NEI4M0ExNTc1NTc3Njc3Q0VBMjc0NTZGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ns7JEXoGsQ5EcXOcXzNuiV8X SI5ObCYrHLIueaoKDT9btnSl2DXST9gXiNfcsMDBzX1GWaBgwqcvuXOln1KhuhoK WjLzePVJvEtm/8LuULEg+bhwhfnunoT9mHiEifk6z8YfhyzhWyb9E8k/apRR8zSa ylE4J1v5f0YuitCDH3bvXvVuMeMvu2m4MpsxuunWsD3wlF0N9lvppX3torE47/SO g46dEgr3m1MtOb5mYeaEt7hUMufdBlCJWmfXOqW1AF95/Ci0/ZY7nKd6QWOeBENg zDbaIDjT7uJGLWQkbpP1OlNIc9CGiW/OmNSSDOdKhEgG6kgWSFPewsimCuiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURlye/u7wRUuDoVdVd2d86idFb7EwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvgxcxdNqKLmfqCUauJ9HzV9jXaYq/KpkgA 5PH38ORwyeUimvJXOcrCF/VeiwS1jr+ENgB2aY1IqCixIzCwqz7EDhb+ryGMAyZA 2Xivy0V3Fu4m5T08AEmwz5pxf/EC5ss6vWFv9CcmNRTKj2Lq/VPW6uS23TIjwAel 4tqaU2oGlwAC9uy4ybqTjWrGN7XIdD15dCmqe800K1fQxuIdYXLDi8FO3zxN9PfE GcN6UJBZqip55Aziw4tQ2VjRn7ZqZwaVLCSW1LhBQeDhy0mhYYftC0Ja/79+RSRH zCxmW2ea32pb3DY1QmMcNFxBxUZZsq/hBTv0gCFHMk7lqrkd9U0= -----END CERTIFICATE-----Generated at Sat May 10 20:02:14 2025 by rpki-client