$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: lMsoIRd44Cxnfc+1Q6qKae9RiYbyqxsTte1hlrEzTM0= Subject key identifier: 53:E6:09:DA:C6:D2:84:AE:8C:2A:C1:5F:64:92:54:DC:FA:97:DE:D7 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 44E72CD5FE8DF4AF672564D5491D2F7735B621CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 04E7 Signing time: Fri 27 Jun 2025 17:40:55 +0000 Manifest this update: Fri 27 Jun 2025 17:35:55 +0000 Manifest next update: Mon 30 Jun 2025 23:53:55 +0000 Files and hashes: 1: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 2: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: Am36liFqPl525WO7CNcuDINc6vFvD4DDAjgws//gEIw=) 3: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 4: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) 5: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 23:53:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e7:2c:d5:fe:8d:f4:af:67:25:64:d5:49:1d:2f:77:35:b6:21:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Jun 27 17:35:55 2025 GMT Not After : Jun 30 23:53:55 2025 GMT Subject: CN=53E609DAC6D284AE8C2AC15F649254DCFA97DED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ff:37:28:24:46:91:9b:29:c4:ea:d4:a7:21: 22:3f:43:c7:ff:b0:2f:0b:33:58:5a:00:1f:96:6a: 21:da:10:5a:36:27:c0:da:a2:01:38:6d:ee:83:d6: 43:96:42:d0:90:71:46:4a:43:0b:e4:f7:c2:65:69: 60:6b:60:1d:bd:04:fc:78:5e:e8:06:4d:18:cb:28: 3c:d9:76:ed:9e:04:06:f4:a2:af:aa:9a:d8:c7:7a: 1a:00:65:fb:4b:79:80:f1:aa:37:df:31:d6:b6:18: aa:49:fd:64:d5:a0:84:07:34:b8:d9:13:11:1a:18: 19:e0:44:8a:ae:11:a2:b2:48:35:3f:f8:74:63:bd: 09:1d:9e:43:02:89:76:33:aa:7a:3f:fd:5f:ff:da: 96:0f:f9:2d:64:c9:6d:2a:3b:68:8f:23:65:aa:54: 16:ac:38:2c:7e:94:6f:9f:e5:70:3e:c8:e8:e4:96: d2:0b:04:5c:00:86:0a:0f:33:75:80:aa:a6:61:a3: 3b:75:81:d9:e2:5d:18:65:ec:bf:27:8f:df:d6:e6: 75:a7:1b:5f:07:e3:a9:4b:31:7e:c3:67:f2:7b:44: 1b:8f:0d:38:e9:df:d9:d3:5a:64:58:24:f3:d5:30: 66:01:45:98:f8:6d:3b:3d:b0:da:97:3d:c5:cc:13: 99:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E6:09:DA:C6:D2:84:AE:8C:2A:C1:5F:64:92:54:DC:FA:97:DE:D7 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ba:8f:fd:a2:d8:17:73:68:fe:33:54:99:aa:e5:fd:d1:9a: f5:dc:49:c2:7d:ac:43:89:f8:08:70:63:65:03:05:a3:ae:07: ca:b7:41:33:0d:b0:ca:9c:bc:2c:61:18:35:27:06:60:3c:e7: a7:96:0c:5f:be:2c:ba:39:1f:18:31:bf:c1:89:06:e4:90:9b: 43:1a:2c:d9:bd:90:2a:27:27:11:ab:17:d5:d4:31:d0:7e:a6: 9f:2b:37:e8:49:f5:2b:ed:06:10:92:d9:67:cf:fe:08:0c:7e: e1:1e:34:31:f7:80:64:9f:f7:8a:bf:35:ae:9f:ba:85:d7:a2: e3:d1:c5:7e:19:bb:20:e9:e3:2d:ba:a3:6b:69:72:e0:8f:57: dd:c8:17:b1:27:05:eb:86:8d:b6:e8:08:86:e8:b7:4b:be:67: f3:98:91:ff:da:51:51:4f:5d:6a:00:0a:b0:c7:8a:21:39:e5: bd:7b:69:76:e4:e5:24:92:06:ed:96:51:5d:cf:40:2f:f8:08: 2e:56:aa:fd:85:d5:eb:ca:85:e5:b5:c7:44:21:35:fa:3f:73: 02:54:22:25:4b:79:70:34:0f:8f:5f:c3:06:d2:35:52:1b:73: 2d:f7:87:2b:99:cb:bb:0b:dc:55:05:d6:a7:b8:fd:4d:e1:f6: db:f6:8c:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROcs1f6N9K9nJWTVSR0vdzW2IcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTA2MjcxNzM1NTVaFw0yNTA2MzAyMzUzNTVaMDMxMTAvBgNV BAMTKDUzRTYwOURBQzZEMjg0QUU4QzJBQzE1RjY0OTI1NERDRkE5N0RFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm/zcoJEaRmynE6tSnISI/Q8f/ sC8LM1haAB+WaiHaEFo2J8DaogE4be6D1kOWQtCQcUZKQwvk98JlaWBrYB29BPx4 XugGTRjLKDzZdu2eBAb0oq+qmtjHehoAZftLeYDxqjffMda2GKpJ/WTVoIQHNLjZ ExEaGBngRIquEaKySDU/+HRjvQkdnkMCiXYzqno//V//2pYP+S1kyW0qO2iPI2Wq VBasOCx+lG+f5XA+yOjkltILBFwAhgoPM3WAqqZhozt1gdniXRhl7L8nj9/W5nWn G18H46lLMX7DZ/J7RBuPDTjp39nTWmRYJPPVMGYBRZj4bTs9sNqXPcXME5kvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU+YJ2sbShK6MKsFfZJJU3PqX3tcwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACu6j/2i2BdzaP4zVJmq5f3RmvXcScJ9rEOJ +AhwY2UDBaOuB8q3QTMNsMqcvCxhGDUnBmA856eWDF++LLo5Hxgxv8GJBuSQm0Ma LNm9kConJxGrF9XUMdB+pp8rN+hJ9SvtBhCS2WfP/ggMfuEeNDH3gGSf94q/Na6f uoXXouPRxX4ZuyDp4y26o2tpcuCPV93IF7EnBeuGjbboCIbot0u+Z/OYkf/aUVFP XWoACrDHiiE55b17aXbk5SSSBu2WUV3PQC/4CC5Wqv2F1evKheW1x0QhNfo/cwJU IiVLeXA0D49fwwbSNVIbcy33hyuZy7sL3FUF1qe4/U3h9tv2jOg= -----END CERTIFICATE-----Generated at Sun Jun 29 21:56:27 2025 by rpki-client