$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: jQjCW2Hj3JOV9vdxK2g/7AaAxv8P5cl0RQq1wn9VQ7c= Subject key identifier: FF:F9:B6:E9:17:D5:1D:89:EF:0D:DE:7D:1E:1E:F0:86:37:51:6A:D8 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 54589491296D126518654A8CD2DAA0C60B7C522B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 04CF Signing time: Wed 07 May 2025 18:21:49 +0000 Manifest this update: Wed 07 May 2025 18:16:49 +0000 Manifest next update: Sat 10 May 2025 20:30:49 +0000 Files and hashes: 1: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: p0r/lzyUo7KOPO4qdmJbO4tg3YlKKYG0iLBMuMoEXus=) 2: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: mcQ30mco0/6nfTKWtu/hfGrepld988QrFuXeEcDCvl4=) 3: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: 0nV8oEBVXH/JPtvgS8EpIh/oB0Hfx5eWoEzYr6jyICg=) 4: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: D1fgcarXEgnnAnhHAtyNJEHbJgDcdr96nDzetTCtw2s=) 5: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: 0Mft6SvavXvwnqk1PKha21h4HeVqqRzAsVGrT/hkxHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 20:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:58:94:91:29:6d:12:65:18:65:4a:8c:d2:da:a0:c6:0b:7c:52:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: May 7 18:16:49 2025 GMT Not After : May 10 20:30:49 2025 GMT Subject: CN=FFF9B6E917D51D89EF0DDE7D1E1EF08637516AD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:8b:68:a0:71:97:d6:26:dc:03:76:44:16: 74:a6:87:7d:30:11:b8:49:20:ee:26:93:f7:ec:a1: c6:e1:0b:0c:93:ca:68:77:24:55:4c:1d:1f:29:ab: dc:b9:0f:be:d9:9d:89:59:bb:ff:e4:3e:f7:a2:06: 39:a2:a7:16:30:e1:da:e6:90:96:de:c6:cb:0f:50: c8:8f:c8:5c:78:99:46:c9:67:54:79:96:b1:69:0a: 5d:68:51:73:9a:93:f0:a3:13:99:90:91:c0:18:a0: da:1d:b4:06:63:b7:5c:1e:c9:2d:dd:7e:56:4e:2f: b8:f9:73:9e:92:ac:e8:ef:eb:44:67:3a:51:c0:a3: 3e:26:be:a4:5a:d0:00:31:70:91:de:3d:92:82:4d: 77:82:93:9c:84:40:45:10:4a:fb:c2:1d:16:f6:9b: 93:e2:af:58:ff:3e:be:a9:6b:6b:bc:a1:6a:6b:79: cf:6d:41:25:72:3f:da:37:07:3b:a5:e1:3c:5e:b5: 6d:1f:0b:21:3d:19:6f:c6:14:ef:f2:37:cb:fc:59: 9a:51:58:e4:98:93:30:fa:14:f4:17:90:23:28:de: 88:d2:ab:6a:3a:43:fb:41:c8:c0:3a:b8:27:eb:67: 47:d3:33:15:04:5d:20:5a:aa:a4:3f:b6:51:08:43: 3b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F9:B6:E9:17:D5:1D:89:EF:0D:DE:7D:1E:1E:F0:86:37:51:6A:D8 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cc:74:cb:d5:51:e7:c7:8b:04:98:c9:27:c7:a4:f0:ae:5b: 82:ec:72:bc:db:31:8a:2e:c6:60:77:8c:c6:9f:a9:da:66:6c: 57:fa:37:7a:a6:1c:c4:4c:17:e8:d8:62:e3:22:79:5a:c4:c1: a7:1c:50:b5:af:b7:40:af:08:04:f1:bf:bd:95:4c:f1:96:a6: 5f:1e:05:ee:92:f8:5f:e0:56:ee:06:97:ac:93:08:b6:e9:d2: 3d:81:37:03:e6:e6:39:d5:34:fc:ea:6b:b0:2c:a7:8f:dc:85: 11:78:ab:74:91:97:cc:73:56:68:3a:0e:eb:84:68:41:f4:0c: e2:e5:95:21:f7:56:d5:67:2c:e9:e8:19:14:7d:10:de:6a:55: 69:a9:24:55:20:dd:86:e6:a2:6e:f7:44:e4:ec:0a:c3:39:b4: 6e:0f:ad:fc:b3:fe:09:3f:8b:0c:1f:4e:6f:4b:96:d0:17:5b: f4:df:38:7e:cf:44:3c:5c:ed:a7:5e:ae:7c:e7:f2:9d:b2:df: ae:bc:92:8d:fd:1e:9f:b5:df:bb:60:bd:e0:e9:f2:4f:7b:2e: 87:fe:ff:1e:64:0c:a8:37:56:9e:6a:a4:70:11:9c:c2:5b:53: d8:44:5b:7f:b1:b7:8c:62:d7:91:7e:9e:88:6a:db:d4:cd:5d: a5:e0:09:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFiUkSltEmUYZUqM0tqgxgt8UiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTA1MDcxODE2NDlaFw0yNTA1MTAyMDMwNDlaMDMxMTAvBgNV BAMTKEZGRjlCNkU5MTdENTFEODlFRjBEREU3RDFFMUVGMDg2Mzc1MTZBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ZItooHGX1ibcA3ZEFnSmh30w EbhJIO4mk/fsocbhCwyTymh3JFVMHR8pq9y5D77ZnYlZu//kPveiBjmipxYw4drm kJbexssPUMiPyFx4mUbJZ1R5lrFpCl1oUXOak/CjE5mQkcAYoNodtAZjt1weyS3d flZOL7j5c56SrOjv60RnOlHAoz4mvqRa0AAxcJHePZKCTXeCk5yEQEUQSvvCHRb2 m5Pir1j/Pr6pa2u8oWprec9tQSVyP9o3Bzul4TxetW0fCyE9GW/GFO/yN8v8WZpR WOSYkzD6FPQXkCMo3ojSq2o6Q/tByMA6uCfrZ0fTMxUEXSBaqqQ/tlEIQztzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU//m26RfVHYnvDd59Hh7whjdRatgwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDMdMvVUefHiwSYySfHpPCuW4LscrzbMYou xmB3jMafqdpmbFf6N3qmHMRMF+jYYuMieVrEwaccULWvt0CvCATxv72VTPGWpl8e Be6S+F/gVu4Gl6yTCLbp0j2BNwPm5jnVNPzqa7Asp4/chRF4q3SRl8xzVmg6DuuE aEH0DOLllSH3VtVnLOnoGRR9EN5qVWmpJFUg3Ybmom73ROTsCsM5tG4Prfyz/gk/ iwwfTm9LltAXW/TfOH7PRDxc7adernzn8p2y3668ko39Hp+137tgveDp8k97Lof+ /x5kDKg3Vp5qpHARnMJbU9hEW3+xt4xi15F+nohq29TNXaXgCQU= -----END CERTIFICATE-----Generated at Thu May 8 10:50:45 2025 by rpki-client