$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: C7i9Hvvh8EDTGJaQ90voGwv6DEUtbFRIhDnCLnJRatE= Subject key identifier: E3:42:24:3E:AD:0B:63:E5:D8:39:15:63:F8:4B:32:9F:61:6F:41:B0 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 26DC7E4A51F2519099F2291EAF9D2BA825E956A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 04E3 Signing time: Sun 15 Jun 2025 10:00:53 +0000 Manifest this update: Sun 15 Jun 2025 09:55:53 +0000 Manifest next update: Wed 18 Jun 2025 10:47:53 +0000 Files and hashes: 1: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 2: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: /KGJeaD1/5ngClBq7fVR44C5EXTuRQVqH3/6LHuhkiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:dc:7e:4a:51:f2:51:90:99:f2:29:1e:af:9d:2b:a8:25:e9:56:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Jun 15 09:55:53 2025 GMT Not After : Jun 18 10:47:53 2025 GMT Subject: CN=E342243EAD0B63E5D8391563F84B329F616F41B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3c:c4:9f:a4:11:99:a5:82:53:d5:40:a2:5f: 5c:ce:a3:29:53:3d:9d:25:85:c0:f6:67:31:52:27: 7a:5e:03:ac:25:b6:74:b5:ce:61:af:44:ae:33:3e: 5d:76:8a:81:73:2e:f2:39:a3:08:f4:42:d4:58:9c: 98:bf:ce:57:9d:d3:c1:19:36:67:8c:30:66:da:32: 6e:42:65:2c:bb:da:6e:1a:c1:f2:be:18:b3:1d:c6: 5e:4c:bb:63:e1:41:63:91:23:17:1a:05:76:13:b8: 20:03:ce:e8:a6:ab:71:95:08:ef:8c:24:e5:bb:e3: eb:ab:18:52:91:32:63:29:32:15:0a:62:86:d4:09: a7:89:f6:d9:9d:42:74:5b:a0:78:5e:6d:99:38:3e: 52:9a:eb:9f:3d:66:6e:f4:0c:54:73:40:83:5a:1a: 4e:16:27:b9:14:80:17:5a:34:a4:c5:54:14:7a:3b: b0:37:33:7b:0b:7f:33:6d:91:fc:43:bf:76:72:9d: 5c:1f:c4:06:b0:ab:e6:64:23:8b:71:f6:c4:0b:70: 50:83:66:34:9c:4d:0f:f9:ca:27:6d:e2:73:04:9e: 83:5f:e4:6b:5f:e6:d8:c4:25:59:dc:19:ea:9e:aa: ab:a9:e2:01:77:5b:0a:3b:6f:96:2a:32:8c:6a:93: 9e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:42:24:3E:AD:0B:63:E5:D8:39:15:63:F8:4B:32:9F:61:6F:41:B0 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:3c:a4:e4:ca:bf:be:42:8b:30:c0:fd:fd:13:ed:50:c5:fa: 15:fa:78:b5:c4:8a:9a:21:b1:d9:c4:c3:40:14:b9:d0:90:69: 65:e6:24:f6:0d:85:a6:dc:53:1d:00:2d:ab:3c:b9:44:e0:ea: 93:ba:72:29:88:a4:15:d9:ea:ab:ba:f9:f2:68:e5:7c:e8:13: 78:ba:4b:14:00:0d:99:ed:2c:67:db:6f:32:0f:b4:9a:8c:0d: 18:63:b5:65:08:4c:40:ab:97:d9:79:34:fd:1e:70:a3:bc:27: 3a:2c:9e:bd:6f:39:7a:93:bc:7f:2d:dc:21:92:17:45:4a:b6: 07:d7:d6:e9:88:c7:c0:3e:33:14:f5:1e:79:50:9b:c0:e3:2a: 77:ff:34:1d:2b:14:ac:80:dc:d1:61:d6:f7:5a:9e:02:81:88: 56:09:fc:8c:fa:1b:ba:57:91:99:4f:39:da:fe:a4:cf:c9:9d: 71:3a:43:48:57:1e:a8:7a:0d:d1:96:8b:ad:e5:1f:5c:10:0e: ed:4e:de:fc:61:41:95:65:41:ff:75:20:19:fe:c4:18:ad:28: 94:00:88:1a:44:8d:fd:c3:41:6b:1d:72:b5:f4:a6:f0:1d:11: 9f:03:7c:4b:af:45:c4:f5:dd:36:be:65:40:1e:db:b9:4b:e3: 94:ad:db:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJtx+SlHyUZCZ8iker50rqCXpVqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTA2MTUwOTU1NTNaFw0yNTA2MTgxMDQ3NTNaMDMxMTAvBgNV BAMTKEUzNDIyNDNFQUQwQjYzRTVEODM5MTU2M0Y4NEIzMjlGNjE2RjQxQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrPMSfpBGZpYJT1UCiX1zOoylT PZ0lhcD2ZzFSJ3peA6wltnS1zmGvRK4zPl12ioFzLvI5owj0QtRYnJi/zled08EZ NmeMMGbaMm5CZSy72m4awfK+GLMdxl5Mu2PhQWORIxcaBXYTuCADzuimq3GVCO+M JOW74+urGFKRMmMpMhUKYobUCaeJ9tmdQnRboHhebZk4PlKa6589Zm70DFRzQINa Gk4WJ7kUgBdaNKTFVBR6O7A3M3sLfzNtkfxDv3ZynVwfxAawq+ZkI4tx9sQLcFCD ZjScTQ/5yidt4nMEnoNf5Gtf5tjEJVncGeqeqqup4gF3Wwo7b5YqMoxqk555AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU40IkPq0LY+XYORVj+Esyn2FvQbAwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMY8pOTKv75CizDA/f0T7VDF+hX6eLXEipoh sdnEw0AUudCQaWXmJPYNhabcUx0ALas8uUTg6pO6cimIpBXZ6qu6+fJo5XzoE3i6 SxQADZntLGfbbzIPtJqMDRhjtWUITECrl9l5NP0ecKO8Jzosnr1vOXqTvH8t3CGS F0VKtgfX1umIx8A+MxT1HnlQm8DjKnf/NB0rFKyA3NFh1vdangKBiFYJ/Iz6G7pX kZlPOdr+pM/JnXE6Q0hXHqh6DdGWi63lH1wQDu1O3vxhQZVlQf91IBn+xBitKJQA iBpEjf3DQWsdcrX0pvAdEZ8DfEuvRcT13Ta+ZUAe27lL45St2w4= -----END CERTIFICATE-----Generated at Mon Jun 16 13:01:20 2025 by rpki-client