$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: toKKT23dzT06ioUHLo/mQebKKJdA8ki4EzWV3Liz33s= Subject key identifier: 19:C5:93:79:59:54:B1:3C:EC:CC:B3:A7:DE:44:54:A6:6D:FF:C4:F6 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 236322022529423D14682F92CA507869604F3671 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 020D Signing time: Tue 17 Jun 2025 15:31:00 +0000 Manifest this update: Tue 17 Jun 2025 15:26:00 +0000 Manifest next update: Fri 20 Jun 2025 22:42:00 +0000 Files and hashes: 1: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) 2: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: Xi+Wy6IpCABXkB3piKK7aIl0+xNgdQdMGsp6JNYdTfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 22:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:63:22:02:25:29:42:3d:14:68:2f:92:ca:50:78:69:60:4f:36:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Jun 17 15:26:00 2025 GMT Not After : Jun 20 22:42:00 2025 GMT Subject: CN=19C593795954B13CECCCB3A7DE4454A66DFFC4F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:5c:b9:1b:a2:dc:86:45:7f:de:5d:55:9b: 00:29:f1:06:c2:c8:1f:81:8d:2e:a4:42:3e:4e:ad: 35:47:36:94:81:a3:31:cf:6e:9f:9f:2d:ba:bc:8d: 8a:e2:c1:e8:11:54:0f:cc:91:e6:82:0b:55:32:64: 03:98:1f:59:08:55:1f:55:a1:0f:ba:8d:a4:e4:5a: 2d:95:cd:e8:1a:d1:53:4e:a0:0f:48:dc:61:b3:31: 2d:92:6b:f4:67:d5:5c:5d:59:07:a9:24:ff:c6:f7: cd:36:c2:0f:3f:60:17:fc:30:07:a1:58:08:51:12: b9:89:de:b6:d5:a5:82:a5:66:4c:b1:25:a4:75:b0: 23:c0:22:4c:26:17:83:de:b6:5b:db:c1:b2:59:a6: cd:e7:02:7c:47:c0:3c:75:9a:9b:92:c7:8a:56:82: f8:57:15:f2:51:37:35:61:a8:b9:e6:6d:bb:02:ca: 81:31:20:ba:b1:87:18:a3:53:ed:83:db:46:1a:57: 8a:91:ff:73:ce:47:ef:71:c7:0c:84:cf:f2:19:ad: 5b:21:cc:06:55:f3:0e:32:2c:4e:58:c9:aa:60:1e: 42:e0:41:c0:90:09:26:3b:c9:38:d3:ad:a0:41:a8: 1b:39:26:9b:6e:74:a5:84:d6:e0:df:98:bf:7b:10: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C5:93:79:59:54:B1:3C:EC:CC:B3:A7:DE:44:54:A6:6D:FF:C4:F6 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3f:08:66:a0:91:ce:52:33:4d:89:90:6b:57:17:52:9f:b0: a2:88:10:1d:c4:8d:21:59:ff:91:7b:93:fc:22:7e:af:2b:88: 51:1c:98:89:9e:12:b2:b8:4b:f3:ff:66:fc:6e:d3:0d:51:35: 21:c6:fb:6a:3c:20:a7:51:21:9d:f2:ce:97:ff:0e:fc:be:64: 5b:f5:35:85:89:0b:44:d0:ef:af:c8:a3:92:76:fe:05:fb:79: 18:25:17:3f:cc:66:0e:c1:10:ad:30:4c:f1:84:cb:e2:0d:7b: 77:ff:3d:b7:cc:6c:49:e3:89:ac:37:a1:49:53:95:cd:c4:54: 6e:d8:ff:83:64:76:ad:6c:a1:a6:b3:f4:f3:2b:ea:4d:41:46: 06:f1:a7:53:06:93:0c:fe:82:28:57:c9:91:ab:f6:bd:33:50: 2a:02:88:64:d1:66:9b:4f:66:31:4d:e4:9a:15:81:4c:9f:8f: 91:45:2a:ba:c5:dc:74:23:90:75:08:03:a8:f2:5d:fe:04:b4: 88:a7:91:1f:62:f6:c2:1f:f5:da:96:ef:a3:eb:80:05:ae:2c: e7:5e:75:74:45:2f:b0:bc:7f:31:39:81:87:fc:0b:a3:cf:71: fa:58:c7:9a:b8:16:b9:c4:2b:f8:c2:7a:31:3d:bf:15:b7:9c: c8:dd:37:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2MiAiUpQj0UaC+SylB4aWBPNnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTA2MTcxNTI2MDBaFw0yNTA2MjAyMjQyMDBaMDMxMTAvBgNV BAMTKDE5QzU5Mzc5NTk1NEIxM0NFQ0NDQjNBN0RFNDQ1NEE2NkRGRkM0RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+EVy5G6LchkV/3l1VmwAp8QbC yB+BjS6kQj5OrTVHNpSBozHPbp+fLbq8jYriwegRVA/MkeaCC1UyZAOYH1kIVR9V oQ+6jaTkWi2Vzega0VNOoA9I3GGzMS2Sa/Rn1VxdWQepJP/G9802wg8/YBf8MAeh WAhRErmJ3rbVpYKlZkyxJaR1sCPAIkwmF4PetlvbwbJZps3nAnxHwDx1mpuSx4pW gvhXFfJRNzVhqLnmbbsCyoExILqxhxijU+2D20YaV4qR/3POR+9xxwyEz/IZrVsh zAZV8w4yLE5YyapgHkLgQcCQCSY7yTjTraBBqBs5JptudKWE1uDfmL97EPiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGcWTeVlUsTzszLOn3kRUpm3/xPYwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo/CGagkc5SM02JkGtXF1KfsKKIEB3EjSFZ /5F7k/wifq8riFEcmImeErK4S/P/Zvxu0w1RNSHG+2o8IKdRIZ3yzpf/Dvy+ZFv1 NYWJC0TQ76/Io5J2/gX7eRglFz/MZg7BEK0wTPGEy+INe3f/PbfMbEnjiaw3oUlT lc3EVG7Y/4Nkdq1soaaz9PMr6k1BRgbxp1MGkwz+gihXyZGr9r0zUCoCiGTRZptP ZjFN5JoVgUyfj5FFKrrF3HQjkHUIA6jyXf4EtIinkR9i9sIf9dqW76PrgAWuLOde dXRFL7C8fzE5gYf8C6PPcfpYx5q4FrnEK/jCejE9vxW3nMjdN6w= -----END CERTIFICATE-----Generated at Wed Jun 18 03:54:49 2025 by rpki-client