$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: LOGFzTVyRWR1inetInvGCNn4sBPFKXBmvjLdQMxLS68= Subject key identifier: 02:54:AD:C8:4E:7C:40:11:6C:68:28:0B:5D:08:14:B3:45:8F:01:62 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 7A2FCD2F8EFB742E19BBA0864C3A86C8B022985A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 01F7 Signing time: Mon 28 Apr 2025 09:11:01 +0000 Manifest this update: Mon 28 Apr 2025 09:06:01 +0000 Manifest next update: Thu 01 May 2025 18:13:01 +0000 Files and hashes: 1: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) 2: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: Gz6Qkq3ivHQZ0Zrtayj//BKBBFTioKWT7BiC/UuUniE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2f:cd:2f:8e:fb:74:2e:19:bb:a0:86:4c:3a:86:c8:b0:22:98:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Apr 28 09:06:01 2025 GMT Not After : May 1 18:13:01 2025 GMT Subject: CN=0254ADC84E7C40116C68280B5D0814B3458F0162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:05:8c:df:79:2b:ac:95:f4:2a:7f:b4:1b: 6b:2c:10:92:95:8e:df:3d:34:f3:55:a3:12:88:5a: 70:85:93:11:e3:49:e7:bd:b2:f7:9c:e4:84:15:7d: b2:4a:55:79:bc:2e:cd:c3:5d:a0:83:df:c2:a3:f1: ca:b9:64:0c:d5:ec:b5:a4:0e:3e:bf:e8:cb:59:b4: d1:10:e6:77:4f:1e:e9:80:f5:ff:c2:bb:4a:de:99: ca:6d:7c:15:c8:8a:cc:08:c6:74:b0:f3:d0:41:27: 3e:14:09:25:67:49:17:f7:80:84:62:da:8a:0e:9b: 14:53:67:27:ed:1d:2b:36:60:84:c7:49:67:27:f8: 2f:cc:fb:73:b3:41:06:df:fe:a6:38:76:0b:a4:51: 3b:48:ba:c3:79:0a:54:d6:4a:0e:83:c2:d2:8c:fb: 38:74:07:ec:4d:ac:d2:4b:65:e3:d5:0a:79:72:20: 2b:6e:ed:b2:80:bb:b3:a6:fd:9a:4a:ee:c9:e1:53: 56:9d:fd:bc:2e:fa:22:2e:97:ae:97:44:2d:aa:f7: c3:9a:e1:0c:74:d5:88:ef:71:a3:10:9d:fc:7a:27: 88:e0:9a:23:54:48:dd:9c:dd:0f:80:d3:2c:fe:da: 1e:ae:8b:cc:62:16:ee:2d:96:fa:bc:f5:e8:c3:60: 81:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:54:AD:C8:4E:7C:40:11:6C:68:28:0B:5D:08:14:B3:45:8F:01:62 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:05:f3:93:40:bf:05:dc:d0:4e:d9:b2:8f:cd:55:b0:0f:a8: 69:ac:21:de:88:7b:71:69:6d:a1:8c:0c:f5:d7:52:64:90:8b: be:15:53:b0:df:95:c0:82:93:db:7a:b3:e1:d3:7a:34:05:61: 08:23:ec:74:8e:30:aa:2f:77:85:c9:8d:b2:0d:92:f7:87:e6: a9:94:78:94:c6:7c:88:08:74:7a:98:66:c1:07:91:87:6a:ea: 73:b3:bd:c5:16:17:56:1b:72:1e:28:54:31:0b:b7:31:f0:ad: ed:c4:c5:73:a0:b1:07:66:20:e2:69:cb:ed:47:70:53:17:45: 76:8f:64:ae:8f:81:67:31:e3:c3:83:9d:4d:9b:44:33:ee:05: 8c:fe:d2:79:02:22:29:b8:3c:2c:9c:85:62:e5:09:db:7c:fa: 7a:c7:78:c0:40:62:9a:9f:b1:7d:92:8c:42:bd:93:94:62:c4: 12:9b:30:bb:cb:5f:fe:08:9f:9e:ed:dc:30:e0:a5:93:94:2d: b4:06:95:00:d2:d3:52:94:dc:96:59:02:3c:a5:89:b9:88:b1: 8a:15:42:f8:4f:0b:bf:51:71:5b:4b:5c:78:36:e4:30:ea:ae: c7:db:fe:92:28:6a:8e:cf:dd:45:13:56:07:94:fb:f5:f3:3b: 55:ed:e5:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUei/NL477dC4Zu6CGTDqGyLAimFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTA0MjgwOTA2MDFaFw0yNTA1MDExODEzMDFaMDMxMTAvBgNV BAMTKDAyNTRBREM4NEU3QzQwMTE2QzY4MjgwQjVEMDgxNEIzNDU4RjAxNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDboAWM33krrJX0Kn+0G2ssEJKV jt89NPNVoxKIWnCFkxHjSee9svec5IQVfbJKVXm8Ls3DXaCD38Kj8cq5ZAzV7LWk Dj6/6MtZtNEQ5ndPHumA9f/Cu0remcptfBXIiswIxnSw89BBJz4UCSVnSRf3gIRi 2ooOmxRTZyftHSs2YITHSWcn+C/M+3OzQQbf/qY4dgukUTtIusN5ClTWSg6DwtKM +zh0B+xNrNJLZePVCnlyICtu7bKAu7Om/ZpK7snhU1ad/bwu+iIul66XRC2q98Oa 4Qx01YjvcaMQnfx6J4jgmiNUSN2c3Q+A0yz+2h6ui8xiFu4tlvq89ejDYIGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAlStyE58QBFsaCgLXQgUs0WPAWIwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcF85NAvwXc0E7Zso/NVbAPqGmsId6Ie3Fp baGMDPXXUmSQi74VU7DflcCCk9t6s+HTejQFYQgj7HSOMKovd4XJjbINkveH5qmU eJTGfIgIdHqYZsEHkYdq6nOzvcUWF1Ybch4oVDELtzHwre3ExXOgsQdmIOJpy+1H cFMXRXaPZK6PgWcx48ODnU2bRDPuBYz+0nkCIim4PCychWLlCdt8+nrHeMBAYpqf sX2SjEK9k5RixBKbMLvLX/4In57t3DDgpZOULbQGlQDS01KU3JZZAjylibmIsYoV QvhPC79RcVtLXHg25DDqrsfb/pIoao7P3UUTVgeU+/XzO1Xt5cA= -----END CERTIFICATE-----Generated at Tue Apr 29 19:18:37 2025 by rpki-client