$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: 9i3cq7LETNByF3N/Jmz+6AaROVZTWsLQY7Ubw37qY00= Subject key identifier: 36:0F:71:2D:E1:1E:03:35:33:E2:A0:15:D0:86:52:85:D1:DA:C2:74 Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 3D35D54EE342FEC620B4666DBB0F292826C61E66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 0171 Signing time: Sat 14 Jun 2025 06:41:48 +0000 Manifest this update: Sat 14 Jun 2025 06:36:48 +0000 Manifest next update: Tue 17 Jun 2025 13:50:48 +0000 Files and hashes: 1: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: X/pTLdfxxF/67GE5+yYC0n5COWcpEdqJ9QVP/BR7kPQ=) 2: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: KMcz9HndxaUeKt8rn5FI6Dp+4OSaacNz41TOKfq1iXs=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 0veKivESqTIR22CLe0BQKZVbkyyZLitqVchvnzV7aBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 13:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:35:d5:4e:e3:42:fe:c6:20:b4:66:6d:bb:0f:29:28:26:c6:1e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Jun 14 06:36:48 2025 GMT Not After : Jun 17 13:50:48 2025 GMT Subject: CN=360F712DE11E033533E2A015D0865285D1DAC274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:f7:d8:2c:7c:ce:0e:73:1c:b3:33:f5:d7: 64:fd:27:d0:bc:af:00:87:20:41:56:dc:f2:d4:2b: a1:1c:ff:4b:44:df:d7:27:45:96:d9:44:4e:f4:f2: 89:fe:64:63:fa:8b:3a:2c:05:3c:c2:59:65:08:4d: 62:47:87:7f:b2:b5:b5:b1:17:d8:b7:5d:c2:c0:ca: 4e:7d:66:7e:81:a4:49:f2:3f:82:e4:c3:3f:6e:92: ea:de:6e:bd:e0:29:3d:2c:68:97:6d:b0:07:4e:0b: 9f:70:76:cc:b5:66:b1:9d:3b:2c:6f:22:ed:77:ff: 43:ad:1f:42:08:e4:4e:45:98:8e:11:7d:f4:d4:3e: a6:a2:9f:20:fb:c2:1f:81:bc:e0:42:83:68:eb:8c: 43:e3:6a:1d:09:ff:85:46:5c:cb:e9:32:41:16:9f: 81:d0:5c:fb:f6:b4:fa:17:d9:96:16:6e:54:b6:7b: 77:35:13:a1:c6:e5:11:49:ff:f0:db:8d:57:26:a3: 83:85:d2:14:72:61:09:b3:05:78:93:43:8f:85:22: 58:6b:d8:0a:2a:e5:e2:ca:ca:08:b8:a2:61:08:e7: 2b:d2:3a:54:ef:97:b0:ab:2f:1c:84:7d:51:6b:3f: dd:fb:4f:5e:ac:9f:ed:35:1d:d2:98:bb:e0:1f:0d: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0F:71:2D:E1:1E:03:35:33:E2:A0:15:D0:86:52:85:D1:DA:C2:74 X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d3:14:1a:88:b0:89:4b:4f:e9:a3:86:04:e3:65:11:c8:39: 02:bc:95:b8:1b:ce:55:e8:4b:34:c5:45:7c:b9:0b:05:0f:8d: a1:f9:26:0d:08:4c:6e:82:c5:31:21:67:40:68:0e:0b:ac:00: 9f:42:5a:96:dd:ea:2c:81:5d:71:63:53:a9:94:66:e9:44:58: cf:e7:4b:02:7f:b5:f5:99:ab:f1:cd:de:25:2f:d3:7c:cd:67: 4b:aa:a5:78:2f:df:b0:8f:ad:5e:43:07:f0:84:43:cd:3c:42: 6a:0d:3a:b2:04:9a:fe:c5:44:57:b9:32:de:9e:6d:62:1b:74: 68:0a:b5:56:f7:6b:f0:29:74:e8:00:4a:3b:47:26:21:17:52: 93:bf:60:4b:fa:39:80:9c:64:46:9b:e9:47:9f:4f:d8:6d:e6: 86:d9:ec:8c:81:38:7f:6f:c4:3d:ba:4c:b0:7c:49:bb:e7:2c: 4c:5e:f0:a2:59:91:1c:28:db:42:61:16:14:bd:fb:2f:b3:15: 71:ae:47:28:2b:b5:65:af:10:a4:78:d7:cc:38:4a:2d:fa:bf: b7:f5:e7:32:65:26:61:3f:1c:f1:d9:56:b9:20:bc:f4:cd:76: 1b:97:7d:f4:c2:62:cf:44:07:44:0d:b7:d1:63:78:51:5d:a3: 5e:ca:31:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPTXVTuNC/sYgtGZtuw8pKCbGHmYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNTA2MTQwNjM2NDhaFw0yNTA2MTcxMzUwNDhaMDMxMTAvBgNV BAMTKDM2MEY3MTJERTExRTAzMzUzM0UyQTAxNUQwODY1Mjg1RDFEQUMyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8APfYLHzODnMcszP112T9J9C8 rwCHIEFW3PLUK6Ec/0tE39cnRZbZRE708on+ZGP6izosBTzCWWUITWJHh3+ytbWx F9i3XcLAyk59Zn6BpEnyP4Lkwz9ukurebr3gKT0saJdtsAdOC59wdsy1ZrGdOyxv Iu13/0OtH0II5E5FmI4RffTUPqainyD7wh+BvOBCg2jrjEPjah0J/4VGXMvpMkEW n4HQXPv2tPoX2ZYWblS2e3c1E6HG5RFJ//DbjVcmo4OF0hRyYQmzBXiTQ4+FIlhr 2Aoq5eLKygi4omEI5yvSOlTvl7CrLxyEfVFrP937T16sn+01HdKYu+AfDRk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNg9xLeEeAzUz4qAV0IZShdHawnQwHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDTFBqIsIlLT+mjhgTjZRHIOQK8lbgbzlXo SzTFRXy5CwUPjaH5Jg0ITG6CxTEhZ0BoDgusAJ9CWpbd6iyBXXFjU6mUZulEWM/n SwJ/tfWZq/HN3iUv03zNZ0uqpXgv37CPrV5DB/CEQ808QmoNOrIEmv7FRFe5Mt6e bWIbdGgKtVb3a/ApdOgASjtHJiEXUpO/YEv6OYCcZEab6UefT9ht5obZ7IyBOH9v xD26TLB8SbvnLExe8KJZkRwo20JhFhS9+y+zFXGuRygrtWWvEKR418w4Si36v7f1 5zJlJmE/HPHZVrkgvPTNdhuXffTCYs9EB0QNt9FjeFFdo17KMWM= -----END CERTIFICATE-----Generated at Mon Jun 16 03:06:47 2025 by rpki-client