$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: KOdeGDlHC5AfUX4vqU8IeUJm9gK6nfLYB5lSPagWPKg= Subject key identifier: A0:BA:63:FC:D2:6F:94:A5:E5:DF:2F:3D:8E:2F:E5:0A:2B:A2:6F:41 Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 5425216DE797B7DED9F9AE218B20255DDEF1B5DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 020C Signing time: Tue 17 Jun 2025 01:12:18 +0000 Manifest this update: Tue 17 Jun 2025 01:07:18 +0000 Manifest next update: Fri 20 Jun 2025 10:30:18 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: ruHC2EhJH6YFVzEzFOSXWSq/8zD5qVHQfTr0oDie0sk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 10:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:25:21:6d:e7:97:b7:de:d9:f9:ae:21:8b:20:25:5d:de:f1:b5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Jun 17 01:07:18 2025 GMT Not After : Jun 20 10:30:18 2025 GMT Subject: CN=A0BA63FCD26F94A5E5DF2F3D8E2FE50A2BA26F41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:e9:3c:69:0d:cd:4f:d0:c8:26:38:55:4b: d0:7c:58:26:a7:10:b3:83:d4:41:e4:c6:2c:a4:1e: bc:70:4d:6b:3f:3c:51:84:18:f0:40:e2:76:90:f3: ad:19:29:16:34:26:5f:55:6f:0e:6d:a9:93:52:82: 4f:11:2d:85:65:bd:55:37:03:2e:fb:3c:08:6e:d6: f0:31:2c:10:e9:ca:59:c7:59:05:62:4f:65:45:03: 9d:86:67:d9:3e:ea:d1:a0:7c:01:cb:6e:3c:4a:a2: ad:88:24:8a:93:19:8a:36:55:cc:12:64:ae:80:07: 85:3f:a8:8c:8f:45:64:1d:3a:86:5f:61:b4:e7:75: bb:bc:d4:dd:f1:ba:0e:9b:08:bf:b6:7c:1d:37:4b: ee:e7:10:e7:93:43:85:03:41:d0:91:d4:2a:b2:c0: 8e:3d:0c:5e:85:e7:fd:45:a8:3e:5c:4c:c7:3f:f3: 88:2c:9a:76:24:2a:2c:cf:eb:ab:62:26:da:5e:22: 23:d6:2e:d1:27:99:b6:0e:a3:fd:25:eb:ba:95:8a: 3c:67:a0:cd:e2:8f:b0:3d:b4:e7:b2:9b:b8:a4:51: 53:77:47:c6:2b:41:af:bb:c8:76:38:24:4d:fb:11: 0a:cd:28:85:97:e7:4c:8e:90:72:9d:65:91:9c:28: 33:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BA:63:FC:D2:6F:94:A5:E5:DF:2F:3D:8E:2F:E5:0A:2B:A2:6F:41 X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:20:2c:cd:78:7e:5a:ae:50:6e:0c:76:82:ea:a6:9a:de:0a: 73:c1:24:fd:a4:d7:e6:bc:45:35:fc:91:4e:3a:8e:e3:cc:71: 95:93:6f:8c:45:58:08:d1:1a:38:25:0e:19:a6:b7:a3:87:3b: 9b:ea:b7:9a:90:b8:27:4d:b6:dc:12:31:10:eb:29:0d:0a:e7: 4a:d2:5b:80:31:5b:4d:47:ea:54:56:d7:ef:f2:7f:20:fa:27: 9d:2d:0f:ee:be:f8:00:d9:60:72:54:ed:75:36:18:52:7f:49: a8:1e:ee:9a:b9:fa:55:4c:ec:6c:a2:4b:c9:96:05:6b:ee:7b: db:42:81:95:d0:e4:aa:12:14:b6:cf:1c:a2:75:ad:8f:7a:34: ce:3e:5c:7e:2f:47:ee:21:6c:9b:b7:0c:01:8d:30:2a:e6:1f: ba:06:9e:4a:20:a9:f5:8e:b7:cc:26:6d:33:d5:53:5e:8b:87: 39:c6:8e:da:e8:1d:64:98:a6:43:ac:47:ec:4f:4f:36:99:a6: 0e:3b:ad:27:46:82:83:e6:21:44:53:a7:03:d2:59:bc:f1:5c: f4:37:1e:5c:8d:9e:4f:b6:88:36:89:75:f1:fa:8d:02:dc:92: ea:f5:26:9f:a4:1d:5b:ad:17:65:8f:2c:32:2c:e8:5c:38:b8: 8f:a6:e7:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCUhbeeXt97Z+a4hiyAlXd7xtdswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNTA2MTcwMTA3MThaFw0yNTA2MjAxMDMwMThaMDMxMTAvBgNV BAMTKEEwQkE2M0ZDRDI2Rjk0QTVFNURGMkYzRDhFMkZFNTBBMkJBMjZGNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCut+k8aQ3NT9DIJjhVS9B8WCan ELOD1EHkxiykHrxwTWs/PFGEGPBA4naQ860ZKRY0Jl9Vbw5tqZNSgk8RLYVlvVU3 Ay77PAhu1vAxLBDpylnHWQViT2VFA52GZ9k+6tGgfAHLbjxKoq2IJIqTGYo2VcwS ZK6AB4U/qIyPRWQdOoZfYbTndbu81N3xug6bCL+2fB03S+7nEOeTQ4UDQdCR1Cqy wI49DF6F5/1FqD5cTMc/84gsmnYkKizP66tiJtpeIiPWLtEnmbYOo/0l67qVijxn oM3ij7A9tOeym7ikUVN3R8YrQa+7yHY4JE37EQrNKIWX50yOkHKdZZGcKDMhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLpj/NJvlKXl3y89ji/lCiuib0EwHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAgLM14flquUG4MdoLqppreCnPBJP2k1+a8 RTX8kU46juPMcZWTb4xFWAjRGjglDhmmt6OHO5vqt5qQuCdNttwSMRDrKQ0K50rS W4AxW01H6lRW1+/yfyD6J50tD+6++ADZYHJU7XU2GFJ/Sage7pq5+lVM7GyiS8mW BWvue9tCgZXQ5KoSFLbPHKJ1rY96NM4+XH4vR+4hbJu3DAGNMCrmH7oGnkogqfWO t8wmbTPVU16LhznGjtroHWSYpkOsR+xPTzaZpg47rSdGgoPmIURTpwPSWbzxXPQ3 HlyNnk+2iDaJdfH6jQLckur1Jp+kHVutF2WPLDIs6Fw4uI+m56c= -----END CERTIFICATE-----Generated at Tue Jun 17 15:56:01 2025 by rpki-client