$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: J+5ibZveBJUkgAPE7yJmOO97rBTQAr+ecV1wOfcvpFc= Subject key identifier: A1:D7:46:65:13:20:E2:4E:19:2C:5E:8D:5A:CA:C5:70:9D:7D:79:93 Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 59EB0330241E6A52B0696EECFC8E25E47D8C9BD7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 0198 Signing time: Mon 04 Aug 2025 21:01:19 +0000 Manifest this update: Mon 04 Aug 2025 20:56:19 +0000 Manifest next update: Fri 08 Aug 2025 01:33:19 +0000 Files and hashes: 1: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: EztX/pCLRjxuGDD5KwhPpuJplaVIMLa9IH/IjmNzx0U=) 2: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 3: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: oErSakxstJ8yblvZ1EYXYMDaN4Khj1uxCQw3jp7oioI=) 4: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 5: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: UiT4seYGc2LRhlDHPZFCHvfBBtdW1FREPb29P5n03i8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 01:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:eb:03:30:24:1e:6a:52:b0:69:6e:ec:fc:8e:25:e4:7d:8c:9b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Aug 4 20:56:19 2025 GMT Not After : Aug 8 01:33:19 2025 GMT Subject: CN=A1D746651320E24E192C5E8D5ACAC5709D7D7993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:5e:9e:e4:ca:73:b7:2e:48:4e:54:04:37: 9e:1e:c3:e1:f9:3a:75:d0:98:a6:03:93:23:a6:f0: 78:92:2b:b7:5a:4b:9b:0d:27:f6:9a:52:15:0d:b6: 0d:d8:5a:75:2f:95:0c:bd:23:1d:a3:b7:14:86:3b: 16:5e:10:b7:3b:39:0d:dd:4b:0b:1f:ac:49:ca:cf: 6d:0d:26:82:15:e1:eb:2e:32:62:b5:7d:d6:c2:1a: 95:db:19:2c:46:66:fb:49:5e:9f:fb:71:4a:7f:09: cb:ce:c5:c3:25:92:a5:ee:10:36:75:7f:ac:09:81: a9:a0:55:b1:a3:cb:dc:ea:5c:d3:4d:a3:d2:19:2b: 34:69:23:41:2b:f3:f9:cc:b3:4c:43:f9:5f:16:7a: bc:78:10:0a:2a:06:c2:ff:10:de:48:4e:e9:19:01: 2f:6f:df:3f:14:37:f4:21:5c:b0:94:40:ba:8a:00: 43:c3:e8:78:5f:37:ee:af:19:2b:4c:ed:01:6b:2a: c8:b5:d1:85:78:60:59:02:3d:83:12:9e:e2:12:7c: e5:11:ea:04:04:31:e2:e4:3f:08:b7:55:71:01:8f: ba:c4:71:40:df:61:6c:19:6f:6f:aa:bb:f3:d8:3d: ca:a4:ec:91:ef:2e:29:b2:e0:b1:29:c7:ca:3a:35: fe:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D7:46:65:13:20:E2:4E:19:2C:5E:8D:5A:CA:C5:70:9D:7D:79:93 X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:91:37:3c:47:f1:06:f9:05:1c:f9:73:a9:3e:60:9d:0e:e8: 67:e9:65:8c:c0:ca:b6:53:95:a8:67:ce:d0:34:a9:93:b3:82: 38:d7:fe:69:8f:81:f0:96:31:fa:a4:91:4a:e4:59:2a:8d:71: f9:4c:63:4e:5a:cc:fe:14:e2:91:99:55:bd:bc:d4:d0:60:29: ef:d9:29:d0:7d:98:8f:43:f3:a1:09:64:a3:03:07:29:cd:48: 63:50:75:48:e6:d6:89:67:2f:f2:eb:95:f9:74:52:bd:2f:1a: af:48:d3:76:74:7f:59:6e:61:26:79:40:27:46:44:47:8b:95: 08:0d:e9:62:e7:e9:32:f4:cd:2f:bb:32:dd:fd:66:41:be:70: 00:19:2b:cb:45:0d:40:70:dc:33:83:78:34:65:b1:97:56:64: 16:99:04:16:36:2e:32:3f:36:c3:8e:3b:b5:93:05:7d:e3:ab: 69:57:c9:ae:e3:5d:b3:76:5f:10:71:24:8f:9e:cc:75:1e:3f: a7:ed:3e:ec:4b:7e:f7:f0:f9:e8:8f:ac:16:d0:3b:7a:92:90: 65:7c:1d:f4:d2:f1:86:1b:50:51:d2:1c:5d:65:88:fb:58:7c: b9:c5:59:be:95:3a:a3:0a:d4:e2:0c:b6:30:4e:02:df:bc:1c: ad:10:81:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWesDMCQealKwaW7s/I4l5H2Mm9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTA4MDQyMDU2MTlaFw0yNTA4MDgwMTMzMTlaMDMxMTAvBgNV BAMTKEExRDc0NjY1MTMyMEUyNEUxOTJDNUU4RDVBQ0FDNTcwOUQ3RDc5OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOV6e5Mpzty5ITlQEN54ew+H5 OnXQmKYDkyOm8HiSK7daS5sNJ/aaUhUNtg3YWnUvlQy9Ix2jtxSGOxZeELc7OQ3d SwsfrEnKz20NJoIV4esuMmK1fdbCGpXbGSxGZvtJXp/7cUp/CcvOxcMlkqXuEDZ1 f6wJgamgVbGjy9zqXNNNo9IZKzRpI0Er8/nMs0xD+V8Werx4EAoqBsL/EN5ITukZ AS9v3z8UN/QhXLCUQLqKAEPD6HhfN+6vGStM7QFrKsi10YV4YFkCPYMSnuISfOUR 6gQEMeLkPwi3VXEBj7rEcUDfYWwZb2+qu/PYPcqk7JHvLimy4LEpx8o6Nf7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoddGZRMg4k4ZLF6NWsrFcJ19eZMwHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWRNzxH8Qb5BRz5c6k+YJ0O6GfpZYzAyrZT lahnztA0qZOzgjjX/mmPgfCWMfqkkUrkWSqNcflMY05azP4U4pGZVb281NBgKe/Z KdB9mI9D86EJZKMDBynNSGNQdUjm1olnL/Lrlfl0Ur0vGq9I03Z0f1luYSZ5QCdG REeLlQgN6WLn6TL0zS+7Mt39ZkG+cAAZK8tFDUBw3DODeDRlsZdWZBaZBBY2LjI/ NsOOO7WTBX3jq2lXya7jXbN2XxBxJI+ezHUeP6ftPuxLfvfw+eiPrBbQO3qSkGV8 HfTS8YYbUFHSHF1liPtYfLnFWb6VOqMK1OIMtjBOAt+8HK0QgdA= -----END CERTIFICATE-----Generated at Thu Aug 7 00:38:32 2025 by rpki-client