$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft File: 45C9770C2C07C2696447FAA1E820E46170A3C56C.mft (raw, json) Hash identifier: uu9Jh94vKDSwTsToL1Yo7ZitGChGAPyWCg/igEdwfb8= Subject key identifier: 5D:5F:35:C3:ED:99:D4:CE:08:F8:B0:87:24:A9:FC:AC:B3:48:60:C9 Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 739FEFFDC609CC96BC519E0AB0633A847669CC94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft Manifest number: 0288 Signing time: Tue 17 Jun 2025 03:10:42 +0000 Manifest this update: Tue 17 Jun 2025 03:05:42 +0000 Manifest next update: Fri 20 Jun 2025 12:18:42 +0000 Files and hashes: 1: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: XtJZn7ljJSfP6iL/MDjtfpVkviYKx4Xboir3grsNMCo=) 2: 45C9770C2C07C2696447FAA1E820E46170A3C56C.crl (hash: VCUR62Sv61Rvw2FnSsY9Wl9NB+nTcHzuVL2WqHYDxcU=) 3: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: DFA3qBFACki/karT3fIlYISlkq7/i7wKwlvN+BCd6A4=) 4: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: IpAhfyBk6UVvHL1CrMEsCPgMXpI9vxk9SZkiJxXgvQk=) 5: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: uUzFxXX9+YSqNUoc9f/VNA2O72vd2Y345REzg4qr7bE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 12:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9f:ef:fd:c6:09:cc:96:bc:51:9e:0a:b0:63:3a:84:76:69:cc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Jun 17 03:05:42 2025 GMT Not After : Jun 20 12:18:42 2025 GMT Subject: CN=5D5F35C3ED99D4CE08F8B08724A9FCACB34860C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:de:74:53:06:d5:8b:be:e5:ed:c7:67:f2: e4:64:bc:5f:2d:da:91:c0:b6:54:e5:98:ec:98:7b: d1:b2:49:5d:61:e1:66:94:61:d6:e7:10:b7:77:f4: 19:b5:8c:3b:e0:cd:1d:de:ef:f9:7f:9e:85:59:d9: f5:d9:93:8d:23:3b:03:35:24:1e:ca:e3:85:4c:25: 27:92:50:e6:0e:a6:99:63:a0:20:5f:6d:01:2f:8c: ee:7d:64:85:11:44:75:3b:10:7d:67:f2:15:0d:d2: 14:52:64:c8:4b:01:1d:30:0b:49:c2:9d:92:e4:bd: 36:11:e2:96:ca:71:a1:86:ab:6d:e1:5e:73:3a:ba: b4:a7:f6:e1:05:d9:31:0c:11:7b:41:8a:e4:a6:28: c7:d2:43:26:08:a9:5f:5a:e6:78:9a:c5:49:4b:94: 6c:4b:4c:8c:72:df:d5:7f:c9:f6:c1:a7:c9:1c:dd: e7:e8:aa:15:3f:74:51:75:bd:22:4c:52:b5:fd:9b: 8e:2b:ca:39:a5:cb:50:0a:b9:1d:d1:a7:51:7f:b5: 0c:01:e9:7f:56:45:ac:90:cf:f7:10:ed:53:be:cf: 97:a1:6a:70:13:ec:f7:10:33:21:bd:f7:39:5e:4d: 61:3b:57:f7:fc:ab:cf:b5:bd:45:29:c2:6f:85:f0: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5F:35:C3:ED:99:D4:CE:08:F8:B0:87:24:A9:FC:AC:B3:48:60:C9 X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1d:35:29:79:29:60:bf:ae:27:3f:21:0b:14:2a:77:4a:a7: 0b:a6:c7:6a:e9:c6:78:17:93:0e:b5:b4:ba:1a:07:39:e7:2f: 98:a6:a6:08:56:a5:c0:e1:b6:b9:2e:a3:4d:88:18:91:69:b0: 16:2c:5f:d5:42:ff:d6:b9:42:ad:6e:5f:51:ca:c0:1c:0d:43: 49:6b:ea:5c:cd:d5:8e:22:54:f5:72:aa:8f:ed:31:1f:5c:21: 90:61:c0:75:25:dd:df:07:12:fb:b8:e8:99:38:a1:4c:76:e6: 7a:5d:5f:57:0c:2c:aa:8b:6d:83:c7:c5:95:0f:cb:46:2e:e3: 76:ad:cb:ed:46:46:42:ab:27:e3:ab:b9:95:30:fb:84:6a:ce: 9d:33:0f:ba:7b:a3:8e:23:c5:6e:6d:ce:ac:ff:b2:7c:0b:c9: 83:6c:01:34:db:76:ff:7f:22:41:f1:98:88:e0:53:03:a2:57: 06:07:1f:d3:47:84:25:a5:3d:09:86:50:38:a3:fb:ca:a1:a8: 7b:22:f6:eb:e9:31:02:1e:2a:26:78:45:0a:21:93:94:b9:ec: b1:30:2c:72:31:85:33:b5:f0:d7:e0:bf:30:0d:a4:43:60:65: f7:55:ef:26:a2:f2:d3:c1:d2:0a:49:a6:4d:8d:37:82:26:bc: 4e:82:f0:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5/v/cYJzJa8UZ4KsGM6hHZpzJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNTA2MTcwMzA1NDJaFw0yNTA2MjAxMjE4NDJaMDMxMTAvBgNV BAMTKDVENUYzNUMzRUQ5OUQ0Q0UwOEY4QjA4NzI0QTlGQ0FDQjM0ODYwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCgN50UwbVi77l7cdn8uRkvF8t 2pHAtlTlmOyYe9GySV1h4WaUYdbnELd39Bm1jDvgzR3e7/l/noVZ2fXZk40jOwM1 JB7K44VMJSeSUOYOppljoCBfbQEvjO59ZIURRHU7EH1n8hUN0hRSZMhLAR0wC0nC nZLkvTYR4pbKcaGGq23hXnM6urSn9uEF2TEMEXtBiuSmKMfSQyYIqV9a5niaxUlL lGxLTIxy39V/yfbBp8kc3efoqhU/dFF1vSJMUrX9m44ryjmly1AKuR3Rp1F/tQwB 6X9WRayQz/cQ7VO+z5ehanAT7PcQMyG99zleTWE7V/f8q8+1vUUpwm+F8BMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXV81w+2Z1M4I+LCHJKn8rLNIYMkwHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0 NjE3MEEzQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsdNSl5KWC/ric/IQsUKndKpwumx2rpxngX kw61tLoaBznnL5impghWpcDhtrkuo02IGJFpsBYsX9VC/9a5Qq1uX1HKwBwNQ0lr 6lzN1Y4iVPVyqo/tMR9cIZBhwHUl3d8HEvu46Jk4oUx25npdX1cMLKqLbYPHxZUP y0Yu43aty+1GRkKrJ+OruZUw+4Rqzp0zD7p7o44jxW5tzqz/snwLyYNsATTbdv9/ IkHxmIjgUwOiVwYHH9NHhCWlPQmGUDij+8qhqHsi9uvpMQIeKiZ4RQohk5S57LEw LHIxhTO18NfgvzANpENgZfdV7yai8tPB0gpJpk2NN4ImvE6C8DM= -----END CERTIFICATE-----Generated at Wed Jun 18 17:34:47 2025 by rpki-client