$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: 7xJtgN9HnzD/Hyh5z8L/rX3GowsDEb6XlOh6RvAvJZc= Subject key identifier: 55:2F:F7:F5:4D:A0:24:8E:A2:91:D0:E9:17:45:2B:A5:7A:95:CD:C4 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 76B4FD00EB5E675FAC26672ED6801FB5AB1EF60C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: FE Signing time: Sun 15 Jun 2025 21:32:13 +0000 Manifest this update: Sun 15 Jun 2025 21:27:13 +0000 Manifest next update: Thu 19 Jun 2025 08:08:13 +0000 Files and hashes: 1: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: +TpGrInw6MYBt52lteYHqPe/GHixGpWLSTXXOphuUSU=) 2: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: KQBwI3mDk7Di2Hgh9pZD8sQ4+9+63h0EFvm7NCb7Spk=) 3: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: gxUPUJBn+uTWywMahDSAXFWsoEOeqsrPmzkPsZe+U9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 08:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:b4:fd:00:eb:5e:67:5f:ac:26:67:2e:d6:80:1f:b5:ab:1e:f6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Jun 15 21:27:13 2025 GMT Not After : Jun 19 08:08:13 2025 GMT Subject: CN=552FF7F54DA0248EA291D0E917452BA57A95CDC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:a1:88:67:8b:da:5b:c4:b1:05:a2:f0:b2: 6a:7b:b2:35:df:22:e6:08:e9:0d:b6:bd:77:ee:38: 92:66:b8:52:1d:64:9d:13:e6:95:8b:cf:e4:5f:47: bc:48:16:63:cd:94:c1:a0:d0:98:d5:72:e0:c9:f5: ad:10:ab:6f:65:c3:6a:55:f0:8c:ba:79:08:6f:4f: 8b:44:26:97:79:32:f1:a9:58:6b:24:54:b6:f1:c2: d2:64:ec:58:bd:ec:29:2b:94:25:34:b3:2e:34:4e: 4b:12:1a:b2:ec:80:f8:ec:e7:87:cd:33:ff:5c:9a: c9:b6:b4:0f:a5:6c:a4:68:a6:f7:12:01:7b:c5:ad: 9e:ed:23:ce:54:eb:c9:be:f0:05:fa:bd:15:49:4f: 67:9b:85:3c:c9:af:25:f7:6e:df:cd:72:e0:f4:1a: 9e:e9:a6:32:3a:5f:ac:d6:2a:91:a6:79:3f:ba:5e: 7e:8c:ae:75:f9:5c:20:3e:4a:a9:fe:02:ce:e2:35: 20:a3:d1:6b:ac:ca:c0:3e:12:b0:cd:f1:0d:6e:c4: 00:c3:b0:1f:06:eb:11:21:2b:a5:e3:1c:62:f5:02: ec:67:06:51:48:ea:5b:8a:87:57:fc:4b:f9:a1:ca: df:3b:59:83:84:a3:6b:28:ad:6c:90:23:6a:f4:bc: 8e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2F:F7:F5:4D:A0:24:8E:A2:91:D0:E9:17:45:2B:A5:7A:95:CD:C4 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:92:68:8e:fa:0d:dc:97:30:c6:72:cd:a5:37:d9:c6:45:f7: d1:6e:8d:2a:10:0a:87:b0:c4:10:9d:b1:0a:c3:4b:a7:39:28: a7:3c:aa:06:d5:f7:01:ab:3c:10:9f:91:da:6e:f7:1a:a0:14: b0:9f:be:d1:6a:f2:81:e1:ad:6f:95:2e:b4:dd:f7:2f:40:71: ce:37:ff:a8:cf:d4:85:f7:a8:14:39:a5:c3:ab:d9:c0:29:3d: ab:b8:76:bd:aa:1f:74:97:c3:51:88:a5:cb:53:62:4d:b6:2d: 3b:8d:f3:39:6f:bc:7a:45:99:e6:b4:68:3f:cc:38:bc:77:5d: 8f:27:61:ee:38:b1:56:d6:3f:12:23:38:3e:28:a8:3e:30:b4: 37:00:a2:cc:4a:14:b5:33:d3:51:97:61:79:5e:28:02:63:8d: 16:13:f5:83:88:70:6d:dd:92:fc:ba:46:9e:ce:3c:32:0b:88: 05:04:f6:0a:94:af:56:10:ee:27:3f:8c:3b:2b:3d:38:48:60: 97:78:7f:f0:ea:ec:9a:be:47:a0:2d:01:3c:fe:ea:94:24:3c: 52:b3:a8:fc:2f:bb:4c:97:6e:cb:7c:d4:f7:63:2a:a3:33:ba: 36:c1:b1:be:20:e0:0f:ed:70:94:16:0d:6f:95:c1:4a:11:e2: 59:02:a5:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdrT9AOteZ1+sJmcu1oAftase9gwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTA2MTUyMTI3MTNaFw0yNTA2MTkwODA4MTNaMDMxMTAvBgNV BAMTKDU1MkZGN0Y1NERBMDI0OEVBMjkxRDBFOTE3NDUyQkE1N0E5NUNEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtfaGIZ4vaW8SxBaLwsmp7sjXf IuYI6Q22vXfuOJJmuFIdZJ0T5pWLz+RfR7xIFmPNlMGg0JjVcuDJ9a0Qq29lw2pV 8Iy6eQhvT4tEJpd5MvGpWGskVLbxwtJk7Fi97CkrlCU0sy40TksSGrLsgPjs54fN M/9cmsm2tA+lbKRopvcSAXvFrZ7tI85U68m+8AX6vRVJT2ebhTzJryX3bt/NcuD0 Gp7ppjI6X6zWKpGmeT+6Xn6MrnX5XCA+Sqn+As7iNSCj0WusysA+ErDN8Q1uxADD sB8G6xEhK6XjHGL1AuxnBlFI6luKh1f8S/mhyt87WYOEo2sorWyQI2r0vI75AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVS/39U2gJI6ikdDpF0UrpXqVzcQwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGSaI76DdyXMMZyzaU32cZF99FujSoQCoew xBCdsQrDS6c5KKc8qgbV9wGrPBCfkdpu9xqgFLCfvtFq8oHhrW+VLrTd9y9Acc43 /6jP1IX3qBQ5pcOr2cApPau4dr2qH3SXw1GIpctTYk22LTuN8zlvvHpFmea0aD/M OLx3XY8nYe44sVbWPxIjOD4oqD4wtDcAosxKFLUz01GXYXleKAJjjRYT9YOIcG3d kvy6Rp7OPDILiAUE9gqUr1YQ7ic/jDsrPThIYJd4f/Dq7Jq+R6AtATz+6pQkPFKz qPwvu0yXbst81PdjKqMzujbBsb4g4A/tcJQWDW+VwUoR4lkCpe8= -----END CERTIFICATE-----Generated at Tue Jun 17 08:17:47 2025 by rpki-client