$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: ZHA7xnROrPSmDP/KwMkoAiVBKjjEFsjG1e7tnNRjy30= Subject key identifier: B0:AE:26:7F:2D:F8:95:59:BC:E2:22:08:91:99:CC:13:6E:BD:50:89 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 7AE42F86CB07B8449611D036714B2287F8EDFB21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: E8 Signing time: Sun 27 Apr 2025 22:12:14 +0000 Manifest this update: Sun 27 Apr 2025 22:07:14 +0000 Manifest next update: Thu 01 May 2025 04:49:14 +0000 Files and hashes: 1: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: Id/QCr3UKnyk98h5jNyoISqDLUL68RMR35sbjnFhFNk=) 2: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: +TpGrInw6MYBt52lteYHqPe/GHixGpWLSTXXOphuUSU=) 3: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: KQBwI3mDk7Di2Hgh9pZD8sQ4+9+63h0EFvm7NCb7Spk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 04:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e4:2f:86:cb:07:b8:44:96:11:d0:36:71:4b:22:87:f8:ed:fb:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Apr 27 22:07:14 2025 GMT Not After : May 1 04:49:14 2025 GMT Subject: CN=B0AE267F2DF89559BCE222089199CC136EBD5089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:d7:51:90:57:e9:82:a8:11:17:d6:f6:7b: 44:31:ca:9c:35:2b:f9:16:28:e5:ca:e5:b7:71:79: d5:d2:eb:40:99:a5:9e:0b:a5:ea:5e:f3:53:ca:bc: 45:db:57:93:53:96:26:90:5c:6c:52:13:b6:8e:59: 54:64:75:f4:32:bb:be:95:ef:92:b0:85:86:5c:27: 4c:0d:d6:f8:d5:67:e8:77:f1:f4:d5:34:d9:54:e1: 92:60:74:67:fa:51:f5:21:0b:15:bd:2b:12:f0:37: 6c:0e:cc:0a:be:c3:e0:c6:e2:47:f0:fd:55:d9:aa: 9f:da:d0:f4:ad:43:e9:65:81:25:07:5d:45:ed:49: 9e:c7:e2:ca:53:09:d1:9e:ca:c7:be:01:d3:8e:35: 9b:4d:30:11:63:12:10:46:56:8f:db:20:6d:39:fa: b4:69:17:ee:4c:a8:21:af:5c:f8:47:d5:0f:9b:ef: 8b:87:8f:b9:ef:d7:72:12:9e:38:a9:ec:f0:20:fd: 3a:bf:d6:32:85:77:2c:bf:34:18:60:3d:ff:91:78: dd:aa:2b:ce:25:bf:c2:b6:fc:17:13:f2:65:fa:d8: 9d:84:fc:3f:35:27:12:53:de:e8:f7:7d:7c:79:6a: 22:81:43:a1:fa:68:a0:12:0d:f1:e2:61:e6:d8:aa: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AE:26:7F:2D:F8:95:59:BC:E2:22:08:91:99:CC:13:6E:BD:50:89 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ab:33:d5:95:08:ad:dc:70:d2:93:50:0f:34:6f:1a:c7:d3: c1:b4:17:71:6d:75:24:30:37:f3:20:1e:98:dc:3b:21:8d:f3: a8:23:3d:e5:ab:9b:4e:e0:54:2d:e9:91:dd:af:d7:d6:c8:70: d1:96:1e:9c:9e:42:ff:e7:62:91:7a:19:5e:a8:80:8b:55:5a: ed:23:7e:01:88:89:aa:6f:bb:02:c9:a7:8e:3a:c5:ea:3f:31: a3:3d:80:8a:c1:39:01:22:69:2f:d7:0f:3f:bc:fc:9a:31:df: 05:ee:ce:d0:e6:e3:49:d0:3b:b1:c2:87:0f:42:d8:c0:5b:10: 5e:ec:32:cd:4e:e7:6b:b7:fa:81:a8:4f:6b:53:42:72:35:ba: e9:05:03:3b:20:6a:22:4a:1e:f5:51:9c:d3:5f:29:52:78:b8: 53:f3:25:70:ce:d1:e9:85:eb:44:5f:d8:74:cd:5c:8a:65:fb: 27:34:db:3b:26:6b:60:c2:63:21:83:f6:47:57:b8:e4:78:f2: d1:cc:b2:2a:5e:47:e9:d4:18:d1:ab:33:9a:7a:89:ba:83:66: 6f:68:a2:8c:a5:04:49:ef:f8:30:20:b0:cd:f2:d5:99:2f:af: 93:e5:1d:f8:bb:7c:2e:13:9b:eb:04:7c:4c:d9:22:f6:66:71: 6f:f5:0f:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeuQvhssHuESWEdA2cUsih/jt+yEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTA0MjcyMjA3MTRaFw0yNTA1MDEwNDQ5MTRaMDMxMTAvBgNV BAMTKEIwQUUyNjdGMkRGODk1NTlCQ0UyMjIwODkxOTlDQzEzNkVCRDUwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY69dRkFfpgqgRF9b2e0Qxypw1 K/kWKOXK5bdxedXS60CZpZ4Lpepe81PKvEXbV5NTliaQXGxSE7aOWVRkdfQyu76V 75KwhYZcJ0wN1vjVZ+h38fTVNNlU4ZJgdGf6UfUhCxW9KxLwN2wOzAq+w+DG4kfw /VXZqp/a0PStQ+llgSUHXUXtSZ7H4spTCdGeyse+AdOONZtNMBFjEhBGVo/bIG05 +rRpF+5MqCGvXPhH1Q+b74uHj7nv13ISnjip7PAg/Tq/1jKFdyy/NBhgPf+ReN2q K84lv8K2/BcT8mX62J2E/D81JxJT3uj3fXx5aiKBQ6H6aKASDfHiYebYqi/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsK4mfy34lVm84iIIkZnME269UIkwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISrM9WVCK3ccNKTUA80bxrH08G0F3FtdSQw N/MgHpjcOyGN86gjPeWrm07gVC3pkd2v19bIcNGWHpyeQv/nYpF6GV6ogItVWu0j fgGIiapvuwLJp446xeo/MaM9gIrBOQEiaS/XDz+8/Jox3wXuztDm40nQO7HChw9C 2MBbEF7sMs1O52u3+oGoT2tTQnI1uukFAzsgaiJKHvVRnNNfKVJ4uFPzJXDO0emF 60Rf2HTNXIpl+yc02zsma2DCYyGD9kdXuOR48tHMsipeR+nUGNGrM5p6ibqDZm9o ooylBEnv+DAgsM3y1Zkvr5PlHfi7fC4Tm+sEfEzZIvZmcW/1D3M= -----END CERTIFICATE-----Generated at Wed Apr 30 03:36:07 2025 by rpki-client