$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: fFX0qM2U9GbMK4efm8QnVySSVshNSYw7i41hEJrbdBY= Subject key identifier: 0F:5A:9B:64:DC:DE:AB:D1:B8:A2:23:F2:89:58:4A:51:F4:C6:2C:4D Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 1705175F20CB035206B967AF3C6241E3B2B5D578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 0181 Signing time: Sat 19 Jul 2025 21:01:48 +0000 Manifest this update: Sat 19 Jul 2025 20:56:48 +0000 Manifest next update: Wed 23 Jul 2025 05:01:48 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: KMcz9HndxaUeKt8rn5FI6Dp+4OSaacNz41TOKfq1iXs=) 2: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 0veKivESqTIR22CLe0BQKZVbkyyZLitqVchvnzV7aBw=) 3: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: NoaerMiM7euDjimNNCW5rX+Nju5agBo9tI91A23hNR8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:05:17:5f:20:cb:03:52:06:b9:67:af:3c:62:41:e3:b2:b5:d5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Jul 19 20:56:48 2025 GMT Not After : Jul 23 05:01:48 2025 GMT Subject: CN=0F5A9B64DCDEABD1B8A223F289584A51F4C62C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:29:37:11:07:ef:04:e8:e6:7b:eb:87:bc: ef:e8:00:1b:a2:6a:f2:f0:17:81:7b:82:a1:00:dd: fb:dd:14:f0:e5:58:06:91:99:8c:11:4f:34:7c:38: 65:88:3c:f3:c5:54:9f:c9:d8:13:92:b2:17:cc:5a: 98:f3:84:1f:0f:30:2f:03:ec:2d:aa:7b:34:49:f7: dd:1e:82:1e:26:fc:6b:83:c2:65:59:42:87:6a:60: a1:dc:27:54:27:e8:ff:19:1b:ad:2e:27:36:1f:02: a8:d4:22:87:e9:4e:ff:95:9f:af:de:fc:4d:a4:8e: 88:e4:ea:6d:8e:c3:a7:58:a1:00:b9:14:a0:af:d6: f5:9d:29:3c:54:82:dd:57:91:e9:3e:34:dc:ff:6f: ba:6a:8b:7f:f0:44:8b:bb:e0:d3:5a:55:99:12:44: b3:19:cf:e6:49:1e:d3:fb:39:48:c5:8d:d4:97:e0: 1e:4d:c3:6c:ae:b0:8f:e4:43:29:9f:cc:65:ae:c1: 89:4d:62:cd:6b:8e:b7:b7:24:c3:b9:8a:f6:1c:05: 87:9a:17:c8:92:d5:44:a9:14:be:16:22:dd:c0:b1: 03:da:36:4d:78:3d:14:6d:f3:6e:96:8e:6b:f2:a8: 26:51:cc:1d:29:f7:b3:94:4c:97:42:7b:62:ae:a5: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5A:9B:64:DC:DE:AB:D1:B8:A2:23:F2:89:58:4A:51:F4:C6:2C:4D X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c4:f9:17:ac:ca:dd:7b:c3:d7:d8:19:cc:18:c2:3d:74:29: 43:71:d5:ea:f1:1f:6b:d4:23:8a:8a:7a:5f:ec:c6:00:a7:33: 2a:27:0c:83:63:c4:02:21:71:ff:bc:88:3a:d1:e2:c8:76:06: 7b:36:e7:04:40:57:d2:10:a3:a5:c6:cb:b7:91:cd:27:6e:13: 22:e3:e5:0c:97:3c:8d:91:70:dd:a2:73:24:17:e8:2f:b9:c0: fb:73:96:98:d5:b1:e3:87:80:44:4d:e2:92:90:51:b5:7b:ad: 70:65:48:cb:42:4b:e1:f0:6c:cf:75:6b:75:06:01:54:59:3c: 3e:66:70:93:30:01:fc:f0:8f:40:28:2a:29:17:ed:50:e2:ef: 14:dc:16:1b:8e:e8:1d:4c:63:02:87:cf:1c:5a:69:c9:53:ac: 5c:f5:22:69:34:72:b9:2e:9d:3e:8b:f6:d7:75:e9:7c:02:e0: 74:b4:3f:d2:b2:07:a5:4a:69:39:ce:6d:87:92:ad:12:3e:31: fd:52:25:17:fb:6a:2c:3d:36:cd:80:6b:33:15:33:f2:75:6d: 23:08:c5:fe:7a:f1:31:01:c0:db:51:08:c7:4f:97:56:ef:1d: 27:43:67:86:5f:8e:6b:8c:5f:57:7a:ab:dd:4e:55:6a:08:7c: 14:31:34:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFwUXXyDLA1IGuWevPGJB47K11XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNTA3MTkyMDU2NDhaFw0yNTA3MjMwNTAxNDhaMDMxMTAvBgNV BAMTKDBGNUE5QjY0RENERUFCRDFCOEEyMjNGMjg5NTg0QTUxRjRDNjJDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Iik3EQfvBOjme+uHvO/oABui avLwF4F7gqEA3fvdFPDlWAaRmYwRTzR8OGWIPPPFVJ/J2BOSshfMWpjzhB8PMC8D 7C2qezRJ990egh4m/GuDwmVZQodqYKHcJ1Qn6P8ZG60uJzYfAqjUIofpTv+Vn6/e /E2kjojk6m2Ow6dYoQC5FKCv1vWdKTxUgt1Xkek+NNz/b7pqi3/wRIu74NNaVZkS RLMZz+ZJHtP7OUjFjdSX4B5Nw2yusI/kQymfzGWuwYlNYs1rjre3JMO5ivYcBYea F8iS1USpFL4WIt3AsQPaNk14PRRt826WjmvyqCZRzB0p97OUTJdCe2KupW1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD1qbZNzeq9G4oiPyiVhKUfTGLE0wHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzE+Resyt17w9fYGcwYwj10KUNx1erxH2vU I4qKel/sxgCnMyonDINjxAIhcf+8iDrR4sh2Bns25wRAV9IQo6XGy7eRzSduEyLj 5QyXPI2RcN2icyQX6C+5wPtzlpjVseOHgERN4pKQUbV7rXBlSMtCS+HwbM91a3UG AVRZPD5mcJMwAfzwj0AoKikX7VDi7xTcFhuO6B1MYwKHzxxaaclTrFz1Imk0crku nT6L9td16XwC4HS0P9KyB6VKaTnObYeSrRI+Mf1SJRf7aiw9Ns2AazMVM/J1bSMI xf568TEBwNtRCMdPl1bvHSdDZ4ZfjmuMX1d6q91OVWoIfBQxNH8= -----END CERTIFICATE-----Generated at Mon Jul 21 10:53:20 2025 by rpki-client