$ rpki-client -vvf repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft File: C45A558750D6CF5BE02532DDE80326AEF5012912.mft (raw, json) Hash identifier: Xuw3IVIf6zRy88AyArRKb6JYl9pW6QUO3GK7UMwxtqA= Subject key identifier: CA:EB:03:0E:25:11:46:51:20:8A:DD:B5:19:C2:FD:FE:E2:58:53:C1 Authority key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Certificate issuer: /CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Certificate serial: 4490218B628ACD6D483FCEEEEEE399D9DF8C9644 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft Manifest number: 0361 Signing time: Sun 20 Jul 2025 18:21:13 +0000 Manifest this update: Sun 20 Jul 2025 18:16:13 +0000 Manifest next update: Wed 23 Jul 2025 21:12:13 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: wKi20xV5IYiEYg1koyO2hLczrvapaQLTXfUibveAkFE=) 2: C45A558750D6CF5BE02532DDE80326AEF5012912.crl (hash: X/eUjvwio5Cb6+Fimf8wVWy9riBh648wGWaLBWOJYQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:90:21:8b:62:8a:cd:6d:48:3f:ce:ee:ee:e3:99:d9:df:8c:96:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Validity Not Before: Jul 20 18:16:13 2025 GMT Not After : Jul 23 21:12:13 2025 GMT Subject: CN=CAEB030E25114651208ADDB519C2FDFEE25853C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3d:d8:45:bc:2d:62:b2:08:ee:b7:34:ca:db: b9:08:17:be:51:de:e3:d2:83:44:03:41:0e:01:80: c3:5b:3c:26:bf:b5:a8:3a:3e:87:3a:5f:d1:fb:14: 00:da:0f:7f:fd:c3:1a:d4:a8:50:4f:20:fb:2c:53: d4:f4:0b:a9:18:d0:da:97:d0:32:ff:10:1b:3d:fa: 35:af:60:41:1b:9a:fc:44:bd:88:c2:1c:09:a8:67: e1:84:f6:0e:02:38:94:79:14:dc:75:0c:a3:40:8a: ed:f9:c1:4d:ee:4c:aa:17:03:6e:fc:69:df:d6:65: 71:e6:4c:c1:1c:f9:32:30:b0:9b:84:a7:f3:5d:98: e8:25:3d:0f:9e:07:52:2e:d7:ce:f9:d8:f1:a5:44: 21:38:ae:a4:3c:c7:b0:28:ae:db:93:ed:93:be:23: a9:a4:5c:15:78:c5:ae:b1:bb:89:00:91:54:99:5b: b3:66:33:c0:e8:fd:39:6f:ad:b6:a1:73:aa:fe:64: 4b:0e:cf:fa:fc:8a:08:bd:fd:fa:cd:82:a0:20:2c: 37:05:7c:99:0e:26:f9:92:0e:75:79:51:9c:9b:99: 9e:05:4b:64:5a:ce:79:05:ef:66:dc:ff:47:77:29: c1:25:f5:47:67:e3:a3:94:5f:0c:d1:7c:6f:f3:21: 82:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:EB:03:0E:25:11:46:51:20:8A:DD:B5:19:C2:FD:FE:E2:58:53:C1 X509v3 Authority Key Identifier: keyid:C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ae:50:16:34:dc:4e:93:1e:ae:01:2e:be:31:b8:52:36:10: 60:7c:1c:ad:c4:37:80:35:12:39:13:38:3f:48:b6:ee:63:44: e3:c1:e4:95:b7:9e:d6:6d:37:ff:ee:b8:ed:0a:f7:11:ee:9e: b2:68:ce:17:99:12:ce:3a:f6:d6:e7:cf:0e:2c:24:0b:07:ee: 72:26:05:c2:ee:b5:f6:9e:f0:a3:d6:df:33:03:2b:69:58:f3: 71:82:8c:24:1c:f5:17:e9:78:62:1f:47:1e:ee:2b:7d:2e:30: d5:47:72:fd:44:4f:d6:0f:a7:d4:b5:16:6d:bb:02:aa:54:18: cb:75:27:df:6c:8b:5e:71:b3:44:b3:e2:6f:a7:01:b6:10:df: 1c:e0:fb:48:78:20:d5:07:a2:d8:9a:56:7a:10:d1:55:e0:e8: 86:93:08:dd:61:a9:e7:bc:51:e3:a4:4b:c1:c9:6d:7b:d9:1b: f2:84:c0:b0:d2:92:0f:d3:57:78:23:e7:ee:c0:a3:42:a0:6b: 37:48:b9:6a:35:98:87:07:6a:a9:f7:ec:26:22:5c:d2:59:81: 9c:0e:eb:dd:4a:d7:85:41:46:1d:c6:f4:70:6b:60:c7:8d:93: c6:14:f0:e9:c8:80:44:08:53:46:bc:7d:68:b7:9c:15:39:cd: a1:25:4c:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURJAhi2KKzW1IP87u7uOZ2d+MlkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVG NTAxMjkxMjAeFw0yNTA3MjAxODE2MTNaFw0yNTA3MjMyMTEyMTNaMDMxMTAvBgNV BAMTKENBRUIwMzBFMjUxMTQ2NTEyMDhBRERCNTE5QzJGREZFRTI1ODUzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrPdhFvC1isgjutzTK27kIF75R 3uPSg0QDQQ4BgMNbPCa/tag6Poc6X9H7FADaD3/9wxrUqFBPIPssU9T0C6kY0NqX 0DL/EBs9+jWvYEEbmvxEvYjCHAmoZ+GE9g4COJR5FNx1DKNAiu35wU3uTKoXA278 ad/WZXHmTMEc+TIwsJuEp/NdmOglPQ+eB1Iu18752PGlRCE4rqQ8x7AortuT7ZO+ I6mkXBV4xa6xu4kAkVSZW7NmM8Do/Tlvrbahc6r+ZEsOz/r8igi9/frNgqAgLDcF fJkOJvmSDnV5UZybmZ4FS2RaznkF72bc/0d3KcEl9Udn46OUXwzRfG/zIYIBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyusDDiURRlEgit21GcL9/uJYU8EwHwYDVR0j BBgwFoAUxFpVh1DWz1vgJTLd6AMmrvUBKRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMC9DNDVBNTU4NzUw RDZDRjVCRTAyNTMyRERFODAzMjZBRUY1MDEyOTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVGNTAx MjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2 QUVGNTAxMjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGuUBY03E6THq4BLr4xuFI2EGB8HK3EN4A1 EjkTOD9Itu5jROPB5JW3ntZtN//uuO0K9xHunrJozheZEs469tbnzw4sJAsH7nIm BcLutfae8KPW3zMDK2lY83GCjCQc9RfpeGIfRx7uK30uMNVHcv1ET9YPp9S1Fm27 AqpUGMt1J99si15xs0Sz4m+nAbYQ3xzg+0h4INUHotiaVnoQ0VXg6IaTCN1hqee8 UeOkS8HJbXvZG/KEwLDSkg/TV3gj5+7Ao0KgazdIuWo1mIcHaqn37CYiXNJZgZwO 691K14VBRh3G9HBrYMeNk8YU8OnIgEQIU0a8fWi3nBU5zaElTHs= -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:24 2025 by rpki-client