$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft File: 45C9770C2C07C2696447FAA1E820E46170A3C56C.mft (raw, json) Hash identifier: 8TVJOuCrxPwf83XTz/Zidj5dVq9pr2feTO8sM5mqNvk= Subject key identifier: 40:68:21:C8:9F:0C:3E:C9:04:64:AF:5E:0C:C8:6A:A9:63:8E:19:10 Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 68EEF5E97D49618DDDAD0AB01E7FECAD3710E8F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft Manifest number: 0298 Signing time: Mon 21 Jul 2025 17:50:41 +0000 Manifest this update: Mon 21 Jul 2025 17:45:41 +0000 Manifest next update: Fri 25 Jul 2025 01:21:41 +0000 Files and hashes: 1: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: vm5PhQ9OCf0FV3z/CHJ+RxKQHUnZeKsqWqWQwv0pY+4=) 2: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: uUzFxXX9+YSqNUoc9f/VNA2O72vd2Y345REzg4qr7bE=) 3: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: XtJZn7ljJSfP6iL/MDjtfpVkviYKx4Xboir3grsNMCo=) 4: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: DFA3qBFACki/karT3fIlYISlkq7/i7wKwlvN+BCd6A4=) 5: 45C9770C2C07C2696447FAA1E820E46170A3C56C.crl (hash: n0JKJ5fPnPbLYcODz5jU/5XwyeiiXkC2F7ee5g+YRhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 01:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ee:f5:e9:7d:49:61:8d:dd:ad:0a:b0:1e:7f:ec:ad:37:10:e8:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Jul 21 17:45:41 2025 GMT Not After : Jul 25 01:21:41 2025 GMT Subject: CN=406821C89F0C3EC90464AF5E0CC86AA9638E1910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:dc:a7:3f:ab:69:f0:4d:3a:93:6f:d5:74:97: d9:0d:98:91:7d:f5:c6:83:3d:0f:4c:d9:5d:2f:6a: 9a:8c:96:a8:9a:ea:f4:ce:a1:72:bf:5c:69:99:31: 13:a5:26:af:bc:ef:5a:c8:bb:d8:11:ef:6e:06:a8: da:67:f1:e6:8f:ae:b2:29:85:31:b3:b4:ea:dc:b4: ab:a5:8d:58:ce:87:8e:76:77:2c:da:21:c0:01:70: 98:f8:74:4f:01:7a:5e:ac:65:bc:94:9a:96:e6:57: c5:5e:1c:71:77:7d:45:b1:56:64:f8:8d:02:2c:d2: d7:04:95:de:79:b3:c0:c2:3c:5a:15:0d:5f:20:2f: 7e:d8:1e:49:2b:21:88:ac:28:67:cc:cf:17:e5:21: 64:69:a8:58:68:ca:b8:58:ec:f0:b4:f7:b1:19:f0: 53:df:49:51:20:81:22:d0:f6:92:68:d2:35:c1:f6: 8e:19:48:e9:80:17:b3:d6:98:4e:94:52:2a:7a:9a: 25:1c:09:1f:44:67:fa:30:74:d9:d6:75:32:36:66: 17:30:3b:9a:36:7b:60:41:c5:6d:04:4d:da:d5:83: 3f:c9:28:bc:53:eb:f3:7d:40:9b:a1:08:1f:1b:cd: f7:e5:ad:53:8a:c2:45:10:1b:81:db:30:77:d7:0d: 20:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:68:21:C8:9F:0C:3E:C9:04:64:AF:5E:0C:C8:6A:A9:63:8E:19:10 X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f6:20:95:5e:3d:f9:4c:96:9e:c0:f9:d5:ea:6f:1c:bc:93: 03:86:cc:54:c5:99:a6:06:78:6e:3f:06:65:aa:90:f8:b7:3c: 1a:9c:f1:dd:44:1b:49:42:69:a9:b6:b3:7f:20:bf:19:f5:0a: 29:e1:34:92:f1:73:f9:3b:76:ca:81:5e:66:67:35:b1:ed:0d: 9b:b7:e8:75:b5:5c:a3:10:70:57:a2:ee:ea:14:cb:bb:84:d7: 07:b3:09:53:a9:2f:b5:36:05:98:9d:35:09:f6:22:f5:cc:94: 9c:26:a3:96:08:7c:4e:92:5d:d4:43:32:d3:58:e8:15:10:8a: ed:a6:3c:54:87:8f:a9:d5:ce:7f:94:37:e1:f1:c7:30:da:17: 21:40:70:e5:eb:6d:85:20:7e:64:61:5f:28:77:19:4f:46:9b: 5a:4b:80:b0:65:91:30:81:51:82:ef:a0:b4:ac:76:ec:fb:c3: 6c:e1:4e:9d:72:9d:bf:89:f5:e7:fa:98:c5:04:8f:c2:24:7a: e0:fb:68:8d:d2:96:9b:bb:dd:c0:30:88:38:bf:e1:c4:a6:00: 15:6f:88:a8:b0:50:44:85:57:6c:6d:48:4f:ea:35:75:51:85: b7:ce:4a:6c:d7:f1:d6:1c:af:09:50:bb:de:ad:50:c3:57:42: 41:e9:2e:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaO716X1JYY3drQqwHn/srTcQ6PIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNTA3MjExNzQ1NDFaFw0yNTA3MjUwMTIxNDFaMDMxMTAvBgNV BAMTKDQwNjgyMUM4OUYwQzNFQzkwNDY0QUY1RTBDQzg2QUE5NjM4RTE5MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz3Kc/q2nwTTqTb9V0l9kNmJF9 9caDPQ9M2V0vapqMlqia6vTOoXK/XGmZMROlJq+871rIu9gR724GqNpn8eaPrrIp hTGztOrctKuljVjOh452dyzaIcABcJj4dE8Bel6sZbyUmpbmV8VeHHF3fUWxVmT4 jQIs0tcEld55s8DCPFoVDV8gL37YHkkrIYisKGfMzxflIWRpqFhoyrhY7PC097EZ 8FPfSVEggSLQ9pJo0jXB9o4ZSOmAF7PWmE6UUip6miUcCR9EZ/owdNnWdTI2Zhcw O5o2e2BBxW0ETdrVgz/JKLxT6/N9QJuhCB8bzfflrVOKwkUQG4HbMHfXDSBhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQGghyJ8MPskEZK9eDMhqqWOOGRAwHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0 NjE3MEEzQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL2IJVePflMlp7A+dXqbxy8kwOGzFTFmaYG eG4/BmWqkPi3PBqc8d1EG0lCaam2s38gvxn1CinhNJLxc/k7dsqBXmZnNbHtDZu3 6HW1XKMQcFei7uoUy7uE1wezCVOpL7U2BZidNQn2IvXMlJwmo5YIfE6SXdRDMtNY 6BUQiu2mPFSHj6nVzn+UN+HxxzDaFyFAcOXrbYUgfmRhXyh3GU9Gm1pLgLBlkTCB UYLvoLSsduz7w2zhTp1ynb+J9ef6mMUEj8IkeuD7aI3Slpu73cAwiDi/4cSmABVv iKiwUESFV2xtSE/qNXVRhbfOSmzX8dYcrwlQu96tUMNXQkHpLjc= -----END CERTIFICATE-----Generated at Wed Jul 23 02:16:08 2025 by rpki-client