$ rpki-client -vvf repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft File: 645C9D445B2796662EE98A03E50C124F3E962CAB.mft (raw, json) Hash identifier: WI1NLdpgU1Iv9HzFH8NE0dMWAqzmF85M+lXySBSni2A= Subject key identifier: 94:E5:27:D9:B3:5F:6C:13:D9:AD:5C:61:23:96:83:73:F0:79:8A:6F Authority key identifier: 64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB Certificate issuer: /CN=645C9D445B2796662EE98A03E50C124F3E962CAB Certificate serial: 045B80687CEF5B8E88DCE4B1FFB054A19BB79A6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft Manifest number: 0363 Signing time: Fri 04 Apr 2025 22:31:03 +0000 Manifest this update: Fri 04 Apr 2025 22:26:03 +0000 Manifest next update: Tue 08 Apr 2025 08:22:03 +0000 Files and hashes: 1: 3130332e3130302e3137332e302f32342d3234203d3e20313336383431.roa (hash: Yo/r10NdHpCyWdp4iTpRbnPv2TKKyCyVTnBiO8AmbDc=) 2: 3130332e3130302e3137342e302f32342d3234203d3e20313336383431.roa (hash: pfMM3/ygiEY34vdGoVOYeg8tWN4ZaCnJmX0NJOGEX00=) 3: 645C9D445B2796662EE98A03E50C124F3E962CAB.crl (hash: bq5esksmZXawjMxgnBsHFtrsCkPkpzcKF//swxQisF4=) 4: 3130332e3130302e3137322e302f32342d3234203d3e20313336383431.roa (hash: ehP408+CXUe13X4F5TvwPj6ddCoH7T+4InUUhWjVyGw=) 5: 3130332e3130302e3137352e302f32342d3234203d3e20313336383431.roa (hash: qbkH1qedbuL2nkb9oW2AlysgwJB8XaNgGrzurioAZP0=) 6: 323430313a626534303a3a2f33322d3332203d3e20313336383431.roa (hash: fqov0BDCIixBi9VcnBXwyfgiMxOlqrXxcfdLtIYOthI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5b:80:68:7c:ef:5b:8e:88:dc:e4:b1:ff:b0:54:a1:9b:b7:9a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=645C9D445B2796662EE98A03E50C124F3E962CAB Validity Not Before: Apr 4 22:26:03 2025 GMT Not After : Apr 8 08:22:03 2025 GMT Subject: CN=94E527D9B35F6C13D9AD5C6123968373F0798A6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:d0:a5:ba:31:8e:d5:35:25:bd:f9:eb:6b: 36:da:96:25:fb:ed:fa:62:59:48:64:f2:76:8f:60: 90:45:74:68:04:ee:5c:c5:84:09:0d:fe:b0:e5:ef: 3c:f3:5c:56:cc:9a:00:55:d3:ec:c7:fb:96:aa:a7: 1c:94:e6:29:03:69:17:10:f3:e4:4b:c1:73:f8:1d: 73:7a:ce:da:cc:b4:72:de:30:3a:7f:57:75:ea:3d: 44:64:b4:8c:ec:43:21:40:5a:c0:72:66:61:1e:86: ac:e4:17:21:9a:06:9b:4e:7a:bb:c8:24:c9:cf:4e: 43:84:98:67:a3:e2:0f:44:e4:ae:57:67:21:09:d2: d8:78:73:89:6f:46:b4:56:c9:82:e8:c4:11:cf:1c: 20:12:a1:d1:6c:b8:36:aa:ed:40:8c:f5:33:67:d5: 98:a5:c1:99:46:83:f9:43:08:cf:7e:68:24:c2:82: 28:f2:e3:40:40:d2:5c:fc:1d:5b:8d:f3:2e:20:9d: df:ea:83:c3:ed:09:6c:c9:99:4d:c4:98:8d:02:c4: dc:df:e1:46:6b:21:99:b3:18:c4:c3:3e:c2:ce:0f: 1a:76:4a:66:cd:c9:48:31:0e:c2:dd:6d:6f:90:68: 2d:57:47:32:b9:28:a2:0d:75:71:63:3a:ed:fb:45: 35:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E5:27:D9:B3:5F:6C:13:D9:AD:5C:61:23:96:83:73:F0:79:8A:6F X509v3 Authority Key Identifier: keyid:64:5C:9D:44:5B:27:96:66:2E:E9:8A:03:E5:0C:12:4F:3E:96:2C:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/645C9D445B2796662EE98A03E50C124F3E962CAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07304b83-30aa-4bbf-9fd7-2fceadbf0030/0/645C9D445B2796662EE98A03E50C124F3E962CAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:7d:01:2f:d6:2e:20:f1:6d:d1:26:2b:2f:43:33:6a:e7:b3: 3d:88:7c:e7:9a:2c:09:a8:d9:29:06:87:5a:75:53:93:02:33: b8:24:1c:81:ce:a6:3b:5a:19:d1:ab:b5:85:83:bf:3b:bf:63: e8:12:ee:a5:66:f6:53:1c:a1:6d:80:12:45:31:46:6b:9b:d0: 95:5c:94:77:45:39:e0:09:f4:bb:d8:c0:19:9b:5a:c0:fc:b0: 59:50:b2:bb:b8:51:e4:4a:23:99:ff:e7:97:c0:af:ed:d4:74: d9:8a:98:eb:50:60:d8:8c:14:cc:e8:ea:20:15:33:1c:61:bc: 8a:7d:b2:b9:e3:04:9f:23:07:29:04:20:cf:e7:a3:bc:a1:18: 5a:29:76:05:b0:55:d0:fc:11:d7:3b:27:48:30:1e:3e:a7:df: 11:01:fd:34:73:c7:dc:a1:6c:c1:5c:12:a3:8f:14:e0:ef:fc: 11:59:52:46:04:53:ed:ad:ab:36:12:ef:bf:f4:0c:65:16:b8: 22:21:c9:cd:54:68:c5:b4:86:bc:b9:a9:a1:26:cf:8a:f6:4d: b8:6e:5d:2f:89:17:f3:2c:1f:b4:05:c0:79:52:81:f5:02:50: b1:66:19:b3:0f:6a:54:e4:53:a4:66:89:73:6f:3f:0d:95:0c: 2b:9f:61:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBFuAaHzvW46I3OSx/7BUoZu3mmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYz RTk2MkNBQjAeFw0yNTA0MDQyMjI2MDNaFw0yNTA0MDgwODIyMDNaMDMxMTAvBgNV BAMTKDk0RTUyN0Q5QjM1RjZDMTNEOUFENUM2MTIzOTY4MzczRjA3OThBNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIAtClujGO1TUlvfnrazbaliX7 7fpiWUhk8naPYJBFdGgE7lzFhAkN/rDl7zzzXFbMmgBV0+zH+5aqpxyU5ikDaRcQ 8+RLwXP4HXN6ztrMtHLeMDp/V3XqPURktIzsQyFAWsByZmEehqzkFyGaBptOervI JMnPTkOEmGej4g9E5K5XZyEJ0th4c4lvRrRWyYLoxBHPHCASodFsuDaq7UCM9TNn 1ZilwZlGg/lDCM9+aCTCgijy40BA0lz8HVuN8y4gnd/qg8PtCWzJmU3EmI0CxNzf 4UZrIZmzGMTDPsLODxp2SmbNyUgxDsLdbW+QaC1XRzK5KKINdXFjOu37RTWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlOUn2bNfbBPZrVxhI5aDc/B5im8wHwYDVR0j BBgwFoAUZFydRFsnlmYu6YoD5QwSTz6WLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NzMwNGI4My0zMGFhLTRiYmYtOWZkNy0yZmNlYWRiZjAwMzAvMC82NDVDOUQ0NDVC Mjc5NjY2MkVFOThBMDNFNTBDMTI0RjNFOTYyQ0FCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEyNEYzRTk2 MkNBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDczMDRiODMtMzBhYS00YmJmLTlm ZDctMmZjZWFkYmYwMDMwLzAvNjQ1QzlENDQ1QjI3OTY2NjJFRTk4QTAzRTUwQzEy NEYzRTk2MkNBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB9AS/WLiDxbdEmKy9DM2rnsz2IfOeaLAmo 2SkGh1p1U5MCM7gkHIHOpjtaGdGrtYWDvzu/Y+gS7qVm9lMcoW2AEkUxRmub0JVc lHdFOeAJ9LvYwBmbWsD8sFlQsru4UeRKI5n/55fAr+3UdNmKmOtQYNiMFMzo6iAV MxxhvIp9srnjBJ8jBykEIM/no7yhGFopdgWwVdD8Edc7J0gwHj6n3xEB/TRzx9yh bMFcEqOPFODv/BFZUkYEU+2tqzYS77/0DGUWuCIhyc1UaMW0hry5qaEmz4r2Tbhu XS+JF/MsH7QFwHlSgfUCULFmGbMPalTkU6RmiXNvPw2VDCufYRs= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:12 2025 by rpki-client