$ rpki-client -vvf repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft File: 454DBC52C30315358534B20532037D549238F4C9.mft (raw, json) Hash identifier: wL2ihR0UNsP3ihSEGtPDoC3Xo3F6CyVuPPdfTg+Pl2w= Subject key identifier: CF:98:F2:5D:32:E9:F4:DF:F7:6D:7E:E2:A0:BD:C1:5C:6A:88:B7:B9 Authority key identifier: 45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 Certificate issuer: /CN=454DBC52C30315358534B20532037D549238F4C9 Certificate serial: 13FBBB3B062A4BDC5FB9851E3FF168CDF3128967 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft Manifest number: 58 Signing time: Fri 05 Sep 2025 06:21:30 +0000 Manifest this update: Fri 05 Sep 2025 06:16:30 +0000 Manifest next update: Mon 08 Sep 2025 07:29:30 +0000 Files and hashes: 1: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: HMKdgPohDB0xWBN1Oc1VU1UzcfxKyNuGEiE2CnpRGEY=) 2: 454DBC52C30315358534B20532037D549238F4C9.crl (hash: t7PVdLu/Wmkl1ElBbBSKLRt7g1FNoStnwtLzvoRWByE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fb:bb:3b:06:2a:4b:dc:5f:b9:85:1e:3f:f1:68:cd:f3:12:89:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454DBC52C30315358534B20532037D549238F4C9 Validity Not Before: Sep 5 06:16:30 2025 GMT Not After : Sep 8 07:29:30 2025 GMT Subject: CN=CF98F25D32E9F4DFF76D7EE2A0BDC15C6A88B7B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2a:46:20:1e:73:ca:ff:1d:a7:28:d6:9e:73: ff:c9:c1:57:b5:48:b3:b7:76:76:2c:fc:03:fc:27: 8b:b6:d0:20:84:ae:a8:da:3c:85:9a:6e:e4:e0:17: 47:6a:aa:85:c7:0e:08:29:41:a4:63:9d:c6:b3:b1: 8b:3c:d9:b3:b1:91:71:bf:31:3d:23:bc:2a:0c:93: 7c:2a:c3:f4:bf:ea:cc:d7:0d:10:3f:a6:2a:a1:e0: 86:ef:66:4f:f8:c5:86:75:db:32:32:ad:6f:8b:fd: 93:f6:d7:fe:0e:7b:19:5a:2d:13:b5:7f:b7:73:50: 56:b2:b7:53:22:e9:d5:b4:fb:51:9f:f2:88:1a:95: e1:07:c7:4e:62:cb:5b:4a:45:3f:f7:3a:c8:03:f9: dd:46:d2:c3:0b:41:47:43:b3:6d:3c:2b:28:74:21: 1e:92:09:f4:95:79:df:5c:57:74:df:ed:6d:d7:5c: 6b:da:26:48:34:6d:f7:d7:d1:ac:32:af:08:af:36: 38:51:4b:3d:db:c5:6f:e0:af:a7:c3:09:18:bf:27: 88:44:da:a3:5b:cf:c5:df:06:7e:f7:ff:a9:1b:12: bb:a3:30:1d:b6:60:96:90:ef:2f:aa:96:05:e7:6e: c8:3f:b9:eb:f5:38:78:c8:2e:b7:be:08:e0:7d:57: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:98:F2:5D:32:E9:F4:DF:F7:6D:7E:E2:A0:BD:C1:5C:6A:88:B7:B9 X509v3 Authority Key Identifier: keyid:45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:1f:8d:a1:6e:fd:42:d8:e1:2b:8a:74:b9:2e:50:bc:36:21: 49:08:5d:cd:7b:64:df:e0:0a:7a:05:8e:f5:64:0b:4a:7c:d0: 61:e4:9d:0c:47:4b:89:24:65:34:87:c7:a7:71:49:e7:55:86: 29:31:fc:6b:74:6c:3a:8a:d1:eb:15:00:7f:9f:eb:a4:c9:93: 5b:af:3f:21:0c:7a:0d:fc:6f:61:4e:b2:3e:10:04:bb:70:2f: 65:55:83:6a:59:43:c4:5d:60:7c:2b:d4:13:f5:fd:3a:ed:65: 5e:2c:14:44:1c:92:50:29:1f:84:c4:a6:0a:b5:54:ea:bd:f9: ea:03:ad:6b:0a:ed:32:c6:a2:2f:b2:04:96:0a:93:ed:a1:10: be:ae:41:d1:3b:41:d7:b7:c5:40:f9:83:d8:a9:05:c7:0e:60: 83:41:97:b1:63:f0:60:4a:60:f5:0b:16:70:ce:95:36:c2:f4: 8c:f5:ba:29:13:8e:a4:df:1d:d0:cc:00:ba:8c:45:ff:12:28: c2:ef:06:fb:42:0f:e8:33:73:dd:1c:c3:fd:62:f0:18:36:68: 29:b0:b6:5a:d9:c9:24:9b:14:84:24:e2:07:59:6e:0e:b5:d3: 9a:a5:77:85:3a:1a:24:83:bc:40:4a:46:a9:a7:1a:35:13:df: c3:7e:b9:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/u7OwYqS9xfuYUeP/FozfMSiWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5 MjM4RjRDOTAeFw0yNTA5MDUwNjE2MzBaFw0yNTA5MDgwNzI5MzBaMDMxMTAvBgNV BAMTKENGOThGMjVEMzJFOUY0REZGNzZEN0VFMkEwQkRDMTVDNkE4OEI3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrKkYgHnPK/x2nKNaec//JwVe1 SLO3dnYs/AP8J4u20CCErqjaPIWabuTgF0dqqoXHDggpQaRjncazsYs82bOxkXG/ MT0jvCoMk3wqw/S/6szXDRA/piqh4IbvZk/4xYZ12zIyrW+L/ZP21/4OexlaLRO1 f7dzUFayt1Mi6dW0+1Gf8ogaleEHx05iy1tKRT/3OsgD+d1G0sMLQUdDs208Kyh0 IR6SCfSVed9cV3Tf7W3XXGvaJkg0bffX0awyrwivNjhRSz3bxW/gr6fDCRi/J4hE 2qNbz8XfBn73/6kbErujMB22YJaQ7y+qlgXnbsg/uev1OHjILre+COB9VwLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz5jyXTLp9N/3bX7ioL3BXGqIt7kwHwYDVR0j BBgwFoAURU28UsMDFTWFNLIFMgN9VJI49MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTc3OTViNi0wZGY1LTQ3MWItYjc4OC03MjVmOWVmN2MwOGQvMC80NTREQkM1MkMz MDMxNTM1ODUzNEIyMDUzMjAzN0Q1NDkyMzhGNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5MjM4 RjRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE3Nzk1YjYtMGRmNS00NzFiLWI3 ODgtNzI1ZjllZjdjMDhkLzAvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdE NTQ5MjM4RjRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4fjaFu/ULY4SuKdLkuULw2IUkIXc17ZN/g CnoFjvVkC0p80GHknQxHS4kkZTSHx6dxSedVhikx/Gt0bDqK0esVAH+f66TJk1uv PyEMeg38b2FOsj4QBLtwL2VVg2pZQ8RdYHwr1BP1/TrtZV4sFEQcklApH4TEpgq1 VOq9+eoDrWsK7TLGoi+yBJYKk+2hEL6uQdE7Qde3xUD5g9ipBccOYINBl7Fj8GBK YPULFnDOlTbC9Iz1uikTjqTfHdDMALqMRf8SKMLvBvtCD+gzc90cw/1i8Bg2aCmw tlrZySSbFIQk4gdZbg6105qld4U6GiSDvEBKRqmnGjUT38N+uWo= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:27 2025 by rpki-client