$ rpki-client -vvf repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft File: 454DBC52C30315358534B20532037D549238F4C9.mft (raw, json) Hash identifier: 9vh7nFltNe3YcaBOOhpD6H3ODq9BHAK9aOnEHmPu2zI= Subject key identifier: DE:BC:CB:29:A6:4F:B1:6B:13:1D:8D:93:72:50:58:05:48:D5:DB:53 Authority key identifier: 45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 Certificate issuer: /CN=454DBC52C30315358534B20532037D549238F4C9 Certificate serial: 2EFED8CEC155512A846B19ACAA1FE511B4D8FD71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft Manifest number: 2F Signing time: Thu 05 Jun 2025 06:41:30 +0000 Manifest this update: Thu 05 Jun 2025 06:36:30 +0000 Manifest next update: Sun 08 Jun 2025 13:31:30 +0000 Files and hashes: 1: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: HMKdgPohDB0xWBN1Oc1VU1UzcfxKyNuGEiE2CnpRGEY=) 2: 454DBC52C30315358534B20532037D549238F4C9.crl (hash: DH8F4SrjChv2u/lrym6Eojz2jcf+yhJfXOGX/VL+opI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 13:31:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:fe:d8:ce:c1:55:51:2a:84:6b:19:ac:aa:1f:e5:11:b4:d8:fd:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454DBC52C30315358534B20532037D549238F4C9 Validity Not Before: Jun 5 06:36:30 2025 GMT Not After : Jun 8 13:31:30 2025 GMT Subject: CN=DEBCCB29A64FB16B131D8D937250580548D5DB53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:28:9e:94:1b:c4:04:bf:23:ad:a9:8b:6a: ad:ca:4e:d6:ba:3e:84:ac:df:b8:a7:59:21:4d:15: 0f:9d:7d:9b:5a:78:d0:8f:7f:0b:70:78:13:26:43: 7b:6a:df:93:f7:84:8a:e9:66:69:9a:aa:48:b6:11: ab:f3:68:1f:8e:b5:3a:f3:0d:d4:7e:29:b4:19:e5: d1:e7:b9:04:e4:d1:49:ab:44:c3:f6:30:f1:7b:7f: af:59:ee:b2:93:9d:40:5f:d8:89:f8:36:49:ef:cd: f6:95:16:b8:a8:a5:84:b8:c5:25:8f:b3:63:09:15: b8:3c:8b:6e:ec:ea:f7:a7:4f:d0:c5:0e:49:96:ea: 8f:06:41:33:b8:f1:49:c2:f3:e5:f7:2a:12:6b:35: 2e:6e:a0:bb:7d:29:d2:de:76:a9:29:f8:d8:6c:f9: 55:ad:8a:91:80:65:eb:a9:46:64:5c:85:d5:72:78: 52:02:7d:29:94:cf:82:c8:97:02:a7:90:8f:d0:0f: eb:96:e1:ce:c3:f5:5a:5d:d5:a8:76:c4:ff:83:6b: 2d:1d:c6:44:98:21:96:00:ad:4c:22:19:21:89:b7: 45:91:90:f0:5d:db:a0:f6:9e:2b:8f:7a:52:14:14: 81:ee:e1:4b:9c:57:90:ee:8c:c6:df:e9:ff:4e:e6: e0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BC:CB:29:A6:4F:B1:6B:13:1D:8D:93:72:50:58:05:48:D5:DB:53 X509v3 Authority Key Identifier: keyid:45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e2:c3:d8:62:b4:02:3c:38:c2:f6:9c:6c:8b:4a:14:01:66: 31:6e:92:9e:ef:f6:0d:3f:f3:10:5d:6c:4c:4b:4d:1d:40:b6: d7:44:08:79:59:31:0c:23:db:ef:ef:20:0c:a8:a6:f7:f9:8a: c5:eb:23:b4:dc:6a:b9:1f:b8:55:55:f2:bd:d6:06:bc:6c:30: 3f:07:a4:b0:41:b1:e5:a7:3f:18:2d:f0:4a:be:d6:e3:38:e6: f0:4e:75:b0:76:92:37:bd:fe:99:f8:ef:02:f8:a7:4a:2b:c8: 18:e7:7e:ff:a6:d1:77:34:62:4a:fc:15:d8:b1:f7:59:c5:b4: cd:ad:2d:31:0c:6f:3c:fa:eb:51:f1:fc:03:7a:bb:73:2b:2d: 5c:82:9b:e6:23:87:82:df:e5:22:49:92:2f:d8:79:fb:ce:a4: 91:e7:af:8e:d2:a1:f1:8b:cc:d1:f7:19:d8:32:53:ad:d9:ec: a6:fc:87:82:69:0b:79:d5:e4:27:a1:96:fa:94:12:71:02:55: ab:78:66:0a:f2:2f:41:90:83:60:34:9d:e7:66:dc:33:24:09: 42:9e:db:fc:cd:48:8e:06:e7:7a:11:74:88:77:7c:d0:08:cb: 81:3f:dc:fe:a7:7d:9b:87:76:c5:d1:f8:90:8b:a1:7c:64:2c: 6a:9d:e9:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULv7YzsFVUSqEaxmsqh/lEbTY/XEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5 MjM4RjRDOTAeFw0yNTA2MDUwNjM2MzBaFw0yNTA2MDgxMzMxMzBaMDMxMTAvBgNV BAMTKERFQkNDQjI5QTY0RkIxNkIxMzFEOEQ5MzcyNTA1ODA1NDhENURCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TSielBvEBL8jramLaq3KTta6 PoSs37inWSFNFQ+dfZtaeNCPfwtweBMmQ3tq35P3hIrpZmmaqki2EavzaB+OtTrz DdR+KbQZ5dHnuQTk0UmrRMP2MPF7f69Z7rKTnUBf2In4NknvzfaVFriopYS4xSWP s2MJFbg8i27s6venT9DFDkmW6o8GQTO48UnC8+X3KhJrNS5uoLt9KdLedqkp+Nhs +VWtipGAZeupRmRchdVyeFICfSmUz4LIlwKnkI/QD+uW4c7D9Vpd1ah2xP+Day0d xkSYIZYArUwiGSGJt0WRkPBd26D2niuPelIUFIHu4UucV5DujMbf6f9O5uDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3rzLKaZPsWsTHY2TclBYBUjV21MwHwYDVR0j BBgwFoAURU28UsMDFTWFNLIFMgN9VJI49MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTc3OTViNi0wZGY1LTQ3MWItYjc4OC03MjVmOWVmN2MwOGQvMC80NTREQkM1MkMz MDMxNTM1ODUzNEIyMDUzMjAzN0Q1NDkyMzhGNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5MjM4 RjRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE3Nzk1YjYtMGRmNS00NzFiLWI3 ODgtNzI1ZjllZjdjMDhkLzAvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdE NTQ5MjM4RjRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3iw9hitAI8OML2nGyLShQBZjFukp7v9g0/ 8xBdbExLTR1AttdECHlZMQwj2+/vIAyopvf5isXrI7TcarkfuFVV8r3WBrxsMD8H pLBBseWnPxgt8Eq+1uM45vBOdbB2kje9/pn47wL4p0oryBjnfv+m0Xc0Ykr8Fdix 91nFtM2tLTEMbzz661Hx/AN6u3MrLVyCm+Yjh4Lf5SJJki/YefvOpJHnr47SofGL zNH3GdgyU63Z7Kb8h4JpC3nV5CehlvqUEnECVat4ZgryL0GQg2A0nedm3DMkCUKe 2/zNSI4G53oRdIh3fNAIy4E/3P6nfZuHdsXR+JCLoXxkLGqd6WA= -----END CERTIFICATE-----Generated at Fri Jun 6 16:55:53 2025 by rpki-client