$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: qrtt2oo2V1hmZTRL3TSwp1fE/st84ziRAcJsBXdsoqU= Subject key identifier: F6:26:59:5E:FD:99:1B:D6:AF:D2:97:2E:A4:CB:A8:7A:CF:E3:0F:49 Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 7D640A675BC974C350CB0DBAB43E03C1583B4F20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 01B6 Signing time: Sat 05 Apr 2025 01:51:29 +0000 Manifest this update: Sat 05 Apr 2025 01:46:29 +0000 Manifest next update: Tue 08 Apr 2025 05:27:29 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: d+/Yx659e1I3fVtTShb3XKRMsII3GEMSJfhiKq+ZOhw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:64:0a:67:5b:c9:74:c3:50:cb:0d:ba:b4:3e:03:c1:58:3b:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Apr 5 01:46:29 2025 GMT Not After : Apr 8 05:27:29 2025 GMT Subject: CN=F626595EFD991BD6AFD2972EA4CBA87ACFE30F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:0b:4a:0d:3f:93:91:c8:9b:3a:60:55:c0: 3c:d0:e5:d9:bc:e2:c6:14:48:1c:99:f2:31:ed:c0: 2f:d4:5c:45:46:eb:06:32:03:1e:38:92:06:05:3a: 7a:9b:3b:0d:cf:9c:39:7c:12:6c:77:7a:85:ed:a6: b9:0e:fc:22:11:1d:e8:ae:38:07:e5:60:98:61:18: fd:33:3d:eb:36:d5:ca:5f:53:99:13:00:d1:2a:d4: 8a:9a:35:f3:39:aa:93:8d:c4:80:dc:6e:80:b3:46: 2e:bc:4b:9d:8c:2c:00:fa:6c:ad:81:d8:1f:4f:02: fb:75:23:89:1d:87:d7:54:16:9e:47:36:62:c3:da: 20:4e:d4:07:b4:87:13:b3:ac:20:68:3c:90:bb:e3: 20:b5:e3:8d:54:b1:68:fc:0b:98:38:03:1c:f7:aa: 40:fc:97:24:44:c9:ef:00:3b:05:cf:3a:50:12:b2: 02:83:ec:de:8c:e4:20:d5:50:5b:9b:72:3e:69:5a: 6d:63:60:5d:c9:ea:49:81:3f:73:57:0d:75:f9:d0: e7:5c:19:2b:c2:f5:b4:9e:9d:1d:53:e8:f6:5d:ad: 1e:cb:e5:c7:25:8c:c0:5c:9b:7a:ae:bc:33:16:bf: 1b:a0:40:49:35:90:2d:97:0d:90:03:4c:4f:b8:51: 6f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:26:59:5E:FD:99:1B:D6:AF:D2:97:2E:A4:CB:A8:7A:CF:E3:0F:49 X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:2a:09:f9:a6:44:a2:46:a4:7e:c1:dd:38:5a:71:5a:a0:bc: d1:f5:62:a4:11:18:22:d5:80:9d:98:4f:45:6b:df:db:08:20: f6:f6:de:56:f6:37:07:0e:af:ce:90:93:6d:23:f8:16:5d:1e: 13:6b:8b:b2:04:b9:55:a0:e4:51:72:fc:ea:57:7c:c5:8c:70: 70:99:be:26:ba:7c:6b:41:27:f9:81:5e:b3:8d:74:57:e1:96: c2:33:5b:0f:50:da:ef:80:e7:96:46:d6:c3:2c:c3:b5:8b:5b: a6:af:df:95:ac:cc:7a:c3:28:10:f9:fd:1e:84:6c:71:24:17: 45:a3:ce:45:0e:a0:28:ea:79:91:a4:f5:d1:8f:f9:77:57:31: d8:a7:0f:5e:cc:b2:ca:72:40:55:1b:ca:c3:df:b6:2d:dc:68: d4:d5:bb:a9:71:2f:82:4c:f3:dc:58:dc:c6:e9:b0:e3:34:35: a8:78:4d:81:91:60:df:c0:ff:07:be:12:97:56:63:fc:fb:e2: bf:4d:c8:36:cc:7a:08:fc:08:54:2a:6c:24:11:96:e9:87:d3: 89:c3:da:95:4d:a6:f1:b2:33:8a:a3:d3:28:7b:e1:24:dc:49: ac:d4:7b:f3:29:22:ca:d4:14:ec:62:a1:54:cb:cc:a0:6e:02: 7b:46:d0:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWQKZ1vJdMNQyw26tD4DwVg7TyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTA0MDUwMTQ2MjlaFw0yNTA0MDgwNTI3MjlaMDMxMTAvBgNV BAMTKEY2MjY1OTVFRkQ5OTFCRDZBRkQyOTcyRUE0Q0JBODdBQ0ZFMzBGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFwtKDT+TkcibOmBVwDzQ5dm8 4sYUSByZ8jHtwC/UXEVG6wYyAx44kgYFOnqbOw3PnDl8Emx3eoXtprkO/CIRHeiu OAflYJhhGP0zPes21cpfU5kTANEq1IqaNfM5qpONxIDcboCzRi68S52MLAD6bK2B 2B9PAvt1I4kdh9dUFp5HNmLD2iBO1Ae0hxOzrCBoPJC74yC1441UsWj8C5g4Axz3 qkD8lyREye8AOwXPOlASsgKD7N6M5CDVUFubcj5pWm1jYF3J6kmBP3NXDXX50Odc GSvC9bSenR1T6PZdrR7L5ccljMBcm3quvDMWvxugQEk1kC2XDZADTE+4UW/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9iZZXv2ZG9av0pcupMuoes/jD0kwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMqCfmmRKJGpH7B3ThacVqgvNH1YqQRGCLV gJ2YT0Vr39sIIPb23lb2NwcOr86Qk20j+BZdHhNri7IEuVWg5FFy/OpXfMWMcHCZ via6fGtBJ/mBXrONdFfhlsIzWw9Q2u+A55ZG1sMsw7WLW6av35WszHrDKBD5/R6E bHEkF0WjzkUOoCjqeZGk9dGP+XdXMdinD17MsspyQFUbysPfti3caNTVu6lxL4JM 89xY3MbpsOM0Nah4TYGRYN/A/we+EpdWY/z74r9NyDbMegj8CFQqbCQRlumH04nD 2pVNpvGyM4qj0yh74STcSazUe/MpIsrUFOxioVTLzKBuAntG0Ns= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:41 2025 by rpki-client