$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: t+FrKV2jV3mbpeIYmGeuOE4TkQ6/a0qrgFTk0N8s7Nw= Subject key identifier: B2:99:34:10:87:CA:11:58:86:E8:65:95:BA:8B:32:97:23:5C:BC:AA Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 1361AC4DFF6B04FB0BF8349D65796EA171B9523C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 0180 Signing time: Wed 11 Jun 2025 09:41:20 +0000 Manifest this update: Wed 11 Jun 2025 09:36:20 +0000 Manifest next update: Sat 14 Jun 2025 15:46:20 +0000 Files and hashes: 1: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: EztX/pCLRjxuGDD5KwhPpuJplaVIMLa9IH/IjmNzx0U=) 2: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: UiT4seYGc2LRhlDHPZFCHvfBBtdW1FREPb29P5n03i8=) 3: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: BYH37MW2Hj5TyPE8lyq8ettz/04y/cFTkaVt+rc3Lto=) 4: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 5: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 09:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:61:ac:4d:ff:6b:04:fb:0b:f8:34:9d:65:79:6e:a1:71:b9:52:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Jun 11 09:36:20 2025 GMT Not After : Jun 14 15:46:20 2025 GMT Subject: CN=B299341087CA115886E86595BA8B3297235CBCAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f2:1f:85:55:36:5f:28:03:76:bd:e3:c4:98: 4c:22:27:03:cd:c9:bb:6c:2c:90:bc:00:8e:8e:c3: 85:4c:8b:2c:e4:0b:85:ab:9e:7d:1b:c7:30:b9:45: 22:ff:a3:2a:95:34:d3:b3:d8:fe:98:e4:e6:b3:69: ac:4b:32:d6:aa:5f:63:6a:3b:45:c2:7b:33:d1:77: 23:37:a1:e9:48:a6:61:54:30:f3:1c:1b:a0:a4:e4: bb:59:3a:34:9e:b7:82:e7:c1:48:83:82:ae:66:9e: 0a:ad:a1:55:97:d2:2d:4e:c0:8b:8a:38:4b:d0:3e: 48:24:9f:72:a2:c1:f4:48:47:62:07:59:f7:2f:57: ce:59:c4:84:0f:06:c1:d2:af:a8:bc:b8:55:fd:f3: d5:e7:ef:32:a2:45:eb:0a:95:a0:d3:fd:e2:75:e2: 5e:d8:53:a6:97:05:16:e4:a8:4f:d9:5c:74:9a:51: 8f:41:f9:09:b0:4d:d1:3f:2b:07:fa:c4:6a:d6:ec: 69:8d:8d:a8:b6:31:03:9e:b0:c1:26:b0:c7:c5:9b: e9:d8:d9:69:f7:4e:de:6d:dc:4b:55:9a:b5:f0:bd: 4a:74:0b:3b:62:8e:d3:5c:d9:4f:44:ed:d2:5f:1a: 90:f3:cc:fa:4a:07:85:dd:02:7c:f8:7f:05:6d:7b: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:99:34:10:87:CA:11:58:86:E8:65:95:BA:8B:32:97:23:5C:BC:AA X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:6c:20:56:cd:3e:24:1e:d9:67:3e:54:97:a8:4f:21:33:17: ec:74:cf:b4:f5:26:6c:e5:22:b6:b0:55:95:ba:5d:1e:95:c9: b5:73:14:b4:2e:81:d5:46:3b:1b:64:f6:5f:83:7d:c8:d7:f2: 01:dc:4a:95:d9:9a:72:25:ba:18:49:64:af:3e:3c:f5:62:d3: e0:dc:a4:30:b3:04:39:f7:1a:3e:f1:11:06:38:ba:39:3f:75: da:f5:47:ca:14:63:66:f9:10:51:33:4c:71:a6:38:51:3b:84: 0b:18:e3:b9:cf:e6:e8:de:1f:8f:ec:ca:2d:fd:cd:d9:41:a5: c2:c7:2a:65:60:5e:70:e6:c7:1a:90:3d:67:84:76:d7:25:57: 9e:ae:c2:f2:05:01:97:81:a9:37:14:95:b3:23:70:87:e0:3b: 0f:6a:87:1b:85:58:00:8a:06:8b:d0:70:ca:46:48:fd:49:68: 86:c8:93:2e:60:ce:d0:31:d6:ae:9d:be:10:62:df:df:3a:12: a2:ef:b0:af:5e:a4:03:6e:93:4e:46:53:b5:29:c1:a4:76:ce: 03:a7:34:65:f6:6e:59:f8:00:c9:c5:30:c6:0e:78:ed:88:4e: a3:58:2a:62:22:93:43:fe:40:52:5f:1e:e3:93:df:39:52:25: fb:df:50:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2GsTf9rBPsL+DSdZXluoXG5UjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTA2MTEwOTM2MjBaFw0yNTA2MTQxNTQ2MjBaMDMxMTAvBgNV BAMTKEIyOTkzNDEwODdDQTExNTg4NkU4NjU5NUJBOEIzMjk3MjM1Q0JDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8h+FVTZfKAN2vePEmEwiJwPN ybtsLJC8AI6Ow4VMiyzkC4Wrnn0bxzC5RSL/oyqVNNOz2P6Y5OazaaxLMtaqX2Nq O0XCezPRdyM3oelIpmFUMPMcG6Ck5LtZOjSet4LnwUiDgq5mngqtoVWX0i1OwIuK OEvQPkgkn3KiwfRIR2IHWfcvV85ZxIQPBsHSr6i8uFX989Xn7zKiResKlaDT/eJ1 4l7YU6aXBRbkqE/ZXHSaUY9B+QmwTdE/Kwf6xGrW7GmNjai2MQOesMEmsMfFm+nY 2Wn3Tt5t3EtVmrXwvUp0CztijtNc2U9E7dJfGpDzzPpKB4XdAnz4fwVte5BnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUspk0EIfKEViG6GWVuosylyNcvKowHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1sIFbNPiQe2Wc+VJeoTyEzF+x0z7T1Jmzl IrawVZW6XR6VybVzFLQugdVGOxtk9l+DfcjX8gHcSpXZmnIluhhJZK8+PPVi0+Dc pDCzBDn3Gj7xEQY4ujk/ddr1R8oUY2b5EFEzTHGmOFE7hAsY47nP5ujeH4/syi39 zdlBpcLHKmVgXnDmxxqQPWeEdtclV56uwvIFAZeBqTcUlbMjcIfgOw9qhxuFWACK BovQcMpGSP1JaIbIky5gztAx1q6dvhBi3986EqLvsK9epANuk05GU7UpwaR2zgOn NGX2bln4AMnFMMYOeO2ITqNYKmIik0P+QFJfHuOT3zlSJfvfUH8= -----END CERTIFICATE-----Generated at Wed Jun 11 12:57:14 2025 by rpki-client