$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: qXHZTVQkIDbdPnqLgcD43sD7Bn2vcpKm4f1OJFbK4Lc= Subject key identifier: FF:96:95:A6:C1:8F:3E:EF:FC:AA:7B:BE:20:3B:3F:B6:A1:AB:93:2F Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 5E1DE70F48E990A098623E53CF9FAE69C52817E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 01A7 Signing time: Sat 06 Sep 2025 11:11:20 +0000 Manifest this update: Sat 06 Sep 2025 11:06:20 +0000 Manifest next update: Tue 09 Sep 2025 21:25:20 +0000 Files and hashes: 1: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: EztX/pCLRjxuGDD5KwhPpuJplaVIMLa9IH/IjmNzx0U=) 2: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: UgTP5QXoI5oobC594cYp9d2lW5jny3ehIqtch15tN/s=) 3: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 4: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 5: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: UiT4seYGc2LRhlDHPZFCHvfBBtdW1FREPb29P5n03i8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 21:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1d:e7:0f:48:e9:90:a0:98:62:3e:53:cf:9f:ae:69:c5:28:17:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Sep 6 11:06:20 2025 GMT Not After : Sep 9 21:25:20 2025 GMT Subject: CN=FF9695A6C18F3EEFFCAA7BBE203B3FB6A1AB932F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:d5:51:2a:b1:39:e0:73:ac:bf:10:67:9a: 34:ca:d5:28:19:e2:0c:de:60:fe:93:4e:37:3c:c6: 30:dd:73:87:69:a2:a6:12:8c:3a:6c:71:6f:25:c1: 7f:7b:c1:2c:7f:d1:74:37:55:52:e3:f5:de:7e:f5: 10:81:45:c3:13:99:4e:e5:73:2c:5e:a7:0a:eb:78: 34:06:28:eb:09:84:11:7e:06:46:94:ea:ea:36:01: 9a:c5:bf:f3:50:d8:0e:f0:5f:10:6b:7c:91:04:93: 64:c8:56:54:58:30:1b:89:f4:c0:5e:af:ed:4f:1b: bf:13:59:cc:1a:86:58:fe:11:0f:f3:1f:3d:39:cc: 5d:23:46:f6:21:9d:57:fb:9b:c7:a9:84:75:77:59: 03:72:65:5e:aa:b9:e0:ee:43:67:e8:e3:39:32:76: 02:89:ef:62:c6:74:49:bd:e8:45:56:f7:4a:fb:19: b5:67:67:14:a2:d5:fe:61:30:05:fa:df:ff:d9:9e: dc:86:40:91:2b:55:a9:3d:8d:3e:f6:23:e5:f6:df: 37:23:8c:da:15:42:88:0d:e3:37:c1:08:87:d1:41: c3:6a:96:12:8f:95:a6:4d:48:1c:fe:22:94:de:e4: 8e:39:7d:d6:f9:af:ec:d9:b2:b1:52:f4:84:d8:5f: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:96:95:A6:C1:8F:3E:EF:FC:AA:7B:BE:20:3B:3F:B6:A1:AB:93:2F X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:ab:69:1b:02:6b:94:86:37:21:12:a9:5e:ef:fb:b3:09:8a: 65:0f:d7:47:ac:40:aa:ee:2b:be:2a:2c:67:e1:1c:f7:83:61: 1c:f7:6d:be:de:a4:8f:12:c7:0c:20:b1:32:31:26:93:b5:37: d9:5f:6b:5b:21:90:ec:5a:91:9d:98:f3:20:44:3e:fa:1e:25: bd:d2:89:8e:a3:a9:59:ec:11:db:f6:9b:1b:d8:a3:88:11:c6: b4:4a:9e:5e:5a:58:9b:cb:83:6c:8d:7f:9e:b7:4b:0e:60:42: eb:46:c1:28:ba:56:95:0a:36:55:6a:60:d8:03:dd:8a:7f:19: be:24:ca:44:51:e1:94:01:59:bf:4b:f5:19:77:24:a1:bd:ac: 0b:7a:1f:09:c6:ad:f4:08:3c:0a:aa:4f:7f:3d:1a:95:bf:a3: 7b:cb:a8:10:30:f6:ea:59:d8:97:a6:43:8f:94:42:10:ea:6e: 89:cb:b3:f9:dd:f0:8a:ca:20:4c:12:91:19:d3:26:49:a9:75: e0:79:65:94:83:6a:73:71:8a:84:f2:c5:2e:8b:4c:22:b0:26: 6e:c3:e8:75:2e:84:b1:a1:db:ec:eb:37:e3:e9:85:f1:eb:36: 47:91:b0:a3:e1:f1:da:96:a2:2a:a8:e8:01:9a:06:e7:cf:18: 29:54:35:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXh3nD0jpkKCYYj5Tz5+uacUoF+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTA5MDYxMTA2MjBaFw0yNTA5MDkyMTI1MjBaMDMxMTAvBgNV BAMTKEZGOTY5NUE2QzE4RjNFRUZGQ0FBN0JCRTIwM0IzRkI2QTFBQjkzMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAONVRKrE54HOsvxBnmjTK1SgZ 4gzeYP6TTjc8xjDdc4dpoqYSjDpscW8lwX97wSx/0XQ3VVLj9d5+9RCBRcMTmU7l cyxepwrreDQGKOsJhBF+BkaU6uo2AZrFv/NQ2A7wXxBrfJEEk2TIVlRYMBuJ9MBe r+1PG78TWcwahlj+EQ/zHz05zF0jRvYhnVf7m8ephHV3WQNyZV6queDuQ2fo4zky dgKJ72LGdEm96EVW90r7GbVnZxSi1f5hMAX63//ZntyGQJErVak9jT72I+X23zcj jNoVQogN4zfBCIfRQcNqlhKPlaZNSBz+IpTe5I45fdb5r+zZsrFS9ITYX215AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/5aVpsGPPu/8qnu+IDs/tqGrky8wHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMSraRsCa5SGNyESqV7v+7MJimUP10esQKru K74qLGfhHPeDYRz3bb7epI8SxwwgsTIxJpO1N9lfa1shkOxakZ2Y8yBEPvoeJb3S iY6jqVnsEdv2mxvYo4gRxrRKnl5aWJvLg2yNf563Sw5gQutGwSi6VpUKNlVqYNgD 3Yp/Gb4kykRR4ZQBWb9L9Rl3JKG9rAt6HwnGrfQIPAqqT389GpW/o3vLqBAw9upZ 2JemQ4+UQhDqbonLs/nd8IrKIEwSkRnTJkmpdeB5ZZSDanNxioTyxS6LTCKwJm7D 6HUuhLGh2+zrN+PphfHrNkeRsKPh8dqWoiqo6AGaBufPGClUNQ4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:37 2025 by rpki-client