$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: dO2n2mAdypPN+fZqdKFyT6nMAfYtA9n/5PZJTm4rKoI= Subject key identifier: 71:C6:92:A3:33:5F:81:17:DB:34:18:3C:4C:0A:71:0C:3A:45:FD:7E Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 19EB9F2E71C2070680890F0D5B62800EE0AA279E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 017F Signing time: Mon 09 Jun 2025 00:31:18 +0000 Manifest this update: Mon 09 Jun 2025 00:26:18 +0000 Manifest next update: Thu 12 Jun 2025 09:31:18 +0000 Files and hashes: 1: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 2: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: EztX/pCLRjxuGDD5KwhPpuJplaVIMLa9IH/IjmNzx0U=) 3: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: UiT4seYGc2LRhlDHPZFCHvfBBtdW1FREPb29P5n03i8=) 4: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: XQA6Y0I1Pist7N4n79cnh+cGYGRATVYUobq2KmG+Rok=) 5: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 09:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:eb:9f:2e:71:c2:07:06:80:89:0f:0d:5b:62:80:0e:e0:aa:27:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Jun 9 00:26:18 2025 GMT Not After : Jun 12 09:31:18 2025 GMT Subject: CN=71C692A3335F8117DB34183C4C0A710C3A45FD7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:44:9e:70:26:46:df:ae:36:85:83:10:4c:e4: 34:8a:9c:2b:c5:8e:5c:fa:ee:8c:c9:be:4f:d6:fb: ee:07:4f:82:05:4c:4c:03:7d:bd:11:aa:dd:c8:17: c5:d9:2e:f3:0c:1d:8a:df:70:a8:49:96:be:12:8f: 22:58:d8:6e:d8:e6:3b:b3:ce:c6:0f:20:a8:83:c8: 4a:b3:f9:2a:67:4c:38:d5:56:5e:90:50:8f:79:2c: b3:7a:92:04:27:72:57:e0:84:bd:30:da:dd:47:3f: 2c:2f:c1:90:43:e2:63:26:7b:95:b8:5c:9f:94:bc: 04:b8:6e:49:5b:1c:6f:03:f5:32:d4:b5:db:70:00: 26:39:e6:b4:ac:78:5b:3c:31:dc:38:54:75:98:ad: 32:0d:3a:0d:45:dc:4a:61:2a:01:32:22:f4:ce:01: 54:be:fc:78:d8:43:f6:77:0b:01:05:26:0c:57:8c: 33:14:b1:be:8b:c2:57:89:a9:a6:77:0e:cb:a0:39: d5:35:67:42:7d:2b:c0:5a:73:cc:07:ae:83:77:cb: ea:c5:1e:c2:40:02:c7:ee:ea:3d:a5:a7:a9:f2:0d: e8:47:c4:34:1e:88:07:f6:4a:ef:d7:b8:a4:60:3b: e9:87:3e:d2:5c:b7:a3:2e:f6:03:4d:1c:61:59:9b: b0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C6:92:A3:33:5F:81:17:DB:34:18:3C:4C:0A:71:0C:3A:45:FD:7E X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ab:d5:96:83:b8:d3:f3:57:1a:0f:a7:fe:c2:63:83:ed:e0: d3:d9:da:3e:1b:e4:8b:26:54:fc:b9:c5:56:b8:33:44:46:a9: 35:32:bd:a7:f2:d9:e8:bf:60:66:1d:c1:7a:3c:5a:15:54:f6: 3a:6d:44:50:c2:87:48:8c:b1:4e:fd:7c:08:90:ae:8c:82:f9: 51:9f:16:fb:11:ba:77:71:f9:84:a0:23:02:ee:9a:44:17:b4: 4b:1d:03:f5:7c:8f:23:c0:c0:e2:51:e0:eb:a7:2b:31:a2:12: 1d:24:80:a0:03:09:7d:9f:55:9e:71:a7:a8:83:c1:97:e3:3b: 13:a2:a6:43:4a:da:90:dd:ca:79:4a:cf:60:a8:79:37:ee:7b: af:3c:60:80:fc:6b:c1:76:59:30:21:d1:07:8c:85:77:e7:fe: f6:7e:9b:2a:c3:67:26:db:d5:28:d5:9d:8b:1a:5b:dd:87:1d: e2:eb:29:4f:ae:20:b1:b0:83:66:96:f7:46:10:99:2a:d2:83: 23:86:6f:11:8f:c9:ff:a4:a3:ec:7f:fa:53:c1:c4:89:76:f1: e6:e5:6a:dd:26:57:e1:06:57:99:a2:50:f4:16:0f:bb:5c:8d: 44:11:ab:31:3b:23:db:32:9e:34:11:1b:11:13:d0:2b:36:1e: 87:b5:ad:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGeufLnHCBwaAiQ8NW2KADuCqJ54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTA2MDkwMDI2MThaFw0yNTA2MTIwOTMxMThaMDMxMTAvBgNV BAMTKDcxQzY5MkEzMzM1RjgxMTdEQjM0MTgzQzRDMEE3MTBDM0E0NUZEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpRJ5wJkbfrjaFgxBM5DSKnCvF jlz67ozJvk/W++4HT4IFTEwDfb0Rqt3IF8XZLvMMHYrfcKhJlr4SjyJY2G7Y5juz zsYPIKiDyEqz+SpnTDjVVl6QUI95LLN6kgQnclfghL0w2t1HPywvwZBD4mMme5W4 XJ+UvAS4bklbHG8D9TLUtdtwACY55rSseFs8Mdw4VHWYrTINOg1F3EphKgEyIvTO AVS+/HjYQ/Z3CwEFJgxXjDMUsb6LwleJqaZ3DsugOdU1Z0J9K8Bac8wHroN3y+rF HsJAAsfu6j2lp6nyDehHxDQeiAf2Su/XuKRgO+mHPtJct6Mu9gNNHGFZm7AzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUccaSozNfgRfbNBg8TApxDDpF/X4wHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEir1ZaDuNPzVxoPp/7CY4Pt4NPZ2j4b5Ism VPy5xVa4M0RGqTUyvafy2ei/YGYdwXo8WhVU9jptRFDCh0iMsU79fAiQroyC+VGf FvsRundx+YSgIwLumkQXtEsdA/V8jyPAwOJR4OunKzGiEh0kgKADCX2fVZ5xp6iD wZfjOxOipkNK2pDdynlKz2CoeTfue688YID8a8F2WTAh0QeMhXfn/vZ+myrDZybb 1SjVnYsaW92HHeLrKU+uILGwg2aW90YQmSrSgyOGbxGPyf+ko+x/+lPBxIl28ebl at0mV+EGV5miUPQWD7tcjUQRqzE7I9synjQRGxET0Cs2Hoe1rcg= -----END CERTIFICATE-----Generated at Mon Jun 9 14:27:11 2025 by rpki-client