$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: mXP3zu2lQSgHYE3sQIY0IXjG03S2eYD2ALHj+LdAdsY= Subject key identifier: B3:59:E6:00:AD:6A:A6:36:0C:75:BA:D5:51:46:80:C3:7F:F0:E2:01 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 39CECD490298B7EA1E7F496F713E422C5F42BB47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 04C0 Signing time: Fri 04 Apr 2025 03:00:54 +0000 Manifest this update: Fri 04 Apr 2025 02:55:54 +0000 Manifest next update: Mon 07 Apr 2025 14:59:54 +0000 Files and hashes: 1: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: 0Mft6SvavXvwnqk1PKha21h4HeVqqRzAsVGrT/hkxHM=) 2: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: PAanhOKP1Xa5XvK/AxUvF/5hWQDQppOWkth/S6LraUU=) 3: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: p0r/lzyUo7KOPO4qdmJbO4tg3YlKKYG0iLBMuMoEXus=) 4: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: 0nV8oEBVXH/JPtvgS8EpIh/oB0Hfx5eWoEzYr6jyICg=) 5: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: D1fgcarXEgnnAnhHAtyNJEHbJgDcdr96nDzetTCtw2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ce:cd:49:02:98:b7:ea:1e:7f:49:6f:71:3e:42:2c:5f:42:bb:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Apr 4 02:55:54 2025 GMT Not After : Apr 7 14:59:54 2025 GMT Subject: CN=B359E600AD6AA6360C75BAD5514680C37FF0E201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:ad:b6:97:ab:1a:e4:86:05:99:f1:d9:37: a1:ce:b9:d3:52:6e:ff:2f:59:de:aa:5f:bf:e5:3b: 4a:02:7e:29:cb:98:64:4c:d6:48:d3:36:55:af:cb: d0:3d:c4:eb:e2:d8:37:ed:2b:75:c4:d9:2b:7a:1e: a0:3a:f1:35:d9:51:e3:92:f8:ff:71:e0:76:f5:1b: c2:17:46:d8:5d:e5:6f:36:c8:ac:55:d7:07:fa:2c: 95:1a:c9:13:21:d3:27:23:29:75:ee:9b:89:11:8d: 80:c5:57:46:78:6b:10:7d:13:78:c3:34:f5:0b:19: 73:1a:8b:4e:e0:eb:54:6e:b1:32:fe:2e:1b:67:8e: b3:75:c5:23:d9:92:4b:46:1a:2b:a9:a1:fa:55:e6: 7e:5d:28:d2:21:c6:61:1d:ca:26:bb:e1:6c:44:c0: 7e:63:72:37:8a:98:86:5b:d4:f8:0a:10:4c:c2:b3: 84:7d:30:c1:f9:4f:f3:be:09:79:ed:fa:e0:48:b7: f1:9c:05:5e:bd:3e:5c:61:a0:2d:27:ad:11:fd:47: 94:15:e9:a3:bd:e0:a9:08:76:02:e2:0d:ee:a2:a0: ec:52:66:49:39:52:ff:0f:9e:db:ca:40:4b:b8:83: ea:a7:ac:6b:bb:a7:48:13:b0:77:ba:9d:e0:c1:82: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:59:E6:00:AD:6A:A6:36:0C:75:BA:D5:51:46:80:C3:7F:F0:E2:01 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d0:3c:be:74:78:ad:ef:d3:13:08:76:8d:0f:dd:cb:67:d9: b5:ee:91:e1:4d:28:6a:75:d1:78:0e:a6:cc:99:85:2b:94:20: c2:00:26:8a:de:03:8a:5e:c0:5b:ce:71:98:b1:e7:60:a2:96: f9:8a:f3:d4:9f:33:52:40:39:1e:8a:4f:0d:b2:2c:ea:49:e6: 00:99:d2:0e:32:41:5c:8b:1e:6a:a5:85:e4:8a:5f:59:16:9b: 97:bc:10:57:28:cc:f3:ae:7d:f8:cc:5b:fa:f2:f2:ad:4b:6d: f5:ee:1f:c7:75:38:ca:f4:c6:5b:22:07:2c:82:8c:60:1a:91: 20:be:52:d3:98:52:68:0a:81:4c:11:23:7a:69:46:42:bf:ec: 60:3f:9c:40:62:6f:63:18:f0:af:f9:ce:23:22:0b:2f:2d:56: e4:5c:a8:af:36:c5:89:70:b3:b8:e7:c6:ec:62:52:05:1b:14: 4e:0a:6b:89:0d:12:4c:c2:4a:de:84:98:2d:4d:e4:4f:47:40: 4b:6b:90:09:5c:0c:cf:dc:bd:6f:60:bc:49:b9:64:0d:ea:12: c0:4e:da:e2:7a:0c:6d:43:2f:86:0e:4e:cc:83:f0:ef:26:aa: 1b:9b:a1:b8:b2:01:69:e1:c9:43:21:7a:d8:48:b7:b7:dc:6d: cc:90:d2:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOc7NSQKYt+oef0lvcT5CLF9Cu0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTA0MDQwMjU1NTRaFw0yNTA0MDcxNDU5NTRaMDMxMTAvBgNV BAMTKEIzNTlFNjAwQUQ2QUE2MzYwQzc1QkFENTUxNDY4MEMzN0ZGMEUyMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGq22l6sa5IYFmfHZN6HOudNS bv8vWd6qX7/lO0oCfinLmGRM1kjTNlWvy9A9xOvi2DftK3XE2St6HqA68TXZUeOS +P9x4Hb1G8IXRthd5W82yKxV1wf6LJUayRMh0ycjKXXum4kRjYDFV0Z4axB9E3jD NPULGXMai07g61RusTL+LhtnjrN1xSPZkktGGiupofpV5n5dKNIhxmEdyia74WxE wH5jcjeKmIZb1PgKEEzCs4R9MMH5T/O+CXnt+uBIt/GcBV69PlxhoC0nrRH9R5QV 6aO94KkIdgLiDe6ioOxSZkk5Uv8PntvKQEu4g+qnrGu7p0gTsHe6neDBguD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs1nmAK1qpjYMdbrVUUaAw3/w4gEwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLQPL50eK3v0xMIdo0P3ctn2bXukeFNKGp1 0XgOpsyZhSuUIMIAJoreA4pewFvOcZix52CilvmK89SfM1JAOR6KTw2yLOpJ5gCZ 0g4yQVyLHmqlheSKX1kWm5e8EFcozPOuffjMW/ry8q1LbfXuH8d1OMr0xlsiByyC jGAakSC+UtOYUmgKgUwRI3ppRkK/7GA/nEBib2MY8K/5ziMiCy8tVuRcqK82xYlw s7jnxuxiUgUbFE4Ka4kNEkzCSt6EmC1N5E9HQEtrkAlcDM/cvW9gvEm5ZA3qEsBO 2uJ6DG1DL4YOTsyD8O8mqhubobiyAWnhyUMhethIt7fcbcyQ0vk= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:23 2025 by rpki-client