$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: RxcWZmGO1SFkdEC+NnQjoCkkNEF4AAAh+ZFGgyvmcbE= Subject key identifier: C0:D2:46:96:6C:E7:F7:00:95:8C:31:BE:8D:2A:99:DF:E2:DC:87:CB Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 6EFF374D96C5F38E8944C7472D0B0C40C515AC64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 01BF Signing time: Fri 25 Apr 2025 02:11:30 +0000 Manifest this update: Fri 25 Apr 2025 02:06:30 +0000 Manifest next update: Mon 28 Apr 2025 13:46:30 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: i3xYoaV0m8yPFKTooanP/KcDROLIscdI3CwF44Y++pc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ff:37:4d:96:c5:f3:8e:89:44:c7:47:2d:0b:0c:40:c5:15:ac:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Apr 25 02:06:30 2025 GMT Not After : Apr 28 13:46:30 2025 GMT Subject: CN=C0D246966CE7F700958C31BE8D2A99DFE2DC87CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f9:22:e3:77:db:bb:e8:c0:85:24:01:6b:bb: 38:3e:9f:f4:e9:3c:96:c9:21:1f:c9:8e:c4:fa:9e: f8:81:66:b9:e6:ad:6d:d0:c4:0a:69:5a:d8:7d:93: be:4b:c1:12:67:44:c0:aa:7b:13:49:66:47:0e:b6: 2a:65:fb:c6:e2:4c:57:6c:8b:43:99:04:2d:c1:b7: 3a:2b:67:09:18:dc:a7:8a:35:81:3d:69:0b:78:ae: 5b:58:d9:5c:60:37:81:91:50:46:cb:5f:0f:a1:12: 60:9c:48:18:d5:ed:73:68:3b:7b:ca:ac:4e:7c:9f: 91:c4:fe:36:98:d8:7e:ea:84:4a:d2:14:56:6e:09: 4a:c5:b5:05:4a:d6:1b:da:ab:72:f0:80:59:79:ef: 5c:c8:7d:78:b5:b9:50:0d:79:b0:72:eb:3a:cc:49: 80:25:64:57:84:a9:75:89:c5:57:79:87:20:a3:2b: 07:ce:dc:8a:7f:f5:9c:2b:92:e3:07:dd:7f:09:f4: cc:df:aa:23:02:48:c7:fa:24:4d:82:8e:7f:6e:83: e5:48:64:30:3b:c5:ba:66:ac:bd:74:5d:a5:ac:87: 94:be:30:56:c9:a0:98:c0:9b:3f:56:2b:32:69:b6: 54:1f:9a:e0:ea:dc:ea:2f:83:20:dc:97:8f:81:95: 98:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D2:46:96:6C:E7:F7:00:95:8C:31:BE:8D:2A:99:DF:E2:DC:87:CB X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b5:8a:28:cd:76:ac:d5:6f:68:08:8b:90:b7:54:45:10:a4: 30:8d:15:df:ca:f9:28:be:10:50:bc:2c:8b:25:b1:cd:55:32: 6d:16:9b:1e:fd:b3:c7:5e:56:cd:d3:fb:f6:73:2a:9d:e5:4b: 60:ef:9b:68:b2:f3:7c:cf:d2:ce:ab:b3:3e:55:5a:d6:f5:9a: 97:7f:ee:34:73:86:a2:e3:56:e5:d5:92:9b:23:52:92:df:7a: bd:8a:fd:32:6e:d1:c9:fb:0a:4c:91:28:1d:8d:5f:fc:10:17: 4d:da:e8:22:9b:24:17:7d:7d:cf:d1:5c:f3:32:c2:c4:6b:ea: 0d:7f:aa:ac:3a:33:a7:07:e8:0a:50:d1:46:ba:b7:1c:93:db: 14:65:0f:42:e2:5d:ac:94:ce:56:93:ec:01:b9:b8:6f:53:de: 12:54:bc:1d:90:1a:d8:31:51:60:29:ba:04:03:37:16:51:0f: 85:64:8f:44:2b:f3:88:98:32:9e:27:0a:a9:ec:c3:93:bb:97: 68:ac:ac:9d:3a:e8:5e:8c:75:c2:f2:04:ac:f1:7f:8c:e9:ed: 50:53:43:d6:9f:3d:b8:8f:98:77:02:58:d2:82:f0:61:1b:d2: 2b:b6:e7:dd:05:17:90:4b:c0:fb:d5:98:86:f6:a4:bb:59:c0: e8:f3:6f:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbv83TZbF846JRMdHLQsMQMUVrGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTA0MjUwMjA2MzBaFw0yNTA0MjgxMzQ2MzBaMDMxMTAvBgNV BAMTKEMwRDI0Njk2NkNFN0Y3MDA5NThDMzFCRThEMkE5OURGRTJEQzg3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3+SLjd9u76MCFJAFruzg+n/Tp PJbJIR/JjsT6nviBZrnmrW3QxAppWth9k75LwRJnRMCqexNJZkcOtipl+8biTFds i0OZBC3BtzorZwkY3KeKNYE9aQt4rltY2VxgN4GRUEbLXw+hEmCcSBjV7XNoO3vK rE58n5HE/jaY2H7qhErSFFZuCUrFtQVK1hvaq3LwgFl571zIfXi1uVANebBy6zrM SYAlZFeEqXWJxVd5hyCjKwfO3Ip/9ZwrkuMH3X8J9MzfqiMCSMf6JE2Cjn9ug+VI ZDA7xbpmrL10XaWsh5S+MFbJoJjAmz9WKzJptlQfmuDq3OovgyDcl4+BlZgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwNJGlmzn9wCVjDG+jSqZ3+Lch8swHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKO1iijNdqzVb2gIi5C3VEUQpDCNFd/K+Si+ EFC8LIslsc1VMm0Wmx79s8deVs3T+/ZzKp3lS2Dvm2iy83zP0s6rsz5VWtb1mpd/ 7jRzhqLjVuXVkpsjUpLfer2K/TJu0cn7CkyRKB2NX/wQF03a6CKbJBd9fc/RXPMy wsRr6g1/qqw6M6cH6ApQ0Ua6txyT2xRlD0LiXayUzlaT7AG5uG9T3hJUvB2QGtgx UWApugQDNxZRD4Vkj0Qr84iYMp4nCqnsw5O7l2isrJ066F6MdcLyBKzxf4zp7VBT Q9afPbiPmHcCWNKC8GEb0iu2590FF5BLwPvVmIb2pLtZwOjzb48= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:23 2025 by rpki-client on console.sobornost.net