$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: 7LMT7o42fbXz8ngpc+diBwhulXFRVH76bCqqC2ghwcQ= Subject key identifier: 39:51:86:C8:48:5A:9E:0B:1B:FA:1B:EB:6A:76:F4:6A:3A:E4:0E:D4 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 43347BDBAC26EB7080F9A545DF969BB7A2269115 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 04F3 Signing time: Mon 21 Jul 2025 00:00:53 +0000 Manifest this update: Sun 20 Jul 2025 23:55:53 +0000 Manifest next update: Thu 24 Jul 2025 04:51:53 +0000 Files and hashes: 1: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 2: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: QiZ0pqsb8bDWALB1Ktv8V+qIl337sAa4SfuhAiAMEMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:34:7b:db:ac:26:eb:70:80:f9:a5:45:df:96:9b:b7:a2:26:91:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Jul 20 23:55:53 2025 GMT Not After : Jul 24 04:51:53 2025 GMT Subject: CN=395186C8485A9E0B1BFA1BEB6A76F46A3AE40ED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5a:08:b9:f3:b0:72:b6:36:14:47:87:54:3c: ef:40:14:c1:fa:8d:b4:07:c2:3d:58:69:04:7d:60: e2:58:bb:8b:4a:38:83:05:59:5b:9d:6e:1e:97:04: 68:9a:a8:43:d9:9f:1c:c6:4d:1f:d4:60:bb:7a:b9: 53:ce:84:da:61:8c:3e:f8:5a:a7:a8:cf:0c:4c:f9: 3a:0a:a3:16:e7:d5:a4:e8:62:b3:1e:85:bc:56:3a: 35:ba:ee:d0:d1:be:ed:87:fd:14:9d:39:79:ca:cd: 8e:c2:96:1e:bd:f4:28:2b:1d:14:4f:9f:45:9d:1e: 89:68:fc:c1:00:a8:9c:24:29:0f:63:77:d4:2e:cb: 86:d0:48:38:dc:69:c7:95:ae:2f:67:c6:41:6b:44: 12:f3:0d:a0:9f:a3:0a:15:b1:3f:19:06:06:e1:9c: 3e:6f:d4:2d:d5:3f:22:50:d0:e8:2c:17:d8:ba:9f: b7:f7:cd:74:51:75:3e:4f:96:d1:b9:7f:f0:01:77: 49:cc:a0:7b:98:88:06:d0:08:a4:b7:e8:a2:e9:31: 60:bd:c3:62:be:21:d6:bd:48:2f:80:f8:2a:12:22: 0f:d8:11:cc:48:34:dd:04:4d:25:70:e6:a2:b9:7e: 37:62:41:76:f5:6a:2c:1e:f7:d5:88:d8:c4:64:50: 1b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:51:86:C8:48:5A:9E:0B:1B:FA:1B:EB:6A:76:F4:6A:3A:E4:0E:D4 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:9e:e9:24:8a:60:12:75:12:da:8f:5c:0e:34:6a:0d:83:2b: 01:2f:70:21:7f:7a:4e:2f:83:b1:20:e5:94:9a:7b:76:38:09: 6c:35:e3:63:2e:7d:f9:b9:fd:c5:f7:e2:b3:89:a2:92:56:0f: 4c:21:36:3b:0b:60:5d:2f:ce:c7:19:2c:6c:af:30:37:f1:a2: 55:e7:d7:a0:be:02:4f:79:d6:d9:09:61:e3:aa:4c:6c:f5:46: 1d:b2:90:5b:22:9f:3e:4b:ab:23:0c:f4:d5:ce:a1:8f:39:6a: 1c:e0:7f:19:c8:2f:fe:72:0b:cd:94:12:99:6f:0b:96:62:14: 35:13:20:b9:9d:f3:59:f5:82:46:59:18:95:63:62:96:0f:f8: 01:ea:49:e5:ae:0a:f5:0b:e4:97:81:ca:fc:f1:d8:ba:99:2d: 28:62:47:33:6d:ef:40:1a:ad:63:5e:5c:4e:4a:50:78:fb:43: 14:75:73:db:55:72:59:fd:9d:ef:12:25:30:7a:d3:df:bc:bd: 15:dd:33:42:08:6e:77:75:ae:06:30:9e:35:a0:a5:78:9d:fd: 1c:ca:5b:4d:78:a7:fc:1e:85:e1:65:d1:b8:e0:f2:74:a1:54: 1c:35:bf:6d:67:fa:95:a0:d2:1d:1d:3b:0d:8a:a1:ca:06:d2: 33:70:81:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQzR726wm63CA+aVF35abt6ImkRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTA3MjAyMzU1NTNaFw0yNTA3MjQwNDUxNTNaMDMxMTAvBgNV BAMTKDM5NTE4NkM4NDg1QTlFMEIxQkZBMUJFQjZBNzZGNDZBM0FFNDBFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqWgi587BytjYUR4dUPO9AFMH6 jbQHwj1YaQR9YOJYu4tKOIMFWVudbh6XBGiaqEPZnxzGTR/UYLt6uVPOhNphjD74 WqeozwxM+ToKoxbn1aToYrMehbxWOjW67tDRvu2H/RSdOXnKzY7Clh699CgrHRRP n0WdHolo/MEAqJwkKQ9jd9Quy4bQSDjcaceVri9nxkFrRBLzDaCfowoVsT8ZBgbh nD5v1C3VPyJQ0OgsF9i6n7f3zXRRdT5PltG5f/ABd0nMoHuYiAbQCKS36KLpMWC9 w2K+Ida9SC+A+CoSIg/YEcxINN0ETSVw5qK5fjdiQXb1aiwe99WI2MRkUBsZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOVGGyEhangsb+hvranb0ajrkDtQwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2e6SSKYBJ1EtqPXA40ag2DKwEvcCF/ek4v g7Eg5ZSae3Y4CWw142Muffm5/cX34rOJopJWD0whNjsLYF0vzscZLGyvMDfxolXn 16C+Ak951tkJYeOqTGz1Rh2ykFsinz5LqyMM9NXOoY85ahzgfxnIL/5yC82UEplv C5ZiFDUTILmd81n1gkZZGJVjYpYP+AHqSeWuCvUL5JeByvzx2LqZLShiRzNt70Aa rWNeXE5KUHj7QxR1c9tVcln9ne8SJTB609+8vRXdM0IIbnd1rgYwnjWgpXid/RzK W014p/weheFl0bjg8nShVBw1v21n+pWg0h0dOw2KocoG0jNwgaI= -----END CERTIFICATE-----Generated at Mon Jul 21 21:23:46 2025 by rpki-client