$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: f/hwnkS8jRA0fcb6yCpXsBWW7E5pxgs498xtBSgDgvA= Subject key identifier: 73:F0:E7:26:14:7F:08:9B:20:48:65:E1:A8:B9:92:2B:1A:73:FF:0F Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 5DDB73F30716F7734DDFAB4DC15CC651EBDB81C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 0527 Signing time: Sun 16 Nov 2025 00:20:56 +0000 Manifest this update: Sun 16 Nov 2025 00:15:56 +0000 Manifest next update: Wed 19 Nov 2025 00:40:56 +0000 Files and hashes: 1: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: 2xB471dtEEgO4+BSDABEKZXJ/IFLXqFiqxtkN7C//k4=) 2: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 3: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 00:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:db:73:f3:07:16:f7:73:4d:df:ab:4d:c1:5c:c6:51:eb:db:81:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Nov 16 00:15:56 2025 GMT Not After : Nov 19 00:40:56 2025 GMT Subject: CN=73F0E726147F089B204865E1A8B9922B1A73FF0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:59:3f:c7:fe:c3:84:47:b6:39:0f:7f:e0:0c: b9:4a:7b:f9:d7:49:c0:d3:2c:30:17:0e:aa:64:a0: 26:c4:65:85:da:1b:cc:ff:75:4e:4b:c6:95:f7:f0: e5:7b:f7:47:90:0f:06:52:36:77:d3:00:91:2d:f9: bb:5a:2f:91:da:9b:bb:d2:77:40:8c:2a:a7:f1:71: e2:f9:90:93:bf:b9:89:06:1f:1e:99:a8:e3:7e:c1: e8:84:cb:2a:f7:29:b5:0b:72:49:9f:09:5d:a1:f2: 45:bc:76:b9:73:0c:47:4f:fb:9c:fe:64:98:9f:80: f5:c8:05:7e:58:7f:20:f0:c5:aa:2c:56:0b:2d:1f: e0:e7:d6:e7:94:9c:2f:49:5e:27:29:ff:5c:8e:b7: f6:77:11:a5:9c:b5:b9:68:70:a8:77:fa:97:ea:ab: 31:d9:43:c6:31:80:1f:54:99:e9:2c:71:93:73:21: ed:f7:9b:00:4f:66:95:09:5b:16:b5:a6:d8:66:f8: e3:ea:57:25:b4:4c:44:b2:76:f2:ca:88:4b:03:8f: db:77:c5:ea:25:2c:5c:a4:6d:36:cf:bd:8b:58:2d: 76:59:42:f6:c8:54:f5:87:ec:21:75:35:65:1f:f1: cd:f2:8a:45:0d:2f:8a:e1:c5:09:81:a3:7f:c8:3a: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F0:E7:26:14:7F:08:9B:20:48:65:E1:A8:B9:92:2B:1A:73:FF:0F X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c8:b9:04:c4:87:54:97:67:25:39:e1:77:21:a8:80:81:b0: 61:c8:77:b9:a0:2f:d2:d7:db:fc:fe:4f:93:2b:10:5c:8c:30: 4d:a3:0e:4d:ba:6b:25:5f:6e:9f:0a:48:59:33:80:4f:2b:4a: 29:0e:dc:7f:a3:6b:3b:e4:7a:31:ed:29:b2:87:70:c2:1a:2b: 59:d4:c3:99:41:31:62:f3:dc:aa:89:6d:70:68:e5:75:9e:21: e4:d2:15:09:46:28:e8:f4:ff:59:91:d5:1b:30:d7:92:6c:a8: 00:5b:76:27:be:dd:78:93:dc:87:8f:53:95:a8:fe:55:53:6b: d6:04:80:8e:0f:7e:e5:22:93:73:67:c4:2f:ab:ca:f9:37:2b: 77:eb:df:b3:01:6c:c0:76:4d:0f:fc:9a:33:fb:24:97:3c:40: 2b:63:58:46:41:e6:dd:e5:e8:8c:c8:aa:b9:8e:d5:ca:71:9a: eb:fd:a7:8e:a3:18:d2:01:be:53:4b:8e:a3:b1:cb:9e:dd:a1: 85:16:86:9c:ae:7d:cf:b1:a9:00:54:50:0d:e3:5a:34:1b:94: 9f:89:75:db:50:a9:f3:26:a4:f0:e7:70:bb:99:94:48:c4:fd: 9f:fd:b1:58:0e:db:0f:a1:13:3b:2a:65:55:a1:3f:09:9a:86: 3c:2a:cd:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdtz8wcW93NN36tNwVzGUevbgcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTExMTYwMDE1NTZaFw0yNTExMTkwMDQwNTZaMDMxMTAvBgNV BAMTKDczRjBFNzI2MTQ3RjA4OUIyMDQ4NjVFMUE4Qjk5MjJCMUE3M0ZGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWWT/H/sOER7Y5D3/gDLlKe/nX ScDTLDAXDqpkoCbEZYXaG8z/dU5LxpX38OV790eQDwZSNnfTAJEt+btaL5Ham7vS d0CMKqfxceL5kJO/uYkGHx6ZqON+weiEyyr3KbULckmfCV2h8kW8drlzDEdP+5z+ ZJifgPXIBX5YfyDwxaosVgstH+Dn1ueUnC9JXicp/1yOt/Z3EaWctblocKh3+pfq qzHZQ8YxgB9UmekscZNzIe33mwBPZpUJWxa1pthm+OPqVyW0TESydvLKiEsDj9t3 xeolLFykbTbPvYtYLXZZQvbIVPWH7CF1NWUf8c3yikUNL4rhxQmBo3/IOjxPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc/DnJhR/CJsgSGXhqLmSKxpz/w8wHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALIuQTEh1SXZyU54XchqICBsGHId7mgL9LX 2/z+T5MrEFyMME2jDk26ayVfbp8KSFkzgE8rSikO3H+jazvkejHtKbKHcMIaK1nU w5lBMWLz3KqJbXBo5XWeIeTSFQlGKOj0/1mR1Rsw15JsqABbdie+3XiT3IePU5Wo /lVTa9YEgI4PfuUik3NnxC+ryvk3K3fr37MBbMB2TQ/8mjP7JJc8QCtjWEZB5t3l 6IzIqrmO1cpxmuv9p46jGNIBvlNLjqOxy57doYUWhpyufc+xqQBUUA3jWjQblJ+J ddtQqfMmpPDncLuZlEjE/Z/9sVgO2w+hEzsqZVWhPwmahjwqzTc= -----END CERTIFICATE-----Generated at Mon Nov 17 04:25:40 2025 by rpki-client