$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json) Hash identifier: L38gO4iXZlesL37AvvVSixojT8niLTtW4mpUOobxKIQ= Subject key identifier: FB:04:E3:03:0E:96:29:86:D3:49:25:10:12:4C:20:27:F1:2F:EE:AD Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786 Certificate serial: 4EEF57604A85492F8CA185AAF8748814E23EE0FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft Manifest number: 01F8 Signing time: Tue 22 Jul 2025 17:12:10 +0000 Manifest this update: Tue 22 Jul 2025 17:07:10 +0000 Manifest next update: Sat 26 Jul 2025 04:36:10 +0000 Files and hashes: 1: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: gctu2G1pQGUKGszQBF6OeSbPY97s67ueo+Qitv6hHBY=) 2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: HzhAdkWVPqyzjRfrKdf+sGJ5e8Q6OGeF8fvX/eoLEO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ef:57:60:4a:85:49:2f:8c:a1:85:aa:f8:74:88:14:e2:3e:e0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786 Validity Not Before: Jul 22 17:07:10 2025 GMT Not After : Jul 26 04:36:10 2025 GMT Subject: CN=FB04E3030E962986D3492510124C2027F12FEEAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b2:37:0b:39:4c:40:fe:82:18:07:88:e1:72: c0:c3:15:c2:d3:dc:66:e0:b0:77:91:0a:d1:04:5a: 46:3a:f7:28:36:93:6b:73:97:11:bd:85:f7:d2:72: 2b:89:65:2c:98:f1:e2:72:c3:41:81:58:8a:01:c4: a4:ee:8a:27:89:26:98:de:49:24:56:22:d6:bf:97: bd:4a:c5:c6:1c:46:a5:0e:b4:32:0d:5e:80:bf:19: 9b:7e:81:e8:f7:e3:08:35:d9:ec:6f:72:23:34:ce: 37:61:2b:54:2a:03:7b:2f:9b:ef:00:a5:1a:ec:a1: ca:37:12:c6:b2:e5:3f:54:c7:0a:bb:25:5c:76:90: a4:3c:bd:29:93:6e:e2:39:3a:d5:ee:d2:5a:e8:63: 78:d9:e2:c4:b3:02:d7:36:ab:c3:e7:b0:5c:f7:6a: df:e1:9b:01:7d:2d:03:fd:cc:d7:0f:fd:9b:33:09: 2e:7a:52:a2:da:a8:e3:27:3b:98:c3:e3:a4:05:58: c9:05:e3:ce:69:4d:8b:33:c7:aa:1f:58:52:6f:09: 40:36:01:41:34:af:ee:70:f7:b6:6b:5c:71:3a:13: 71:44:99:c9:93:2b:de:fd:9a:66:2e:a5:d5:bc:7c: d5:c5:fa:d5:9f:66:04:d4:34:27:fc:9e:a3:4c:7f: 9c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:04:E3:03:0E:96:29:86:D3:49:25:10:12:4C:20:27:F1:2F:EE:AD X509v3 Authority Key Identifier: keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:05:84:aa:51:14:a7:d4:b0:cb:2a:3b:e7:e3:d0:f8:db:06: 47:9c:26:f8:60:83:88:d1:98:e5:35:04:c6:f1:69:23:09:59: bf:1c:4f:d8:a5:1b:c8:4e:28:32:5c:a4:7d:9c:05:df:7d:4d: 96:8e:81:94:d4:d8:71:6b:64:3f:b8:f7:cc:33:58:8b:0f:48: 6e:ba:55:fe:f3:06:4a:5b:15:0d:10:90:a8:9c:81:c9:5c:4a: dd:d0:07:d4:32:89:ab:a4:27:c8:d7:4c:d4:35:86:1c:38:23: 74:d1:c4:94:00:0e:61:ed:65:1a:f0:c8:eb:10:68:f1:7c:5a: a1:ac:36:41:39:e0:78:fb:10:af:a3:7a:97:26:71:16:f5:39: 89:05:15:ca:15:87:e1:34:86:61:75:52:67:7f:5b:0a:d0:02: 59:9e:3d:68:8e:5b:69:fb:12:17:33:9f:0d:a8:d6:eb:2b:37: 72:c4:06:ec:df:61:c6:a4:c6:8b:53:8f:32:75:a1:bd:0d:47: ba:dd:86:6d:3f:c2:7f:7a:24:e4:07:db:81:3d:b5:4c:8c:4d: 93:c0:92:9e:46:80:d8:42:f1:5b:e8:31:a5:11:4d:86:01:42: 52:81:cb:05:8b:e2:55:ee:22:d4:ba:2d:8f:38:f8:b8:5f:68: 5a:61:c5:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTu9XYEqFSS+MoYWq+HSIFOI+4P4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF MzM5NTc4NjAeFw0yNTA3MjIxNzA3MTBaFw0yNTA3MjYwNDM2MTBaMDMxMTAvBgNV BAMTKEZCMDRFMzAzMEU5NjI5ODZEMzQ5MjUxMDEyNEMyMDI3RjEyRkVFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcsjcLOUxA/oIYB4jhcsDDFcLT 3GbgsHeRCtEEWkY69yg2k2tzlxG9hffSciuJZSyY8eJyw0GBWIoBxKTuiieJJpje SSRWIta/l71KxcYcRqUOtDINXoC/GZt+gej34wg12exvciM0zjdhK1QqA3svm+8A pRrsoco3Esay5T9Uxwq7JVx2kKQ8vSmTbuI5OtXu0lroY3jZ4sSzAtc2q8PnsFz3 at/hmwF9LQP9zNcP/ZszCS56UqLaqOMnO5jD46QFWMkF485pTYszx6ofWFJvCUA2 AUE0r+5w97ZrXHE6E3FEmcmTK979mmYupdW8fNXF+tWfZgTUNCf8nqNMf5yRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+wTjAw6WKYbTSSUQEkwgJ/Ev7q0wHwYDVR0j BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5 NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4 MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAFhKpRFKfUsMsqO+fj0PjbBkecJvhgg4jR mOU1BMbxaSMJWb8cT9ilG8hOKDJcpH2cBd99TZaOgZTU2HFrZD+498wzWIsPSG66 Vf7zBkpbFQ0QkKicgclcSt3QB9QyiaukJ8jXTNQ1hhw4I3TRxJQADmHtZRrwyOsQ aPF8WqGsNkE54Hj7EK+jepcmcRb1OYkFFcoVh+E0hmF1Umd/WwrQAlmePWiOW2n7 Ehcznw2o1usrN3LEBuzfYcakxotTjzJ1ob0NR7rdhm0/wn96JOQH24E9tUyMTZPA kp5GgNhC8VvoMaURTYYBQlKBywWL4lXuItS6LY84+LhfaFphxSo= -----END CERTIFICATE-----Generated at Wed Jul 23 12:11:54 2025 by rpki-client