$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: 9R4AMRkCaeg6QVkWKoxZ4gc//gqIXwJlDvjajj/oT4E= Subject key identifier: 45:19:5E:04:D9:65:51:7F:9B:C8:FE:BA:E5:64:83:0D:9F:BA:CE:67 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 07DA001D2823A7132CBADD9AE426EB9125A60670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 021B Signing time: Fri 18 Jul 2025 17:21:02 +0000 Manifest this update: Fri 18 Jul 2025 17:16:02 +0000 Manifest next update: Mon 21 Jul 2025 23:38:02 +0000 Files and hashes: 1: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: 9Mf25mJ/Zp/aFe/0FlMsmdgbQoKYi3+iwQw7AoX6xzU=) 2: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 23:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:da:00:1d:28:23:a7:13:2c:ba:dd:9a:e4:26:eb:91:25:a6:06:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Jul 18 17:16:02 2025 GMT Not After : Jul 21 23:38:02 2025 GMT Subject: CN=45195E04D965517F9BC8FEBAE564830D9FBACE67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:b6:82:ee:af:f5:93:d5:19:03:46:00:0c: f7:d9:5d:a2:47:a2:01:73:28:f9:7a:89:ae:18:ec: a8:9c:85:d3:ac:a2:0a:60:8b:f3:20:0e:6d:6e:b1: f5:27:ee:de:82:c9:2c:78:08:a3:03:7e:1c:b3:a9: 89:19:53:42:0f:e3:82:93:49:03:be:84:ed:43:84: 40:1c:64:a1:e0:3f:97:43:f2:7e:12:bc:08:e9:5a: ca:68:6b:13:7f:c7:c5:c6:45:a5:7d:90:11:83:c3: 1b:f7:0a:1b:83:5f:0e:ac:a1:85:22:c8:11:c4:95: 43:8b:05:67:71:5e:e7:d9:ef:96:5f:3d:21:ef:a2: 5a:61:99:fe:34:f7:f6:89:6f:03:16:87:4b:30:8d: 2f:33:9f:e5:63:e6:49:9e:9a:a5:86:b5:73:27:6d: 43:a6:30:72:32:d6:9a:78:1d:86:d5:e8:78:07:1d: 1c:8e:1f:7f:a3:3c:4e:bc:c9:60:ce:02:4f:79:07: ee:02:b5:01:f2:45:43:03:6d:a7:fc:e3:f2:05:e0: 40:04:5d:00:39:b3:9c:f7:6f:e0:4e:46:e2:cf:cb: ef:a0:70:79:7e:65:15:e7:20:9f:a9:f5:3f:6f:b7: b1:f9:63:74:17:38:12:af:09:fd:41:f5:ec:05:f6: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:19:5E:04:D9:65:51:7F:9B:C8:FE:BA:E5:64:83:0D:9F:BA:CE:67 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7f:da:4c:63:53:7a:1a:da:6d:ac:a7:43:cd:8f:45:17:75: 52:2b:e4:b5:f8:e7:1b:df:c1:12:b5:65:bf:1f:bc:a1:ec:77: 6b:38:06:31:db:1b:54:73:cb:da:14:48:55:7d:1c:95:86:f2: 08:da:1f:77:47:fe:67:8f:1b:76:bd:b9:43:e5:2d:0e:09:8b: 2f:4e:5a:64:d4:60:fd:e3:91:da:59:1c:72:cc:3f:2e:fb:61: 0f:42:47:bb:e4:f0:3a:ce:e0:34:70:48:17:63:fd:4f:d2:45: 3d:ba:28:35:7c:70:de:ea:f4:07:41:9f:5f:29:35:28:8f:76: 20:90:e4:1b:6c:ad:8f:0f:81:bc:a8:43:b2:58:4a:7f:00:d8: 08:f2:69:04:60:ce:21:14:a4:46:2b:2b:87:d4:91:00:00:16: af:52:e8:da:34:85:76:d3:e0:45:03:09:e9:f6:61:5e:b9:c8: 51:7d:86:e7:9f:55:2c:ce:7f:16:78:e4:00:0b:04:13:e5:75: 8a:45:d1:fb:6b:d5:8e:f5:d1:80:2e:f8:64:2a:62:5a:b3:96: d3:f9:11:38:01:95:78:64:ce:d9:98:ca:c6:10:c5:b2:51:3a: 95:6f:a5:16:c5:06:cc:3b:7c:59:c0:a3:ef:8e:9e:d0:63:cc: b1:5c:0c:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB9oAHSgjpxMsut2a5CbrkSWmBnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTA3MTgxNzE2MDJaFw0yNTA3MjEyMzM4MDJaMDMxMTAvBgNV BAMTKDQ1MTk1RTA0RDk2NTUxN0Y5QkM4RkVCQUU1NjQ4MzBEOUZCQUNFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnp7aC7q/1k9UZA0YADPfZXaJH ogFzKPl6ia4Y7KichdOsogpgi/MgDm1usfUn7t6CySx4CKMDfhyzqYkZU0IP44KT SQO+hO1DhEAcZKHgP5dD8n4SvAjpWspoaxN/x8XGRaV9kBGDwxv3ChuDXw6soYUi yBHElUOLBWdxXufZ75ZfPSHvolphmf409/aJbwMWh0swjS8zn+Vj5kmemqWGtXMn bUOmMHIy1pp4HYbV6HgHHRyOH3+jPE68yWDOAk95B+4CtQHyRUMDbaf84/IF4EAE XQA5s5z3b+BORuLPy++gcHl+ZRXnIJ+p9T9vt7H5Y3QXOBKvCf1B9ewF9l5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURRleBNllUX+byP665WSDDZ+6zmcwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADp/2kxjU3oa2m2sp0PNj0UXdVIr5LX45xvf wRK1Zb8fvKHsd2s4BjHbG1Rzy9oUSFV9HJWG8gjaH3dH/mePG3a9uUPlLQ4Jiy9O WmTUYP3jkdpZHHLMPy77YQ9CR7vk8DrO4DRwSBdj/U/SRT26KDV8cN7q9AdBn18p NSiPdiCQ5BtsrY8PgbyoQ7JYSn8A2AjyaQRgziEUpEYrK4fUkQAAFq9S6No0hXbT 4EUDCen2YV65yFF9huefVSzOfxZ45AALBBPldYpF0ftr1Y710YAu+GQqYlqzltP5 ETgBlXhkztmYysYQxbJROpVvpRbFBsw7fFnAo++OntBjzLFcDNY= -----END CERTIFICATE-----Generated at Sun Jul 20 22:31:44 2025 by rpki-client