$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: NHDD6X741nZKkmjUnoUVaFI+wUc6pLUgY7/NUsVrRg4= Subject key identifier: 9B:EC:5C:F8:51:A9:68:7D:AA:40:F5:0C:8A:44:28:BC:2D:32:97:D5 Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 2DB7DD82C7B0DFE6D74FC93F8839EFAA06680F4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 01B2 Signing time: Fri 07 Nov 2025 10:01:53 +0000 Manifest this update: Fri 07 Nov 2025 09:56:53 +0000 Manifest next update: Mon 10 Nov 2025 17:58:53 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: KMcz9HndxaUeKt8rn5FI6Dp+4OSaacNz41TOKfq1iXs=) 2: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 0veKivESqTIR22CLe0BQKZVbkyyZLitqVchvnzV7aBw=) 3: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: K14ftWvoYHWmlZe24/7iUd4V0lf1JcF+hkJJHRyNrLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 17:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b7:dd:82:c7:b0:df:e6:d7:4f:c9:3f:88:39:ef:aa:06:68:0f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Nov 7 09:56:53 2025 GMT Not After : Nov 10 17:58:53 2025 GMT Subject: CN=9BEC5CF851A9687DAA40F50C8A4428BC2D3297D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:a0:ca:05:5f:a8:34:0a:13:4f:4b:35:f7: 02:23:ba:7a:ba:22:e5:29:f4:09:14:3e:af:27:61: 01:43:22:bc:c1:a7:56:b6:60:2a:d8:a7:e1:15:ea: e5:4f:5c:99:1b:5f:fe:c3:97:3a:46:08:05:7e:8a: be:b0:24:67:97:4f:df:11:34:d5:d5:21:29:b8:3b: 3b:be:07:dd:22:22:a8:e7:8e:97:99:39:55:86:46: 78:61:4b:a0:79:ec:69:cb:73:dc:a3:5d:f3:60:81: 51:ef:58:0f:e1:22:4d:f4:1b:07:5e:bc:e8:6f:69: 1d:50:d3:03:a2:3e:9f:fa:15:e7:25:5c:fe:f3:d7: b4:d8:77:8f:67:61:d3:8c:08:04:5f:44:a5:66:18: a1:7a:25:4b:86:6b:e0:74:36:e8:79:17:ff:60:80: c4:a0:45:5e:bb:a0:95:d0:6e:ce:40:d6:37:c9:b0: 69:d1:50:b9:5c:e2:f7:87:14:a3:85:f3:69:21:c2: de:84:3b:1f:3b:e4:e1:b0:7a:c1:f1:d9:a9:4a:89: 07:bf:4a:f0:15:69:3c:20:03:b2:5d:70:22:92:05: 16:d1:ee:dd:c4:64:18:bf:fb:8b:73:32:31:53:aa: b6:f7:52:44:39:73:8d:2b:dd:ac:27:75:9e:d7:56: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EC:5C:F8:51:A9:68:7D:AA:40:F5:0C:8A:44:28:BC:2D:32:97:D5 X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:41:45:2a:6d:e5:ac:f8:c9:fa:b1:92:81:2a:38:fe:48:ff: ef:4a:5f:44:81:cf:a4:45:46:fa:1b:8b:59:06:c7:39:34:0d: a9:54:dd:f0:fd:f2:3a:f3:3e:9a:25:e5:15:87:e2:29:a0:d9: 7c:59:08:04:4e:28:41:4a:2d:23:e1:b6:04:b3:9a:a4:94:46: c8:8c:3b:26:58:11:16:f9:7b:59:16:36:91:4c:dc:43:89:96: 4c:b1:7d:f6:83:6d:c1:09:28:13:17:6d:f2:e9:09:72:63:01: ec:0b:40:9d:a8:4a:24:5f:9f:59:63:a0:e6:81:ba:d3:45:a9: 32:a9:54:01:93:22:ca:47:fa:3b:2a:83:73:14:5d:f3:2e:e5: c1:8a:26:4f:c9:ac:d4:f4:59:19:c6:fb:31:17:2d:d6:25:28: 10:3c:98:8b:46:3e:81:d0:39:9d:fd:8a:1f:97:e8:40:4a:4e: 54:6e:af:4e:a3:b7:0c:1f:b5:ad:d2:e4:f1:51:73:09:05:20: 80:b5:ae:81:9d:82:f3:c6:0c:e1:5d:06:15:a2:aa:fe:c3:ea: 97:34:36:e3:17:b0:11:69:8d:d8:d0:40:7e:f0:87:29:48:5b: eb:f3:6e:b2:c2:40:e1:74:e9:d7:d9:23:96:ed:25:ce:da:11: 71:2d:0f:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbfdgsew3+bXT8k/iDnvqgZoD0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNTExMDcwOTU2NTNaFw0yNTExMTAxNzU4NTNaMDMxMTAvBgNV BAMTKDlCRUM1Q0Y4NTFBOTY4N0RBQTQwRjUwQzhBNDQyOEJDMkQzMjk3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/06DKBV+oNAoTT0s19wIjunq6 IuUp9AkUPq8nYQFDIrzBp1a2YCrYp+EV6uVPXJkbX/7DlzpGCAV+ir6wJGeXT98R NNXVISm4Ozu+B90iIqjnjpeZOVWGRnhhS6B57GnLc9yjXfNggVHvWA/hIk30Gwde vOhvaR1Q0wOiPp/6FeclXP7z17TYd49nYdOMCARfRKVmGKF6JUuGa+B0Nuh5F/9g gMSgRV67oJXQbs5A1jfJsGnRULlc4veHFKOF82khwt6EOx875OGwesHx2alKiQe/ SvAVaTwgA7JdcCKSBRbR7t3EZBi/+4tzMjFTqrb3UkQ5c40r3awndZ7XVgVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+xc+FGpaH2qQPUMikQovC0yl9UwHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVBRSpt5az4yfqxkoEqOP5I/+9KX0SBz6RF Rvobi1kGxzk0DalU3fD98jrzPpol5RWH4img2XxZCAROKEFKLSPhtgSzmqSURsiM OyZYERb5e1kWNpFM3EOJlkyxffaDbcEJKBMXbfLpCXJjAewLQJ2oSiRfn1ljoOaB utNFqTKpVAGTIspH+jsqg3MUXfMu5cGKJk/JrNT0WRnG+zEXLdYlKBA8mItGPoHQ OZ39ih+X6EBKTlRur06jtwwfta3S5PFRcwkFIIC1roGdgvPGDOFdBhWiqv7D6pc0 NuMXsBFpjdjQQH7whylIW+vzbrLCQOF06dfZI5btJc7aEXEtD8M= -----END CERTIFICATE-----Generated at Sat Nov 8 21:38:42 2025 by rpki-client