$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: IkhAiY8MG8BBnfbOCwvVl/dMPE/UMs2mnBKPW5MPx5w= Subject key identifier: D8:C4:48:89:82:70:A2:31:1B:E3:90:3D:DF:87:32:B9:36:03:3F:CB Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 5F92A23E15B03B5AC8019177F60A5FA485E9EB5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 01E6 Signing time: Mon 21 Jul 2025 04:41:30 +0000 Manifest this update: Mon 21 Jul 2025 04:36:30 +0000 Manifest next update: Thu 24 Jul 2025 08:33:30 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: v2B99Cxz2fwonv+gdfUij+WyMleKmoGj2CIxztstJRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:92:a2:3e:15:b0:3b:5a:c8:01:91:77:f6:0a:5f:a4:85:e9:eb:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Jul 21 04:36:30 2025 GMT Not After : Jul 24 08:33:30 2025 GMT Subject: CN=D8C448898270A2311BE3903DDF8732B936033FCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:31:31:44:fb:45:37:55:08:29:52:ef:f5: 3d:c2:f1:a1:bb:02:fa:77:26:4f:56:0e:fb:74:bd: 9c:6b:81:03:82:3f:1f:ba:9f:15:bb:42:f4:f6:77: 42:86:8e:4f:b0:a1:98:41:a1:54:83:f8:27:3a:64: 2f:ec:c2:e0:8d:2b:da:ca:8c:35:f1:a1:81:ee:4d: 7c:ac:ac:57:0f:b3:08:aa:71:7e:a3:42:e8:a5:c2: 02:d5:1d:c9:bd:ab:d2:2e:fd:71:a7:e0:8c:e9:47: 1b:d1:cd:e0:f5:0e:1f:b0:8b:b5:6e:59:85:00:13: 6f:a3:b2:c5:38:27:f7:1b:98:9d:a5:1a:15:dc:e5: 59:dc:3e:ef:22:f9:d5:66:8b:1c:eb:e3:04:76:c3: 18:75:45:b2:73:dc:88:19:ce:83:61:6b:a1:6f:50: ce:fc:e4:65:67:28:4f:82:06:65:15:38:de:73:44: e6:47:b7:03:8a:19:0d:a4:9c:3b:2a:be:d6:05:92: 87:eb:b0:ad:92:a9:93:59:a9:af:0c:86:51:f0:71: a5:61:a4:9f:5a:b1:b3:4c:5f:f4:e9:9e:ed:a3:69: 10:cb:bd:98:0d:ca:44:e2:05:e1:e1:4e:8e:55:4f: 39:9f:0d:a2:26:6f:d0:00:36:7f:33:fc:eb:42:3a: bb:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C4:48:89:82:70:A2:31:1B:E3:90:3D:DF:87:32:B9:36:03:3F:CB X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ff:ab:d2:8e:db:78:a1:0e:2e:1e:b3:3a:ff:ef:2a:8d:7b: 8f:6f:e6:03:18:d2:e9:20:f0:d2:16:e7:98:2d:c2:c9:5f:02: 12:92:11:ab:04:0b:02:a6:e9:bb:16:8d:23:c3:ec:0b:96:b0: a4:cc:13:ff:ed:b2:d1:1c:4e:20:69:82:ee:ae:d0:5c:a0:3d: 76:00:6d:7d:02:39:bc:24:ba:8d:54:36:b1:1a:1e:8c:d8:14: a5:c2:3d:9f:29:04:82:ab:45:42:b3:1b:94:ff:1f:87:2c:87: 25:a3:89:7a:86:b8:dc:ff:b6:56:3c:87:a7:4d:89:fe:90:51: 83:ca:66:72:55:cc:e8:d8:3e:b5:72:e3:47:9a:43:d3:46:cf: 56:5e:15:5d:16:b5:0f:cd:75:65:ca:19:6f:fa:c9:4b:1f:07: c5:d8:e6:74:3b:2b:f0:ad:4c:30:8c:96:bd:5c:4b:ff:b4:f7: a5:3d:f6:90:00:a9:46:e3:22:76:c3:7c:68:a9:4d:4f:ba:40: c0:34:61:78:8d:69:c9:5d:66:1a:ed:e3:1f:da:39:fb:14:c7: ed:13:fe:86:c9:f9:eb:18:41:48:87:9b:7a:b2:1b:68:b0:3f: 56:70:fa:d9:d3:2a:d8:23:99:33:99:d5:d1:35:bd:ab:0d:0e: 49:d3:26:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5KiPhWwO1rIAZF39gpfpIXp61wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTA3MjEwNDM2MzBaFw0yNTA3MjQwODMzMzBaMDMxMTAvBgNV BAMTKEQ4QzQ0ODg5ODI3MEEyMzExQkUzOTAzRERGODczMkI5MzYwMzNGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+KDExRPtFN1UIKVLv9T3C8aG7 Avp3Jk9WDvt0vZxrgQOCPx+6nxW7QvT2d0KGjk+woZhBoVSD+Cc6ZC/swuCNK9rK jDXxoYHuTXysrFcPswiqcX6jQuilwgLVHcm9q9Iu/XGn4IzpRxvRzeD1Dh+wi7Vu WYUAE2+jssU4J/cbmJ2lGhXc5VncPu8i+dVmixzr4wR2wxh1RbJz3IgZzoNha6Fv UM785GVnKE+CBmUVON5zROZHtwOKGQ2knDsqvtYFkofrsK2SqZNZqa8MhlHwcaVh pJ9asbNMX/Tpnu2jaRDLvZgNykTiBeHhTo5VTzmfDaImb9AANn8z/OtCOruxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2MRIiYJwojEb45A934cyuTYDP8swHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGD/q9KO23ihDi4eszr/7yqNe49v5gMY0ukg 8NIW55gtwslfAhKSEasECwKm6bsWjSPD7AuWsKTME//tstEcTiBpgu6u0FygPXYA bX0CObwkuo1UNrEaHozYFKXCPZ8pBIKrRUKzG5T/H4cshyWjiXqGuNz/tlY8h6dN if6QUYPKZnJVzOjYPrVy40eaQ9NGz1ZeFV0WtQ/NdWXKGW/6yUsfB8XY5nQ7K/Ct TDCMlr1cS/+096U99pAAqUbjInbDfGipTU+6QMA0YXiNacldZhrt4x/aOfsUx+0T /obJ+esYQUiHm3qyG2iwP1Zw+tnTKtgjmTOZ1dE1vasNDknTJqg= -----END CERTIFICATE-----Generated at Mon Jul 21 08:37:43 2025 by rpki-client