$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: 6HjgygSxBMQUoQiTO2369rRKpXH6+djY3x1sDxk6Z0A= Subject key identifier: 08:3B:5C:1C:CC:1E:BA:34:D3:54:A2:C9:1D:68:67:93:42:BE:0B:E8 Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 125E41C73F313D0762CF617C4691DD093F844962 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 021B Signing time: Sun 20 Jul 2025 12:42:21 +0000 Manifest this update: Sun 20 Jul 2025 12:37:21 +0000 Manifest next update: Wed 23 Jul 2025 15:02:21 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: io5Szau+FyYJoODe8ysfAfAf8W28OxzvsXsWQXTkmN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5e:41:c7:3f:31:3d:07:62:cf:61:7c:46:91:dd:09:3f:84:49:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Jul 20 12:37:21 2025 GMT Not After : Jul 23 15:02:21 2025 GMT Subject: CN=083B5C1CCC1EBA34D354A2C91D68679342BE0BE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:10:4a:54:63:eb:f7:85:20:ec:ac:a6:7f:56: ab:96:10:07:e5:95:61:54:b5:ba:a2:c4:5e:2c:bd: f6:4c:ed:1f:9a:b4:42:fa:0e:96:0a:2a:0f:79:07: b3:dd:e7:5e:31:e4:77:f5:2a:1b:9c:12:34:ca:f4: af:36:af:14:4d:e7:85:0b:30:d0:e2:d4:b8:ec:11: 42:f4:37:c4:c0:c9:43:a9:a0:da:ed:51:f3:e0:84: 13:8f:3c:44:af:df:0a:43:50:42:dd:a2:78:af:08: f7:fe:03:63:a9:b3:96:d9:a6:30:1d:a8:8d:d4:c5: f2:e4:04:76:d9:da:e1:be:32:85:e1:80:cc:61:0d: a0:95:6b:32:52:3e:36:89:52:ba:cb:2d:bc:af:19: ea:84:e5:8a:c3:f1:8e:30:6c:bc:6c:d3:ae:c3:24: cf:0f:cb:41:de:ec:7b:59:07:0c:3f:9f:37:be:98: f7:3d:6b:5d:8a:bb:b9:84:da:e2:8f:9d:4f:c5:6c: 68:0c:6b:c7:44:24:9a:2d:42:57:e8:01:67:d4:85: c9:10:36:6d:3d:82:9c:2a:79:71:4b:95:ab:a2:fa: f6:cc:26:fe:14:fd:9f:e2:b3:df:f0:b6:b6:b8:e8: 9e:94:de:07:b7:b8:6e:36:8d:07:7e:bb:24:af:85: 32:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3B:5C:1C:CC:1E:BA:34:D3:54:A2:C9:1D:68:67:93:42:BE:0B:E8 X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9c:01:24:7b:d0:b0:f4:37:1f:29:68:df:76:5e:32:aa:ff: a6:17:f9:13:1b:65:cf:c5:d4:78:d4:a3:ef:21:a6:81:58:e4: 22:72:9b:a9:a3:1e:5f:85:2b:01:ef:0c:f8:a7:ae:a3:dc:8a: a0:5a:31:b2:37:8a:4a:3b:73:54:d0:55:e2:19:11:bc:34:01: c4:7c:e7:0d:9a:37:3c:3e:6d:8c:79:2b:34:c7:8a:4c:af:17: 85:43:d6:9c:46:b4:ff:a9:a1:4f:ac:a8:c3:45:d6:ba:1b:3c: 2a:71:ae:4d:b4:0e:1c:19:cc:f5:2b:5a:f7:85:e2:fc:dd:a9: 98:ff:02:36:07:02:16:82:c3:5a:ef:49:55:6b:a8:11:99:6a: 75:d8:2a:af:99:5f:57:d9:62:e5:16:2d:4e:e6:3e:53:25:db: ab:35:08:9b:e7:e0:ad:92:5d:5c:e6:c6:88:5d:56:9a:94:66: b9:94:ed:79:29:31:82:68:75:cd:79:ef:2b:fa:55:d0:0d:30: ba:17:77:57:3e:c6:f7:51:32:c0:53:fc:de:a7:8d:9e:f6:e3: 47:87:54:6b:c7:7f:95:26:e2:df:d8:b4:87:2e:de:57:05:24: 4b:4d:fa:31:4c:9c:2a:68:17:ef:4f:ee:a4:f7:ae:1e:fb:6d: 6b:19:fc:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEl5Bxz8xPQdiz2F8RpHdCT+ESWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNTA3MjAxMjM3MjFaFw0yNTA3MjMxNTAyMjFaMDMxMTAvBgNV BAMTKDA4M0I1QzFDQ0MxRUJBMzREMzU0QTJDOTFENjg2NzkzNDJCRTBCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsEEpUY+v3hSDsrKZ/VquWEAfl lWFUtbqixF4svfZM7R+atEL6DpYKKg95B7Pd514x5Hf1KhucEjTK9K82rxRN54UL MNDi1LjsEUL0N8TAyUOpoNrtUfPghBOPPESv3wpDUELdonivCPf+A2Ops5bZpjAd qI3UxfLkBHbZ2uG+MoXhgMxhDaCVazJSPjaJUrrLLbyvGeqE5YrD8Y4wbLxs067D JM8Py0He7HtZBww/nze+mPc9a12Ku7mE2uKPnU/FbGgMa8dEJJotQlfoAWfUhckQ Nm09gpwqeXFLlaui+vbMJv4U/Z/is9/wtra46J6U3ge3uG42jQd+uySvhTKjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCDtcHMweujTTVKLJHWhnk0K+C+gwHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6cASR70LD0Nx8paN92XjKq/6YX+RMbZc/F 1HjUo+8hpoFY5CJym6mjHl+FKwHvDPinrqPciqBaMbI3iko7c1TQVeIZEbw0AcR8 5w2aNzw+bYx5KzTHikyvF4VD1pxGtP+poU+sqMNF1robPCpxrk20DhwZzPUrWveF 4vzdqZj/AjYHAhaCw1rvSVVrqBGZanXYKq+ZX1fZYuUWLU7mPlMl26s1CJvn4K2S XVzmxohdVpqUZrmU7XkpMYJodc157yv6VdANMLoXd1c+xvdRMsBT/N6njZ7240eH VGvHf5Um4t/YtIcu3lcFJEtN+jFMnCpoF+9P7qT3rh77bWsZ/Fc= -----END CERTIFICATE-----Generated at Mon Jul 21 08:33:58 2025 by rpki-client