$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: /q6uxA57ityAREnXLWDOBCUBNdnNZEXJYjiLAneN9v0= Subject key identifier: AB:C6:3F:8A:C6:F5:CD:DC:CC:16:42:F9:AC:59:95:C5:98:B4:74:1B Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 21F080E2BF658000AB8749B3A912D6D6EA214CBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 010D Signing time: Sun 20 Jul 2025 01:22:13 +0000 Manifest this update: Sun 20 Jul 2025 01:17:13 +0000 Manifest next update: Wed 23 Jul 2025 12:52:13 +0000 Files and hashes: 1: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: +TpGrInw6MYBt52lteYHqPe/GHixGpWLSTXXOphuUSU=) 2: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: KQBwI3mDk7Di2Hgh9pZD8sQ4+9+63h0EFvm7NCb7Spk=) 3: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: hqYI81weDgbgi4r+l8knDsBjF61Dtz30gl4Oc7K52/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f0:80:e2:bf:65:80:00:ab:87:49:b3:a9:12:d6:d6:ea:21:4c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Jul 20 01:17:13 2025 GMT Not After : Jul 23 12:52:13 2025 GMT Subject: CN=ABC63F8AC6F5CDDCCC1642F9AC5995C598B4741B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:de:f1:14:5c:aa:3d:1b:2e:29:2d:2b:b6:b0: ac:ea:ea:d2:02:f7:0a:da:b5:ba:b5:a1:a5:eb:80: 76:f4:5b:64:a3:42:2f:a3:95:49:67:71:66:d7:9f: f8:e7:dc:7b:27:51:5e:1c:2b:a2:1f:47:9e:36:f6: 73:1b:e2:cc:f5:4f:33:53:18:43:c2:fb:f2:01:45: 62:f8:28:0f:80:b7:3c:db:5c:fe:23:e0:d8:28:5e: b3:97:35:b9:ff:98:11:5e:cb:6d:12:84:6e:17:ec: 50:21:f9:19:57:e1:25:ff:2f:9c:60:75:c3:32:2f: 69:a6:b2:38:f8:fa:44:ea:92:34:05:4f:cc:23:3f: 27:41:6d:70:83:c2:82:f7:6a:8a:ca:a1:6a:ae:19: 56:57:e4:4e:71:58:1b:d6:1a:0a:0d:b8:cb:45:67: 23:60:bd:26:ca:75:e0:76:fb:e5:33:14:48:f9:e4: 5d:3d:11:11:a7:69:e0:aa:47:46:1d:ac:9d:b5:fb: a2:8a:b6:18:87:08:33:ab:bd:3e:82:31:44:2c:47: 7c:6f:ee:d5:d4:62:e5:5d:25:ce:5f:4f:85:9b:de: a8:08:c1:6c:14:a8:73:b4:37:28:b6:a1:c1:9e:d3: e6:25:7d:b8:dc:f2:da:f3:9d:37:55:17:c8:73:48: 5a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C6:3F:8A:C6:F5:CD:DC:CC:16:42:F9:AC:59:95:C5:98:B4:74:1B X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:a3:e0:ac:35:75:46:05:ea:a6:f6:98:7b:e8:bf:fe:e6:7b: 27:2a:6d:0a:6c:7f:43:92:5e:3e:57:94:e8:55:75:05:55:a3: ce:86:8c:20:93:8e:ad:e9:b1:5f:27:ba:99:32:d8:d7:3b:90: 84:3f:e4:0b:32:11:36:87:8e:2a:90:83:61:ee:27:d4:0d:b5: 85:82:52:f6:19:ce:4f:d7:fc:f8:41:90:96:b4:31:77:e1:bd: 94:e2:22:29:a5:17:11:b4:ba:cb:74:29:af:a0:15:9e:8d:0c: 49:95:60:e5:08:04:14:b1:c4:74:56:ce:47:85:04:89:1a:47: b9:e1:3e:72:94:c9:f1:05:8e:41:8f:ea:eb:29:0f:19:1e:b6: 01:dd:6e:02:a6:8b:2e:5c:5c:90:6c:39:25:fe:f3:3d:5b:55: f0:ae:82:fe:73:2d:03:bd:63:b1:c0:c8:7d:b4:20:48:72:84: 96:f8:6f:63:ec:f1:4f:04:f7:63:2f:c5:56:26:90:83:e3:f4: ae:c2:8a:01:e4:ab:f9:4c:eb:d6:0d:e7:83:a0:b6:f0:03:85: 14:cb:84:13:8a:f5:d0:e0:ff:1f:01:fe:dd:ff:ed:b7:fb:d0: 5b:a2:14:c8:78:ae:ee:6c:b8:97:60:78:53:d9:61:e3:1b:70: b8:df:77:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfCA4r9lgACrh0mzqRLW1uohTLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTA3MjAwMTE3MTNaFw0yNTA3MjMxMjUyMTNaMDMxMTAvBgNV BAMTKEFCQzYzRjhBQzZGNUNERENDQzE2NDJGOUFDNTk5NUM1OThCNDc0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz3vEUXKo9Gy4pLSu2sKzq6tIC 9wratbq1oaXrgHb0W2SjQi+jlUlncWbXn/jn3HsnUV4cK6IfR5429nMb4sz1TzNT GEPC+/IBRWL4KA+AtzzbXP4j4NgoXrOXNbn/mBFey20ShG4X7FAh+RlX4SX/L5xg dcMyL2mmsjj4+kTqkjQFT8wjPydBbXCDwoL3aorKoWquGVZX5E5xWBvWGgoNuMtF ZyNgvSbKdeB2++UzFEj55F09ERGnaeCqR0YdrJ21+6KKthiHCDOrvT6CMUQsR3xv 7tXUYuVdJc5fT4Wb3qgIwWwUqHO0Nyi2ocGe0+Ylfbjc8trznTdVF8hzSFp7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq8Y/isb1zdzMFkL5rFmVxZi0dBswHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2j4Kw1dUYF6qb2mHvov/7meycqbQpsf0OS Xj5XlOhVdQVVo86GjCCTjq3psV8nupky2Nc7kIQ/5AsyETaHjiqQg2HuJ9QNtYWC UvYZzk/X/PhBkJa0MXfhvZTiIimlFxG0ust0Ka+gFZ6NDEmVYOUIBBSxxHRWzkeF BIkaR7nhPnKUyfEFjkGP6uspDxketgHdbgKmiy5cXJBsOSX+8z1bVfCugv5zLQO9 Y7HAyH20IEhyhJb4b2Ps8U8E92MvxVYmkIPj9K7CigHkq/lM69YN54OgtvADhRTL hBOK9dDg/x8B/t3/7bf70FuiFMh4ru5suJdgeFPZYeMbcLjfd0I= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:36 2025 by rpki-client