$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft File: 4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json) Hash identifier: w7SYrM68R0iic29v2aNDYSVmI+FV/M/hrAiluWXBCmw= Subject key identifier: CD:AB:04:3B:87:7A:F4:9C:6D:00:59:A7:EF:0A:38:83:23:E6:7C:2D Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 Certificate issuer: /CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Certificate serial: 46F9C685AAAB2B0D666C1F01202ECE06E2D801FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft Manifest number: 04F0 Signing time: Sun 20 Jul 2025 20:41:20 +0000 Manifest this update: Sun 20 Jul 2025 20:36:20 +0000 Manifest next update: Thu 24 Jul 2025 00:06:20 +0000 Files and hashes: 1: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: toNf2C2yg8OZVG76HCVSzJOwMzELUrAFErXqPjfeWPY=) 2: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: cwL/Wm98vbTxoyJQfTlH4ycMGF6EbITvKpTsxzWifEM=) 3: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: MKGEqu2Psk6FQlMCBwUj3C02UOwY+xcEBLE/JQF9Mu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f9:c6:85:aa:ab:2b:0d:66:6c:1f:01:20:2e:ce:06:e2:d8:01:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Validity Not Before: Jul 20 20:36:20 2025 GMT Not After : Jul 24 00:06:20 2025 GMT Subject: CN=CDAB043B877AF49C6D0059A7EF0A388323E67C2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f2:14:1a:1b:df:68:29:a7:14:42:ff:3e:2b: 2e:03:3e:66:2b:75:87:d8:45:0a:c0:bd:6e:17:24: 8c:65:33:d7:29:2f:6a:a6:ef:fa:99:cb:0e:f8:41: ff:08:f4:2d:e1:1c:dd:f4:ee:64:f5:c7:02:f0:2c: d7:a8:b3:6d:4e:a3:ba:49:61:82:6c:f4:5a:5c:29: 5a:92:a8:c4:43:cb:cd:68:b0:a5:e5:fe:44:fe:aa: 1c:31:ab:13:e9:53:9b:48:2d:58:17:b1:b1:68:a8: 75:b8:77:3e:83:4f:07:fa:26:e3:c9:9d:0c:2e:e8: 0d:1e:de:73:b3:d1:2f:94:da:69:50:c5:d6:7b:7e: 96:72:38:cc:5d:90:a1:50:79:bb:7d:a1:0c:09:6b: 3b:3c:07:4d:48:8d:08:93:d8:ec:20:38:70:b2:4a: a9:8d:2c:3e:1a:40:44:97:3d:11:8a:95:e0:8b:42: 03:68:cd:b9:f2:0d:bf:5d:50:6d:cd:80:67:f5:3b: 74:20:4c:69:45:b9:ec:d6:32:a7:a8:19:85:2d:c7: 15:18:a8:82:80:7f:dd:46:08:45:d7:a1:8b:d7:7f: d4:71:63:8a:88:39:26:3c:30:07:31:7c:13:c3:a9: 13:49:fd:fc:7d:4b:ea:5d:eb:0d:b8:20:2c:02:f5: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AB:04:3B:87:7A:F4:9C:6D:00:59:A7:EF:0A:38:83:23:E6:7C:2D X509v3 Authority Key Identifier: keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:90:8b:1b:45:70:4f:aa:6c:74:c6:bf:c0:77:20:ae:1f:4c: 16:0c:b0:7d:68:15:17:28:62:cf:8b:1a:e6:ba:ee:01:f1:3e: a5:2b:7c:76:7a:5e:d4:b9:20:61:21:95:9e:01:54:36:55:4b: 96:e3:40:61:90:b8:95:16:27:f1:6c:b1:6f:23:cf:20:43:75: f5:d8:d0:e8:cf:30:7b:de:ff:c1:a5:04:e3:6f:72:8e:b8:95: aa:04:c8:b0:28:c8:e6:e5:6e:2f:af:20:c2:bc:03:68:d7:e4: 6d:a9:70:73:13:df:7e:c3:8d:67:d6:0c:ce:ab:f6:fd:e4:07: e4:dd:a1:dc:f1:27:46:cb:bf:84:ac:04:d4:f0:ac:9a:f9:d3: d3:f7:51:5a:fc:ee:31:81:46:15:fe:07:41:5e:d2:9a:47:c9: e4:0a:18:72:e0:3c:09:d3:c2:3c:74:eb:c7:a5:9b:f6:85:13: 2e:cb:3c:9c:4d:33:af:22:b9:e5:95:01:74:eb:d6:01:32:d7: d0:15:4b:b9:8b:a1:5e:0f:49:66:2b:88:36:fe:3f:4a:86:a0: 2d:3e:1a:2e:00:1b:05:09:e9:c1:89:2b:c8:aa:1b:4e:6e:89: b8:3e:33:fa:8f:18:27:02:27:85:df:6c:22:5c:3a:b8:0c:ea: 6f:ea:2a:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURvnGhaqrKw1mbB8BIC7OBuLYAf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNF MzVCNEM0NjAeFw0yNTA3MjAyMDM2MjBaFw0yNTA3MjQwMDA2MjBaMDMxMTAvBgNV BAMTKENEQUIwNDNCODc3QUY0OUM2RDAwNTlBN0VGMEEzODgzMjNFNjdDMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb8hQaG99oKacUQv8+Ky4DPmYr dYfYRQrAvW4XJIxlM9cpL2qm7/qZyw74Qf8I9C3hHN307mT1xwLwLNeos21Oo7pJ YYJs9FpcKVqSqMRDy81osKXl/kT+qhwxqxPpU5tILVgXsbFoqHW4dz6DTwf6JuPJ nQwu6A0e3nOz0S+U2mlQxdZ7fpZyOMxdkKFQebt9oQwJazs8B01IjQiT2OwgOHCy SqmNLD4aQESXPRGKleCLQgNozbnyDb9dUG3NgGf1O3QgTGlFuezWMqeoGYUtxxUY qIKAf91GCEXXoYvXf9RxY4qIOSY8MAcxfBPDqRNJ/fx9S+pd6w24ICwC9VZ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzasEO4d69JxtAFmn7wo4gyPmfC0wHwYDVR0j BBgwFoAURVGgMsREhf9lk+BDUn4+HONbTEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMC80NTUxQTAzMkM0 NDQ4NUZGNjU5M0UwNDM1MjdFM0UxQ0UzNUI0QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNFMzVC NEM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNF MUNFMzVCNEM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyQixtFcE+qbHTGv8B3IK4fTBYMsH1oFRco Ys+LGua67gHxPqUrfHZ6XtS5IGEhlZ4BVDZVS5bjQGGQuJUWJ/FssW8jzyBDdfXY 0OjPMHve/8GlBONvco64laoEyLAoyOblbi+vIMK8A2jX5G2pcHMT337DjWfWDM6r 9v3kB+TdodzxJ0bLv4SsBNTwrJr509P3UVr87jGBRhX+B0Fe0ppHyeQKGHLgPAnT wjx068elm/aFEy7LPJxNM68iueWVAXTr1gEy19AVS7mLoV4PSWYriDb+P0qGoC0+ Gi4AGwUJ6cGJK8iqG05uibg+M/qPGCcCJ4XfbCJcOrgM6m/qKlg= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:08 2025 by rpki-client