$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: cWhcvwBjLWxwFhsxd4E97royXS13ss8Afu+KjkvdvyE= Subject key identifier: 06:44:83:63:D4:F0:6A:0C:CE:40:86:6D:82:B7:63:A2:53:F0:0E:4D Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 3AF4C8C1693EBD4B0BB677705C56C05D219AA0C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 04F1 Signing time: Sun 20 Jul 2025 12:30:57 +0000 Manifest this update: Sun 20 Jul 2025 12:25:56 +0000 Manifest next update: Wed 23 Jul 2025 16:58:56 +0000 Files and hashes: 1: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) 2: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: 1uFhiQYByzuoGTfxK7DFMPPKdQRnDTH+GCJyRKEav28=) 3: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 4: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 5: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f4:c8:c1:69:3e:bd:4b:0b:b6:77:70:5c:56:c0:5d:21:9a:a0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Jul 20 12:25:56 2025 GMT Not After : Jul 23 16:58:56 2025 GMT Subject: CN=06448363D4F06A0CCE40866D82B763A253F00E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ac:25:b4:78:05:10:76:c4:88:77:cb:11:02: e1:7f:02:c7:68:47:d4:61:0c:fe:51:f9:c8:4b:e7: 60:78:60:8c:f5:dc:9e:39:63:aa:9a:92:a1:35:50: 64:bb:6c:c7:12:ca:17:63:ce:c9:4e:33:fb:5e:a1: a7:ad:9c:75:a8:b2:8c:d4:a5:63:d2:91:68:3a:93: bc:e3:69:8a:a7:3e:16:b4:44:0f:2e:6e:78:c2:46: 2f:82:2a:64:73:57:f5:13:94:4b:f3:35:64:7d:78: b3:7e:7d:94:0e:09:45:84:44:b5:a2:e8:29:d3:bb: d2:1e:b6:95:ff:c0:99:f9:62:fc:81:78:28:3b:38: 40:e9:5a:67:ec:bf:1b:8a:cf:5f:62:a6:0f:0f:84: 91:c1:e6:6a:d0:13:2d:31:78:71:10:20:9b:ec:b3: a6:ec:d7:90:08:94:da:af:79:29:da:c4:20:80:d5: b5:91:71:3c:3f:12:80:7e:38:14:f0:34:c7:1b:39: 6e:c7:42:2e:7f:c2:81:21:0c:1e:4a:32:e0:70:5b: b4:fe:44:9e:5b:dc:20:a1:d0:9a:48:14:ff:55:e4: 34:3e:5f:0e:d8:6a:4a:2f:b5:02:0f:63:ef:c3:c1: 5d:5c:f7:3a:63:f5:ab:22:e8:50:ca:d2:f2:49:f5: 71:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:44:83:63:D4:F0:6A:0C:CE:40:86:6D:82:B7:63:A2:53:F0:0E:4D X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:63:f0:f3:f4:b0:94:c7:51:f8:c4:88:7d:66:07:91:b8:2d: 06:c0:e4:8d:69:e2:45:36:51:6b:b1:ae:d9:3d:43:66:9a:28: 30:8d:b1:06:83:a9:d7:87:83:be:57:d9:80:75:27:b9:80:78: 36:1e:db:f5:03:1e:c0:e8:c7:aa:a5:29:3e:b8:af:4e:8d:40: 74:0e:31:ce:55:1d:c0:e1:93:74:db:fe:b4:3c:f3:24:b5:43: 5d:f8:1c:87:cc:57:3f:42:3b:9a:4d:5c:9b:5e:b5:9e:fa:ef: b4:91:36:7f:6b:0e:85:d0:c5:39:32:f4:4d:d3:fe:6f:97:64: 9c:8c:45:20:04:22:62:bf:7f:5b:b2:17:1f:76:c6:47:50:92: 7d:bd:b9:22:60:0a:5d:1a:fa:4e:8e:42:b2:ce:a3:95:da:f7: bd:72:4b:92:f3:1a:89:1f:07:a5:10:34:b2:01:11:16:38:97: 42:1b:8d:dc:33:0d:c1:f7:b8:d1:5a:2d:2e:b2:cc:69:3f:0f: b6:48:22:67:c8:43:6d:2b:db:4d:73:12:30:d1:e2:e8:54:6c: 36:ba:72:6a:2b:fb:73:c8:a0:91:f7:2f:b7:5b:44:15:12:fa: 3c:06:13:e4:68:ae:96:7d:8c:c4:75:87:01:37:00:86:cd:88: b1:26:dd:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOvTIwWk+vUsLtndwXFbAXSGaoMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTA3MjAxMjI1NTZaFw0yNTA3MjMxNjU4NTZaMDMxMTAvBgNV BAMTKDA2NDQ4MzYzRDRGMDZBMENDRTQwODY2RDgyQjc2M0EyNTNGMDBFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcrCW0eAUQdsSId8sRAuF/Asdo R9RhDP5R+chL52B4YIz13J45Y6qakqE1UGS7bMcSyhdjzslOM/teoaetnHWosozU pWPSkWg6k7zjaYqnPha0RA8ubnjCRi+CKmRzV/UTlEvzNWR9eLN+fZQOCUWERLWi 6CnTu9IetpX/wJn5YvyBeCg7OEDpWmfsvxuKz19ipg8PhJHB5mrQEy0xeHEQIJvs s6bs15AIlNqveSnaxCCA1bWRcTw/EoB+OBTwNMcbOW7HQi5/woEhDB5KMuBwW7T+ RJ5b3CCh0JpIFP9V5DQ+Xw7YakovtQIPY+/DwV1c9zpj9asi6FDK0vJJ9XGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBkSDY9TwagzOQIZtgrdjolPwDk0wHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERj8PP0sJTHUfjEiH1mB5G4LQbA5I1p4kU2 UWuxrtk9Q2aaKDCNsQaDqdeHg75X2YB1J7mAeDYe2/UDHsDox6qlKT64r06NQHQO Mc5VHcDhk3Tb/rQ88yS1Q134HIfMVz9CO5pNXJtetZ7677SRNn9rDoXQxTky9E3T /m+XZJyMRSAEImK/f1uyFx92xkdQkn29uSJgCl0a+k6OQrLOo5Xa971yS5LzGokf B6UQNLIBERY4l0IbjdwzDcH3uNFaLS6yzGk/D7ZIImfIQ20r201zEjDR4uhUbDa6 cmor+3PIoJH3L7dbRBUS+jwGE+RorpZ9jMR1hwE3AIbNiLEm3TI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:00 2025 by rpki-client