$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: BiUrOlHNOlM3ILB5zksV4GEW5X2fU3/p55NZaG4beYU= Subject key identifier: E7:18:84:63:4B:2F:43:58:2C:20:3B:0A:1F:E7:E6:68:57:97:E2:79 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 34E86DB7C6395D639B1D38E11A87FA05C5F3E4FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 0507 Signing time: Wed 03 Sep 2025 17:10:54 +0000 Manifest this update: Wed 03 Sep 2025 17:05:54 +0000 Manifest next update: Sat 06 Sep 2025 19:02:54 +0000 Files and hashes: 1: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=) 2: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 3: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: vb4XqtyMzTVSp62vuxtx1ckJKCT1IEuH5MNg+FvF6Gw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 19:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e8:6d:b7:c6:39:5d:63:9b:1d:38:e1:1a:87:fa:05:c5:f3:e4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Sep 3 17:05:54 2025 GMT Not After : Sep 6 19:02:54 2025 GMT Subject: CN=E71884634B2F43582C203B0A1FE7E6685797E279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:90:2b:7b:b0:e0:eb:2a:2a:8e:6c:28:02:1c: ac:16:cc:71:02:34:ee:92:e2:45:81:d6:cc:db:a7: 61:64:ba:00:40:fc:b7:25:69:91:68:36:3e:bd:10: d9:18:76:fe:ce:fd:77:01:9c:50:83:42:64:27:da: 55:cf:a8:c9:dc:94:9d:5c:4a:1e:42:ef:34:65:5b: e5:18:00:74:94:e1:2e:dd:8f:b0:ad:52:bf:d8:39: fe:11:13:f9:b7:68:c4:e6:4b:23:2f:cb:89:ac:bc: 7d:b3:9a:7d:43:b1:9a:83:7e:00:4c:3c:70:d8:31: fa:82:70:9f:be:f6:b8:16:1a:98:84:76:32:68:2e: 28:5d:43:c5:0c:8d:91:e0:fd:6f:09:9c:c9:e7:c1: 98:fc:67:6c:23:3c:5d:36:d6:13:c1:20:5d:c2:d6: 0f:c0:d0:86:91:6d:95:84:63:58:08:52:25:5e:e5: af:f2:25:87:cb:97:c9:f3:34:fa:eb:49:4e:75:4e: 91:d4:63:9f:b9:b8:af:e5:34:89:9f:f6:22:d6:07: 6c:57:b5:05:de:32:41:9e:af:03:29:23:6a:e0:72: e1:a8:40:19:8b:af:9d:82:45:61:74:5d:f4:48:f7: 7c:74:33:e8:dd:27:2e:6b:62:2a:2b:6a:b8:fb:1f: 89:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:18:84:63:4B:2F:43:58:2C:20:3B:0A:1F:E7:E6:68:57:97:E2:79 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:4f:95:be:53:b4:13:a5:33:2f:ad:82:02:f2:23:ff:13:26: ba:86:55:7c:d6:f3:15:ba:7e:31:f6:bc:0d:89:fa:64:79:f2: 5c:78:eb:84:db:b3:38:1d:9a:b4:12:24:d9:e7:63:2c:40:51: ed:31:0e:45:cc:ad:45:51:fd:cd:1f:de:ee:b8:22:5b:9f:97: 94:e6:18:a9:80:e4:d5:d5:64:f8:84:53:e7:bb:e0:4d:c9:1c: d0:2f:47:60:ac:fd:59:2e:21:e8:95:ae:07:ed:b0:17:89:1e: 9c:79:12:b4:20:9a:a1:c4:f4:df:d4:36:03:c8:01:99:0f:d2: 0a:d5:e1:fc:44:8b:df:4b:e9:ec:16:03:34:9c:a6:cb:6a:b5: ef:64:4d:f9:59:1c:21:13:ad:c4:1b:3e:af:bd:54:92:90:b1: fd:d3:36:00:10:c2:a8:bf:e3:0f:d2:56:9c:b1:48:8a:38:95: 45:ee:e4:de:05:24:f1:bd:2a:d6:e7:0a:22:7b:23:0f:af:5c: 3d:13:84:9c:05:dd:f8:f3:59:fb:08:cb:66:11:5c:cf:8d:76: 4c:47:e3:fb:50:9b:88:0a:86:91:e6:f8:88:e8:39:59:e0:b0: 1a:35:a3:2e:5d:17:97:23:05:95:be:37:a0:1b:7e:34:3a:b2: d8:c0:35:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNOhtt8Y5XWObHTjhGof6BcXz5P0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTA5MDMxNzA1NTRaFw0yNTA5MDYxOTAyNTRaMDMxMTAvBgNV BAMTKEU3MTg4NDYzNEIyRjQzNTgyQzIwM0IwQTFGRTdFNjY4NTc5N0UyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYkCt7sODrKiqObCgCHKwWzHEC NO6S4kWB1szbp2FkugBA/LclaZFoNj69ENkYdv7O/XcBnFCDQmQn2lXPqMnclJ1c Sh5C7zRlW+UYAHSU4S7dj7CtUr/YOf4RE/m3aMTmSyMvy4msvH2zmn1DsZqDfgBM PHDYMfqCcJ++9rgWGpiEdjJoLihdQ8UMjZHg/W8JnMnnwZj8Z2wjPF021hPBIF3C 1g/A0IaRbZWEY1gIUiVe5a/yJYfLl8nzNPrrSU51TpHUY5+5uK/lNImf9iLWB2xX tQXeMkGerwMpI2rgcuGoQBmLr52CRWF0XfRI93x0M+jdJy5rYiorarj7H4mvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xiEY0svQ1gsIDsKH+fmaFeX4nkwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANdPlb5TtBOlMy+tggLyI/8TJrqGVXzW8xW6 fjH2vA2J+mR58lx464TbszgdmrQSJNnnYyxAUe0xDkXMrUVR/c0f3u64Ilufl5Tm GKmA5NXVZPiEU+e74E3JHNAvR2Cs/VkuIeiVrgftsBeJHpx5ErQgmqHE9N/UNgPI AZkP0grV4fxEi99L6ewWAzScpstqte9kTflZHCETrcQbPq+9VJKQsf3TNgAQwqi/ 4w/SVpyxSIo4lUXu5N4FJPG9KtbnCiJ7Iw+vXD0ThJwF3fjzWfsIy2YRXM+NdkxH 4/tQm4gKhpHm+IjoOVngsBo1oy5dF5cjBZW+N6AbfjQ6stjANbE= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:52 2025 by rpki-client