$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: wvecwm6fYwzOWqa1OTvCGpYO30zlQd+gLs6ww9vVXs8= Subject key identifier: 6B:5D:05:E8:8E:6D:17:B1:99:23:BC:BF:63:9D:CD:D5:5A:BC:94:23 Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 3AA89FDCE07C6F322199C58B04CE922F6FAACA0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 0112 Signing time: Fri 05 Sep 2025 22:21:22 +0000 Manifest this update: Fri 05 Sep 2025 22:16:22 +0000 Manifest next update: Mon 08 Sep 2025 22:30:22 +0000 Files and hashes: 1: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: 4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=) 2: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: K8NaZjX156AzJZCxAFCtUR2kv1eIuI1LvcL4WWNgNxE=) 3: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: k08Sq9y+e0JBLFkahJuKjCY8UDmOXzCXbCJPnDfG/eg=) 4: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: IJMRtu3WXX1SIUsHngatuSvP72Zq/8D8VrbBaGVa21o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 22:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a8:9f:dc:e0:7c:6f:32:21:99:c5:8b:04:ce:92:2f:6f:aa:ca:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Sep 5 22:16:22 2025 GMT Not After : Sep 8 22:30:22 2025 GMT Subject: CN=6B5D05E88E6D17B19923BCBF639DCDD55ABC9423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:db:f1:34:dc:60:51:77:15:cd:70:1a:1d:95: 61:60:e4:f4:30:90:bf:49:6d:98:1e:be:ea:88:c1: db:ab:bb:86:11:39:ab:f7:69:49:11:07:ac:6a:3a: 78:cd:fe:eb:7b:44:80:43:5d:0b:d9:8b:5f:19:4d: 4e:33:2d:ef:bb:2f:6b:89:40:ad:ce:f0:30:39:09: c6:c0:e6:4a:bd:b0:0e:0a:ad:f9:af:e5:87:7b:d3: 8f:9c:a2:91:d9:72:46:d5:5d:1f:ec:c2:e2:9f:09: fb:94:1f:2b:92:8d:1f:ba:c8:bf:9d:6b:79:cf:ce: 5b:60:d6:da:0d:c0:66:0a:96:78:0c:05:60:58:b2: 4a:66:a2:e9:cb:59:7d:b0:30:a8:e1:0a:9c:40:c9: 45:65:66:1b:4f:ad:53:cd:a3:2c:42:15:fc:3b:7a: a7:4a:53:95:5f:18:69:39:cf:f2:e8:66:e4:80:4a: 94:fb:56:8b:fc:ba:13:e5:7d:ec:49:20:18:a5:e2: 3e:69:21:63:41:7d:aa:20:62:1a:61:1f:6f:4e:3c: a9:d0:7b:07:1f:b3:7a:ad:eb:ca:ba:e3:d3:2e:11: 05:55:bf:73:35:94:0b:48:9f:8a:71:0f:9c:4c:69: d1:d3:8b:4a:e0:09:db:33:3f:b1:2a:9f:9c:cc:23: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5D:05:E8:8E:6D:17:B1:99:23:BC:BF:63:9D:CD:D5:5A:BC:94:23 X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:30:a4:4b:c2:e9:f9:21:dc:0a:3f:af:6c:45:cd:2f:4a:81: 28:9b:cb:75:d5:1c:fb:4a:23:74:12:57:9b:93:13:62:26:03: cf:28:19:59:fe:de:53:a6:73:46:cd:e1:74:56:04:54:e8:a8: 3f:57:85:de:5f:be:40:ae:89:25:3c:8f:95:a8:c9:bf:2d:72: 38:24:d6:44:92:12:24:71:87:58:35:eb:9d:94:60:19:6c:e4: 61:19:d9:04:6d:38:8f:cf:5e:6d:b2:1b:32:b0:33:9d:23:1f: fe:db:b3:38:1b:f2:7a:77:43:32:c1:7c:55:e0:00:0b:d2:d8: 31:2f:9e:1a:88:4a:82:1a:57:88:27:67:0e:c2:7d:50:a9:ca: 90:e5:43:3e:71:87:35:08:fc:4f:b8:dd:dc:4f:8b:d9:d8:5b: 0e:c0:75:66:bd:bf:c1:20:0b:e1:1a:45:4b:81:87:8d:af:e3: a7:42:ee:8f:a3:dc:40:8d:78:36:74:0d:17:9a:de:31:3e:9e: 0f:a4:6e:a5:81:6f:04:bf:a6:e8:a4:ca:2e:a8:03:97:3f:e6: 03:b4:76:79:da:74:44:b2:3d:3b:5d:47:da:86:5c:f9:33:e3: df:25:95:30:cd:bd:3b:53:f7:31:8a:59:d6:82:37:25:53:b0: 5b:bb:23:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOqif3OB8bzIhmcWLBM6SL2+qygswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTA5MDUyMjE2MjJaFw0yNTA5MDgyMjMwMjJaMDMxMTAvBgNV BAMTKDZCNUQwNUU4OEU2RDE3QjE5OTIzQkNCRjYzOURDREQ1NUFCQzk0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2/E03GBRdxXNcBodlWFg5PQw kL9JbZgevuqIwduru4YROav3aUkRB6xqOnjN/ut7RIBDXQvZi18ZTU4zLe+7L2uJ QK3O8DA5CcbA5kq9sA4Krfmv5Yd704+copHZckbVXR/swuKfCfuUHyuSjR+6yL+d a3nPzltg1toNwGYKlngMBWBYskpmounLWX2wMKjhCpxAyUVlZhtPrVPNoyxCFfw7 eqdKU5VfGGk5z/LoZuSASpT7Vov8uhPlfexJIBil4j5pIWNBfaogYhphH29OPKnQ ewcfs3qt68q649MuEQVVv3M1lAtIn4pxD5xMadHTi0rgCdszP7Eqn5zMIxZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa10F6I5tF7GZI7y/Y53N1Vq8lCMwHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4wpEvC6fkh3Ao/r2xFzS9KgSiby3XVHPtK I3QSV5uTE2ImA88oGVn+3lOmc0bN4XRWBFToqD9Xhd5fvkCuiSU8j5Woyb8tcjgk 1kSSEiRxh1g1652UYBls5GEZ2QRtOI/PXm2yGzKwM50jH/7bszgb8np3QzLBfFXg AAvS2DEvnhqISoIaV4gnZw7CfVCpypDlQz5xhzUI/E+43dxPi9nYWw7AdWa9v8Eg C+EaRUuBh42v46dC7o+j3ECNeDZ0DRea3jE+ng+kbqWBbwS/puikyi6oA5c/5gO0 dnnadESyPTtdR9qGXPkz498llTDNvTtT9zGKWdaCNyVTsFu7Izk= -----END CERTIFICATE-----Generated at Sun Sep 7 15:37:23 2025 by rpki-client