$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json) Hash identifier: 8FNjxQ4f1inCrxaZ0PSN7qwCfBdRBeBz+H5xueH7uxM= Subject key identifier: 96:B2:FD:1C:57:65:5D:35:75:88:00:4E:5E:05:11:36:4E:AA:D7:BE Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786 Certificate serial: 14A312800BAAD84366AE6ACFB86CD2AD689F94B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft Manifest number: 0210 Signing time: Mon 15 Sep 2025 04:46:43 +0000 Manifest this update: Mon 15 Sep 2025 04:41:43 +0000 Manifest next update: Thu 18 Sep 2025 09:03:43 +0000 Files and hashes: 1: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: p9I1JyKxkhxoGCfzqd5UWLjc8PVShFn1+CwIqqPPI28=) 2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: HzhAdkWVPqyzjRfrKdf+sGJ5e8Q6OGeF8fvX/eoLEO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 09:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a3:12:80:0b:aa:d8:43:66:ae:6a:cf:b8:6c:d2:ad:68:9f:94:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786 Validity Not Before: Sep 15 04:41:43 2025 GMT Not After : Sep 18 09:03:43 2025 GMT Subject: CN=96B2FD1C57655D357588004E5E0511364EAAD7BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4a:50:a5:46:6c:11:a9:38:09:36:c0:74:86: 7b:8e:64:04:ee:fd:9e:e8:c8:3c:2e:94:d2:cf:19: 07:36:40:e3:ac:b7:63:50:04:2e:2f:e7:8b:d2:b5: 31:6a:ac:ac:9c:cb:67:06:2d:10:8b:90:e0:ee:49: 9b:7e:dd:c2:9f:b6:d3:3a:07:b1:f1:2c:ef:42:f2: c4:5d:ec:57:f3:de:40:e1:a7:1b:ab:3d:b3:3d:2b: 36:ef:0d:bf:f2:fb:89:2e:a9:d6:d0:4a:15:3d:67: 04:e9:77:fe:c6:8a:29:f5:1b:7e:f6:8e:8d:17:a3: 1d:c2:8b:75:2c:48:7c:d9:2d:78:35:fd:ae:0e:c3: b4:5f:36:3a:27:da:ca:71:54:6d:b5:0e:61:a9:56: a2:28:37:52:66:c2:40:65:a9:0c:dd:0e:11:27:21: 87:cc:c9:bb:f3:63:23:f3:9b:d0:98:48:1e:54:b5: bf:f1:eb:17:5f:24:89:7c:11:4c:f9:49:c7:ca:73: 8d:89:17:93:ac:03:a7:f4:92:3b:73:41:97:64:07: 74:d3:72:a4:9a:8c:2c:22:c2:40:31:83:fa:9a:50: 28:a7:34:dc:f8:d7:87:ac:ca:5d:4f:de:62:ca:1c: 7e:ca:e5:92:af:9e:78:7a:16:1a:ff:95:d5:e5:6c: 33:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B2:FD:1C:57:65:5D:35:75:88:00:4E:5E:05:11:36:4E:AA:D7:BE X509v3 Authority Key Identifier: keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d7:0e:d8:20:0b:e9:c1:7b:53:1c:d3:f7:20:af:be:66:2b: 1c:af:6c:73:47:47:69:a8:f1:08:72:88:4d:2b:c9:a8:74:6e: 32:7f:19:66:a5:c4:ff:6f:0d:46:61:ed:02:99:1b:75:8a:67: dc:5a:18:bf:db:a6:5e:71:60:be:db:fd:c5:bf:53:50:72:84: 5e:6c:f1:ce:f6:2f:0f:5c:95:3a:fb:b5:69:6f:08:29:53:07: 1c:cf:75:9e:2a:be:1b:8b:2f:c6:f5:cd:f7:fb:7f:0a:be:56: 63:a2:7e:2f:12:db:9e:80:7a:4a:62:42:af:e6:c8:e4:b2:a4: 3a:cf:f3:c7:8d:a2:97:47:a7:71:41:6e:ea:9b:48:82:d2:f5: 28:0a:5d:e1:c9:cc:f2:a6:dc:59:bc:ec:dc:d5:ab:d3:88:69: 7e:d5:8d:dd:b8:e7:d9:d5:b2:11:e4:65:a2:a1:2d:65:e0:1a: 24:b8:0a:a9:26:e7:db:0a:c9:02:99:4c:79:49:46:77:e5:35: ea:ac:5c:54:d4:7b:16:c4:84:33:cb:f0:4d:4c:e1:31:06:87: 9a:8d:fb:db:14:78:8d:6f:44:e5:59:91:43:bd:eb:2e:bc:cf: 68:bc:ad:0f:a0:a2:62:7e:a2:bc:59:0d:31:3e:62:3d:ba:bc: 35:e8:69:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKMSgAuq2ENmrmrPuGzSrWiflLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF MzM5NTc4NjAeFw0yNTA5MTUwNDQxNDNaFw0yNTA5MTgwOTAzNDNaMDMxMTAvBgNV BAMTKDk2QjJGRDFDNTc2NTVEMzU3NTg4MDA0RTVFMDUxMTM2NEVBQUQ3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWSlClRmwRqTgJNsB0hnuOZATu /Z7oyDwulNLPGQc2QOOst2NQBC4v54vStTFqrKycy2cGLRCLkODuSZt+3cKfttM6 B7HxLO9C8sRd7Ffz3kDhpxurPbM9KzbvDb/y+4kuqdbQShU9ZwTpd/7Giin1G372 jo0Xox3Ci3UsSHzZLXg1/a4Ow7RfNjon2spxVG21DmGpVqIoN1JmwkBlqQzdDhEn IYfMybvzYyPzm9CYSB5Utb/x6xdfJIl8EUz5ScfKc42JF5OsA6f0kjtzQZdkB3TT cqSajCwiwkAxg/qaUCinNNz414esyl1P3mLKHH7K5ZKvnnh6Fhr/ldXlbDMrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlrL9HFdlXTV1iABOXgURNk6q174wHwYDVR0j BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5 NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4 MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXXDtggC+nBe1Mc0/cgr75mKxyvbHNHR2mo 8QhyiE0ryah0bjJ/GWalxP9vDUZh7QKZG3WKZ9xaGL/bpl5xYL7b/cW/U1ByhF5s 8c72Lw9clTr7tWlvCClTBxzPdZ4qvhuLL8b1zff7fwq+VmOifi8S256AekpiQq/m yOSypDrP88eNopdHp3FBbuqbSILS9SgKXeHJzPKm3Fm87NzVq9OIaX7Vjd2459nV shHkZaKhLWXgGiS4Cqkm59sKyQKZTHlJRnflNeqsXFTUexbEhDPL8E1M4TEGh5qN +9sUeI1vROVZkUO96y68z2i8rQ+gomJ+orxZDTE+Yj26vDXoaXk= -----END CERTIFICATE-----Generated at Tue Sep 16 10:12:23 2025 by rpki-client