$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: 0+2cWB/fEaBBCoMLQpXmFxIoUV7/NDJkgr5PYtoybOE= Subject key identifier: E4:B5:AA:55:FB:07:86:2C:98:DD:7E:40:AA:88:9A:F4:11:3F:35:17 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 61DA0A6958D454041B899E3CA5D08DD649FBE240 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 0230 Signing time: Wed 03 Sep 2025 00:41:02 +0000 Manifest this update: Wed 03 Sep 2025 00:36:02 +0000 Manifest next update: Sat 06 Sep 2025 10:29:02 +0000 Files and hashes: 1: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) 2: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: ncPDvkpbycNOpeRSuRvr81tJyLWzOmAmtayA6U9pOIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:da:0a:69:58:d4:54:04:1b:89:9e:3c:a5:d0:8d:d6:49:fb:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Sep 3 00:36:02 2025 GMT Not After : Sep 6 10:29:02 2025 GMT Subject: CN=E4B5AA55FB07862C98DD7E40AA889AF4113F3517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:4d:29:b0:5e:9b:88:6f:00:b7:f1:47:0f: d7:fa:bb:69:e8:53:b2:3b:2d:8c:4f:3d:a3:59:9b: 6c:95:99:e1:9d:9c:91:b8:77:bc:95:5f:70:bd:52: 76:c2:5a:f3:9f:f3:06:cf:ef:3d:cf:21:43:6f:96: 04:e8:b2:2f:55:aa:15:36:c4:bc:be:16:08:ce:ca: 20:6f:af:9e:dc:d1:79:d0:a8:2b:e7:05:71:a2:ec: 6a:ca:77:57:20:80:78:8f:76:ef:50:4c:ed:ca:e9: 53:1d:00:12:c3:36:3b:62:d5:07:08:63:6c:6e:ba: 88:2c:37:36:c0:cb:8a:07:2d:4c:1d:36:aa:e8:e7: 94:af:6d:0e:5c:ee:c4:ff:b1:2e:a3:cb:31:33:7d: 6a:ab:30:22:cd:a7:97:d3:3f:dd:99:62:0e:65:99: c4:bf:77:b6:88:b9:10:ea:1f:a0:d7:6f:96:c0:6e: cb:70:32:1a:b5:ea:56:a1:8a:ca:c0:66:52:df:7c: d3:1a:bc:de:3a:c1:d5:5a:51:68:04:be:f9:61:71: 2a:d5:c8:f3:c8:d8:60:d4:ba:5b:52:8b:b6:56:6a: 34:ca:c7:74:d2:64:e1:ee:92:90:be:35:20:0c:3b: a8:2b:8a:6d:23:ab:01:9f:0c:1d:aa:27:02:35:c1: f9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B5:AA:55:FB:07:86:2C:98:DD:7E:40:AA:88:9A:F4:11:3F:35:17 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9b:ff:e9:68:51:c3:cb:6a:13:9e:12:32:2f:6a:38:2d:af: ff:1e:6f:fe:be:89:0c:7d:fa:73:79:bc:f9:21:6f:19:ec:29: 60:24:f1:37:06:3a:93:92:3d:93:40:c8:d3:b7:42:90:c9:66: 50:9c:9c:2a:cf:99:3e:79:8a:77:89:3a:09:1b:cc:62:95:e6: 6b:97:64:6d:95:b6:ca:a4:8f:7e:cc:e8:07:5e:66:cb:60:84: dc:48:76:a0:e3:02:5c:7d:a1:81:f7:c9:be:c3:99:41:43:44: f0:ce:61:62:75:4d:80:ad:27:83:b4:ff:e5:bc:31:85:38:13: d2:8e:2d:16:6c:6a:d6:01:8e:48:79:7f:63:b0:28:cd:5a:9e: 0e:c5:b1:b1:0f:87:11:92:22:93:3d:00:74:f0:32:e1:97:6b: 92:90:6b:b0:83:d4:e3:de:3d:f3:99:67:b8:a6:9d:e5:67:17: d3:a0:77:87:13:b7:f9:79:06:64:55:3e:bc:0d:38:ae:f3:43: d4:bf:61:38:00:83:27:ac:ed:d5:c1:55:94:df:6c:3b:b3:b0: 3a:bf:fc:06:e5:cf:fb:7a:c1:f5:83:f7:d7:d0:19:e9:b4:c9: 27:1d:ea:3b:05:d6:f7:a9:48:07:19:e9:2c:37:ec:44:1a:f4: e1:62:08:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdoKaVjUVAQbiZ48pdCN1kn74kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTA5MDMwMDM2MDJaFw0yNTA5MDYxMDI5MDJaMDMxMTAvBgNV BAMTKEU0QjVBQTU1RkIwNzg2MkM5OEREN0U0MEFBODg5QUY0MTEzRjM1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKU0psF6biG8At/FHD9f6u2no U7I7LYxPPaNZm2yVmeGdnJG4d7yVX3C9UnbCWvOf8wbP7z3PIUNvlgTosi9VqhU2 xLy+FgjOyiBvr57c0XnQqCvnBXGi7GrKd1cggHiPdu9QTO3K6VMdABLDNjti1QcI Y2xuuogsNzbAy4oHLUwdNqro55SvbQ5c7sT/sS6jyzEzfWqrMCLNp5fTP92ZYg5l mcS/d7aIuRDqH6DXb5bAbstwMhq16lahisrAZlLffNMavN46wdVaUWgEvvlhcSrV yPPI2GDUultSi7ZWajTKx3TSZOHukpC+NSAMO6grim0jqwGfDB2qJwI1wfn3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5LWqVfsHhiyY3X5Aqoia9BE/NRcwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGb/+loUcPLahOeEjIvajgtr/8eb/6+iQx9 +nN5vPkhbxnsKWAk8TcGOpOSPZNAyNO3QpDJZlCcnCrPmT55ineJOgkbzGKV5muX ZG2Vtsqkj37M6AdeZstghNxIdqDjAlx9oYH3yb7DmUFDRPDOYWJ1TYCtJ4O0/+W8 MYU4E9KOLRZsatYBjkh5f2OwKM1ang7FsbEPhxGSIpM9AHTwMuGXa5KQa7CD1OPe PfOZZ7imneVnF9Ogd4cTt/l5BmRVPrwNOK7zQ9S/YTgAgyes7dXBVZTfbDuzsDq/ /Ablz/t6wfWD99fQGem0yScd6jsF1vepSAcZ6Sw37EQa9OFiCBE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:21 2025 by rpki-client