$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: R06t/wXJzRb9F4BH3UvF9CfRcseV7kbeQDumtaZc5t8= Subject key identifier: 11:45:01:83:8D:CA:C7:F3:94:F6:A0:8D:6F:BE:66:1D:F4:27:EE:3F Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 53FB25C42610D0C3419D0267F9C99EB7A98B34FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 0197 Signing time: Sun 07 Sep 2025 08:31:50 +0000 Manifest this update: Sun 07 Sep 2025 08:26:50 +0000 Manifest next update: Wed 10 Sep 2025 16:03:50 +0000 Files and hashes: 1: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: 8CDHmFNJm2rABveQSx2ocPyCpaUNklpCFHhPZKqiYTw=) 2: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: KMcz9HndxaUeKt8rn5FI6Dp+4OSaacNz41TOKfq1iXs=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 0veKivESqTIR22CLe0BQKZVbkyyZLitqVchvnzV7aBw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:fb:25:c4:26:10:d0:c3:41:9d:02:67:f9:c9:9e:b7:a9:8b:34:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Sep 7 08:26:50 2025 GMT Not After : Sep 10 16:03:50 2025 GMT Subject: CN=114501838DCAC7F394F6A08D6FBE661DF427EE3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:53:90:b1:29:d0:67:4a:6e:72:28:3d:fd: 58:01:bd:6d:ec:6f:98:96:64:37:f9:c1:c9:62:c1: ed:69:2d:8e:30:fd:28:c6:e2:67:cd:e0:5b:ce:40: 83:6d:bc:8e:01:17:74:d0:82:b4:f2:4e:d3:ac:07: 8c:b2:5d:47:82:48:7a:7c:8e:c6:91:dd:6e:25:e4: 61:e0:a8:79:d3:53:a1:17:61:cd:d1:39:93:45:19: 54:34:8d:b4:ea:51:16:24:18:ec:ac:6d:b2:9c:6b: 4d:5f:29:f8:c3:7f:05:f3:be:93:ab:53:2b:60:a1: 6a:85:c4:e2:c1:79:f1:fd:7d:2e:5b:0a:7b:71:b6: 57:f4:9e:b9:07:2b:7c:66:b5:07:d4:3b:e2:84:d0: 24:21:ba:05:61:4f:87:bb:6c:5c:ce:29:34:12:ab: 8e:10:90:81:42:92:fb:1b:7f:60:d1:0f:b3:ad:f7: 24:ba:79:cf:ff:b8:61:30:80:57:ac:10:9d:df:1a: ea:e1:7a:d5:83:cf:c3:45:10:43:ad:4c:b8:5f:44: f4:37:26:45:fb:a1:4c:a0:46:b7:a6:94:15:03:64: 81:9a:e7:12:76:29:81:9e:e6:51:ea:34:1c:72:c2: 5c:f1:04:83:e3:e1:eb:8e:bc:8e:8c:81:be:90:63: ec:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:45:01:83:8D:CA:C7:F3:94:F6:A0:8D:6F:BE:66:1D:F4:27:EE:3F X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:1a:73:78:0e:77:29:ba:1a:cf:ea:0c:62:ca:00:1c:3f:2a: 1e:d5:21:80:68:42:6a:0c:34:04:ae:31:49:73:7b:29:15:f6: 50:36:20:ec:35:0b:48:e5:17:64:5a:af:14:b0:76:ad:9e:41: e7:28:18:61:d2:a5:29:11:76:cc:fb:5f:ca:90:d0:65:56:32: af:10:e3:50:20:be:ed:81:cb:e8:27:30:e4:b8:ed:57:8b:9e: 55:0e:06:c2:c9:3c:ef:f6:ee:a5:f3:2c:57:a7:31:d1:f7:31: fa:af:6d:df:27:f6:33:f9:70:b8:fb:d3:13:d6:47:a6:dd:a6: eb:e6:f6:cb:31:20:14:3e:d8:d7:74:ab:ca:59:09:35:cc:90: 20:14:ea:76:20:f8:6c:5d:7c:e4:ec:94:af:d0:d5:6c:9a:f0: e5:93:24:03:45:18:40:a4:a9:a5:37:5a:58:93:67:17:4c:89: 0a:4f:d3:e9:e8:08:51:cd:33:54:ef:fc:19:18:6b:2d:f2:0b: 42:aa:98:9b:3c:f6:7a:f3:70:7f:7b:57:e5:83:70:8b:65:57: 19:e7:b4:9a:51:5f:fa:70:36:f6:55:9a:83:ce:53:3b:43:53: cc:a4:f3:83:a7:b7:0a:6f:1d:ad:39:1a:2d:87:cc:e3:cd:cf: 7c:f9:3b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/slxCYQ0MNBnQJn+cmet6mLNPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNTA5MDcwODI2NTBaFw0yNTA5MTAxNjAzNTBaMDMxMTAvBgNV BAMTKDExNDUwMTgzOERDQUM3RjM5NEY2QTA4RDZGQkU2NjFERjQyN0VFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmOFOQsSnQZ0pucig9/VgBvW3s b5iWZDf5wcliwe1pLY4w/SjG4mfN4FvOQINtvI4BF3TQgrTyTtOsB4yyXUeCSHp8 jsaR3W4l5GHgqHnTU6EXYc3ROZNFGVQ0jbTqURYkGOysbbKca01fKfjDfwXzvpOr UytgoWqFxOLBefH9fS5bCntxtlf0nrkHK3xmtQfUO+KE0CQhugVhT4e7bFzOKTQS q44QkIFCkvsbf2DRD7Ot9yS6ec//uGEwgFesEJ3fGurhetWDz8NFEEOtTLhfRPQ3 JkX7oUygRremlBUDZIGa5xJ2KYGe5lHqNBxywlzxBIPj4euOvI6Mgb6QY+wpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEUUBg43Kx/OU9qCNb75mHfQn7j8wHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOEac3gOdym6Gs/qDGLKABw/Kh7VIYBoQmoM NASuMUlzeykV9lA2IOw1C0jlF2RarxSwdq2eQecoGGHSpSkRdsz7X8qQ0GVWMq8Q 41Agvu2By+gnMOS47VeLnlUOBsLJPO/27qXzLFenMdH3Mfqvbd8n9jP5cLj70xPW R6bdpuvm9ssxIBQ+2Nd0q8pZCTXMkCAU6nYg+GxdfOTslK/Q1Wya8OWTJANFGECk qaU3WliTZxdMiQpP0+noCFHNM1Tv/BkYay3yC0KqmJs89nrzcH97V+WDcItlVxnn tJpRX/pwNvZVmoPOUztDU8yk84OntwpvHa05Gi2HzOPNz3z5O8A= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:37 2025 by rpki-client