$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: Uoo5RXcjjvbwYZXiucaaVySZ9pjDwfvG+Mo1an/cgEA= Subject key identifier: 61:66:D9:BA:86:7A:1A:EE:1E:1D:C9:2A:AE:62:AE:62:4A:39:F5:16 Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 292F13040B77F1331D5E4AB39F69A590A5DDD9E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 01FA Signing time: Wed 03 Sep 2025 13:41:33 +0000 Manifest this update: Wed 03 Sep 2025 13:36:33 +0000 Manifest next update: Sat 06 Sep 2025 14:16:33 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: q3qoi+WqfzdYbHCfpPEVO5Zem5/lodRdvqJsMQhVKCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 14:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2f:13:04:0b:77:f1:33:1d:5e:4a:b3:9f:69:a5:90:a5:dd:d9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Sep 3 13:36:33 2025 GMT Not After : Sep 6 14:16:33 2025 GMT Subject: CN=6166D9BA867A1AEE1E1DC92AAE62AE624A39F516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:64:3d:67:46:a9:db:f0:81:5c:d2:71:76: 55:84:b4:63:f8:08:18:7c:ce:dc:3a:16:11:63:49: 2e:c4:07:a6:2a:f0:ed:8b:af:29:82:d1:36:7a:df: 7d:f5:e3:11:f9:77:09:84:cb:32:68:7f:6f:20:59: 2c:95:d2:44:10:14:2b:d1:7c:e2:ae:62:91:6a:53: b2:8e:2c:a4:a1:23:6f:cf:9b:b5:a0:75:25:ee:b8: c0:50:fb:33:47:18:34:88:36:28:c3:4e:77:5a:de: 68:e6:40:33:88:aa:ad:38:cb:d8:3a:a1:e0:c6:ca: ea:f7:50:35:85:ca:76:bc:3f:86:ca:d8:e3:ac:1b: 99:e4:01:5e:cb:ae:1f:5b:eb:ef:e7:4b:0a:bd:1e: 3b:50:b7:63:4f:c6:87:48:03:c5:ef:b7:15:ab:77: 87:fd:e6:c2:26:74:39:84:81:2b:b1:f0:07:49:7c: ac:e7:2d:06:f6:69:ca:62:6e:cd:27:91:ac:23:e1: 71:8a:3e:82:84:d7:20:22:45:22:5e:9a:80:83:a3: c5:4e:38:37:d4:fe:30:45:b9:42:30:34:93:2f:f0: f1:90:38:5b:df:33:fa:c6:f0:a4:14:02:9b:94:73: 16:d0:96:31:65:d2:bf:0a:55:bc:18:3a:4e:7c:43: 20:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:66:D9:BA:86:7A:1A:EE:1E:1D:C9:2A:AE:62:AE:62:4A:39:F5:16 X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:68:9c:7e:eb:8d:3c:fc:7b:e7:42:29:78:6b:07:47:fd:a1: 1e:53:e7:2d:3e:e7:55:b5:80:9e:fa:6c:62:98:82:f6:7d:69: 1a:e1:06:81:98:0d:20:ce:88:90:e2:e3:3a:43:95:cd:30:8f: ef:5c:4c:dd:ae:a7:aa:62:b6:4a:ff:16:a5:4a:49:46:02:90: 3b:71:57:ee:b4:3d:16:92:59:c2:86:93:51:59:02:96:a4:6c: 06:bc:e0:0c:57:25:1f:e1:36:4a:35:d7:71:4a:14:b9:d3:23: 16:e0:a9:fd:cb:26:58:ae:cb:bd:2e:b9:cf:dd:e1:9f:ce:85: c6:85:3a:b5:fd:94:1e:56:b1:ae:fc:a0:e1:67:a7:a0:1d:62: df:43:b5:88:c8:a6:05:7e:3b:6a:7b:6f:8b:b9:93:0a:0e:2e: 22:fb:2e:d2:3a:bf:23:4b:10:6c:c1:50:73:8b:ad:76:40:cc: 5d:fe:54:7b:f6:cb:29:9d:78:cc:11:a7:fd:94:f7:4b:85:ac: 14:3b:4c:04:44:f2:c8:74:5d:56:76:9c:81:ab:3f:9f:b3:24: 57:0c:3d:7f:2c:3d:ab:00:da:38:7a:91:42:5f:20:5b:fe:2e: cb:c9:4c:4c:3c:74:f2:4f:6d:12:2c:9e:c9:e7:85:46:b1:50: 8c:2f:9e:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKS8TBAt38TMdXkqzn2mlkKXd2ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTA5MDMxMzM2MzNaFw0yNTA5MDYxNDE2MzNaMDMxMTAvBgNV BAMTKDYxNjZEOUJBODY3QTFBRUUxRTFEQzkyQUFFNjJBRTYyNEEzOUY1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+mQ9Z0ap2/CBXNJxdlWEtGP4 CBh8ztw6FhFjSS7EB6Yq8O2LrymC0TZ633314xH5dwmEyzJof28gWSyV0kQQFCvR fOKuYpFqU7KOLKShI2/Pm7WgdSXuuMBQ+zNHGDSINijDTnda3mjmQDOIqq04y9g6 oeDGyur3UDWFyna8P4bK2OOsG5nkAV7Lrh9b6+/nSwq9HjtQt2NPxodIA8XvtxWr d4f95sImdDmEgSux8AdJfKznLQb2acpibs0nkawj4XGKPoKE1yAiRSJemoCDo8VO ODfU/jBFuUIwNJMv8PGQOFvfM/rG8KQUApuUcxbQljFl0r8KVbwYOk58QyCRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYWbZuoZ6Gu4eHckqrmKuYko59RYwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFonH7rjTz8e+dCKXhrB0f9oR5T5y0+51W1 gJ76bGKYgvZ9aRrhBoGYDSDOiJDi4zpDlc0wj+9cTN2up6pitkr/FqVKSUYCkDtx V+60PRaSWcKGk1FZApakbAa84AxXJR/hNko113FKFLnTIxbgqf3LJliuy70uuc/d 4Z/OhcaFOrX9lB5Wsa78oOFnp6AdYt9DtYjIpgV+O2p7b4u5kwoOLiL7LtI6vyNL EGzBUHOLrXZAzF3+VHv2yymdeMwRp/2U90uFrBQ7TARE8sh0XVZ2nIGrP5+zJFcM PX8sPasA2jh6kUJfIFv+LsvJTEw8dPJPbRIsnsnnhUaxUIwvngY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:15:04 2025 by rpki-client