$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: s3J1nwJrr9RUWDVcUMKmX74T3D21f6XsZsPWPMkO4Rw= Subject key identifier: 6B:18:53:F0:A9:15:61:14:56:48:95:6B:A1:70:97:D5:3A:1F:74:D6 Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 27B124E0252C96CC352265E4CADA93918C37347D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 022F Signing time: Thu 04 Sep 2025 01:42:19 +0000 Manifest this update: Thu 04 Sep 2025 01:37:19 +0000 Manifest next update: Sun 07 Sep 2025 05:31:19 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: lch/9Ckg6iij2WYOPOVRuGq0GzepokLbHGc7nbid+bU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 05:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b1:24:e0:25:2c:96:cc:35:22:65:e4:ca:da:93:91:8c:37:34:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Sep 4 01:37:19 2025 GMT Not After : Sep 7 05:31:19 2025 GMT Subject: CN=6B1853F0A91561145648956BA17097D53A1F74D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:bd:17:96:ab:7b:61:a2:20:7d:8b:6c:84: 8c:cd:1b:38:bf:82:90:6b:9e:11:ce:cf:05:e6:cc: 58:00:ab:41:a0:2e:53:9e:63:16:fe:ac:d6:c0:c4: 36:09:c1:37:f6:9b:c8:59:f7:f8:be:b7:ac:3b:83: 3b:f5:d2:d4:fa:f6:91:dc:e5:64:88:58:1a:32:cc: d6:0a:b4:07:09:ae:de:72:02:56:49:f0:f5:67:19: 03:25:98:95:43:5e:eb:95:c6:e7:53:4b:79:b3:e0: 66:e4:0d:01:4e:6a:fa:d4:75:e0:29:8f:59:e5:06: 67:d4:9c:04:fe:12:84:ba:d4:e6:47:e4:3b:9c:1b: ff:0d:a0:46:97:40:a8:f6:4a:44:d4:de:c3:e5:c1: d7:75:3a:d4:16:ab:30:a9:55:af:07:c8:2b:c9:5e: f9:33:3a:6e:49:02:09:06:00:b1:7f:15:ea:01:40: ef:af:90:36:18:92:c8:09:40:db:89:3e:8d:2f:f9: 11:cf:a0:fc:6d:61:f3:9a:c8:5a:53:82:78:9a:5d: f1:c1:3c:84:c5:1a:9f:eb:75:b0:d6:b7:cd:f4:4e: 3e:d6:1b:fd:86:49:8f:cf:66:0f:46:e7:41:9a:66: 97:8f:90:36:ed:c3:b1:00:40:61:aa:10:06:5e:65: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:18:53:F0:A9:15:61:14:56:48:95:6B:A1:70:97:D5:3A:1F:74:D6 X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:8b:fc:0f:ae:29:ac:8a:ab:3f:35:d0:2d:5e:18:6c:06:e1: 89:47:7a:71:4d:53:fd:de:a6:73:02:40:15:03:df:17:6d:bc: bb:81:b6:e0:34:ff:f4:16:f9:40:d2:6f:79:59:a3:5a:4e:c0: 7d:a4:45:07:c1:67:38:34:eb:e5:c8:ca:89:32:fa:ba:44:0d: bc:10:ea:07:e5:b0:ce:02:7c:62:63:3f:69:36:a7:2e:7a:87: b3:d5:89:58:8a:02:46:42:50:13:2c:e5:f3:09:dc:a2:38:6e: 44:53:40:9e:3a:33:71:df:8c:9e:08:a7:27:ef:0a:d0:9c:22: 43:ba:f8:f7:3c:a6:e3:8e:bd:67:15:fd:56:2c:fe:ed:40:2e: 53:80:1e:36:7c:b0:af:04:f4:e9:e2:c1:4a:7e:dc:6f:84:7a: ef:10:b1:f2:8c:88:d6:94:12:80:1a:7a:f0:71:66:2d:e9:bd: a8:19:8e:77:80:d2:ec:f2:f0:85:b8:66:5e:65:23:b9:3c:90: af:65:6a:92:2b:6d:71:02:ef:a7:b3:f6:01:33:8d:0d:b3:33: a8:c7:eb:36:fb:4b:2b:52:6e:77:4a:29:17:02:45:3c:c9:ae: 0a:33:19:50:17:b1:bf:71:e1:0d:2f:93:90:83:0d:7a:61:3c: 9a:c5:26:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ7Ek4CUslsw1ImXkytqTkYw3NH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNTA5MDQwMTM3MTlaFw0yNTA5MDcwNTMxMTlaMDMxMTAvBgNV BAMTKDZCMTg1M0YwQTkxNTYxMTQ1NjQ4OTU2QkExNzA5N0Q1M0ExRjc0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9L0Xlqt7YaIgfYtshIzNGzi/ gpBrnhHOzwXmzFgAq0GgLlOeYxb+rNbAxDYJwTf2m8hZ9/i+t6w7gzv10tT69pHc 5WSIWBoyzNYKtAcJrt5yAlZJ8PVnGQMlmJVDXuuVxudTS3mz4GbkDQFOavrUdeAp j1nlBmfUnAT+EoS61OZH5DucG/8NoEaXQKj2SkTU3sPlwdd1OtQWqzCpVa8HyCvJ XvkzOm5JAgkGALF/FeoBQO+vkDYYksgJQNuJPo0v+RHPoPxtYfOayFpTgniaXfHB PITFGp/rdbDWt830Tj7WG/2GSY/PZg9G50GaZpePkDbtw7EAQGGqEAZeZT31AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaxhT8KkVYRRWSJVroXCX1TofdNYwHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+L/A+uKayKqz810C1eGGwG4YlHenFNU/3e pnMCQBUD3xdtvLuBtuA0//QW+UDSb3lZo1pOwH2kRQfBZzg06+XIyoky+rpEDbwQ 6gflsM4CfGJjP2k2py56h7PViViKAkZCUBMs5fMJ3KI4bkRTQJ46M3HfjJ4Ipyfv CtCcIkO6+Pc8puOOvWcV/VYs/u1ALlOAHjZ8sK8E9OniwUp+3G+Eeu8QsfKMiNaU EoAaevBxZi3pvagZjneA0uzy8IW4Zl5lI7k8kK9lapIrbXEC76ez9gEzjQ2zM6jH 6zb7SytSbndKKRcCRTzJrgozGVAXsb9x4Q0vk5CDDXphPJrFJic= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:10 2025 by rpki-client