$ rpki-client -vvf repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft File: C45A558750D6CF5BE02532DDE80326AEF5012912.mft (raw, json) Hash identifier: 3jISBeyBBdv3P2Q0+hZFoZQJCh3690pwZAQfr4AzE5E= Subject key identifier: 51:B3:44:32:1F:2C:1F:DE:ED:AB:D1:AE:69:71:43:99:EF:87:79:4D Authority key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Certificate issuer: /CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Certificate serial: 182E7ED3798F718EEAE4E879DC560AF57F7A3FA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft Manifest number: 0376 Signing time: Sat 06 Sep 2025 07:11:15 +0000 Manifest this update: Sat 06 Sep 2025 07:06:15 +0000 Manifest next update: Tue 09 Sep 2025 16:02:15 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: wKi20xV5IYiEYg1koyO2hLczrvapaQLTXfUibveAkFE=) 2: C45A558750D6CF5BE02532DDE80326AEF5012912.crl (hash: oqo7nu4oxw1Xa3ZlCU7l411lB6GbowiQQGGD3UBcqNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:2e:7e:d3:79:8f:71:8e:ea:e4:e8:79:dc:56:0a:f5:7f:7a:3f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Validity Not Before: Sep 6 07:06:15 2025 GMT Not After : Sep 9 16:02:15 2025 GMT Subject: CN=51B344321F2C1FDEEDABD1AE69714399EF87794D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e0:ad:3c:51:02:4e:79:78:dc:8f:99:5e:48: 92:92:bc:af:70:02:08:42:78:7d:98:2d:ae:38:7e: 43:82:06:f4:d5:13:05:b5:b1:8e:81:b6:7c:97:7c: e2:22:58:ab:7c:4f:64:50:13:f8:d6:88:8d:91:8e: 33:eb:49:d1:8a:c8:f7:ee:bb:3a:b3:e3:86:39:e7: 86:c6:9e:37:e9:0e:17:e3:ea:72:e0:d8:8d:41:4a: c3:58:0f:57:2f:d4:5d:e8:9d:99:18:e3:b9:78:47: 97:c2:24:33:99:21:e6:bb:c5:75:1e:3c:41:96:ff: 3d:f7:9f:65:ad:f7:38:dd:9d:4c:fd:e0:31:d2:c5: ea:59:a5:11:cf:62:b2:bc:1e:49:73:31:cc:d2:d4: 1d:8a:d2:6c:27:5a:b6:0a:57:02:63:b7:94:06:e5: 8b:19:90:82:81:3b:aa:41:e2:dc:27:51:7a:ba:a5: 8e:74:ed:75:e7:69:5d:7e:49:64:8f:ff:7e:64:79: 8d:63:7b:4e:1a:77:a1:78:f9:5b:00:3a:82:4e:f0: 21:6e:3a:f3:91:db:6f:72:51:d4:0d:18:49:6e:2d: 21:d3:6a:dd:f7:fd:f7:ea:6e:5b:1f:44:a3:e7:1c: f9:ea:dd:52:c8:5f:51:bf:b4:bf:46:8f:83:fb:4c: 59:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B3:44:32:1F:2C:1F:DE:ED:AB:D1:AE:69:71:43:99:EF:87:79:4D X509v3 Authority Key Identifier: keyid:C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:c4:bb:06:c5:12:df:4d:05:a2:b1:b5:a9:ac:07:72:a0:87: e6:81:23:6c:bd:41:58:2c:c0:ed:6e:ff:d8:83:08:4d:1e:8b: be:86:9d:cc:25:58:3e:dc:32:41:90:b9:d7:fb:1d:ad:5f:c8: 33:8e:c2:70:a7:1f:e9:8e:9d:6c:26:eb:9b:9a:39:1a:8b:7b: 24:c9:c9:c0:85:a5:f2:5a:3c:6e:ea:fc:fe:47:7a:0d:37:76: 92:5d:f8:55:3e:dd:1a:58:5e:24:68:88:03:e0:bc:a7:ac:92: fd:c8:9b:2e:ae:d9:33:f8:a1:38:6e:56:b8:99:d3:94:50:b0: 6f:b4:4e:46:67:c1:5c:b5:ed:f0:8f:12:8b:eb:12:b3:e1:80: 50:21:af:a1:06:e1:7c:d0:81:77:89:8f:dc:93:11:7f:ec:f1: 15:96:89:58:07:7b:1f:aa:5d:39:b4:b7:99:7e:07:3c:b6:95: a2:bc:c1:8a:ea:34:7a:d2:77:29:76:3d:19:d8:d6:8e:91:dc: 24:4e:b4:33:f1:3a:eb:ea:3e:d8:8e:08:a5:74:3f:ee:5c:b3: f0:82:70:79:db:cd:6f:58:5c:da:27:a0:8f:2c:3e:99:75:e5: 34:24:5b:72:0d:83:12:00:67:0f:b8:00:3f:f4:c7:61:5d:52: c1:3c:6c:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGC5+03mPcY7q5Oh53FYK9X96P6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVG NTAxMjkxMjAeFw0yNTA5MDYwNzA2MTVaFw0yNTA5MDkxNjAyMTVaMDMxMTAvBgNV BAMTKDUxQjM0NDMyMUYyQzFGREVFREFCRDFBRTY5NzE0Mzk5RUY4Nzc5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74K08UQJOeXjcj5leSJKSvK9w AghCeH2YLa44fkOCBvTVEwW1sY6BtnyXfOIiWKt8T2RQE/jWiI2RjjPrSdGKyPfu uzqz44Y554bGnjfpDhfj6nLg2I1BSsNYD1cv1F3onZkY47l4R5fCJDOZIea7xXUe PEGW/z33n2Wt9zjdnUz94DHSxepZpRHPYrK8HklzMczS1B2K0mwnWrYKVwJjt5QG 5YsZkIKBO6pB4twnUXq6pY507XXnaV1+SWSP/35keY1je04ad6F4+VsAOoJO8CFu OvOR229yUdQNGEluLSHTat33/ffqblsfRKPnHPnq3VLIX1G/tL9Gj4P7TFmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUbNEMh8sH97tq9GuaXFDme+HeU0wHwYDVR0j BBgwFoAUxFpVh1DWz1vgJTLd6AMmrvUBKRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMC9DNDVBNTU4NzUw RDZDRjVCRTAyNTMyRERFODAzMjZBRUY1MDEyOTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVGNTAx MjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2 QUVGNTAxMjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbEuwbFEt9NBaKxtamsB3Kgh+aBI2y9QVgs wO1u/9iDCE0ei76GncwlWD7cMkGQudf7Ha1fyDOOwnCnH+mOnWwm65uaORqLeyTJ ycCFpfJaPG7q/P5Heg03dpJd+FU+3RpYXiRoiAPgvKeskv3Imy6u2TP4oThuVriZ 05RQsG+0TkZnwVy17fCPEovrErPhgFAhr6EG4XzQgXeJj9yTEX/s8RWWiVgHex+q XTm0t5l+Bzy2laK8wYrqNHrSdyl2PRnY1o6R3CROtDPxOuvqPtiOCKV0P+5cs/CC cHnbzW9YXNonoI8sPpl15TQkW3INgxIAZw+4AD/0x2FdUsE8bBs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:51 2025 by rpki-client