$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft File: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft (raw, json) Hash identifier: Q18zRUa3BRf6hikXUW7btctn2f4K2DodDmYtjdQ0gQI= Subject key identifier: 3D:9E:3F:47:B4:37:E3:61:8B:33:8D:7F:6F:E8:7C:8A:1B:42:A7:B8 Authority key identifier: 16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D Certificate issuer: /CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Certificate serial: 282A98ECDF3844DED2DCCFCF56989F5E4EDDEB03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft Manifest number: 09 Signing time: Sun 19 Oct 2025 09:12:19 +0000 Manifest this update: Sun 19 Oct 2025 09:07:19 +0000 Manifest next update: Wed 22 Oct 2025 13:17:19 +0000 Files and hashes: 1: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: psHda3coDjbtJQORQnibdpRgwKCWDI4qgmb+5QVTY6I=) 2: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl (hash: BEqeXqKjOVq5X9eOtVF5NmGX10FJp6Am1n0G6Bo0IEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:17:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2a:98:ec:df:38:44:de:d2:dc:cf:cf:56:98:9f:5e:4e:dd:eb:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Validity Not Before: Oct 19 09:07:19 2025 GMT Not After : Oct 22 13:17:19 2025 GMT Subject: CN=3D9E3F47B437E3618B338D7F6FE87C8A1B42A7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:f2:77:0e:f9:64:6c:4a:7c:d2:67:3f:f4: 92:28:26:36:5d:49:af:d2:9e:7a:92:5f:1c:9e:c0: 8b:98:4d:14:38:67:2e:17:5a:37:76:a2:9e:c7:fc: 44:8c:f8:b3:05:5c:1e:01:d0:13:46:34:f0:5f:33: d4:21:21:32:ca:62:d7:f8:f9:43:e7:80:a2:a8:79: 00:db:79:ec:99:80:8e:0f:38:16:50:95:ab:32:b0: d3:38:87:9f:7a:e4:5b:00:ad:45:69:30:16:40:4c: 1c:84:e3:8b:9d:e1:cb:31:98:41:18:0d:ed:f3:40: f8:7e:58:b9:3d:ba:e8:bd:d6:67:c0:64:96:35:65: ee:d4:91:1f:dc:2f:7e:7b:c7:5e:5e:74:5b:bb:23: a1:07:93:4c:81:0e:6d:f6:f9:34:9d:7b:5a:9c:de: 57:72:92:05:04:12:d2:88:9d:0b:99:4c:26:0f:ed: 98:86:8b:a3:8d:f2:28:65:bc:d9:0e:ae:60:86:5c: 7b:8e:6e:f6:fa:e9:71:22:75:30:c0:05:a8:0e:3f: 7d:03:9b:d4:cf:72:7e:66:fd:4c:de:0b:8b:15:90: 84:76:19:65:4e:8e:83:7e:fc:41:c4:d2:c0:38:29: 71:d5:81:7a:d4:75:fa:a7:fe:16:8f:64:9d:33:28: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9E:3F:47:B4:37:E3:61:8B:33:8D:7F:6F:E8:7C:8A:1B:42:A7:B8 X509v3 Authority Key Identifier: keyid:16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1e:1c:0c:c2:ee:76:61:e7:b6:3f:47:d0:52:a5:2d:d3:0f: 6e:79:8b:80:2c:94:41:32:9d:3f:59:12:1d:87:c6:5a:41:1b: 64:8b:fe:da:a2:f4:79:aa:2f:c6:b9:ab:d6:ed:c9:dc:40:66: 95:a6:e2:ab:57:84:88:ca:31:a5:eb:29:4d:38:0e:74:78:0e: a2:f7:7c:c6:b3:6e:28:e0:ca:9b:2a:f7:f1:ca:c9:8c:4c:d4: 8a:cf:bb:a1:e7:a3:fc:3e:2d:26:42:fe:9d:49:45:37:0a:76: 28:d4:93:fe:a5:de:08:b5:b6:a2:21:76:7e:91:6a:b1:d8:b6: 4a:34:37:24:ed:d1:f5:52:6a:fd:4a:29:c8:2b:4f:86:9c:42: 93:98:97:9b:e0:d3:53:6a:15:fc:de:e5:ba:5e:d1:9e:21:90: c4:95:1f:f2:ef:68:d1:1a:7c:b2:6f:58:40:a9:a4:47:01:93: 8c:a3:d6:4c:88:5f:99:a5:9f:e8:fa:31:e1:46:63:81:4e:d7: e3:c1:c1:dd:7d:b1:60:b1:16:8c:df:12:9a:60:0a:70:67:2b: ff:9e:54:16:8c:d2:86:66:3f:e6:b9:fe:0e:6b:70:ad:f4:9c: b4:83:0e:25:f8:7e:9d:24:0f:ee:4b:1f:1c:8b:ef:1c:04:8f: c4:fb:6f:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKCqY7N84RN7S3M/PVpifXk7d6wMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYw MDczRDE1RDAeFw0yNTEwMTkwOTA3MTlaFw0yNTEwMjIxMzE3MTlaMDMxMTAvBgNV BAMTKDNEOUUzRjQ3QjQzN0UzNjE4QjMzOEQ3RjZGRTg3QzhBMUI0MkE3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8RfJ3DvlkbEp80mc/9JIoJjZd Sa/SnnqSXxyewIuYTRQ4Zy4XWjd2op7H/ESM+LMFXB4B0BNGNPBfM9QhITLKYtf4 +UPngKKoeQDbeeyZgI4POBZQlasysNM4h5965FsArUVpMBZATByE44ud4csxmEEY De3zQPh+WLk9uui91mfAZJY1Ze7UkR/cL357x15edFu7I6EHk0yBDm32+TSde1qc 3ldykgUEEtKInQuZTCYP7ZiGi6ON8ihlvNkOrmCGXHuObvb66XEidTDABagOP30D m9TPcn5m/UzeC4sVkIR2GWVOjoN+/EHE0sA4KXHVgXrUdfqn/haPZJ0zKKR5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPZ4/R7Q342GLM41/b+h8ihtCp7gwHwYDVR0j BBgwFoAUFkW0kcNQv4q0qPiMxNzz9gBz0V0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGY5ZjlhMS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8xNjQ1QjQ5MUMz NTBCRjhBQjRBOEY4OENDNERDRjNGNjAwNzNEMTVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYwMDcz RDE1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0Yz RjYwMDczRDE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0eHAzC7nZh57Y/R9BSpS3TD255i4AslEEy nT9ZEh2HxlpBG2SL/tqi9HmqL8a5q9btydxAZpWm4qtXhIjKMaXrKU04DnR4DqL3 fMazbijgypsq9/HKyYxM1IrPu6Hno/w+LSZC/p1JRTcKdijUk/6l3gi1tqIhdn6R arHYtko0NyTt0fVSav1KKcgrT4acQpOYl5vg01NqFfze5bpe0Z4hkMSVH/LvaNEa fLJvWECppEcBk4yj1kyIX5mln+j6MeFGY4FO1+PBwd19sWCxFozfEppgCnBnK/+e VBaM0oZmP+a5/g5rcK30nLSDDiX4fp0kD+5LHxyL7xwEj8T7b00= -----END CERTIFICATE-----Generated at Sun Oct 19 17:23:20 2025 by rpki-client