$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: wk/KfG6yL7TCNn9lS8wsUoy77OHWXdfmWaeX8ILS6ZE= Subject key identifier: 6D:D4:8F:CB:03:E3:68:5D:46:64:72:67:75:9B:FF:0F:40:37:60:94 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 3DB786E0CD6F546D4293F4E9C561A0C1D6165F7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 0122 Signing time: Thu 04 Sep 2025 17:52:14 +0000 Manifest this update: Thu 04 Sep 2025 17:47:14 +0000 Manifest next update: Sun 07 Sep 2025 22:03:14 +0000 Files and hashes: 1: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: KQBwI3mDk7Di2Hgh9pZD8sQ4+9+63h0EFvm7NCb7Spk=) 2: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: +TpGrInw6MYBt52lteYHqPe/GHixGpWLSTXXOphuUSU=) 3: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: qVNOYZrzkd/IvfAog+K2DOGFCwf+e9xT3fUuRAAD8CM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 22:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b7:86:e0:cd:6f:54:6d:42:93:f4:e9:c5:61:a0:c1:d6:16:5f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Sep 4 17:47:14 2025 GMT Not After : Sep 7 22:03:14 2025 GMT Subject: CN=6DD48FCB03E3685D46647267759BFF0F40376094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:0c:a2:6e:fb:50:fe:3d:bb:53:60:ee:88: 25:f7:db:97:80:7d:fd:1b:67:a5:13:dc:84:6b:41: fb:8e:a2:e9:1e:54:52:64:2e:f6:1a:cf:fc:85:9e: f0:ee:f8:fb:3d:bc:52:b4:5a:de:ad:f7:91:11:a6: 70:2e:c0:ce:18:cf:32:a3:91:23:21:22:7e:10:2a: f8:19:d0:b4:d2:87:63:b3:ed:32:03:a1:85:ca:a0: c9:5c:4d:3d:59:51:17:25:29:6a:ce:04:dd:61:18: 12:f4:b8:66:5a:ff:19:8b:13:bc:38:58:97:c6:f9: bf:88:bb:c9:d7:f0:d9:d0:02:e1:3e:b6:7a:26:a7: 60:26:83:f8:2e:19:cc:84:76:91:6e:e6:35:20:91: e1:43:11:6e:55:cf:af:95:ba:d6:c7:45:6b:35:70: 5f:be:5f:96:59:8f:0f:96:00:7b:2a:1f:9a:ad:ff: 77:c9:68:8d:a4:0d:ad:db:20:50:fc:76:a3:0a:25: a7:8d:3c:43:45:2d:e3:ea:c3:a2:02:2d:a1:60:08: aa:01:a3:72:3b:79:55:18:f9:92:51:38:62:ac:9b: b2:ad:58:76:29:30:ff:f4:9e:fe:d6:cd:bf:68:c0: 07:c3:21:c5:23:29:95:35:d0:8a:e1:7b:67:fd:3a: 54:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D4:8F:CB:03:E3:68:5D:46:64:72:67:75:9B:FF:0F:40:37:60:94 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:80:03:1e:ad:ed:0f:6e:46:84:aa:cb:0f:84:ed:fc:1a:27: 4f:92:6a:68:f4:a5:32:37:2f:4e:24:25:26:fa:eb:5a:26:6b: f5:02:50:43:64:69:dd:f8:dc:80:61:cf:11:4a:df:2c:78:14: c1:8a:35:71:2d:c5:4a:84:de:51:22:1d:57:ad:b5:cc:d5:e4: 10:5f:ce:11:18:4e:e7:b6:16:a3:66:6c:5d:e6:f3:b0:b9:62: 71:ad:2c:c6:52:ea:7a:78:19:4a:e8:8a:9c:f4:0e:c7:d2:af: b4:21:35:53:6e:c4:14:cd:05:7d:81:62:5c:33:02:ae:57:af: e2:a2:97:cd:6b:05:98:35:06:07:fa:e7:4d:d7:e8:5c:ad:ab: e6:25:39:bb:7d:6a:50:d9:b7:6c:1c:7d:94:aa:c8:3d:e3:90: c8:de:78:cd:91:bc:39:9e:33:fd:fc:86:e8:86:5d:85:1d:d8: 3d:13:d7:a8:32:19:f5:be:0d:3d:35:c2:d0:75:ee:ae:c9:cb: 65:a1:99:fe:1b:3a:94:f6:8e:5d:55:95:91:ac:0b:b0:19:33: cf:af:fb:a1:5d:39:14:f5:89:8a:ed:b5:59:d6:33:80:f0:60: 43:2d:fa:3e:b7:d8:83:71:8d:63:f3:ac:e6:ed:c0:f7:f5:43: 77:37:52:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbeG4M1vVG1Ck/TpxWGgwdYWX3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTA5MDQxNzQ3MTRaFw0yNTA5MDcyMjAzMTRaMDMxMTAvBgNV BAMTKDZERDQ4RkNCMDNFMzY4NUQ0NjY0NzI2Nzc1OUJGRjBGNDAzNzYwOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPAyibvtQ/j27U2DuiCX325eA ff0bZ6UT3IRrQfuOoukeVFJkLvYaz/yFnvDu+Ps9vFK0Wt6t95ERpnAuwM4YzzKj kSMhIn4QKvgZ0LTSh2Oz7TIDoYXKoMlcTT1ZURclKWrOBN1hGBL0uGZa/xmLE7w4 WJfG+b+Iu8nX8NnQAuE+tnomp2Amg/guGcyEdpFu5jUgkeFDEW5Vz6+VutbHRWs1 cF++X5ZZjw+WAHsqH5qt/3fJaI2kDa3bIFD8dqMKJaeNPENFLePqw6ICLaFgCKoB o3I7eVUY+ZJROGKsm7KtWHYpMP/0nv7Wzb9owAfDIcUjKZU10Irhe2f9OlTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbdSPywPjaF1GZHJndZv/D0A3YJQwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSAAx6t7Q9uRoSqyw+E7fwaJ0+Samj0pTI3 L04kJSb661oma/UCUENkad343IBhzxFK3yx4FMGKNXEtxUqE3lEiHVettczV5BBf zhEYTue2FqNmbF3m87C5YnGtLMZS6np4GUroipz0DsfSr7QhNVNuxBTNBX2BYlwz Aq5Xr+Kil81rBZg1Bgf6503X6Fytq+YlObt9alDZt2wcfZSqyD3jkMjeeM2RvDme M/38huiGXYUd2D0T16gyGfW+DT01wtB17q7Jy2Whmf4bOpT2jl1VlZGsC7AZM8+v +6FdORT1iYrttVnWM4DwYEMt+j632INxjWPzrObtwPf1Q3c3Uh4= -----END CERTIFICATE-----Generated at Fri Sep 5 12:39:21 2025 by rpki-client