$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft File: 4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json) Hash identifier: IkzTDlXlNMHDSRAOpWwsF7q+PM+9guucG/nFAJccR2M= Subject key identifier: E9:F5:4F:5B:8C:55:18:E3:66:0D:C0:BA:FC:02:A4:B3:30:31:92:5F Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 Certificate issuer: /CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Certificate serial: 17CA45309AEA94253AC58B1C20CF7089871158A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft Manifest number: 0505 Signing time: Fri 05 Sep 2025 09:41:14 +0000 Manifest this update: Fri 05 Sep 2025 09:36:14 +0000 Manifest next update: Mon 08 Sep 2025 17:33:14 +0000 Files and hashes: 1: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: W+/UsX2B1jIoh0YXs+zTMHV/AOmiRdw7iF6RWmJ8c9M=) 2: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: MKGEqu2Psk6FQlMCBwUj3C02UOwY+xcEBLE/JQF9Mu0=) 3: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: cwL/Wm98vbTxoyJQfTlH4ycMGF6EbITvKpTsxzWifEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ca:45:30:9a:ea:94:25:3a:c5:8b:1c:20:cf:70:89:87:11:58:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Validity Not Before: Sep 5 09:36:14 2025 GMT Not After : Sep 8 17:33:14 2025 GMT Subject: CN=E9F54F5B8C5518E3660DC0BAFC02A4B33031925F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fa:24:cb:a0:d9:3a:4a:e5:55:07:d8:4b:45: bf:28:4e:8f:98:13:55:fd:97:2c:82:1b:83:9e:7f: be:76:40:c9:e0:9c:f3:a7:88:a7:e8:27:02:05:0d: cd:d7:d0:10:47:5b:ec:b4:7b:41:29:ed:fe:bc:52: a9:0a:84:86:0b:91:a3:c4:97:61:49:1d:36:f9:4e: 85:e2:06:00:f5:88:5c:df:9c:db:fe:46:34:4a:7b: d6:78:c6:df:9c:38:f2:b1:8b:ab:14:5d:38:46:da: 69:0f:26:58:01:b3:fa:a1:5f:21:da:5c:86:fb:77: d2:fe:2e:7b:8d:c1:46:d6:17:06:99:35:db:da:2e: f1:a7:85:14:95:dd:27:08:92:a0:22:bc:f0:31:e7: cc:b4:bb:2f:35:7e:de:82:4f:64:01:f5:96:5d:a1: 20:d0:bc:40:a3:22:b0:97:e3:72:8c:99:ac:5e:4e: 06:9f:f8:27:70:3d:9a:68:d8:32:88:0f:ae:a4:27: d4:43:c5:ed:2c:15:21:97:76:ec:45:06:96:e4:4c: e9:8a:cf:7a:d7:1c:b9:d8:67:f4:e9:57:95:02:03: b4:c6:12:63:55:0d:91:a5:fd:bd:39:86:66:87:b8: d1:1a:35:8c:ea:07:c7:95:3b:76:29:06:f0:ac:e7: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F5:4F:5B:8C:55:18:E3:66:0D:C0:BA:FC:02:A4:B3:30:31:92:5F X509v3 Authority Key Identifier: keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:72:b4:75:24:98:8a:15:5a:d0:6b:a0:7b:2e:66:89:16:53: e0:09:51:98:e7:6a:53:d8:d4:75:b0:95:35:bd:ee:58:c6:b6: 16:57:ee:f8:e7:2f:12:c7:f1:af:7b:a2:c4:1c:19:52:d2:49: bd:fa:5f:8b:df:92:7a:2b:ab:32:ec:fb:c1:91:16:17:64:ed: ea:78:2e:9c:69:8a:24:7d:34:b4:55:d7:17:5c:8c:34:ac:9b: 46:bf:22:2a:84:70:73:0a:f4:db:92:75:d2:3d:a6:02:0b:5e: 83:2c:90:15:e4:a2:bc:38:d5:61:5b:ff:38:a9:18:d2:fb:32: 14:a1:3d:63:db:20:f8:c1:cf:a9:9a:fb:4b:d5:73:e2:16:c4: 4c:1a:6a:8b:fa:80:ef:55:b7:36:57:e6:5a:19:6c:0c:a3:c3: fd:01:a2:9e:8e:88:79:39:14:c6:c9:79:b1:55:48:6d:01:21: c3:a7:02:52:a2:16:be:08:97:c9:fa:07:ac:1b:f6:8f:3c:fb: de:78:53:12:a5:37:2d:95:18:ba:ac:2e:b8:dc:21:cd:f4:15: 22:2d:d1:b7:dd:32:a3:1f:36:d4:14:92:1b:7d:e4:60:eb:e8: c4:3b:30:fb:cf:13:e9:6e:d0:26:75:c8:e6:2e:24:02:c7:32: 17:bc:41:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8pFMJrqlCU6xYscIM9wiYcRWKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNF MzVCNEM0NjAeFw0yNTA5MDUwOTM2MTRaFw0yNTA5MDgxNzMzMTRaMDMxMTAvBgNV BAMTKEU5RjU0RjVCOEM1NTE4RTM2NjBEQzBCQUZDMDJBNEIzMzAzMTkyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+iTLoNk6SuVVB9hLRb8oTo+Y E1X9lyyCG4Oef752QMngnPOniKfoJwIFDc3X0BBHW+y0e0Ep7f68UqkKhIYLkaPE l2FJHTb5ToXiBgD1iFzfnNv+RjRKe9Z4xt+cOPKxi6sUXThG2mkPJlgBs/qhXyHa XIb7d9L+LnuNwUbWFwaZNdvaLvGnhRSV3ScIkqAivPAx58y0uy81ft6CT2QB9ZZd oSDQvECjIrCX43KMmaxeTgaf+CdwPZpo2DKID66kJ9RDxe0sFSGXduxFBpbkTOmK z3rXHLnYZ/TpV5UCA7TGEmNVDZGl/b05hmaHuNEaNYzqB8eVO3YpBvCs5/5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6fVPW4xVGONmDcC6/AKkszAxkl8wHwYDVR0j BBgwFoAURVGgMsREhf9lk+BDUn4+HONbTEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMC80NTUxQTAzMkM0 NDQ4NUZGNjU5M0UwNDM1MjdFM0UxQ0UzNUI0QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNFMzVC NEM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNF MUNFMzVCNEM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVytHUkmIoVWtBroHsuZokWU+AJUZjnalPY 1HWwlTW97ljGthZX7vjnLxLH8a97osQcGVLSSb36X4vfknorqzLs+8GRFhdk7ep4 LpxpiiR9NLRV1xdcjDSsm0a/IiqEcHMK9NuSddI9pgILXoMskBXkorw41WFb/zip GNL7MhShPWPbIPjBz6ma+0vVc+IWxEwaaov6gO9VtzZX5loZbAyjw/0Bop6OiHk5 FMbJebFVSG0BIcOnAlKiFr4Il8n6B6wb9o88+954UxKlNy2VGLqsLrjcIc30FSIt 0bfdMqMfNtQUkht95GDr6MQ7MPvPE+lu0CZ1yOYuJALHMhe8QdY= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:11 2025 by rpki-client