$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: HxT+invJYtRbDckp41hyfgSC+ihAziwG4PHdn/d7bYI= Subject key identifier: 29:1B:CC:26:EE:37:1D:00:2E:3D:04:5D:58:53:D4:F9:EB:3F:E5:C5 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 4D5D69359AD780877C78D5ED193C69F0182EA053 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 051C Signing time: Sat 25 Oct 2025 03:50:55 +0000 Manifest this update: Sat 25 Oct 2025 03:45:55 +0000 Manifest next update: Tue 28 Oct 2025 09:18:55 +0000 Files and hashes: 1: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 2: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 3: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) 4: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) 5: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: +WExNcB2GQ1jZ4QGhEfO989Tpqag3zwvdTKbS85XmWw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 09:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5d:69:35:9a:d7:80:87:7c:78:d5:ed:19:3c:69:f0:18:2e:a0:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Oct 25 03:45:55 2025 GMT Not After : Oct 28 09:18:55 2025 GMT Subject: CN=291BCC26EE371D002E3D045D5853D4F9EB3FE5C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5d:a0:1b:40:45:b7:ce:1c:5f:17:6e:d4:2e: fc:c7:3c:22:c5:d0:4e:09:ca:54:7f:b3:18:39:04: bf:29:d3:fa:af:92:58:0f:4d:a1:a5:b0:e9:2c:a4: 5e:12:c7:9a:10:ef:bd:23:bb:49:87:73:3d:cd:e5: c4:4b:f8:4f:14:c5:2d:d1:f2:5d:a9:35:be:08:95: f8:fd:c9:50:10:d0:42:82:95:f0:75:c9:7e:0b:0d: a5:3e:80:bd:b4:28:2d:54:7f:c5:a3:09:6f:43:30: ec:a8:17:46:bf:3c:7e:6d:20:23:29:ee:15:bb:82: 37:05:a4:30:dd:96:2a:aa:e9:d2:84:44:95:a5:b5: db:5e:ed:b0:1a:aa:da:3b:a8:c0:33:89:71:ac:3d: 2e:4a:c1:e7:0a:bd:b0:49:1b:d7:48:0f:63:52:e0: e1:9a:b0:c8:0d:93:3b:04:22:99:a4:ec:23:9e:83: b6:35:bf:af:10:01:97:bb:46:1e:2a:10:42:1a:28: ea:86:8c:e5:ad:0b:bf:21:31:32:a7:b1:f3:24:d3: 3b:64:53:87:be:ce:3e:05:83:c8:33:2d:8f:11:bd: ef:a0:6d:54:ad:b3:60:1d:83:6f:3f:f1:4f:bc:ec: 57:75:da:09:eb:1d:4d:f0:c3:58:c0:5b:05:29:04: d8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1B:CC:26:EE:37:1D:00:2E:3D:04:5D:58:53:D4:F9:EB:3F:E5:C5 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:46:95:1b:b0:3b:7b:1b:b3:06:67:7f:1d:13:94:d6:b7:39: fa:48:7c:ec:d8:44:13:54:8f:28:40:b6:35:9c:21:66:49:05: 50:0c:9c:38:6c:0c:d6:1e:8e:51:8e:44:59:f4:9f:7a:5a:ff: 17:ca:87:f2:dc:9b:87:e2:cf:10:88:b8:de:2d:f1:ae:ca:73: fd:9b:4c:6d:fe:9e:4d:57:2d:33:76:60:13:7e:65:5a:92:d7: 78:77:22:89:86:0c:b3:4a:25:6d:11:72:ab:3e:63:c5:b7:04: 64:7b:f5:8f:0d:e9:09:3a:6b:8d:6f:ca:a9:db:e0:44:6b:94: 84:aa:cb:84:be:41:89:fa:f0:5a:77:81:6c:1f:80:5d:b1:cd: e8:18:2f:dd:ab:3f:a2:44:1c:37:48:21:91:df:0a:ff:34:2f: 2b:97:8f:70:e2:50:6c:2c:f5:c3:b3:be:23:2c:2d:c4:f2:de: d8:c8:26:4a:de:9d:72:44:45:18:38:00:bd:7d:f1:78:8a:2d: 37:15:f9:65:f7:90:a0:18:c8:c1:15:aa:dc:63:99:89:29:06: db:8f:12:f5:78:3d:59:93:b0:ff:83:3c:98:a9:ee:da:a8:db: 79:07:4e:9e:54:13:e7:30:8c:18:5b:37:b1:ca:97:1f:ea:b8: 5d:f1:a1:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTV1pNZrXgId8eNXtGTxp8BguoFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTEwMjUwMzQ1NTVaFw0yNTEwMjgwOTE4NTVaMDMxMTAvBgNV BAMTKDI5MUJDQzI2RUUzNzFEMDAyRTNEMDQ1RDU4NTNENEY5RUIzRkU1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXaAbQEW3zhxfF27ULvzHPCLF 0E4JylR/sxg5BL8p0/qvklgPTaGlsOkspF4Sx5oQ770ju0mHcz3N5cRL+E8UxS3R 8l2pNb4Ilfj9yVAQ0EKClfB1yX4LDaU+gL20KC1Uf8WjCW9DMOyoF0a/PH5tICMp 7hW7gjcFpDDdliqq6dKERJWltdte7bAaqto7qMAziXGsPS5KwecKvbBJG9dID2NS 4OGasMgNkzsEIpmk7COeg7Y1v68QAZe7Rh4qEEIaKOqGjOWtC78hMTKnsfMk0ztk U4e+zj4Fg8gzLY8Rve+gbVSts2Adg28/8U+87Fd12gnrHU3ww1jAWwUpBNipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKRvMJu43HQAuPQRdWFPU+es/5cUwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlGlRuwO3sbswZnfx0TlNa3OfpIfOzYRBNU jyhAtjWcIWZJBVAMnDhsDNYejlGORFn0n3pa/xfKh/Lcm4fizxCIuN4t8a7Kc/2b TG3+nk1XLTN2YBN+ZVqS13h3IomGDLNKJW0Rcqs+Y8W3BGR79Y8N6Qk6a41vyqnb 4ERrlISqy4S+QYn68Fp3gWwfgF2xzegYL92rP6JEHDdIIZHfCv80LyuXj3DiUGws 9cOzviMsLcTy3tjIJkrenXJERRg4AL198XiKLTcV+WX3kKAYyMEVqtxjmYkpBtuP EvV4PVmTsP+DPJip7tqo23kHTp5UE+cwjBhbN7HKlx/quF3xofQ= -----END CERTIFICATE-----Generated at Mon Oct 27 09:45:46 2025 by rpki-client