$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: eiQ2SMIlBgSCBzbXD7r8R390vRFeUG0hiqCpqv4zoLw= Subject key identifier: A5:1C:28:D5:83:92:34:25:2D:B7:A1:2A:44:12:CD:EF:12:91:CA:C3 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 57EA2625C3DED8A88544A7061C14CFC8F1E2CF2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 0505 Signing time: Thu 04 Sep 2025 06:00:56 +0000 Manifest this update: Thu 04 Sep 2025 05:55:56 +0000 Manifest next update: Sun 07 Sep 2025 07:29:56 +0000 Files and hashes: 1: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: Wj7LaEWCSm/lQZ+cTVEBWrhsFbJnc1NBllXR8ApNwTw=) 2: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 3: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 4: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) 5: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 07:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ea:26:25:c3:de:d8:a8:85:44:a7:06:1c:14:cf:c8:f1:e2:cf:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Sep 4 05:55:56 2025 GMT Not After : Sep 7 07:29:56 2025 GMT Subject: CN=A51C28D5839234252DB7A12A4412CDEF1291CAC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:09:db:7c:8e:bc:da:14:05:23:29:e2:8d:49: 0a:76:e7:8b:4e:c0:48:f2:d7:a3:58:51:88:14:0d: 7e:21:36:88:06:92:18:74:22:f2:1e:ee:9d:8c:4a: 70:98:74:f5:c4:bd:dc:11:11:32:18:03:70:be:7f: 3c:18:7f:c0:db:c2:d5:0d:93:80:c7:8b:cd:c6:78: 37:b6:c7:16:bb:e5:c6:4c:2d:43:94:cb:f5:78:37: 47:65:16:30:5d:c4:26:3b:1e:d5:5c:82:92:f9:27: 39:60:bb:b1:95:b1:6f:45:13:7c:ab:d9:c7:9d:38: f4:9f:c4:29:af:79:42:d7:19:2d:1e:bf:24:03:df: e4:92:fe:2e:da:4b:f9:e3:e0:a7:9f:48:ae:5e:bd: 51:0a:f1:d6:58:b7:c1:b8:46:78:02:34:6a:c5:23: 18:0f:63:21:54:33:16:2d:99:84:82:09:b6:76:8f: d4:3c:32:4a:ef:5a:96:50:84:84:4e:e6:7d:9f:55: 39:a1:4d:ee:0d:3b:64:bd:60:a3:8d:f4:12:7b:e0: 32:c2:01:4c:fc:61:cb:eb:2d:d5:08:31:64:b9:0c: 02:28:a3:cd:b9:02:09:97:26:03:80:81:6d:00:78: 98:73:f8:40:5f:5e:8c:cb:50:c3:99:a4:f0:6c:13: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1C:28:D5:83:92:34:25:2D:B7:A1:2A:44:12:CD:EF:12:91:CA:C3 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:48:2f:81:09:04:1b:4c:23:0c:d2:d7:3b:1f:4d:5f:1c:44: 37:bf:65:24:af:73:66:89:42:a0:a2:18:4f:22:1c:94:c2:47: 7f:e4:54:31:27:aa:91:4f:45:f8:df:e9:3f:b2:3b:2f:e2:81: 70:1b:00:1a:40:88:7d:19:47:0d:7a:87:67:09:15:bf:37:ea: ce:4c:77:d6:62:b4:7b:12:51:83:8a:6e:89:ba:55:9b:09:53: 8b:b2:47:48:fa:ea:ec:72:6d:0a:a2:ec:f9:b2:df:f6:48:e5: 49:31:a8:4b:f2:5a:88:d6:30:d3:bc:22:fe:cd:2b:b6:7b:37: 01:a3:23:6e:a4:42:14:54:90:a2:82:42:2c:26:c7:97:5a:d5: 93:75:7f:15:5b:c1:0f:87:9d:d9:7a:ed:cd:1d:7f:82:d6:a5: eb:7c:43:1e:7c:78:cf:35:11:44:97:0e:a8:d6:86:cc:ea:d6: ff:32:6f:6f:9d:fd:9f:3a:81:7c:b0:88:a3:cc:db:95:ae:c3: 96:c5:51:3b:5f:47:89:dd:de:c1:d3:25:8c:c5:6c:7d:c3:00: ec:95:ad:1a:e2:69:b0:b3:f8:17:82:0b:70:0b:2c:c8:ad:ae: 14:a2:8d:56:15:f3:ac:5e:5e:58:1a:40:e9:38:8e:2f:d9:77: 0f:90:f5:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+omJcPe2KiFRKcGHBTPyPHizyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTA5MDQwNTU1NTZaFw0yNTA5MDcwNzI5NTZaMDMxMTAvBgNV BAMTKEE1MUMyOEQ1ODM5MjM0MjUyREI3QTEyQTQ0MTJDREVGMTI5MUNBQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrCdt8jrzaFAUjKeKNSQp254tO wEjy16NYUYgUDX4hNogGkhh0IvIe7p2MSnCYdPXEvdwRETIYA3C+fzwYf8DbwtUN k4DHi83GeDe2xxa75cZMLUOUy/V4N0dlFjBdxCY7HtVcgpL5Jzlgu7GVsW9FE3yr 2cedOPSfxCmveULXGS0evyQD3+SS/i7aS/nj4KefSK5evVEK8dZYt8G4RngCNGrF IxgPYyFUMxYtmYSCCbZ2j9Q8MkrvWpZQhIRO5n2fVTmhTe4NO2S9YKON9BJ74DLC AUz8YcvrLdUIMWS5DAIoo825AgmXJgOAgW0AeJhz+EBfXozLUMOZpPBsE97dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpRwo1YOSNCUtt6EqRBLN7xKRysMwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBIL4EJBBtMIwzS1zsfTV8cRDe/ZSSvc2aJ QqCiGE8iHJTCR3/kVDEnqpFPRfjf6T+yOy/igXAbABpAiH0ZRw16h2cJFb836s5M d9ZitHsSUYOKbom6VZsJU4uyR0j66uxybQqi7Pmy3/ZI5UkxqEvyWojWMNO8Iv7N K7Z7NwGjI26kQhRUkKKCQiwmx5da1ZN1fxVbwQ+Hndl67c0df4LWpet8Qx58eM81 EUSXDqjWhszq1v8yb2+d/Z86gXywiKPM25Wuw5bFUTtfR4nd3sHTJYzFbH3DAOyV rRriabCz+BeCC3ALLMitrhSijVYV86xeXlgaQOk4ji/Zdw+Q9bY= -----END CERTIFICATE-----Generated at Fri Sep 5 19:45:09 2025 by rpki-client