$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: gY92iEel1zxa0eGfCo6V6KNOp/22aNDYIpm3Uz9F5MU= Subject key identifier: 4E:2F:C6:76:B1:94:5E:26:89:3A:32:98:A8:60:CE:55:F2:CF:77:A2 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 64162436EC0D5E584BC72FA5D323FBD8A1CFC6D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 051B Signing time: Sun 19 Oct 2025 17:40:54 +0000 Manifest this update: Sun 19 Oct 2025 17:35:54 +0000 Manifest next update: Wed 22 Oct 2025 18:25:54 +0000 Files and hashes: 1: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 2: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: VavYTRzhLLIzMtRGwCzyPt/HISIqt4dnoa7Io/8IjM0=) 3: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:16:24:36:ec:0d:5e:58:4b:c7:2f:a5:d3:23:fb:d8:a1:cf:c6:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Oct 19 17:35:54 2025 GMT Not After : Oct 22 18:25:54 2025 GMT Subject: CN=4E2FC676B1945E26893A3298A860CE55F2CF77A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:e3:11:6e:67:72:c8:9c:37:ae:4e:bb:c0: 6a:81:f1:7a:c9:b6:b3:d1:8b:a4:1c:55:cb:f2:32: e3:42:33:6f:da:30:21:4c:d8:58:6f:75:4c:1a:d1: d9:88:15:97:f2:f9:1e:d8:5c:dc:9d:a1:4a:46:61: e3:58:50:46:73:17:7b:eb:7a:96:d1:ef:3b:01:0b: 0d:06:0f:d2:8c:39:f4:3e:5d:76:08:42:e4:bc:26: 4d:cb:be:54:1d:94:be:22:2a:74:24:e8:7a:72:9d: 31:e3:ef:4c:ed:3e:9d:7f:53:73:82:cd:05:16:20: f9:94:4f:75:96:42:87:fa:90:08:1b:87:37:07:60: d8:37:17:aa:3d:19:6d:35:87:9d:5f:0a:71:bf:81: ff:0b:16:dc:53:65:ec:80:15:ac:b4:7b:f4:9e:1d: fb:65:ce:bd:fc:68:03:76:d6:7c:51:fc:71:d1:c5: f7:d5:b3:7c:4f:48:e1:7f:dc:23:cb:3c:92:61:c8: 97:b7:9b:da:60:c6:e4:ac:06:7e:4d:43:c8:5a:df: 38:ca:4a:ca:65:07:8e:4f:7f:eb:2a:e3:7b:db:96: aa:dc:db:44:42:09:c7:3f:6e:2e:75:ca:3d:08:5e: 67:39:b3:2f:11:36:e3:15:d0:a0:c5:31:0f:7e:29: 92:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2F:C6:76:B1:94:5E:26:89:3A:32:98:A8:60:CE:55:F2:CF:77:A2 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3e:b9:5d:be:1e:24:1a:33:b8:6f:95:fd:a2:c8:93:4f:5f: 93:1c:31:0b:8b:81:94:41:da:7e:af:23:4c:81:8e:f1:fd:08: c2:3c:17:47:d9:13:49:dc:dd:6a:7f:56:e7:67:6a:73:f3:eb: df:e4:e5:70:e4:19:ff:9b:5f:eb:06:29:cd:33:3a:1e:f9:f6: ad:22:f4:78:f4:9a:73:0d:f0:f1:e3:4f:f6:ee:97:48:ba:e9: ab:43:3e:d9:91:9e:3e:84:5d:a9:5c:1e:79:7f:52:05:aa:ac: bd:fa:3b:24:79:87:5e:19:38:a9:82:4f:aa:0f:58:13:d7:75: 7a:db:42:3d:9f:af:bb:41:eb:fc:e9:d2:e0:87:b1:99:9e:c5: c1:fb:9d:65:c0:b3:14:44:61:5d:7d:e2:ff:63:18:1f:f3:41: 00:66:f1:0b:0f:fa:41:b7:9d:56:46:86:38:de:ec:3f:e5:f1: 73:00:34:78:d7:11:1d:b2:ab:18:cf:1f:35:d5:5f:d8:2b:f3: b6:54:d9:6a:93:b0:4e:a6:34:06:60:89:a9:6c:cf:a4:b3:d6: ac:c0:67:1e:51:ef:3a:42:4e:ca:61:cc:34:ab:b0:02:c6:b3: 27:5e:a9:df:5a:a8:b3:62:a2:02:c3:42:32:ca:7f:1e:1e:e5: a3:71:1e:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZBYkNuwNXlhLxy+l0yP72KHPxtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTEwMTkxNzM1NTRaFw0yNTEwMjIxODI1NTRaMDMxMTAvBgNV BAMTKDRFMkZDNjc2QjE5NDVFMjY4OTNBMzI5OEE4NjBDRTU1RjJDRjc3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHuMRbmdyyJw3rk67wGqB8XrJ trPRi6QcVcvyMuNCM2/aMCFM2FhvdUwa0dmIFZfy+R7YXNydoUpGYeNYUEZzF3vr epbR7zsBCw0GD9KMOfQ+XXYIQuS8Jk3LvlQdlL4iKnQk6HpynTHj70ztPp1/U3OC zQUWIPmUT3WWQof6kAgbhzcHYNg3F6o9GW01h51fCnG/gf8LFtxTZeyAFay0e/Se Hftlzr38aAN21nxR/HHRxffVs3xPSOF/3CPLPJJhyJe3m9pgxuSsBn5NQ8ha3zjK SsplB45Pf+sq43vblqrc20RCCcc/bi51yj0IXmc5sy8RNuMV0KDFMQ9+KZJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTi/GdrGUXiaJOjKYqGDOVfLPd6IwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk+uV2+HiQaM7hvlf2iyJNPX5McMQuLgZRB 2n6vI0yBjvH9CMI8F0fZE0nc3Wp/VudnanPz69/k5XDkGf+bX+sGKc0zOh759q0i 9Hj0mnMN8PHjT/bul0i66atDPtmRnj6EXalcHnl/UgWqrL36OyR5h14ZOKmCT6oP WBPXdXrbQj2fr7tB6/zp0uCHsZmexcH7nWXAsxREYV194v9jGB/zQQBm8QsP+kG3 nVZGhjje7D/l8XMANHjXER2yqxjPHzXVX9gr87ZU2WqTsE6mNAZgialsz6Sz1qzA Zx5R7zpCTsphzDSrsALGsydeqd9aqLNiogLDQjLKfx4e5aNxHtg= -----END CERTIFICATE-----Generated at Tue Oct 21 02:06:22 2025 by rpki-client