$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: abkcBiQ2O9dWiFoLy6mzzC3wceW6MTOZDcT4EpbA2D8= Subject key identifier: 2D:06:A7:BA:EC:B5:F5:29:EF:FF:F7:12:21:B4:E2:AF:F6:F3:9E:EA Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 11F514F559F454BAC9BF6D75FD623367580F43A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 010B Signing time: Thu 21 Aug 2025 11:41:23 +0000 Manifest this update: Thu 21 Aug 2025 11:36:23 +0000 Manifest next update: Sun 24 Aug 2025 20:54:23 +0000 Files and hashes: 1: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: EwoJucSj8cIAWaO3eBRLL2tT1kwxLmGshDYo8pfhK/k=) 2: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: 4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=) 3: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: K8NaZjX156AzJZCxAFCtUR2kv1eIuI1LvcL4WWNgNxE=) 4: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: k08Sq9y+e0JBLFkahJuKjCY8UDmOXzCXbCJPnDfG/eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f5:14:f5:59:f4:54:ba:c9:bf:6d:75:fd:62:33:67:58:0f:43:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Aug 21 11:36:23 2025 GMT Not After : Aug 24 20:54:23 2025 GMT Subject: CN=2D06A7BAECB5F529EFFFF71221B4E2AFF6F39EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:91:1b:59:1d:61:0c:39:fb:c7:99:3b:16:05: ea:f4:34:eb:af:8d:83:a5:dd:a1:0a:20:b7:b5:d3: 8e:80:94:fe:1c:2d:13:92:f3:14:38:db:f9:7f:d5: 4a:e4:99:56:e1:b0:75:b4:ee:24:4d:0d:23:32:c1: 18:c4:6c:62:72:12:53:e9:3d:57:6d:55:ea:fc:2a: 70:19:8d:e4:36:f5:9b:5b:21:58:31:12:98:07:32: fa:85:78:3f:78:fb:dd:75:fc:d5:bc:8c:13:45:2c: 9b:90:bc:13:a1:ee:57:9a:29:4c:e7:8a:9d:f1:d0: a2:70:1f:2a:31:66:5d:be:c0:a9:ec:5a:18:bd:66: 9e:8a:ba:37:2b:c0:cb:4c:10:ee:95:6c:b3:41:49: 23:a7:27:12:09:00:ad:eb:0e:39:64:df:15:1b:ae: e7:0a:a3:32:3b:be:27:73:3a:88:0d:7f:0a:dc:1a: c0:65:eb:e4:45:a1:8c:b1:1f:0f:34:23:a9:4f:ae: 5f:12:17:14:35:19:10:d7:3e:cd:93:ef:e9:04:07: 9c:fa:1f:54:47:af:2b:ae:43:37:5e:fc:23:5d:47: 74:8a:ee:76:d6:ab:57:2f:7f:59:18:0c:88:f8:34: cc:fe:24:c9:32:3a:d6:22:0e:0d:22:e5:11:c5:b4: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:06:A7:BA:EC:B5:F5:29:EF:FF:F7:12:21:B4:E2:AF:F6:F3:9E:EA X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:cc:bd:18:8a:19:b4:5a:21:fb:e0:8f:3f:3f:43:31:70:0c: 37:c9:c7:8d:29:b7:f3:bf:a0:68:97:52:7d:d9:ff:1b:6c:4b: f4:0e:f9:ff:9d:fd:d9:e6:4b:b3:8a:b8:41:00:0a:95:c3:31: b4:4d:f3:ba:35:4f:c4:39:e1:20:46:a6:1c:85:4f:4c:9b:5a: 84:e1:13:10:7c:ca:e7:d4:f0:70:48:67:f7:47:40:c4:a8:ad: 66:f2:e8:06:80:75:68:81:57:3c:4e:16:5d:07:4a:24:e5:1e: 2e:1d:53:a4:70:98:db:64:9f:84:bc:c9:8a:76:9d:86:8a:7a: a7:62:ae:72:94:aa:ac:d5:a7:ac:82:30:ad:15:8b:c2:60:4c: 59:65:2b:4e:ab:f0:87:0f:25:61:7c:93:1d:38:15:7f:6b:29: 5e:6b:0d:8e:2b:17:8d:43:4c:7d:f1:6f:f0:02:5a:c3:1b:21: 3e:12:ee:e2:30:fc:2e:3f:7d:a1:2c:c6:a4:41:36:fa:7d:50: d2:81:db:bc:c0:42:ea:69:f8:77:b1:c1:e8:9d:c9:ea:ec:64: 52:95:19:65:f1:6c:c1:ab:57:1f:25:f3:36:31:fc:95:b1:e0: d0:81:3a:23:4a:68:8c:c4:7f:bd:8f:cf:79:a5:76:68:ce:65: 1e:da:eb:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEfUU9Vn0VLrJv211/WIzZ1gPQ6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTA4MjExMTM2MjNaFw0yNTA4MjQyMDU0MjNaMDMxMTAvBgNV BAMTKDJEMDZBN0JBRUNCNUY1MjlFRkZGRjcxMjIxQjRFMkFGRjZGMzlFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzkRtZHWEMOfvHmTsWBer0NOuv jYOl3aEKILe1046AlP4cLROS8xQ42/l/1UrkmVbhsHW07iRNDSMywRjEbGJyElPp PVdtVer8KnAZjeQ29ZtbIVgxEpgHMvqFeD94+911/NW8jBNFLJuQvBOh7leaKUzn ip3x0KJwHyoxZl2+wKnsWhi9Zp6KujcrwMtMEO6VbLNBSSOnJxIJAK3rDjlk3xUb rucKozI7vidzOogNfwrcGsBl6+RFoYyxHw80I6lPrl8SFxQ1GRDXPs2T7+kEB5z6 H1RHryuuQzde/CNdR3SK7nbWq1cvf1kYDIj4NMz+JMkyOtYiDg0i5RHFtFGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULQanuuy19Snv//cSIbTir/bznuowHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnMvRiKGbRaIfvgjz8/QzFwDDfJx40pt/O/ oGiXUn3Z/xtsS/QO+f+d/dnmS7OKuEEACpXDMbRN87o1T8Q54SBGphyFT0ybWoTh ExB8yufU8HBIZ/dHQMSorWby6AaAdWiBVzxOFl0HSiTlHi4dU6RwmNtkn4S8yYp2 nYaKeqdirnKUqqzVp6yCMK0Vi8JgTFllK06r8IcPJWF8kx04FX9rKV5rDY4rF41D TH3xb/ACWsMbIT4S7uIw/C4/faEsxqRBNvp9UNKB27zAQupp+HexweidyersZFKV GWXxbMGrVx8l8zYx/JWx4NCBOiNKaIzEf72Pz3mldmjOZR7a6yM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:30:19 2025 by rpki-client