$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: 9lKCY2WUTbgyBSMFlPfPz29zX4rxP18BXFZV/ceOCm8= Subject key identifier: 0C:36:D0:DB:FF:04:9F:69:6F:32:50:CC:C2:EE:29:95:A1:AD:07:3D Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 780AF0809E42A00DBF404D71C583605026220AC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 0125 Signing time: Sat 18 Oct 2025 04:01:23 +0000 Manifest this update: Sat 18 Oct 2025 03:56:23 +0000 Manifest next update: Tue 21 Oct 2025 12:45:23 +0000 Files and hashes: 1: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: ahr6I621zxPVj4x1WEhzZ6ZLi40gw0moK3N76mKGLmY=) 2: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: K8NaZjX156AzJZCxAFCtUR2kv1eIuI1LvcL4WWNgNxE=) 3: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: k08Sq9y+e0JBLFkahJuKjCY8UDmOXzCXbCJPnDfG/eg=) 4: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: 4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:0a:f0:80:9e:42:a0:0d:bf:40:4d:71:c5:83:60:50:26:22:0a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Oct 18 03:56:23 2025 GMT Not After : Oct 21 12:45:23 2025 GMT Subject: CN=0C36D0DBFF049F696F3250CCC2EE2995A1AD073D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4e:69:c4:88:9d:96:eb:96:a1:95:3c:98:c0: 17:b8:56:32:71:5c:c8:ea:07:56:53:69:53:85:51: 5d:93:f9:50:7e:de:3d:b5:75:17:82:99:a9:31:87: b8:d9:f8:b8:4c:2a:32:dc:e7:a0:07:ca:5e:82:a0: b5:a9:8b:0d:1c:46:6f:90:b1:04:5c:de:9c:ad:2a: 9f:52:36:f1:fc:f3:e1:f6:76:a4:e0:dd:4b:2c:1f: a5:49:97:b7:5e:42:1a:34:81:2e:e6:4e:df:f9:b9: 00:16:27:84:92:01:74:39:b6:9e:1c:c5:72:fe:c1: 29:0d:e4:f2:36:b3:a5:b6:7e:cc:e9:4d:aa:c5:0c: 36:55:0b:ca:64:8a:ee:52:93:60:3e:84:0a:a3:32: f5:e3:89:0f:74:b6:c4:ed:fb:7d:e1:31:14:c2:41: 25:3f:80:2e:3c:1d:5c:5b:be:3f:3b:19:6a:d7:8a: c6:9c:b2:d8:1b:48:e5:fb:4a:30:3e:13:d8:cc:0b: 79:7e:24:76:86:4a:41:08:27:29:23:f4:bd:b8:cc: 4c:6d:29:b2:dd:9a:60:1a:51:80:53:0f:a3:86:f1: 56:9e:59:67:84:ec:6b:bc:82:83:31:0c:d7:1f:20: a7:a6:7f:6f:b4:49:79:c7:01:78:e9:c6:ec:66:48: 71:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:36:D0:DB:FF:04:9F:69:6F:32:50:CC:C2:EE:29:95:A1:AD:07:3D X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:81:eb:7e:9a:02:a3:4b:4f:9b:6f:ff:99:2f:b7:33:a2:53: 7b:4a:de:df:a0:71:61:ef:40:8c:29:42:69:68:ed:69:44:ee: 93:37:1b:47:b2:e3:b5:56:22:57:6b:7c:b6:3d:4f:d0:0b:6d: 5a:d2:a9:6a:aa:9e:ae:aa:5c:be:9a:d6:19:99:f4:e9:ee:14: 3c:4e:8e:93:4f:8d:8e:7a:d0:f8:b0:fa:f4:f1:b2:65:f3:53: 5e:b0:34:b5:2a:8d:18:96:64:0a:b5:63:12:e8:f9:c8:46:6b: 8f:7b:3e:8c:b9:e3:07:8f:4c:32:f9:13:19:f0:88:25:11:98: 2e:11:df:1a:7e:83:63:9a:4c:62:55:89:bc:e9:72:b4:f5:5d: 9b:d4:e2:5b:95:ea:61:22:1e:91:03:5d:d9:b2:62:cf:71:d7: 61:99:fe:86:56:38:44:b3:f9:21:49:58:63:b7:72:87:db:85: ee:1e:f3:52:6b:35:23:21:0a:27:a8:42:a0:6f:3e:c0:43:14: 67:22:82:89:90:d7:cb:25:7e:a6:26:a9:15:65:86:f2:27:65: 38:89:46:ca:33:0b:14:89:c7:1a:f8:9b:95:89:f3:56:ba:6f: 6e:49:89:28:ab:54:fc:aa:88:e4:7c:df:e7:b4:e3:5e:d2:d6: 7f:aa:06:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeArwgJ5CoA2/QE1xxYNgUCYiCsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTEwMTgwMzU2MjNaFw0yNTEwMjExMjQ1MjNaMDMxMTAvBgNV BAMTKDBDMzZEMERCRkYwNDlGNjk2RjMyNTBDQ0MyRUUyOTk1QTFBRDA3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVTmnEiJ2W65ahlTyYwBe4VjJx XMjqB1ZTaVOFUV2T+VB+3j21dReCmakxh7jZ+LhMKjLc56AHyl6CoLWpiw0cRm+Q sQRc3pytKp9SNvH88+H2dqTg3UssH6VJl7deQho0gS7mTt/5uQAWJ4SSAXQ5tp4c xXL+wSkN5PI2s6W2fszpTarFDDZVC8pkiu5Sk2A+hAqjMvXjiQ90tsTt+33hMRTC QSU/gC48HVxbvj87GWrXisacstgbSOX7SjA+E9jMC3l+JHaGSkEIJykj9L24zExt KbLdmmAaUYBTD6OG8VaeWWeE7Gu8goMxDNcfIKemf2+0SXnHAXjpxuxmSHE9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDDbQ2/8En2lvMlDMwu4plaGtBz0wHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaB636aAqNLT5tv/5kvtzOiU3tK3t+gcWHv QIwpQmlo7WlE7pM3G0ey47VWIldrfLY9T9ALbVrSqWqqnq6qXL6a1hmZ9OnuFDxO jpNPjY560Piw+vTxsmXzU16wNLUqjRiWZAq1YxLo+chGa497Poy54wePTDL5Exnw iCURmC4R3xp+g2OaTGJVibzpcrT1XZvU4luV6mEiHpEDXdmyYs9x12GZ/oZWOESz +SFJWGO3cofbhe4e81JrNSMhCieoQqBvPsBDFGcigomQ18slfqYmqRVlhvInZTiJ RsozCxSJxxr4m5WJ81a6b25JiSirVPyqiOR83+e0417S1n+qBoA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:59:50 2025 by rpki-client