$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json) Hash identifier: x0wA+Z4QQoSvE4hhJQjwSarXDxHVNXXk1SN6uhOUdN0= Subject key identifier: 01:E6:06:55:71:EC:3F:65:82:60:13:E8:9B:D9:5F:57:54:0D:05:B7 Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786 Certificate serial: 3DCC7AD73AC7C8CF9F6965B87C92C6A46A2C9386 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft Manifest number: 021F Signing time: Sun 19 Oct 2025 09:42:15 +0000 Manifest this update: Sun 19 Oct 2025 09:37:15 +0000 Manifest next update: Wed 22 Oct 2025 14:43:15 +0000 Files and hashes: 1: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: HzhAdkWVPqyzjRfrKdf+sGJ5e8Q6OGeF8fvX/eoLEO8=) 2: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: OoV43TZ/tf7JyZAR/SGtwnH6aISCkUoMgWTInvAHMBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:cc:7a:d7:3a:c7:c8:cf:9f:69:65:b8:7c:92:c6:a4:6a:2c:93:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786 Validity Not Before: Oct 19 09:37:15 2025 GMT Not After : Oct 22 14:43:15 2025 GMT Subject: CN=01E6065571EC3F65826013E89BD95F57540D05B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7e:ce:de:ed:58:c7:45:21:a0:9d:b3:4d:15: 6b:08:92:79:14:a7:d0:03:01:ce:c6:4f:4f:29:50: 86:d3:dd:53:01:61:26:46:36:de:f5:bd:cb:2b:aa: 6b:66:cc:cc:db:77:e6:d3:69:c3:7a:63:34:1e:f6: f4:19:f7:72:e1:f3:97:cb:12:59:f9:1d:1a:eb:37: 3b:a0:24:ea:29:c6:f2:b4:16:19:5d:e7:e5:6e:1a: f3:67:1a:92:39:2a:bd:95:a7:ca:10:f3:a2:80:6b: 4e:3b:d9:10:24:16:6a:95:d1:bd:48:a3:bc:a7:24: bd:f2:f3:87:01:c2:e5:b9:9b:cd:16:64:66:aa:d5: bd:58:4c:87:30:70:e9:43:c6:c0:5b:b7:14:af:eb: 6a:b4:39:f9:95:98:fa:a6:87:81:4d:37:f9:a0:ed: 4f:fd:6f:a9:56:07:6e:0c:a1:6d:80:89:5a:cc:26: 27:d0:3f:08:fd:a6:bd:eb:cb:60:86:8b:50:45:10: bf:4a:ba:00:a5:cf:31:32:96:8d:91:29:c6:5e:4a: f4:4e:6d:5f:47:ad:46:de:38:0b:ea:20:bf:18:b5: 78:7a:3a:80:53:0a:f1:7f:41:19:73:e9:73:76:01: d6:58:81:33:d8:64:0a:d4:f7:8d:1e:73:5d:12:aa: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E6:06:55:71:EC:3F:65:82:60:13:E8:9B:D9:5F:57:54:0D:05:B7 X509v3 Authority Key Identifier: keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d6:b1:1f:4c:eb:fd:82:22:50:77:8f:0c:9d:15:88:b3:2e: 9d:51:94:e9:3f:6b:87:70:4a:63:2f:e8:2d:16:5f:55:2a:21: a6:22:de:94:65:c0:f6:13:18:de:63:d1:a5:d4:85:56:eb:e2: b4:08:07:a4:5a:10:8f:c5:f2:82:64:4c:d9:4d:cb:22:bb:d4: 11:ed:e4:fa:92:e9:24:eb:93:98:e8:02:65:72:e6:94:84:2a: f5:11:a5:a8:0d:55:78:bc:33:4c:49:72:85:c2:17:28:59:0a: d3:9f:87:5f:dc:f8:e1:c9:8f:48:41:bd:f5:0c:ab:a8:7b:d6: 65:2a:64:73:eb:6d:a8:ce:50:35:88:09:54:09:53:57:b2:d7: 69:18:89:21:ee:50:c5:a3:3c:4c:36:c6:bd:3b:58:24:a1:08: f1:25:5b:35:dc:53:2e:db:d5:1b:aa:73:cf:09:83:c3:2c:6a: f0:18:2a:b6:2d:e3:ff:bc:d6:51:37:0a:05:c0:eb:59:34:7d: 8c:45:db:fe:7b:ef:81:d4:5d:fc:59:8c:e8:2c:5e:14:8a:b6: 98:70:66:c7:8f:c4:ee:8e:90:51:72:d6:47:6f:55:03:f5:ed: fe:cb:e9:13:a1:b4:26:2f:f8:07:cd:19:a8:c0:b5:19:13:d3: 63:85:73:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPcx61zrHyM+faWW4fJLGpGosk4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF MzM5NTc4NjAeFw0yNTEwMTkwOTM3MTVaFw0yNTEwMjIxNDQzMTVaMDMxMTAvBgNV BAMTKDAxRTYwNjU1NzFFQzNGNjU4MjYwMTNFODlCRDk1RjU3NTQwRDA1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcfs7e7VjHRSGgnbNNFWsIknkU p9ADAc7GT08pUIbT3VMBYSZGNt71vcsrqmtmzMzbd+bTacN6YzQe9vQZ93Lh85fL Eln5HRrrNzugJOopxvK0Fhld5+VuGvNnGpI5Kr2Vp8oQ86KAa0472RAkFmqV0b1I o7ynJL3y84cBwuW5m80WZGaq1b1YTIcwcOlDxsBbtxSv62q0OfmVmPqmh4FNN/mg 7U/9b6lWB24MoW2AiVrMJifQPwj9pr3ry2CGi1BFEL9KugClzzEylo2RKcZeSvRO bV9HrUbeOAvqIL8YtXh6OoBTCvF/QRlz6XN2AdZYgTPYZArU940ec10SqtRVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAeYGVXHsP2WCYBPom9lfV1QNBbcwHwYDVR0j BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5 NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4 MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnWsR9M6/2CIlB3jwydFYizLp1RlOk/a4dw SmMv6C0WX1UqIaYi3pRlwPYTGN5j0aXUhVbr4rQIB6RaEI/F8oJkTNlNyyK71BHt 5PqS6STrk5joAmVy5pSEKvURpagNVXi8M0xJcoXCFyhZCtOfh1/c+OHJj0hBvfUM q6h71mUqZHPrbajOUDWICVQJU1ey12kYiSHuUMWjPEw2xr07WCShCPElWzXcUy7b 1Ruqc88Jg8MsavAYKrYt4/+81lE3CgXA61k0fYxF2/5774HUXfxZjOgsXhSKtphw ZsePxO6OkFFy1kdvVQP17f7L6ROhtCYv+AfNGajAtRkT02OFc3A= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:08 2025 by rpki-client