$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: NGDyrZaADTUUnvZFkJVaHca8mMk8q9IXNMRvCx6+QUE= Subject key identifier: AE:AC:C3:12:EA:70:E0:0E:6F:24:1C:8B:17:1C:E5:E9:89:62:41:D6 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 5C0BB01D93D852E6B63F099B42D68E399A0472B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 022B Signing time: Fri 22 Aug 2025 23:11:03 +0000 Manifest this update: Fri 22 Aug 2025 23:06:03 +0000 Manifest next update: Tue 26 Aug 2025 05:41:03 +0000 Files and hashes: 1: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) 2: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: wN9N5R/jRWod1PC+LOs5bV5Dk3QvM//Rf+9I156WsAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0b:b0:1d:93:d8:52:e6:b6:3f:09:9b:42:d6:8e:39:9a:04:72:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Aug 22 23:06:03 2025 GMT Not After : Aug 26 05:41:03 2025 GMT Subject: CN=AEACC312EA70E00E6F241C8B171CE5E9896241D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:23:f0:e3:7c:6b:7d:ea:46:30:25:dd:51:27: ee:95:d3:ea:44:4a:d9:17:39:82:38:ad:53:c8:25: 7e:4a:1f:5d:c0:ab:d7:6c:52:ab:b6:e8:f1:9e:36: 64:b6:b3:3c:37:74:56:be:10:14:1d:b3:43:85:f5: 80:07:32:b5:e6:58:2a:a2:ae:29:ad:b0:3c:67:c2: a5:58:9c:e8:af:00:f1:9a:8d:ba:19:d9:fa:4a:a6: 1f:ed:80:00:43:71:ac:74:d8:4e:06:e3:37:f4:e0: b4:5a:79:37:3a:1d:6a:9d:5b:a6:8e:cf:8d:6a:dd: 05:ce:4e:ab:3e:48:8e:04:76:e1:d3:4d:cd:84:09: 2c:02:de:d5:71:f9:e9:c4:d9:79:82:01:81:82:95: 5c:da:39:c9:24:45:33:cc:5c:82:b6:a3:1c:c3:f6: ed:3a:bd:9f:dc:36:86:57:2e:26:6c:55:7c:e1:6d: 43:bf:63:f2:c1:84:b5:6e:b5:bb:c1:3e:c1:fd:5f: 91:81:be:a2:7a:ce:d7:bc:34:f3:0c:8f:db:db:d4: d1:a6:71:92:9b:77:d3:49:a3:96:6e:97:8f:0a:25: ee:7c:cb:90:45:08:53:75:e5:a2:06:ca:db:0d:fc: 6a:a6:fb:9e:bd:7c:91:85:38:cc:73:7e:ac:d7:f2: 06:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AC:C3:12:EA:70:E0:0E:6F:24:1C:8B:17:1C:E5:E9:89:62:41:D6 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d8:2e:1e:b3:7d:05:27:3e:ea:d4:a8:32:b3:ef:41:fb:08: d2:dd:a4:f9:fd:30:36:fa:a8:88:ba:11:79:11:f8:d4:c5:a7: 6d:3f:2c:84:84:d0:6c:11:be:fc:63:47:cd:e6:97:52:0b:25: c5:eb:88:1a:d4:4a:f9:7c:57:5d:9f:2a:fc:f6:14:52:cc:61: 8c:f7:2b:8e:ab:2f:65:75:73:32:49:fb:6a:d5:21:d3:a5:93: 5d:54:72:49:fb:8c:f1:36:7e:3d:da:6a:1c:f3:65:32:d0:5f: 46:72:12:eb:6c:4f:b9:6a:0b:a4:50:e0:0a:1d:eb:f7:8f:cd: 48:68:96:1b:d6:1e:a0:85:7e:5a:5b:7e:8f:22:90:63:bb:d3: f3:71:68:16:67:c2:99:be:69:1b:f4:e2:44:ac:39:b5:5d:d3: 56:70:53:42:eb:96:b8:e3:86:39:a7:13:1c:5a:3e:7e:68:a2: ac:26:52:91:78:cd:70:c1:d2:9a:96:cc:bc:85:87:7c:56:20: b0:da:f0:a6:e7:f6:6d:cc:63:56:bc:0c:68:46:75:6e:12:48: e7:63:d0:a5:65:97:3a:a6:e9:09:cc:fc:3e:be:97:7b:e4:fe: 14:7b:3a:70:56:6d:ee:c4:ad:b7:2d:21:59:97:9c:0e:a9:8c: 09:8b:87:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAuwHZPYUua2PwmbQtaOOZoEcrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTA4MjIyMzA2MDNaFw0yNTA4MjYwNTQxMDNaMDMxMTAvBgNV BAMTKEFFQUNDMzEyRUE3MEUwMEU2RjI0MUM4QjE3MUNFNUU5ODk2MjQxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgI/DjfGt96kYwJd1RJ+6V0+pE StkXOYI4rVPIJX5KH13Aq9dsUqu26PGeNmS2szw3dFa+EBQds0OF9YAHMrXmWCqi rimtsDxnwqVYnOivAPGajboZ2fpKph/tgABDcax02E4G4zf04LRaeTc6HWqdW6aO z41q3QXOTqs+SI4EduHTTc2ECSwC3tVx+enE2XmCAYGClVzaOckkRTPMXIK2oxzD 9u06vZ/cNoZXLiZsVXzhbUO/Y/LBhLVutbvBPsH9X5GBvqJ6zte8NPMMj9vb1NGm cZKbd9NJo5Zul48KJe58y5BFCFN15aIGytsN/Gqm+569fJGFOMxzfqzX8gYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrqzDEupw4A5vJByLFxzl6YliQdYwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/YLh6zfQUnPurUqDKz70H7CNLdpPn9MDb6 qIi6EXkR+NTFp20/LISE0GwRvvxjR83ml1ILJcXriBrUSvl8V12fKvz2FFLMYYz3 K46rL2V1czJJ+2rVIdOlk11Uckn7jPE2fj3aahzzZTLQX0ZyEutsT7lqC6RQ4Aod 6/ePzUholhvWHqCFflpbfo8ikGO70/NxaBZnwpm+aRv04kSsObVd01ZwU0Lrlrjj hjmnExxaPn5ooqwmUpF4zXDB0pqWzLyFh3xWILDa8Kbn9m3MY1a8DGhGdW4SSOdj 0KVllzqm6QnM/D6+l3vk/hR7OnBWbe7ErbctIVmXnA6pjAmLh1E= -----END CERTIFICATE-----Generated at Sat Aug 23 23:37:56 2025 by rpki-client