$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: uSMiqZuhGEUkHkG+Cs5/sT8NQVdKIe4UjPHE3fIEY4Q= Subject key identifier: FB:1C:0C:83:06:1F:82:EA:2E:5E:55:C9:F4:0A:33:86:C8:2B:01:03 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 14E8B6EE1CA5F286D68D25ADBD4A82AA40092709 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 0245 Signing time: Mon 20 Oct 2025 03:01:02 +0000 Manifest this update: Mon 20 Oct 2025 02:56:02 +0000 Manifest next update: Thu 23 Oct 2025 03:35:02 +0000 Files and hashes: 1: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) 2: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: UNtC+J1pC2DCdvaymiPXJZ+pASptLnCYgT9GWSP/PQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e8:b6:ee:1c:a5:f2:86:d6:8d:25:ad:bd:4a:82:aa:40:09:27:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Oct 20 02:56:02 2025 GMT Not After : Oct 23 03:35:02 2025 GMT Subject: CN=FB1C0C83061F82EA2E5E55C9F40A3386C82B0103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:49:60:41:5a:d7:db:52:eb:78:e4:64:30:e4: dd:05:5d:f8:1c:4d:28:5c:db:3e:81:60:7a:db:3e: 2f:f4:71:0a:81:d9:8d:89:a4:76:d3:8f:4c:ea:0f: 04:40:1a:f9:f7:e8:b7:5b:71:64:1b:91:31:84:1e: f3:6b:7c:5b:ed:e7:c6:47:28:87:a8:13:89:65:c5: eb:b4:c7:b9:37:dc:9f:ec:4e:47:fb:84:3e:34:f4: 0a:30:95:03:7f:9f:d3:06:81:99:14:58:61:8b:a4: 6b:5a:7c:f0:da:03:d2:74:02:c1:e9:1b:a6:18:f2: 2c:92:d6:3c:39:f6:61:b6:b5:04:47:00:df:66:06: 24:86:ea:e5:6f:8e:12:a9:01:d9:57:53:46:ec:86: 0b:4d:72:3d:9a:eb:7f:0d:9a:63:5e:28:be:02:a5: a1:64:82:aa:b6:61:1c:82:d5:b9:31:3b:0e:11:d4: c3:97:7b:75:de:1a:69:7f:e8:3f:a1:f0:a5:da:9b: 36:dd:d4:b1:52:18:90:d0:74:06:71:b5:42:0f:69: b1:ef:76:60:29:85:b0:a9:74:f7:09:6d:a3:27:a3: fa:7e:c1:9f:d3:7b:10:22:dd:7f:3e:ab:cc:48:81: f9:73:ed:9e:53:76:d0:a9:be:82:32:26:c8:0e:52: 69:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1C:0C:83:06:1F:82:EA:2E:5E:55:C9:F4:0A:33:86:C8:2B:01:03 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f8:d4:6c:e7:7f:df:3e:b2:3d:16:0e:56:7c:b8:8f:9e:85: 27:e4:cf:c4:5c:ba:59:d9:4f:e8:cd:15:ed:81:68:2b:9b:f5: 7c:17:32:07:85:bf:1e:59:db:f1:c2:0a:ba:89:82:27:e9:b4: f3:18:cd:e9:20:a4:b7:3a:fa:83:02:1f:aa:2f:1b:2b:2f:a4: b2:99:41:65:ff:78:ee:bf:c8:80:79:e5:dc:82:74:25:60:64: ae:68:a7:8b:14:bf:38:0e:f4:f2:37:c6:2b:b8:62:90:69:6a: d3:aa:db:ed:d9:f9:b3:07:70:99:c9:2f:85:d6:c2:c3:03:b8: 61:74:91:8c:c3:1f:5b:93:4e:8c:b3:30:44:4b:94:4e:bf:60: a1:5c:64:cb:11:b9:a0:52:eb:c5:10:03:3f:82:1a:ea:da:75: 0a:0f:a9:8f:cd:43:51:b6:0a:52:8d:e1:53:d5:99:ff:44:4a: ee:9a:66:fc:f4:98:40:07:f8:78:70:c0:47:18:9e:38:ac:2f: fc:dc:f5:66:20:d5:f4:ee:b3:52:0f:ba:06:72:95:91:bc:a1: 9a:07:94:a3:55:af:66:aa:59:be:0b:37:cf:06:13:a9:58:22: 17:a3:19:79:a5:ac:d7:6a:4a:36:be:c7:d4:e0:36:d1:4d:0c: 2f:0a:e1:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFOi27hyl8obWjSWtvUqCqkAJJwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTEwMjAwMjU2MDJaFw0yNTEwMjMwMzM1MDJaMDMxMTAvBgNV BAMTKEZCMUMwQzgzMDYxRjgyRUEyRTVFNTVDOUY0MEEzMzg2QzgyQjAxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmSWBBWtfbUut45GQw5N0FXfgc TShc2z6BYHrbPi/0cQqB2Y2JpHbTj0zqDwRAGvn36LdbcWQbkTGEHvNrfFvt58ZH KIeoE4llxeu0x7k33J/sTkf7hD409AowlQN/n9MGgZkUWGGLpGtafPDaA9J0AsHp G6YY8iyS1jw59mG2tQRHAN9mBiSG6uVvjhKpAdlXU0bshgtNcj2a638NmmNeKL4C paFkgqq2YRyC1bkxOw4R1MOXe3XeGml/6D+h8KXamzbd1LFSGJDQdAZxtUIPabHv dmAphbCpdPcJbaMno/p+wZ/TexAi3X8+q8xIgflz7Z5TdtCpvoIyJsgOUmmdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+xwMgwYfguouXlXJ9AozhsgrAQMwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC741Gznf98+sj0WDlZ8uI+ehSfkz8RculnZ T+jNFe2BaCub9XwXMgeFvx5Z2/HCCrqJgifptPMYzekgpLc6+oMCH6ovGysvpLKZ QWX/eO6/yIB55dyCdCVgZK5op4sUvzgO9PI3xiu4YpBpatOq2+3Z+bMHcJnJL4XW wsMDuGF0kYzDH1uTToyzMERLlE6/YKFcZMsRuaBS68UQAz+CGuradQoPqY/NQ1G2 ClKN4VPVmf9ESu6aZvz0mEAH+HhwwEcYnjisL/zc9WYg1fTus1IPugZylZG8oZoH lKNVr2aqWb4LN88GE6lYIhejGXmlrNdqSja+x9TgNtFNDC8K4Zc= -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:26 2025 by rpki-client