$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: v5dVHPs2LxLWdhnQMpgauDfQ9z1pfL39c7l2zXxYg5Q= Subject key identifier: C7:6A:18:25:B0:52:04:FD:EB:FE:34:81:E8:B2:25:AE:B4:DE:70:6C Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 1956962965A776B9576348FBAB744530375B4753 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 01F4 Signing time: Thu 21 Aug 2025 20:21:43 +0000 Manifest this update: Thu 21 Aug 2025 20:16:43 +0000 Manifest next update: Sun 24 Aug 2025 20:46:43 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: 8TRLEIbuGSE63Gdt3omBs8IHQZizN9tHF5G5vWXPMCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:56:96:29:65:a7:76:b9:57:63:48:fb:ab:74:45:30:37:5b:47:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Aug 21 20:16:43 2025 GMT Not After : Aug 24 20:46:43 2025 GMT Subject: CN=C76A1825B05204FDEBFE3481E8B225AEB4DE706C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b8:d4:77:5b:18:47:d4:71:b1:ea:0c:fa:c2: 27:c5:23:e7:ab:1d:35:6b:3a:8e:81:d6:3d:2c:06: 97:01:4f:45:0b:ff:a0:e0:ae:f8:d3:4d:9f:13:62: 97:0a:95:02:0e:f7:45:8b:fe:71:f3:ef:d8:52:c1: da:58:c6:7b:ed:a0:2a:9e:c8:67:5c:e6:25:27:35: 2a:4c:be:7e:59:36:b8:03:83:91:b7:86:be:68:95: 3f:46:6f:70:51:2c:a5:b7:c1:f0:2b:9d:a6:16:38: 15:fd:71:87:9e:25:f4:fa:c9:8f:97:d8:35:df:e7: 9b:bc:aa:53:26:04:b4:41:3a:8d:f5:4a:f2:9a:6a: 50:ed:c7:89:8b:78:b0:67:11:57:c2:cb:3b:72:9d: c4:0d:78:8f:38:aa:56:9c:9d:a8:92:d5:11:a9:3e: ed:55:f6:cb:08:88:43:2a:f0:06:7d:18:f8:22:6b: d3:4c:34:5c:b8:57:f2:80:2c:3d:2d:4c:21:3f:ec: 74:ab:d9:c9:00:6f:6a:bd:b9:84:51:36:70:2e:c0: 96:bc:b2:e1:82:a5:2e:17:71:af:c7:2d:e9:3f:e4: 08:ec:5d:5f:f8:8b:3a:84:d7:f8:f6:44:ed:94:ea: 6e:f0:4b:cd:97:c0:ca:85:c0:37:12:91:5e:52:3a: 3d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:6A:18:25:B0:52:04:FD:EB:FE:34:81:E8:B2:25:AE:B4:DE:70:6C X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a4:e9:be:5b:5b:48:b0:b0:7d:73:0f:4d:94:3b:e4:66:f3: f7:aa:b9:41:93:ef:94:fb:1b:78:8b:0f:a0:1a:7c:f9:4d:03: c5:21:aa:b0:27:9e:78:04:d5:15:fa:94:87:c7:74:be:cf:ff: 19:0f:a3:22:72:29:7d:59:85:15:ab:33:12:67:f7:55:1c:45: 1d:a6:eb:33:e1:83:b8:56:1b:db:96:e4:a2:f4:56:2c:7b:98: 53:38:56:3b:ea:14:0f:92:fd:7e:17:bb:fd:49:00:78:dd:4d: b0:05:37:d7:40:9f:48:5f:10:77:ff:e8:27:1c:70:fb:3c:33: ef:27:12:20:43:db:b5:3f:ad:1e:b9:1b:7e:eb:df:f4:97:3c: c1:eb:fb:f3:f5:cb:6b:28:6f:14:c8:ab:24:6e:24:ef:e2:cd: 82:59:92:be:b7:ff:8a:15:3b:58:9c:4c:5a:bf:b7:1f:f9:62: 6a:39:56:17:7b:99:af:82:07:dd:ec:62:a9:0f:51:4b:94:f8: b3:65:fa:26:ac:f2:0e:3b:2e:ed:04:73:e8:82:fa:7e:1a:e6: f4:05:40:8a:bb:b7:19:8a:48:e1:71:18:33:f0:00:d9:78:01: 9a:80:cb:85:a0:13:7e:f1:f0:2c:a8:a1:33:29:92:2f:f3:80: a5:09:f4:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVaWKWWndrlXY0j7q3RFMDdbR1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTA4MjEyMDE2NDNaFw0yNTA4MjQyMDQ2NDNaMDMxMTAvBgNV BAMTKEM3NkExODI1QjA1MjA0RkRFQkZFMzQ4MUU4QjIyNUFFQjRERTcwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuNR3WxhH1HGx6gz6wifFI+er HTVrOo6B1j0sBpcBT0UL/6DgrvjTTZ8TYpcKlQIO90WL/nHz79hSwdpYxnvtoCqe yGdc5iUnNSpMvn5ZNrgDg5G3hr5olT9Gb3BRLKW3wfArnaYWOBX9cYeeJfT6yY+X 2DXf55u8qlMmBLRBOo31SvKaalDtx4mLeLBnEVfCyztyncQNeI84qlacnaiS1RGp Pu1V9ssIiEMq8AZ9GPgia9NMNFy4V/KALD0tTCE/7HSr2ckAb2q9uYRRNnAuwJa8 suGCpS4Xca/HLek/5AjsXV/4izqE1/j2RO2U6m7wS82XwMqFwDcSkV5SOj2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx2oYJbBSBP3r/jSB6LIlrrTecGwwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOk6b5bW0iwsH1zD02UO+Rm8/equUGT75T7 G3iLD6AafPlNA8UhqrAnnngE1RX6lIfHdL7P/xkPoyJyKX1ZhRWrMxJn91UcRR2m 6zPhg7hWG9uW5KL0Vix7mFM4VjvqFA+S/X4Xu/1JAHjdTbAFN9dAn0hfEHf/6Ccc cPs8M+8nEiBD27U/rR65G37r3/SXPMHr+/P1y2sobxTIqyRuJO/izYJZkr63/4oV O1icTFq/tx/5Ymo5Vhd7ma+CB93sYqkPUUuU+LNl+ias8g47Lu0Ec+iC+n4a5vQF QIq7txmKSOFxGDPwANl4AZqAy4WgE37x8CyooTMpki/zgKUJ9E8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:42 2025 by rpki-client