$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: k21QHddVcP2/0EFqKXyGRQs5mT5m0/CsWYMEyGSXJ8g= Subject key identifier: 60:6A:B4:15:CC:B5:83:23:4F:72:7A:19:86:94:FD:43:DB:B9:1D:AB Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 33748D2907CF17F5CB6D3B05B27E816F493D0FFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 020E Signing time: Sat 18 Oct 2025 15:51:33 +0000 Manifest this update: Sat 18 Oct 2025 15:46:33 +0000 Manifest next update: Tue 21 Oct 2025 16:06:33 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: ABO0ld5QWth44CsBXWTG9W3tmsReDPPBTRV9p654NqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 16:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:74:8d:29:07:cf:17:f5:cb:6d:3b:05:b2:7e:81:6f:49:3d:0f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Oct 18 15:46:33 2025 GMT Not After : Oct 21 16:06:33 2025 GMT Subject: CN=606AB415CCB583234F727A198694FD43DBB91DAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:2f:c7:08:8d:3e:e6:8b:e4:a7:26:0f:47: 97:c3:8f:a8:43:c0:77:77:f5:52:d2:ba:75:4b:bb: 3b:94:64:6c:af:d8:dd:72:81:74:9f:f9:e0:c8:02: f6:f2:44:2a:60:7c:92:73:f4:28:89:9d:fc:ba:41: 4c:d5:9a:d9:61:73:7c:3e:ff:ee:d1:f8:f6:56:31: eb:24:16:85:c5:db:e6:92:0c:0e:7a:2e:2e:d3:c6: 77:be:c3:00:de:0e:8a:ef:6b:30:95:3e:aa:0c:3f: b3:63:98:fc:1d:b1:31:c1:55:ea:ef:78:16:a9:ff: ff:54:35:f2:04:3e:f8:e2:ae:5a:e7:0b:74:0d:ff: b7:ef:b7:30:7b:99:48:ec:27:57:b4:2f:5b:b9:31: a3:69:68:e9:93:a8:24:46:bd:aa:a3:6a:a6:61:33: 78:91:38:0c:d0:ee:9d:37:b9:fa:8a:63:13:c4:09: fd:21:04:00:33:67:57:2d:16:cb:e4:d4:0e:df:b1: f3:d5:eb:99:8d:97:07:fd:a4:03:1e:89:69:51:fd: bb:dc:3f:cf:4f:fa:cd:87:35:f8:34:a1:38:b9:dc: c9:a8:fd:53:91:46:5a:cd:66:af:2b:de:95:7a:bf: 2b:11:39:c8:1a:21:d3:65:14:b5:3d:3b:db:aa:23: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6A:B4:15:CC:B5:83:23:4F:72:7A:19:86:94:FD:43:DB:B9:1D:AB X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4c:15:8b:15:80:15:e4:6a:6a:01:c5:5a:be:ce:36:fb:1d: 58:dc:47:98:6b:24:f3:ae:43:de:4b:d9:16:62:2d:29:8a:4b: a0:0e:38:c7:6b:33:71:88:83:41:b4:1f:a3:f4:4f:15:9b:9b: 95:1f:a8:ea:2f:2c:d3:b4:d1:d6:fe:ae:32:88:0e:ed:66:ec: c8:e3:1b:41:15:7a:ef:d9:a3:3c:f8:5d:e6:71:f8:f1:b6:e7: 78:a3:70:f4:e5:81:09:6b:2f:d9:b0:cc:95:f7:14:75:74:d3: f9:76:e0:9e:d0:b9:8f:2f:23:9c:49:fd:94:e5:e0:2a:66:7f: 79:02:9a:ca:d2:d3:b3:04:a2:39:a6:d1:c9:97:c4:60:3f:80: bd:41:01:ca:d0:0d:38:2a:33:00:23:24:19:1b:7e:98:fe:7a: 5e:07:45:61:b4:42:82:29:97:55:14:e9:1a:4b:11:17:02:7f: 62:44:f0:d2:c6:bf:4a:31:e2:44:0a:f1:dd:43:c8:08:23:02: 43:15:d9:d7:e5:af:55:5a:e9:5b:70:56:b4:fa:2c:64:12:e3: bd:f5:88:94:4d:c7:7f:f0:cc:27:45:d5:f5:f1:5d:18:e6:fe: 4d:df:40:1e:17:6e:10:3b:c0:51:ec:84:85:e7:56:ff:34:14: e6:8b:6d:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM3SNKQfPF/XLbTsFsn6Bb0k9D/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTEwMTgxNTQ2MzNaFw0yNTEwMjExNjA2MzNaMDMxMTAvBgNV BAMTKDYwNkFCNDE1Q0NCNTgzMjM0RjcyN0ExOTg2OTRGRDQzREJCOTFEQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixy/HCI0+5ovkpyYPR5fDj6hD wHd39VLSunVLuzuUZGyv2N1ygXSf+eDIAvbyRCpgfJJz9CiJnfy6QUzVmtlhc3w+ /+7R+PZWMeskFoXF2+aSDA56Li7Txne+wwDeDorvazCVPqoMP7NjmPwdsTHBVerv eBap//9UNfIEPvjirlrnC3QN/7fvtzB7mUjsJ1e0L1u5MaNpaOmTqCRGvaqjaqZh M3iROAzQ7p03ufqKYxPECf0hBAAzZ1ctFsvk1A7fsfPV65mNlwf9pAMeiWlR/bvc P89P+s2HNfg0oTi53Mmo/VORRlrNZq8r3pV6vysROcgaIdNlFLU9O9uqI/VdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGq0Fcy1gyNPcnoZhpT9Q9u5HaswHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9MFYsVgBXkamoBxVq+zjb7HVjcR5hrJPOu Q95L2RZiLSmKS6AOOMdrM3GIg0G0H6P0TxWbm5UfqOovLNO00db+rjKIDu1m7Mjj G0EVeu/Zozz4XeZx+PG253ijcPTlgQlrL9mwzJX3FHV00/l24J7QuY8vI5xJ/ZTl 4Cpmf3kCmsrS07MEojmm0cmXxGA/gL1BAcrQDTgqMwAjJBkbfpj+el4HRWG0QoIp l1UU6RpLERcCf2JE8NLGv0ox4kQK8d1DyAgjAkMV2dflr1Va6VtwVrT6LGQS4731 iJRNx3/wzCdF1fXxXRjm/k3fQB4XbhA7wFHshIXnVv80FOaLbbI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:57 2025 by rpki-client