$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: myW60UzTKHk/bCQrZYMT5fQHEFWZp4ENw3PbulRcAxM= Subject key identifier: 9B:E1:05:15:78:D1:77:E1:7E:B5:C1:3E:9A:61:8B:C2:9D:3C:7A:A7 Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 679237DCE6525292C6247A3F053A235C7E01C238 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 0229 Signing time: Fri 22 Aug 2025 00:42:21 +0000 Manifest this update: Fri 22 Aug 2025 00:37:21 +0000 Manifest next update: Mon 25 Aug 2025 07:34:21 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: uzgaKyonETEqifBPqO3ztONF453alSyLX2bA3IFWdsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 07:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:92:37:dc:e6:52:52:92:c6:24:7a:3f:05:3a:23:5c:7e:01:c2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Aug 22 00:37:21 2025 GMT Not After : Aug 25 07:34:21 2025 GMT Subject: CN=9BE1051578D177E17EB5C13E9A618BC29D3C7AA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:f3:89:c4:c0:8a:27:4f:3f:eb:25:95:f6: 93:2c:30:91:a3:1a:74:f8:3f:15:4f:0e:9e:6e:65: 64:bf:7a:a1:d2:eb:14:c2:03:70:c3:7d:8c:36:1a: e6:78:ed:3f:cd:e6:c7:21:c3:aa:ff:ab:cc:22:26: 4d:3c:98:28:21:fe:a4:18:1a:ff:b5:cb:22:19:5c: df:95:5b:d5:82:48:3c:c7:4a:03:b2:e3:8f:8f:26: b7:a3:34:f8:c1:6c:62:6e:29:ae:dd:44:1a:e2:35: a4:80:60:a6:7d:73:30:12:9d:93:56:b3:43:55:d3: 2a:93:65:c3:9b:36:fa:16:3c:d7:51:9d:0f:9c:18: 8b:24:24:07:57:f7:64:4a:e3:d3:5b:88:7c:f9:ff: b0:f1:ba:34:7a:2b:88:49:2c:5d:a3:1c:5f:8f:29: 43:0f:d3:5e:6d:bf:48:f9:c8:07:0a:a5:b7:fb:03: 5e:d4:34:19:fc:31:0d:06:a7:9c:ca:37:a7:f3:72: b6:cf:d3:a2:7f:c7:cd:9d:db:1d:4f:31:19:61:02: 2a:e5:46:6d:e8:11:01:4f:32:f0:58:1c:f6:3a:7d: 5e:5b:0d:21:b6:3a:cc:6e:61:a0:8a:45:75:76:84: c8:98:9e:fd:7d:62:1b:6e:ee:9d:0c:3f:7a:fd:7a: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E1:05:15:78:D1:77:E1:7E:B5:C1:3E:9A:61:8B:C2:9D:3C:7A:A7 X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2e:8c:9f:21:dd:fa:a1:bf:77:c0:4c:7a:42:36:e1:8e:75: 6a:da:74:14:f9:f1:14:08:6d:84:16:b0:dd:6a:3a:aa:a4:3f: 7f:65:e7:9b:4e:49:ef:2b:f4:2c:23:97:36:9d:7e:17:d6:77: e2:e0:f0:1e:c3:80:c8:e0:c5:b9:51:fb:a7:62:f5:b9:91:4e: 02:d5:10:3a:41:52:f1:c2:67:8e:54:93:8f:ab:b7:4c:45:e1: 06:e4:b5:a1:5d:ce:be:b6:e6:37:cc:a3:b0:3a:59:cf:de:02: 13:0e:84:77:7f:c1:9a:d2:f2:ca:f1:c6:e6:90:24:e0:83:25: 7c:58:81:69:d7:61:04:11:30:4b:3a:56:23:bf:45:b6:c6:63: 0f:c7:39:8f:10:41:5a:2a:33:20:23:cf:3f:f5:5f:48:71:6f: da:ae:be:9f:cf:e5:39:fc:e2:3a:5b:5d:e4:fc:a7:98:d0:6f: 71:26:2d:78:db:6b:43:69:56:c8:a6:81:32:4a:69:d7:3f:f6: 78:1a:46:43:7a:48:cb:71:e1:7a:1b:66:91:77:51:86:6f:a9: 1f:06:3f:4c:e5:f3:9e:c2:b1:5d:e6:c1:4e:a8:1a:a1:21:d0: 87:92:c3:73:d1:52:dd:48:38:89:02:b1:d3:32:a1:7a:9a:9f: b9:dc:7e:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5I33OZSUpLGJHo/BTojXH4BwjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNTA4MjIwMDM3MjFaFw0yNTA4MjUwNzM0MjFaMDMxMTAvBgNV BAMTKDlCRTEwNTE1NzhEMTc3RTE3RUI1QzEzRTlBNjE4QkMyOUQzQzdBQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCvOJxMCKJ08/6yWV9pMsMJGj GnT4PxVPDp5uZWS/eqHS6xTCA3DDfYw2GuZ47T/N5schw6r/q8wiJk08mCgh/qQY Gv+1yyIZXN+VW9WCSDzHSgOy44+PJrejNPjBbGJuKa7dRBriNaSAYKZ9czASnZNW s0NV0yqTZcObNvoWPNdRnQ+cGIskJAdX92RK49NbiHz5/7DxujR6K4hJLF2jHF+P KUMP015tv0j5yAcKpbf7A17UNBn8MQ0Gp5zKN6fzcrbP06J/x82d2x1PMRlhAirl Rm3oEQFPMvBYHPY6fV5bDSG2OsxuYaCKRXV2hMiYnv19Yhtu7p0MP3r9eqilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm+EFFXjRd+F+tcE+mmGLwp08eqcwHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8ujJ8h3fqhv3fATHpCNuGOdWradBT58RQI bYQWsN1qOqqkP39l55tOSe8r9CwjlzadfhfWd+Lg8B7DgMjgxblR+6di9bmRTgLV EDpBUvHCZ45Uk4+rt0xF4QbktaFdzr625jfMo7A6Wc/eAhMOhHd/wZrS8srxxuaQ JOCDJXxYgWnXYQQRMEs6ViO/RbbGYw/HOY8QQVoqMyAjzz/1X0hxb9quvp/P5Tn8 4jpbXeT8p5jQb3EmLXjba0NpVsimgTJKadc/9ngaRkN6SMtx4XobZpF3UYZvqR8G P0zl857CsV3mwU6oGqEh0IeSw3PRUt1IOIkCsdMyoXqan7ncfvc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:51:00 2025 by rpki-client