$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: IpuDpYiK8rp+hRd9XEOtVC6rmoMaITNowIxVKYgX/Tw= Subject key identifier: 65:6F:74:A6:EC:D0:95:0B:8E:82:E7:B2:39:66:EB:F2:A6:21:B4:8E Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 55BB60CCA663AF7FBB3A02E641E5CDADC82CC42D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 01BA Signing time: Mon 20 Oct 2025 06:11:22 +0000 Manifest this update: Mon 20 Oct 2025 06:06:22 +0000 Manifest next update: Thu 23 Oct 2025 17:13:22 +0000 Files and hashes: 1: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 2: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 3: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: bffJT3V+uUXVsFtMyCi3QzIl4ANzKNhvEYQQv8jY1Is=) 4: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: UiT4seYGc2LRhlDHPZFCHvfBBtdW1FREPb29P5n03i8=) 5: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: EztX/pCLRjxuGDD5KwhPpuJplaVIMLa9IH/IjmNzx0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:bb:60:cc:a6:63:af:7f:bb:3a:02:e6:41:e5:cd:ad:c8:2c:c4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Oct 20 06:06:22 2025 GMT Not After : Oct 23 17:13:22 2025 GMT Subject: CN=656F74A6ECD0950B8E82E7B23966EBF2A621B48E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:28:e1:0d:1b:fd:3b:b8:8e:01:30:45:fa: 38:65:49:ca:73:26:eb:27:d5:42:c8:2a:ea:d3:8d: cb:b2:e3:42:e4:33:7d:d1:9a:49:aa:fa:90:3d:bf: 1e:58:cb:bc:50:d1:fc:9c:b6:cf:d6:a3:04:12:c4: 87:32:1d:05:b3:11:9f:18:86:36:e3:e9:cc:d9:00: 13:2f:4f:17:22:33:30:64:37:17:dc:c6:e2:c0:10: ee:9a:66:35:d2:1c:cd:a1:f4:79:7d:39:86:b0:06: 99:b5:79:5e:0a:fa:e1:e4:5d:83:0f:f7:2e:e2:6a: 2b:ee:fe:79:85:dd:d9:eb:98:62:c5:a4:19:d2:77: 7f:68:58:bc:a1:b7:eb:46:71:50:d6:f9:28:47:ca: d8:36:23:77:8b:37:66:2c:9f:98:18:55:6b:94:22: c1:15:22:94:ce:db:86:94:30:78:83:6b:f7:16:12: bb:29:50:41:90:02:ee:fb:07:d0:5d:74:98:e6:3a: 8c:28:14:a3:01:86:91:4a:06:38:43:06:01:d7:96: 6c:52:58:71:e0:3f:de:e8:29:7c:92:cc:c8:0d:ef: f9:70:d5:f8:d1:bb:d5:36:44:27:c9:87:7f:97:4e: cb:4d:8a:e7:29:84:fd:17:87:96:96:8f:0b:27:be: 6f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6F:74:A6:EC:D0:95:0B:8E:82:E7:B2:39:66:EB:F2:A6:21:B4:8E X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:56:82:d4:8c:00:e9:d1:e1:75:c8:de:bd:bb:43:5d:71:c7: d2:25:0e:3c:b2:26:8d:9a:15:77:5e:8e:b6:47:e2:bc:7b:d4: a2:51:11:16:ae:d4:64:b8:1e:22:61:7a:58:08:bf:b2:33:38: 49:0b:75:76:d1:7b:1e:95:d0:55:55:5f:2f:61:7d:4d:b6:80: 05:15:7a:36:cd:10:f5:9f:5c:d9:e7:3d:8b:54:66:3c:00:ab: 02:2c:95:d7:30:8e:dc:25:3b:e6:6e:11:43:60:23:6f:c6:d3: 9c:5e:01:1f:48:25:14:a3:2f:56:f3:0c:c3:16:c9:43:1a:85: 14:02:87:1b:2f:ca:b0:09:c1:5b:df:09:21:fa:52:f9:fe:03: 32:11:76:33:2b:c5:f5:88:18:ec:b5:74:2e:e9:29:00:19:9c: 02:9e:58:9c:5a:09:9a:e9:37:4d:f5:c2:18:db:2b:5f:90:de: dd:52:f8:da:48:bc:6f:18:c9:43:d9:40:35:86:11:d3:ea:b1: b9:13:63:c1:c1:b7:0f:e7:02:bc:63:39:76:bc:e8:7b:3c:ca: 89:ba:73:89:e8:00:ab:c9:a3:27:6b:46:7a:6b:f6:b9:0a:fd: f2:04:67:35:cb:20:f3:be:c2:6e:0d:0c:41:6e:d6:b7:03:74: b7:4e:36:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVbtgzKZjr3+7OgLmQeXNrcgsxC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNTEwMjAwNjA2MjJaFw0yNTEwMjMxNzEzMjJaMDMxMTAvBgNV BAMTKDY1NkY3NEE2RUNEMDk1MEI4RTgyRTdCMjM5NjZFQkYyQTYyMUI0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WyjhDRv9O7iOATBF+jhlScpz Jusn1ULIKurTjcuy40LkM33Rmkmq+pA9vx5Yy7xQ0fycts/WowQSxIcyHQWzEZ8Y hjbj6czZABMvTxciMzBkNxfcxuLAEO6aZjXSHM2h9Hl9OYawBpm1eV4K+uHkXYMP 9y7iaivu/nmF3dnrmGLFpBnSd39oWLyht+tGcVDW+ShHytg2I3eLN2Ysn5gYVWuU IsEVIpTO24aUMHiDa/cWErspUEGQAu77B9BddJjmOowoFKMBhpFKBjhDBgHXlmxS WHHgP97oKXySzMgN7/lw1fjRu9U2RCfJh3+XTstNiucphP0Xh5aWjwsnvm89AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZW90puzQlQuOgueyOWbr8qYhtI4wHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhWgtSMAOnR4XXI3r27Q11xx9IlDjyyJo2a FXdejrZH4rx71KJRERau1GS4HiJhelgIv7IzOEkLdXbRex6V0FVVXy9hfU22gAUV ejbNEPWfXNnnPYtUZjwAqwIsldcwjtwlO+ZuEUNgI2/G05xeAR9IJRSjL1bzDMMW yUMahRQChxsvyrAJwVvfCSH6Uvn+AzIRdjMrxfWIGOy1dC7pKQAZnAKeWJxaCZrp N031whjbK1+Q3t1S+NpIvG8YyUPZQDWGEdPqsbkTY8HBtw/nArxjOXa86Hs8yom6 c4noAKvJoydrRnpr9rkK/fIEZzXLIPO+wm4NDEFu1rcDdLdONnI= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:47 2025 by rpki-client