$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft File: 45C9770C2C07C2696447FAA1E820E46170A3C56C.mft (raw, json) Hash identifier: JKUWf2OQs1cXUkhIiUuaIB6v3opk55S/zeYwi62ptuI= Subject key identifier: BF:31:24:40:CF:AB:A9:90:A4:30:CF:CE:48:2C:71:FF:90:98:2F:0E Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 43272C55695FD485E79C9960F0711D53F275B4C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft Manifest number: 02A6 Signing time: Sat 23 Aug 2025 04:50:42 +0000 Manifest this update: Sat 23 Aug 2025 04:45:42 +0000 Manifest next update: Tue 26 Aug 2025 12:04:42 +0000 Files and hashes: 1: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: vm5PhQ9OCf0FV3z/CHJ+RxKQHUnZeKsqWqWQwv0pY+4=) 2: 45C9770C2C07C2696447FAA1E820E46170A3C56C.crl (hash: SYdlg2xdgQQxIx4urt3febBMwp7V2WMUokOKxUCQJz8=) 3: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: uUzFxXX9+YSqNUoc9f/VNA2O72vd2Y345REzg4qr7bE=) 4: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: DFA3qBFACki/karT3fIlYISlkq7/i7wKwlvN+BCd6A4=) 5: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: XtJZn7ljJSfP6iL/MDjtfpVkviYKx4Xboir3grsNMCo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 12:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:27:2c:55:69:5f:d4:85:e7:9c:99:60:f0:71:1d:53:f2:75:b4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Aug 23 04:45:42 2025 GMT Not After : Aug 26 12:04:42 2025 GMT Subject: CN=BF312440CFABA990A430CFCE482C71FF90982F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:96:ca:42:11:60:54:0e:c3:89:6a:a5:53: 0a:8b:cd:8e:13:67:9f:59:2d:00:57:77:f5:84:93: 20:ae:55:23:d8:57:2d:e2:2a:61:b9:bd:3d:aa:70: 88:04:9c:7c:6e:a5:27:17:6b:60:b0:e9:22:25:d3: ff:62:c1:c2:23:c2:ce:4d:2e:d3:a0:10:2d:75:b2: 53:ab:b0:e1:e9:b7:bb:26:04:98:4f:f8:de:ca:7f: 63:e9:6e:06:6b:4d:52:af:38:87:dd:8f:2b:ff:6c: 19:89:e2:5a:60:48:7e:ee:c8:95:85:31:08:56:87: 72:4a:6c:0c:f6:94:a1:51:4a:af:38:53:a7:09:27: a9:1f:22:c3:25:43:30:21:65:a5:7c:75:3c:96:32: 8b:08:c3:30:df:44:0b:9f:23:df:0a:8e:b9:2d:10: 0e:ba:9f:d9:fc:12:f5:05:19:82:c3:b2:d0:61:67: f1:f9:62:1c:b3:39:89:2e:54:62:8d:20:44:61:9a: 5f:e9:5b:b2:1d:b4:58:67:68:6e:00:86:2b:ae:87: c6:23:1b:02:c6:e0:59:45:c1:38:7e:8b:5c:82:2b: 72:6f:68:6e:75:30:3e:2d:19:e8:20:27:0f:a9:e6: ab:b8:3a:41:23:0e:91:ef:2d:2e:ca:36:6b:64:54: e3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:31:24:40:CF:AB:A9:90:A4:30:CF:CE:48:2C:71:FF:90:98:2F:0E X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d8:c8:56:61:23:23:15:44:e0:85:d2:ae:47:99:8a:55:cf: a6:a5:7c:de:16:2d:99:61:a7:ab:5f:49:92:c1:11:1b:eb:9a: ff:fe:92:33:93:57:79:c4:59:c1:5f:02:76:64:e2:69:bb:34: 1d:b6:dc:9b:31:0c:29:f0:30:70:87:87:7f:b9:21:ea:61:07: df:f2:5d:c1:3b:74:19:04:1c:e0:0c:3b:fb:8f:fd:15:38:a4: ac:65:21:b9:76:bf:e8:f4:a0:df:24:b1:c2:68:4b:18:da:10: 93:54:f0:7e:0d:f2:0b:56:8e:b3:b9:4d:64:b5:c7:3b:f3:76: b6:41:3a:b8:82:9e:fc:00:be:6b:b1:5f:13:9f:40:fc:d5:f5: 44:4c:bd:f6:a8:2d:c8:08:00:46:35:d0:67:a6:6d:21:8b:e8: 99:db:37:76:0b:da:01:a5:c0:57:38:48:05:61:56:c7:18:14: fb:8c:3a:7a:55:96:83:88:6e:be:71:04:1d:cd:49:e5:56:2a: ee:ad:35:85:bb:54:87:02:88:19:88:73:6d:7f:25:e7:ab:ee: 0f:69:a9:53:1c:aa:aa:ac:c3:64:10:71:61:ce:6c:f4:e4:50: 66:69:26:6e:51:a5:33:7a:6e:f6:7a:db:d8:2b:b2:a3:df:dd: e2:71:80:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQycsVWlf1IXnnJlg8HEdU/J1tMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNTA4MjMwNDQ1NDJaFw0yNTA4MjYxMjA0NDJaMDMxMTAvBgNV BAMTKEJGMzEyNDQwQ0ZBQkE5OTBBNDMwQ0ZDRTQ4MkM3MUZGOTA5ODJGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPpbKQhFgVA7DiWqlUwqLzY4T Z59ZLQBXd/WEkyCuVSPYVy3iKmG5vT2qcIgEnHxupScXa2Cw6SIl0/9iwcIjws5N LtOgEC11slOrsOHpt7smBJhP+N7Kf2PpbgZrTVKvOIfdjyv/bBmJ4lpgSH7uyJWF MQhWh3JKbAz2lKFRSq84U6cJJ6kfIsMlQzAhZaV8dTyWMosIwzDfRAufI98Kjrkt EA66n9n8EvUFGYLDstBhZ/H5YhyzOYkuVGKNIERhml/pW7IdtFhnaG4Ahiuuh8Yj GwLG4FlFwTh+i1yCK3JvaG51MD4tGeggJw+p5qu4OkEjDpHvLS7KNmtkVONBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvzEkQM+rqZCkMM/OSCxx/5CYLw4wHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0 NjE3MEEzQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLYyFZhIyMVROCF0q5HmYpVz6alfN4WLZlh p6tfSZLBERvrmv/+kjOTV3nEWcFfAnZk4mm7NB223JsxDCnwMHCHh3+5IephB9/y XcE7dBkEHOAMO/uP/RU4pKxlIbl2v+j0oN8kscJoSxjaEJNU8H4N8gtWjrO5TWS1 xzvzdrZBOriCnvwAvmuxXxOfQPzV9URMvfaoLcgIAEY10GembSGL6JnbN3YL2gGl wFc4SAVhVscYFPuMOnpVloOIbr5xBB3NSeVWKu6tNYW7VIcCiBmIc21/Jeer7g9p qVMcqqqsw2QQcWHObPTkUGZpJm5RpTN6bvZ629grsqPf3eJxgCE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:18 2025 by rpki-client