$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: T25XS5di62HjP3OjR72mTBAgcnOX+J8rA7LXrZ5wCWU= Subject key identifier: 77:F1:19:8B:E8:B6:37:DC:69:5D:FA:93:D5:A9:E8:6F:91:50:C4:0A Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 30D82AC78445B9746AF265EF70B12630854CF9D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 011C Signing time: Fri 22 Aug 2025 07:52:16 +0000 Manifest this update: Fri 22 Aug 2025 07:47:16 +0000 Manifest next update: Mon 25 Aug 2025 11:20:16 +0000 Files and hashes: 1: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: +TpGrInw6MYBt52lteYHqPe/GHixGpWLSTXXOphuUSU=) 2: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: KQBwI3mDk7Di2Hgh9pZD8sQ4+9+63h0EFvm7NCb7Spk=) 3: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: zgd7zqzn4pabG2O4J80SMI5npYhm6cRlANFZ6n9A930=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d8:2a:c7:84:45:b9:74:6a:f2:65:ef:70:b1:26:30:85:4c:f9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Aug 22 07:47:16 2025 GMT Not After : Aug 25 11:20:16 2025 GMT Subject: CN=77F1198BE8B637DC695DFA93D5A9E86F9150C40A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:79:ea:c2:48:04:d2:71:81:e8:8a:53:68:1b: bb:08:15:91:28:5d:6b:2d:c5:b7:a7:06:da:9f:3e: 59:cd:a7:26:d1:bb:74:47:f5:ca:db:09:ba:a3:0d: 80:c4:8b:77:16:55:b0:4b:79:b2:4d:4e:80:d1:02: 88:b5:98:9a:15:d8:b7:b8:fa:42:7f:3a:c9:3d:b3: f2:bb:c7:43:48:23:f3:ab:5a:08:22:1e:f1:4c:00: 63:6b:91:15:2f:17:a6:22:de:61:2c:18:2a:f3:5c: 43:95:c0:d3:fc:2c:f3:5e:34:3b:6f:4c:59:94:ce: ce:3e:0f:4d:83:11:9c:48:44:35:8d:17:31:ab:73: f7:cf:6f:07:ee:44:08:5b:8e:f3:fc:73:26:88:f2: 8b:53:9d:15:00:1b:24:07:30:4b:ce:91:e0:66:82: 5f:40:15:eb:43:9b:8f:2e:05:70:4b:5e:fa:7d:c4: a3:74:ee:52:14:70:2d:0e:fb:01:b4:e5:bc:8a:33: fc:79:b7:b0:f1:4d:3c:22:6d:5a:8e:22:b3:8f:ef: 84:02:6e:6a:89:ba:d0:57:9e:d6:35:d5:aa:f6:1d: 3a:84:c5:98:1d:60:49:96:ef:b7:4f:98:c2:60:24: 0d:2a:f5:c5:39:8b:13:35:20:cc:4a:92:fe:d6:11: 71:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F1:19:8B:E8:B6:37:DC:69:5D:FA:93:D5:A9:E8:6F:91:50:C4:0A X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:18:cb:18:58:f9:9c:b7:01:88:5a:2e:c2:84:19:62:8a:cb: bd:af:b4:06:48:6e:63:98:9a:68:e0:c8:b8:2e:9f:77:cb:3f: 0d:5b:00:66:d1:8e:ac:1d:16:53:bb:19:ae:53:05:9b:03:1a: 43:68:42:d5:11:d8:2b:90:2d:ac:09:6d:f4:e7:97:47:ec:c0: d0:a6:93:28:40:f3:c3:42:59:a9:d5:41:9c:a7:45:72:84:69: c9:1b:34:b1:0d:af:c9:ab:04:af:97:9d:bb:b2:d1:d8:1d:58: b9:86:01:ac:d5:70:94:86:14:7c:49:08:88:fa:87:6d:e6:b8: d0:46:72:d0:61:51:77:4b:93:82:9f:a3:dc:a5:a6:25:93:cf: 6e:93:fc:08:7a:8e:2e:44:56:e6:fc:8e:fc:4f:b8:7c:50:1f: 42:ac:59:15:cd:9e:b8:5c:96:15:e1:a8:30:5f:d1:31:5b:cf: d3:f9:3a:70:b2:4f:bc:b6:48:36:91:69:1c:8e:33:f0:cc:d1: 6a:3c:21:b6:ce:d6:c7:49:bc:f0:30:7c:7f:e9:96:05:72:f6: ff:42:cc:4a:87:47:25:f9:78:4c:61:d1:61:74:da:24:ef:a6: 2c:92:54:3b:97:19:e6:69:f3:e0:24:7f:70:f0:9d:58:3d:1d: 4a:11:ce:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMNgqx4RFuXRq8mXvcLEmMIVM+dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTA4MjIwNzQ3MTZaFw0yNTA4MjUxMTIwMTZaMDMxMTAvBgNV BAMTKDc3RjExOThCRThCNjM3REM2OTVERkE5M0Q1QTlFODZGOTE1MEM0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNeerCSATScYHoilNoG7sIFZEo XWstxbenBtqfPlnNpybRu3RH9crbCbqjDYDEi3cWVbBLebJNToDRAoi1mJoV2Le4 +kJ/Osk9s/K7x0NII/OrWggiHvFMAGNrkRUvF6Yi3mEsGCrzXEOVwNP8LPNeNDtv TFmUzs4+D02DEZxIRDWNFzGrc/fPbwfuRAhbjvP8cyaI8otTnRUAGyQHMEvOkeBm gl9AFetDm48uBXBLXvp9xKN07lIUcC0O+wG05byKM/x5t7DxTTwibVqOIrOP74QC bmqJutBXntY11ar2HTqExZgdYEmW77dPmMJgJA0q9cU5ixM1IMxKkv7WEXFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/EZi+i2N9xpXfqT1anob5FQxAowHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8YyxhY+Zy3AYhaLsKEGWKKy72vtAZIbmOY mmjgyLgun3fLPw1bAGbRjqwdFlO7Ga5TBZsDGkNoQtUR2CuQLawJbfTnl0fswNCm kyhA88NCWanVQZynRXKEackbNLENr8mrBK+Xnbuy0dgdWLmGAazVcJSGFHxJCIj6 h23muNBGctBhUXdLk4Kfo9ylpiWTz26T/Ah6ji5EVub8jvxPuHxQH0KsWRXNnrhc lhXhqDBf0TFbz9P5OnCyT7y2SDaRaRyOM/DM0Wo8IbbO1sdJvPAwfH/plgVy9v9C zEqHRyX5eExh0WF02iTvpiySVDuXGeZp8+Akf3DwnVg9HUoRzgQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:20:10 2025 by rpki-client