$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: EE15e3VrtYjmSiGPwBRcKoCUP7XsbZ+WUmdv67PU5Ps= Subject key identifier: 9C:18:50:58:F5:C2:1C:73:C9:A8:DC:E3:7B:6F:08:35:1C:65:D0:A9 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 22127D9178D2494B7B0335331A34350F30A3DCF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 0136 Signing time: Sat 18 Oct 2025 17:22:15 +0000 Manifest this update: Sat 18 Oct 2025 17:17:15 +0000 Manifest next update: Tue 21 Oct 2025 23:26:15 +0000 Files and hashes: 1: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: ttQb92MPyPM3Wz8rn6p9J8vPllpgqH20NZUQDLkynYQ=) 2: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: TTBU1STvQaNI1wpqoaj9bG2m/T27T+WPjYQLtuioWoo=) 3: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: cLToJ49OKqVQRgjYGYNvWnWnJYTEY5LWx4h5YZdNEfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 23:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:12:7d:91:78:d2:49:4b:7b:03:35:33:1a:34:35:0f:30:a3:dc:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Oct 18 17:17:15 2025 GMT Not After : Oct 21 23:26:15 2025 GMT Subject: CN=9C185058F5C21C73C9A8DCE37B6F08351C65D0A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:24:e9:87:eb:4d:79:fa:6b:02:e7:f9:87:3c: 6e:bf:ff:c0:ec:d9:44:38:fc:2d:e4:57:77:f0:f2: 5f:48:47:7e:76:ff:73:5a:9a:ed:b7:80:b6:c6:a2: be:da:6b:53:e2:06:b8:41:8a:71:c4:87:5c:3c:3f: a1:5e:14:d5:31:6c:f1:29:8a:86:eb:87:04:80:7c: 38:c6:0c:28:f6:5e:80:cd:26:38:c7:f1:93:cd:e1: 96:91:e6:bc:f1:45:62:e5:05:d5:30:6d:78:f2:9d: be:26:51:38:31:86:a8:3e:f1:70:86:d6:23:6a:ad: 90:1e:00:3a:1e:a0:6b:62:08:ed:52:21:72:7f:3c: a6:f5:d1:60:f0:cb:d2:cc:de:d9:ca:6c:53:c6:a3: 79:45:31:78:22:ef:27:34:ea:60:ee:e1:74:84:a9: d3:08:4e:b3:a9:71:c4:d5:25:3d:9b:eb:2e:8b:f2: c2:a4:c8:66:95:59:c1:97:59:6f:5b:bd:dc:99:1d: c0:31:26:b6:d4:33:58:48:fd:38:40:ed:14:ac:6b: 51:03:20:01:c4:56:5e:01:0e:98:a5:af:04:ff:30: 65:43:87:e0:64:b8:73:33:4e:98:b4:6d:89:05:a6: c0:04:d5:e8:d9:af:a5:dc:ab:99:73:e6:9f:dd:2f: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:18:50:58:F5:C2:1C:73:C9:A8:DC:E3:7B:6F:08:35:1C:65:D0:A9 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:79:81:5f:e4:2f:ac:13:55:c3:3e:cd:95:90:11:69:4c:50: 47:f1:39:a9:c7:a2:7d:7d:cd:03:33:a1:fa:ea:eb:78:a5:71: ab:c5:f3:a6:51:5c:d7:a5:51:84:74:76:3b:dd:ea:df:41:1b: e6:3e:48:4f:03:f6:55:b3:5b:7b:ee:d4:ab:45:73:8e:47:6c: dc:1e:02:3d:a2:f8:29:19:00:9a:11:18:ff:d6:da:d4:9c:ce: b1:b5:86:02:bb:c6:e7:e0:38:88:7c:31:7d:56:b6:d1:2b:96: 72:e1:e2:0e:94:70:e7:0e:7e:1a:95:d0:55:da:a2:0f:74:fa: 03:e8:cc:9f:0b:f5:05:8d:39:93:67:61:69:f0:22:5f:4f:c9: e8:62:14:b0:4f:a7:e2:a4:9e:a6:d6:7c:56:41:7f:eb:02:61: 15:d0:8e:ab:72:ba:9d:5d:c0:ab:51:e2:09:f0:61:be:cd:82: 90:50:34:d3:7f:21:9b:64:1e:f4:3a:c7:e5:7b:93:12:23:3e: 87:47:3d:99:1a:94:f7:5d:85:f8:f2:c1:0a:52:40:02:1f:86: a0:85:ae:93:ce:84:8e:3c:d5:f0:d9:8d:86:03:c8:c4:89:4c: e0:ae:79:be:ea:26:da:4b:1d:6d:59:aa:76:2c:ed:8b:d2:ab: 74:2f:b4:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIhJ9kXjSSUt7AzUzGjQ1DzCj3PgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTEwMTgxNzE3MTVaFw0yNTEwMjEyMzI2MTVaMDMxMTAvBgNV BAMTKDlDMTg1MDU4RjVDMjFDNzNDOUE4RENFMzdCNkYwODM1MUM2NUQwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2JOmH6015+msC5/mHPG6//8Ds 2UQ4/C3kV3fw8l9IR352/3Namu23gLbGor7aa1PiBrhBinHEh1w8P6FeFNUxbPEp iobrhwSAfDjGDCj2XoDNJjjH8ZPN4ZaR5rzxRWLlBdUwbXjynb4mUTgxhqg+8XCG 1iNqrZAeADoeoGtiCO1SIXJ/PKb10WDwy9LM3tnKbFPGo3lFMXgi7yc06mDu4XSE qdMITrOpccTVJT2b6y6L8sKkyGaVWcGXWW9bvdyZHcAxJrbUM1hI/ThA7RSsa1ED IAHEVl4BDpilrwT/MGVDh+BkuHMzTpi0bYkFpsAE1ejZr6Xcq5lz5p/dL/t/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnBhQWPXCHHPJqNzje28INRxl0KkwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK55gV/kL6wTVcM+zZWQEWlMUEfxOanHon19 zQMzofrq63ilcavF86ZRXNelUYR0djvd6t9BG+Y+SE8D9lWzW3vu1KtFc45HbNwe Aj2i+CkZAJoRGP/W2tSczrG1hgK7xufgOIh8MX1WttErlnLh4g6UcOcOfhqV0FXa og90+gPozJ8L9QWNOZNnYWnwIl9PyehiFLBPp+KknqbWfFZBf+sCYRXQjqtyup1d wKtR4gnwYb7NgpBQNNN/IZtkHvQ6x+V7kxIjPodHPZkalPddhfjywQpSQAIfhqCF rpPOhI481fDZjYYDyMSJTOCueb7qJtpLHW1ZqnYs7YvSq3QvtGw= -----END CERTIFICATE-----Generated at Mon Oct 20 23:32:37 2025 by rpki-client