$ rpki-client -vvf repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft File: A45C7486216530EA5E88FE961534FA7EAE72A79C.mft (raw, json) Hash identifier: twsddCwUNt7upfr5kxakmIb767YZkGH+NNHzyv72p68= Subject key identifier: 68:D0:9F:B9:6E:81:D3:FD:01:4F:19:6D:3D:96:B4:F3:B4:40:D1:41 Authority key identifier: A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C Certificate issuer: /CN=A45C7486216530EA5E88FE961534FA7EAE72A79C Certificate serial: 43A5DD9D3FAAE8F5986BD064CC40AC17395002C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft Manifest number: FE Signing time: Fri 22 Aug 2025 11:41:30 +0000 Manifest this update: Fri 22 Aug 2025 11:36:30 +0000 Manifest next update: Mon 25 Aug 2025 14:38:30 +0000 Files and hashes: 1: A45C7486216530EA5E88FE961534FA7EAE72A79C.crl (hash: +4w8Q4B2alZD6XI8YyhQjot0T+Av2lvBRXCGCv7vNEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a5:dd:9d:3f:aa:e8:f5:98:6b:d0:64:cc:40:ac:17:39:50:02:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A45C7486216530EA5E88FE961534FA7EAE72A79C Validity Not Before: Aug 22 11:36:30 2025 GMT Not After : Aug 25 14:38:30 2025 GMT Subject: CN=68D09FB96E81D3FD014F196D3D96B4F3B440D141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:86:4a:00:6a:dd:e5:7a:c7:69:91:c2:8a: 03:66:89:49:70:d1:38:b3:84:5d:6b:04:e8:6b:0f: 7b:00:1a:5e:34:01:23:48:8b:dd:20:db:66:19:d9: 7e:e3:80:c4:a9:25:39:f0:5d:be:9a:33:bd:a2:1d: 33:d4:d7:ed:53:89:dc:59:31:f7:13:61:43:6c:d5: 53:b9:80:4b:a2:bc:f6:94:3f:5d:23:2b:40:ca:c7: f5:00:ac:7d:72:00:26:f2:e9:b3:09:22:4f:59:88: 22:15:f6:fe:35:c4:cb:b5:f2:5d:5c:f4:20:6a:87: 4b:e6:63:b3:a7:72:4f:7e:9e:34:c7:d3:a1:6c:19: 02:01:69:ec:7c:8f:d1:94:10:5a:50:6e:e7:32:80: 24:09:78:b6:9f:48:79:d8:4a:2a:19:ff:b9:0c:dc: 62:01:d8:bd:86:29:0d:af:79:ba:43:91:53:ae:a2: b8:37:7e:b2:9e:b0:48:f7:71:07:e6:55:cd:bc:96: 92:40:16:48:9a:04:9c:39:b5:e5:d0:ad:5e:0e:cf: 01:c5:b2:f9:41:78:25:78:51:ed:4c:32:ab:a4:8b: c4:ec:ac:3d:c7:9c:0d:f2:02:3c:fa:16:b1:a6:e3: 1f:61:58:7d:de:3d:f9:ef:6a:ed:60:49:04:1d:bc: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D0:9F:B9:6E:81:D3:FD:01:4F:19:6D:3D:96:B4:F3:B4:40:D1:41 X509v3 Authority Key Identifier: keyid:A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:dc:b7:e4:a7:78:a5:4e:0b:1b:3d:ee:a5:15:f5:ca:38:b1: a3:1b:fe:5b:1a:20:a0:a8:92:99:11:bc:d3:38:10:83:3c:1b: f8:3a:da:1b:b4:57:91:cb:6e:8c:39:58:b5:01:6b:98:73:47: 7c:48:f1:01:de:f0:2f:19:0c:6d:f9:b8:d2:ea:07:52:9e:73: ce:af:45:8d:4e:a7:88:3c:b8:e9:42:cf:fa:d5:60:12:16:c0: c6:59:5e:d7:19:c1:9f:9a:2f:50:24:49:7a:27:eb:92:c0:35: 81:85:35:e6:dc:1b:62:13:73:e6:d0:4e:8c:19:36:11:53:4b: 48:55:37:2d:8b:75:79:e2:04:fc:5b:bf:f9:f2:16:95:46:fa: 1b:b6:e4:8c:32:f2:13:12:bb:db:ce:41:e5:bf:08:8d:c5:94: 66:a9:8e:5b:b9:08:eb:9c:a9:a4:8a:82:3e:11:de:de:59:f1: 35:e5:e1:a2:f8:e2:af:61:9f:2a:c0:c7:fc:ca:73:7e:ec:11: d6:37:0d:db:9d:0a:db:cd:af:e3:92:2d:da:c7:43:6e:1e:37: 64:36:be:2b:64:4b:79:84:f0:75:56:0a:a0:4b:6f:b3:b7:4f: 4a:4e:b9:50:de:59:26:8a:4e:d7:ec:59:6d:53:27:2c:f2:9b: 60:61:ae:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6XdnT+q6PWYa9BkzECsFzlQAsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZBN0VB RTcyQTc5QzAeFw0yNTA4MjIxMTM2MzBaFw0yNTA4MjUxNDM4MzBaMDMxMTAvBgNV BAMTKDY4RDA5RkI5NkU4MUQzRkQwMTRGMTk2RDNEOTZCNEYzQjQ0MEQxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDFIZKAGrd5XrHaZHCigNmiUlw 0TizhF1rBOhrD3sAGl40ASNIi90g22YZ2X7jgMSpJTnwXb6aM72iHTPU1+1TidxZ MfcTYUNs1VO5gEuivPaUP10jK0DKx/UArH1yACby6bMJIk9ZiCIV9v41xMu18l1c 9CBqh0vmY7Onck9+njTH06FsGQIBaex8j9GUEFpQbucygCQJeLafSHnYSioZ/7kM 3GIB2L2GKQ2vebpDkVOuorg3frKesEj3cQfmVc28lpJAFkiaBJw5teXQrV4OzwHF svlBeCV4Ue1MMquki8TsrD3HnA3yAjz6FrGm4x9hWH3ePfnvau1gSQQdvHphAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNCfuW6B0/0BTxltPZa087RA0UEwHwYDVR0j BBgwFoAUpFx0hiFlMOpeiP6WFTT6fq5yp5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWU0NjM2NS03NGQzLTRlNjAtOTUyYS1mOTQyODA5NjAwMWQvMC9BNDVDNzQ4NjIx NjUzMEVBNUU4OEZFOTYxNTM0RkE3RUFFNzJBNzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZBN0VBRTcy QTc5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZB N0VBRTcyQTc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHct+SneKVOCxs97qUV9co4saMb/lsaIKCo kpkRvNM4EIM8G/g62hu0V5HLbow5WLUBa5hzR3xI8QHe8C8ZDG35uNLqB1Kec86v RY1Op4g8uOlCz/rVYBIWwMZZXtcZwZ+aL1AkSXon65LANYGFNebcG2ITc+bQTowZ NhFTS0hVNy2LdXniBPxbv/nyFpVG+hu25Iwy8hMSu9vOQeW/CI3FlGapjlu5COuc qaSKgj4R3t5Z8TXl4aL44q9hnyrAx/zKc37sEdY3DdudCtvNr+OSLdrHQ24eN2Q2 vitkS3mE8HVWCqBLb7O3T0pOuVDeWSaKTtfsWW1TJyzym2Bhrtw= -----END CERTIFICATE-----Generated at Sun Aug 24 00:25:53 2025 by rpki-client