$ rpki-client -vvf repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft File: A45C7486216530EA5E88FE961534FA7EAE72A79C.mft (raw, json) Hash identifier: 3wKav6dr1iJC7QK1gZjPWUE6oqqwsyPTwa6bN1isidE= Subject key identifier: FE:9E:FE:07:E0:3F:DC:3A:8E:20:36:80:BD:67:4D:67:7B:AF:C9:8F Authority key identifier: A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C Certificate issuer: /CN=A45C7486216530EA5E88FE961534FA7EAE72A79C Certificate serial: 1413A095937462942B53D4E8F76E9F14D09887C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft Manifest number: 0118 Signing time: Sun 19 Oct 2025 08:41:32 +0000 Manifest this update: Sun 19 Oct 2025 08:36:32 +0000 Manifest next update: Wed 22 Oct 2025 15:28:32 +0000 Files and hashes: 1: A45C7486216530EA5E88FE961534FA7EAE72A79C.crl (hash: +okBy6cbP6oJhR7d/mhG/BqiEVby3V8Asmy2AG7BvtM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 15:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:13:a0:95:93:74:62:94:2b:53:d4:e8:f7:6e:9f:14:d0:98:87:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A45C7486216530EA5E88FE961534FA7EAE72A79C Validity Not Before: Oct 19 08:36:32 2025 GMT Not After : Oct 22 15:28:32 2025 GMT Subject: CN=FE9EFE07E03FDC3A8E203680BD674D677BAFC98F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:68:17:ca:fc:01:4d:8f:6e:82:d8:97:34:86: 4b:2f:80:97:96:fa:14:40:d9:41:72:c5:8e:23:b1: 92:58:33:e6:50:23:d9:44:2c:93:54:71:06:89:14: a9:94:13:ff:76:45:85:86:ec:84:33:ad:68:83:bc: 55:52:66:14:82:3a:12:f7:e4:77:08:35:88:ee:5d: 18:89:90:72:9e:43:c3:66:c5:38:71:02:40:7e:0e: 26:b0:25:9e:e2:45:ea:a0:d3:af:2c:28:dd:76:23: 8d:9e:e6:74:70:03:26:29:39:62:ab:59:ad:f3:09: 5c:f3:5b:a3:d2:51:6c:42:8a:77:c7:4f:e8:92:a0: ec:8e:44:b0:68:e5:12:3e:37:e8:88:01:4e:d1:10: e8:83:da:a6:2b:59:cb:03:bf:5d:4f:21:32:57:04: 67:d1:98:aa:ca:b1:6b:5c:e9:84:07:68:ac:59:4f: 4b:96:9f:62:76:28:2c:64:fa:06:1c:52:fa:cd:c0: 1b:00:87:6f:33:d5:a0:4c:8f:ca:74:85:ed:16:f3: 5a:db:4c:8a:42:e6:24:88:74:5f:c5:1c:dd:25:a6: 80:e9:ce:1f:d8:c3:d3:6a:7e:45:54:28:c3:d9:bd: ea:b6:f2:bc:2b:11:71:6e:dc:b4:30:93:0d:e7:14: f6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9E:FE:07:E0:3F:DC:3A:8E:20:36:80:BD:67:4D:67:7B:AF:C9:8F X509v3 Authority Key Identifier: keyid:A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d3:8c:21:b5:97:c9:ff:8b:54:d3:8b:1a:37:37:4a:dd:6e: 1e:a4:33:84:71:fb:f6:82:75:36:2e:e1:93:bf:f2:f8:b0:2c: 75:ea:1d:8d:f8:c9:e0:1f:11:20:01:eb:93:e1:61:5b:24:d1: f3:7f:ed:f3:3f:6d:1a:9a:e2:38:39:11:0d:19:e2:a0:41:88: 9c:ee:d6:58:05:4e:0a:81:ef:9d:bb:f5:6e:c8:24:96:72:9d: 5d:ac:57:de:27:0f:c9:4b:87:5a:72:38:a5:f7:f6:c5:c5:bd: 3a:bc:0d:f2:8e:48:3b:f7:de:ad:0a:6a:4c:ab:aa:cf:33:99: d0:0a:27:f2:8e:72:35:29:de:92:47:41:ef:02:ca:8a:88:e4: 44:07:88:c3:23:83:a9:23:e7:1d:ae:ce:e5:4d:1b:1b:f0:4f: 31:85:34:29:7d:d9:bb:a7:6b:0b:90:b9:91:c8:a8:92:28:2e: 93:7f:d7:fa:29:f3:ec:af:e1:a9:b3:85:9f:b2:ae:e8:88:6b: 4b:9d:6d:53:6e:57:c4:da:33:ca:b1:00:38:b2:f0:17:3d:e6: ef:79:b9:c5:46:0e:bb:67:30:f8:b9:1b:b3:7e:8b:cd:f8:88: be:f7:ff:6e:be:16:2d:e1:73:a1:97:6a:90:65:f7:2c:b4:de: 9a:c9:3d:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBOglZN0YpQrU9To926fFNCYh8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZBN0VB RTcyQTc5QzAeFw0yNTEwMTkwODM2MzJaFw0yNTEwMjIxNTI4MzJaMDMxMTAvBgNV BAMTKEZFOUVGRTA3RTAzRkRDM0E4RTIwMzY4MEJENjc0RDY3N0JBRkM5OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxaBfK/AFNj26C2Jc0hksvgJeW +hRA2UFyxY4jsZJYM+ZQI9lELJNUcQaJFKmUE/92RYWG7IQzrWiDvFVSZhSCOhL3 5HcINYjuXRiJkHKeQ8NmxThxAkB+DiawJZ7iReqg068sKN12I42e5nRwAyYpOWKr Wa3zCVzzW6PSUWxCinfHT+iSoOyORLBo5RI+N+iIAU7REOiD2qYrWcsDv11PITJX BGfRmKrKsWtc6YQHaKxZT0uWn2J2KCxk+gYcUvrNwBsAh28z1aBMj8p0he0W81rb TIpC5iSIdF/FHN0lpoDpzh/Yw9NqfkVUKMPZveq28rwrEXFu3LQwkw3nFPY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/p7+B+A/3DqOIDaAvWdNZ3uvyY8wHwYDVR0j BBgwFoAUpFx0hiFlMOpeiP6WFTT6fq5yp5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWU0NjM2NS03NGQzLTRlNjAtOTUyYS1mOTQyODA5NjAwMWQvMC9BNDVDNzQ4NjIx NjUzMEVBNUU4OEZFOTYxNTM0RkE3RUFFNzJBNzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZBN0VBRTcy QTc5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZB N0VBRTcyQTc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfTjCG1l8n/i1TTixo3N0rdbh6kM4Rx+/aC dTYu4ZO/8viwLHXqHY34yeAfESAB65PhYVsk0fN/7fM/bRqa4jg5EQ0Z4qBBiJzu 1lgFTgqB75279W7IJJZynV2sV94nD8lLh1pyOKX39sXFvTq8DfKOSDv33q0Kakyr qs8zmdAKJ/KOcjUp3pJHQe8CyoqI5EQHiMMjg6kj5x2uzuVNGxvwTzGFNCl92bun awuQuZHIqJIoLpN/1/op8+yv4amzhZ+yruiIa0udbVNuV8TaM8qxADiy8Bc95u95 ucVGDrtnMPi5G7N+i834iL73/26+Fi3hc6GXapBl9yy03prJPZQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:28:40 2025 by rpki-client