$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft File: 4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json) Hash identifier: aKJlOUgiHyKF1TPtVCoDaQ2seSMt/+7gOBZYVwiCg3c= Subject key identifier: 05:4D:65:93:AB:E0:63:D3:3B:00:FE:ED:82:CD:B5:A3:77:13:82:77 Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 Certificate issuer: /CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Certificate serial: 35A61D902D731737C8B9BFCF15CEE81DAAC90143 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft Manifest number: 0519 Signing time: Mon 20 Oct 2025 01:31:15 +0000 Manifest this update: Mon 20 Oct 2025 01:26:15 +0000 Manifest next update: Thu 23 Oct 2025 02:55:15 +0000 Files and hashes: 1: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: UTdVYW6Dz9BE2iYURgacbi9ISMkDOAFpXPKmooTOD6k=) 2: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: cwL/Wm98vbTxoyJQfTlH4ycMGF6EbITvKpTsxzWifEM=) 3: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: MKGEqu2Psk6FQlMCBwUj3C02UOwY+xcEBLE/JQF9Mu0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a6:1d:90:2d:73:17:37:c8:b9:bf:cf:15:ce:e8:1d:aa:c9:01:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Validity Not Before: Oct 20 01:26:15 2025 GMT Not After : Oct 23 02:55:15 2025 GMT Subject: CN=054D6593ABE063D33B00FEED82CDB5A377138277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:dc:17:81:9f:57:d1:99:14:89:b4:e4:c3: 76:70:be:c8:5c:08:fa:c7:45:bb:1e:5f:87:41:2d: e0:2e:4c:e4:4c:ab:81:45:d1:df:ed:b3:26:d6:a0: 76:b3:ae:41:57:c6:b5:de:52:11:2c:0a:4a:f7:18: af:5f:8b:00:9e:b4:b1:ba:19:e8:82:6b:c6:98:9d: 3c:2b:ee:7f:00:e1:83:78:62:06:79:10:8b:db:c7: 32:2e:ae:b3:59:b5:60:3a:59:a1:8b:ee:a2:f2:ee: ca:f7:64:70:4f:c3:d5:e6:b6:69:1c:69:50:79:f2: 68:48:ae:34:c6:de:73:97:ff:a7:a4:51:7b:7e:0f: f2:67:89:a1:56:de:41:e3:8c:ce:06:be:ba:f9:85: d7:f7:20:92:f2:41:c1:76:06:5e:c2:af:1d:94:aa: a2:2d:8a:56:2e:1c:d4:c5:65:97:34:67:c1:bb:ef: 3b:00:1a:67:97:96:a3:b7:64:55:de:a3:a4:58:35: 58:29:c3:86:cb:28:20:41:de:15:b7:47:f0:e2:4d: 1c:cf:8d:1f:79:26:60:42:25:80:2e:44:4a:f1:9b: a9:0f:32:de:60:99:7b:43:04:7d:87:3a:39:d2:87: 28:73:7f:dd:4f:ae:ff:e2:20:3c:27:48:24:0b:3a: 28:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4D:65:93:AB:E0:63:D3:3B:00:FE:ED:82:CD:B5:A3:77:13:82:77 X509v3 Authority Key Identifier: keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:91:af:e1:32:64:b1:7b:f3:34:46:8b:c7:26:4f:60:1e:42: 9c:7b:06:2d:63:c8:88:ed:9c:33:e9:61:e4:bb:78:27:5b:a9: 9b:68:09:fa:51:1a:b9:f5:6a:8a:1e:47:54:73:70:1c:7a:65: 96:5e:7b:e7:82:b9:99:dd:cd:e1:f0:eb:11:e4:96:82:5d:bd: d3:1f:ba:f2:b3:3d:28:7b:d2:5f:ff:6e:30:c2:81:ac:a9:f1: e8:b6:bd:e0:7e:07:b7:b6:49:32:6a:24:d9:2a:7c:41:b1:2d: 37:01:7a:c6:72:e7:c2:c9:43:94:6a:0b:67:39:2c:a4:02:dc: 23:9a:fd:4b:f5:88:e2:da:86:87:c0:4a:82:bb:47:5a:70:bb: 0f:65:8d:bd:0b:f0:90:66:0f:69:fc:9d:ee:1f:a2:65:0a:df: d7:6d:36:be:d2:2f:f0:be:a3:e1:38:de:7b:ff:8a:6e:94:a2: 17:fe:35:42:f6:05:db:5f:b4:15:2a:45:44:38:ff:d9:4f:f2: e7:52:f5:d5:d2:60:d7:c8:f1:12:6d:7f:43:b5:2a:c1:46:5d: 57:33:f4:8f:c1:d9:40:46:ab:df:2e:03:fe:f3:e7:0e:e2:b5: a0:16:44:bf:f3:09:77:18:62:d4:f4:87:a3:87:42:53:33:d0: 48:37:10:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNaYdkC1zFzfIub/PFc7oHarJAUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNF MzVCNEM0NjAeFw0yNTEwMjAwMTI2MTVaFw0yNTEwMjMwMjU1MTVaMDMxMTAvBgNV BAMTKDA1NEQ2NTkzQUJFMDYzRDMzQjAwRkVFRDgyQ0RCNUEzNzcxMzgyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChm9wXgZ9X0ZkUibTkw3Zwvshc CPrHRbseX4dBLeAuTORMq4FF0d/tsybWoHazrkFXxrXeUhEsCkr3GK9fiwCetLG6 GeiCa8aYnTwr7n8A4YN4YgZ5EIvbxzIurrNZtWA6WaGL7qLy7sr3ZHBPw9Xmtmkc aVB58mhIrjTG3nOX/6ekUXt+D/JniaFW3kHjjM4Gvrr5hdf3IJLyQcF2Bl7Crx2U qqItilYuHNTFZZc0Z8G77zsAGmeXlqO3ZFXeo6RYNVgpw4bLKCBB3hW3R/DiTRzP jR95JmBCJYAuRErxm6kPMt5gmXtDBH2HOjnShyhzf91Prv/iIDwnSCQLOiiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBU1lk6vgY9M7AP7tgs21o3cTgncwHwYDVR0j BBgwFoAURVGgMsREhf9lk+BDUn4+HONbTEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMC80NTUxQTAzMkM0 NDQ4NUZGNjU5M0UwNDM1MjdFM0UxQ0UzNUI0QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNFMzVC NEM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNF MUNFMzVCNEM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISRr+EyZLF78zRGi8cmT2AeQpx7Bi1jyIjt nDPpYeS7eCdbqZtoCfpRGrn1aooeR1RzcBx6ZZZee+eCuZndzeHw6xHkloJdvdMf uvKzPSh70l//bjDCgayp8ei2veB+B7e2STJqJNkqfEGxLTcBesZy58LJQ5RqC2c5 LKQC3COa/Uv1iOLahofASoK7R1pwuw9ljb0L8JBmD2n8ne4fomUK39dtNr7SL/C+ o+E43nv/im6Uohf+NUL2BdtftBUqRUQ4/9lP8udS9dXSYNfI8RJtf0O1KsFGXVcz 9I/B2UBGq98uA/7z5w7itaAWRL/zCXcYYtT0h6OHQlMz0Eg3ENg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:43 2025 by rpki-client