$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: IteA/roXQ+q+R4baThcrlLXTogfo8W2mYY13pknB4xo= Subject key identifier: 0A:33:21:98:F0:2C:3A:50:9D:56:65:73:DA:58:A3:0C:17:82:24:E1 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 29669ABE8C546F98ACAA53A1DCE7BB19BF0A7260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 0519 Signing time: Sat 18 Oct 2025 14:50:56 +0000 Manifest this update: Sat 18 Oct 2025 14:45:56 +0000 Manifest next update: Tue 21 Oct 2025 19:52:56 +0000 Files and hashes: 1: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 2: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) 3: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: kYDaNFiI2DuOP0BCxkYWQyphvIzSPSo+oF4rJTG4Aas=) 4: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) 5: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 19:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:66:9a:be:8c:54:6f:98:ac:aa:53:a1:dc:e7:bb:19:bf:0a:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Oct 18 14:45:56 2025 GMT Not After : Oct 21 19:52:56 2025 GMT Subject: CN=0A332198F02C3A509D566573DA58A30C178224E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:4f:74:0d:8e:0c:fc:68:02:4d:5d:26:4e: 76:7e:1e:99:c3:15:c1:7f:80:09:5b:d0:04:0b:15: 94:66:43:2e:4c:f8:34:8c:66:d8:97:a4:74:93:a7: 64:c6:26:35:3e:2b:42:6d:9b:fe:e2:b2:85:18:97: fb:a1:9d:93:ea:83:97:2f:d2:96:31:f8:9d:49:18: ba:c0:f3:74:aa:7a:5e:06:0a:5c:49:87:12:b7:44: 7a:d5:53:bb:61:f6:21:7a:dc:8e:00:d3:4b:95:7f: ec:e9:e1:51:a1:b0:71:f8:22:d4:ab:7d:57:1f:07: e9:c0:9f:cc:45:48:db:5d:f6:45:d8:73:36:63:4a: 76:59:6c:c5:f3:fe:37:ce:ee:5a:64:b8:a0:a1:dd: 7a:fa:3e:6e:e9:8d:12:94:bb:9a:96:91:db:3a:4c: cd:5f:de:51:9c:39:5a:88:ae:ee:d4:6c:dd:9b:f2: f6:95:37:36:6c:ce:83:49:1c:9b:b8:70:f5:e0:24: 32:8d:1c:f2:df:33:d1:09:28:d8:3e:57:dc:8d:c9: 3b:03:db:17:6c:90:4e:bf:11:e1:bc:64:b0:0e:b0: 99:28:ac:36:19:5c:5a:2b:74:04:db:11:9b:6a:62: 9d:a3:3c:a2:c0:52:8f:78:55:1a:fb:1f:5e:ac:bc: 5d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:33:21:98:F0:2C:3A:50:9D:56:65:73:DA:58:A3:0C:17:82:24:E1 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:62:2b:bd:41:b4:a9:be:2d:4c:01:38:38:8d:d0:04:92:40: e4:a1:c8:70:26:02:75:0a:48:82:c8:0c:17:94:23:23:d7:d0: 7f:25:b9:40:e7:83:da:cf:24:5a:8b:81:a2:7c:22:79:74:76: f3:5c:90:46:b4:62:06:cb:58:7f:8c:7b:14:ec:b7:aa:5b:2c: 8d:89:81:b4:0e:d1:bb:2a:75:9e:d3:82:b8:41:e3:8d:4f:d4: d2:c4:b4:4b:b5:53:bf:64:59:85:0a:22:f1:96:85:3a:00:08: 85:e4:32:1a:75:67:73:5c:b6:6a:22:16:e2:9b:06:f3:b2:f5: d2:83:1b:64:43:27:ba:94:f3:33:9f:07:92:f8:6a:47:57:dc: 83:1a:c9:1a:2d:cd:c8:a2:69:ae:3e:53:ee:8e:5f:da:df:85: 66:f6:0f:ef:e8:dd:eb:b2:ea:a9:15:5c:34:37:e6:ed:47:5b: 53:04:6d:6c:ac:8c:21:ca:3c:6e:87:2e:ae:ed:62:1a:37:8e: 71:4b:24:ce:91:f2:15:2d:c6:91:da:16:26:8e:28:8f:59:cb: 6e:b8:d3:f2:6e:cc:8b:5e:c6:1c:dd:fa:f8:91:a8:81:43:82: 21:3c:04:8a:95:20:75:87:d7:63:da:23:f2:2b:0c:d4:6e:2d: 2c:bb:31:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWaavoxUb5isqlOh3Oe7Gb8KcmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTEwMTgxNDQ1NTZaFw0yNTEwMjExOTUyNTZaMDMxMTAvBgNV BAMTKDBBMzMyMTk4RjAyQzNBNTA5RDU2NjU3M0RBNThBMzBDMTc4MjI0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbBk90DY4M/GgCTV0mTnZ+HpnD FcF/gAlb0AQLFZRmQy5M+DSMZtiXpHSTp2TGJjU+K0Jtm/7isoUYl/uhnZPqg5cv 0pYx+J1JGLrA83Sqel4GClxJhxK3RHrVU7th9iF63I4A00uVf+zp4VGhsHH4ItSr fVcfB+nAn8xFSNtd9kXYczZjSnZZbMXz/jfO7lpkuKCh3Xr6Pm7pjRKUu5qWkds6 TM1f3lGcOVqIru7UbN2b8vaVNzZszoNJHJu4cPXgJDKNHPLfM9EJKNg+V9yNyTsD 2xdskE6/EeG8ZLAOsJkorDYZXFordATbEZtqYp2jPKLAUo94VRr7H16svF1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCjMhmPAsOlCdVmVz2lijDBeCJOEwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMNiK71BtKm+LUwBODiN0ASSQOShyHAmAnUK SILIDBeUIyPX0H8luUDng9rPJFqLgaJ8Inl0dvNckEa0YgbLWH+MexTst6pbLI2J gbQO0bsqdZ7TgrhB441P1NLEtEu1U79kWYUKIvGWhToACIXkMhp1Z3NctmoiFuKb BvOy9dKDG2RDJ7qU8zOfB5L4akdX3IMayRotzciiaa4+U+6OX9rfhWb2D+/o3euy 6qkVXDQ35u1HW1MEbWysjCHKPG6HLq7tYho3jnFLJM6R8hUtxpHaFiaOKI9Zy264 0/JuzItexhzd+viRqIFDgiE8BIqVIHWH12PaI/IrDNRuLSy7Meo= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:23 2025 by rpki-client