$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: RZ/1cXRxyrnDV5U/trvSe5+x8rR0b4ZFc5NJeDiR6wc= Subject key identifier: EB:DB:2C:74:FC:7B:C9:9A:8E:AF:CF:D3:06:6F:A6:B5:9B:69:15:01 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 588626E48DF0CFDEF730A956DFF46D209BD2C4AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 0500 Signing time: Sat 23 Aug 2025 08:50:56 +0000 Manifest this update: Sat 23 Aug 2025 08:45:56 +0000 Manifest next update: Tue 26 Aug 2025 20:17:56 +0000 Files and hashes: 1: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 2: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 3: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) 4: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) 5: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: nz9GxWzrCv/5Qwse8pUSAzJDBVYVJFy6kF50Ij7t/xo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:86:26:e4:8d:f0:cf:de:f7:30:a9:56:df:f4:6d:20:9b:d2:c4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Aug 23 08:45:56 2025 GMT Not After : Aug 26 20:17:56 2025 GMT Subject: CN=EBDB2C74FC7BC99A8EAFCFD3066FA6B59B691501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:93:0f:e6:36:7d:fe:9e:68:e9:7d:4e:b0:c6: df:e5:68:ea:9b:0d:fd:31:7e:a1:2e:f0:82:bd:e3: 3d:ce:60:a5:48:64:7e:9e:b6:90:4a:80:fc:7b:dd: 23:6a:5b:c7:24:7e:1d:b7:96:c2:39:b6:3b:fb:6f: 4f:b1:08:78:e2:d4:71:a7:de:4f:42:cd:b4:80:98: 16:ad:0c:11:26:a1:7b:dc:19:26:d8:d2:fc:40:68: 9f:77:17:7b:b0:06:6a:5b:96:3f:07:8e:6a:e9:5b: 87:c0:62:93:f1:22:01:bc:d2:df:1a:c1:6d:6c:01: 4a:5c:97:a9:f9:32:49:f2:ff:b0:61:63:cb:ee:92: f5:df:fe:ff:21:dc:f4:64:35:a0:61:a4:0e:60:fa: 6a:65:39:b6:98:1f:2d:d2:f3:dd:8d:e2:9c:69:74: b9:66:94:09:b3:28:9e:7e:bf:1f:1d:b9:66:58:06: 46:e5:eb:a4:fa:65:82:2c:b0:d2:a8:62:2a:6e:68: a7:08:ed:3a:0e:94:ff:f2:76:ee:a1:52:36:8c:41: f3:06:65:4f:99:bc:e9:a1:92:63:b2:bf:46:15:72: e1:a6:9e:63:d5:b8:40:4e:e2:7d:4f:9c:a2:b1:c1: 3d:de:b3:67:dc:dd:19:06:16:6a:0b:f7:9a:f0:ee: df:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DB:2C:74:FC:7B:C9:9A:8E:AF:CF:D3:06:6F:A6:B5:9B:69:15:01 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7c:ce:b9:c7:ad:c7:ba:68:7c:60:da:1f:04:78:db:b3:e2: 15:c0:b7:12:c7:cf:c7:51:00:87:90:a9:19:63:cd:f7:6b:76: 56:5a:79:6c:2e:2d:9d:d0:6c:8c:a4:54:6c:06:c0:1b:fc:cc: 71:bb:c0:4b:fc:1a:91:1e:e5:bf:27:e9:ca:5e:4c:7c:b3:aa: 43:50:04:68:03:ab:2e:eb:c0:46:8f:c3:c4:e5:71:5c:0e:20: 54:d5:18:9e:1c:a3:75:85:f9:5a:76:7b:85:12:f8:2f:d6:94: e7:bc:2d:11:0c:5b:82:22:f2:95:5e:4d:7e:9a:02:2b:ff:68: de:e0:5c:77:19:06:52:42:9c:2c:e3:fc:04:d0:18:ec:11:6b: 12:2e:56:28:af:cd:d8:ed:5a:f9:48:c3:fb:7f:38:8a:52:07: 32:71:87:9a:11:72:90:f5:2c:bf:9b:19:21:c6:d9:cb:ce:38: 2f:07:58:9e:45:59:5f:37:8b:2a:86:9e:6d:dc:38:14:76:53: 37:99:36:fd:ae:e0:29:bb:ec:91:f2:3f:62:a5:53:b0:27:87: 22:8b:0e:57:79:b4:d5:96:9a:54:95:52:4f:05:17:0f:1f:f2: 11:2a:4d:03:66:65:d2:cd:65:4f:93:30:0a:1b:bb:0e:d8:50: c0:d9:d9:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIYm5I3wz973MKlW3/RtIJvSxK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTA4MjMwODQ1NTZaFw0yNTA4MjYyMDE3NTZaMDMxMTAvBgNV BAMTKEVCREIyQzc0RkM3QkM5OUE4RUFGQ0ZEMzA2NkZBNkI1OUI2OTE1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1kw/mNn3+nmjpfU6wxt/laOqb Df0xfqEu8IK94z3OYKVIZH6etpBKgPx73SNqW8ckfh23lsI5tjv7b0+xCHji1HGn 3k9CzbSAmBatDBEmoXvcGSbY0vxAaJ93F3uwBmpblj8HjmrpW4fAYpPxIgG80t8a wW1sAUpcl6n5Mkny/7BhY8vukvXf/v8h3PRkNaBhpA5g+mplObaYHy3S892N4pxp dLlmlAmzKJ5+vx8duWZYBkbl66T6ZYIssNKoYipuaKcI7ToOlP/ydu6hUjaMQfMG ZU+ZvOmhkmOyv0YVcuGmnmPVuEBO4n1PnKKxwT3es2fc3RkGFmoL95rw7t89AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU69ssdPx7yZqOr8/TBm+mtZtpFQEwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAF8zrnHrce6aHxg2h8EeNuz4hXAtxLHz8dR AIeQqRljzfdrdlZaeWwuLZ3QbIykVGwGwBv8zHG7wEv8GpEe5b8n6cpeTHyzqkNQ BGgDqy7rwEaPw8TlcVwOIFTVGJ4co3WF+Vp2e4US+C/WlOe8LREMW4Ii8pVeTX6a Aiv/aN7gXHcZBlJCnCzj/ATQGOwRaxIuViivzdjtWvlIw/t/OIpSBzJxh5oRcpD1 LL+bGSHG2cvOOC8HWJ5FWV83iyqGnm3cOBR2UzeZNv2u4Cm77JHyP2KlU7AnhyKL Dld5tNWWmlSVUk8FFw8f8hEqTQNmZdLNZU+TMAobuw7YUMDZ2a8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:54 2025 by rpki-client