$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: wY/w1CW00Uq02DSzxDgakGXqYs2z8jaWYvLEiXQnNfA= Subject key identifier: 01:36:CC:1B:63:CA:0F:32:EB:88:E0:5E:32:48:6E:97:48:B2:7A:B6 Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 633C59EE25567DD031BDE06C5A8038C43BC8A9B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 0522 Signing time: Tue 04 Nov 2025 18:40:54 +0000 Manifest this update: Tue 04 Nov 2025 18:35:54 +0000 Manifest next update: Fri 07 Nov 2025 18:55:54 +0000 Files and hashes: 1: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 2: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: EURpPhK1Tv8mWyPX5XukCVBZOfqRa9eK5RVjTgPxIiw=) 3: 3131372e3132312e3230362e302f32342d3234203d3e203436303239.roa (hash: kVr4SbJNPOjRvwiHc+hgo6K4HzE1wOJqmCs09GwhV5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3c:59:ee:25:56:7d:d0:31:bd:e0:6c:5a:80:38:c4:3b:c8:a9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Nov 4 18:35:54 2025 GMT Not After : Nov 7 18:55:54 2025 GMT Subject: CN=0136CC1B63CA0F32EB88E05E32486E9748B27AB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:6f:5c:cc:79:c1:4f:c3:66:25:9d:5c:0d: 1e:c0:ee:5e:e3:d0:5c:da:9e:53:01:60:3f:43:aa: 57:59:5f:09:ea:d7:62:bc:72:4e:aa:0e:fd:7d:cf: ed:dd:5d:3d:5f:1c:a9:b3:73:26:5f:89:5d:9d:62: a1:df:66:a7:25:2c:8d:d4:59:97:80:ca:50:40:71: e3:44:df:8e:e1:f0:b7:58:ef:f4:40:60:7d:90:26: 76:3c:3a:2e:8f:13:03:d7:db:d5:1b:2a:66:58:c9: 32:69:30:a1:f4:e8:82:f5:e5:0c:d8:22:2f:0f:9c: 62:c8:bc:46:42:27:e4:f1:af:34:8a:87:98:35:51: 62:6e:1e:46:be:38:5b:7f:e1:f0:32:24:bd:0b:f3: b1:d6:7c:f0:36:1b:e0:5f:a1:b6:36:88:87:61:87: 6d:12:36:e5:95:99:3d:f8:e8:95:47:fc:da:02:f2: f8:04:ed:43:cc:c2:d6:ab:3f:bc:1c:10:ef:ea:3f: cc:13:ca:79:90:8e:e0:a6:5b:a4:29:e6:59:a0:0e: 41:de:b7:5d:5a:3c:84:6d:ae:23:ab:e7:ec:d6:1a: 5a:32:df:1e:7b:95:ab:ff:fe:41:d0:28:1b:7d:ee: 92:cb:89:6d:5a:6f:ca:c9:c1:11:1a:7b:54:32:38: c3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:36:CC:1B:63:CA:0F:32:EB:88:E0:5E:32:48:6E:97:48:B2:7A:B6 X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:0c:7b:c7:ca:3f:21:36:10:0a:dc:78:8b:f5:b9:54:1b:d9: d5:c9:c6:4d:96:d5:7e:c1:19:36:1c:79:87:c5:6a:6b:0b:b2: fb:74:b8:da:cf:70:65:48:10:68:b8:49:cf:30:ef:65:6e:ec: ac:00:cb:7e:64:41:41:65:47:04:0c:25:01:2c:03:2a:0c:02: 53:f4:af:e6:d1:b8:fa:ef:97:0f:3c:1f:d8:dd:9e:35:bd:20: ee:13:59:84:2a:12:54:76:f8:94:30:ee:d9:2b:30:1e:c1:6c: 02:3e:ab:42:6c:52:be:6d:59:b5:97:eb:13:d9:52:d2:50:13: 4b:1c:5f:47:9d:5b:a7:a0:3b:38:67:a7:bf:2a:1e:93:9e:c1: 70:67:ea:59:bd:40:9b:13:a3:74:bd:7d:7c:70:1a:db:16:21: 5f:4d:bc:ed:59:59:de:3d:cb:76:3a:7f:e0:aa:a0:46:54:c6: 37:fe:41:7a:a2:d9:73:69:e9:63:67:4a:5f:64:c9:08:ec:cc: 5f:c3:4e:57:9b:d2:67:b2:9a:70:f8:02:b4:0c:a7:c7:33:b9: 54:02:e8:7c:b4:ef:ca:58:4d:93:19:38:bd:26:76:cb:12:f6: e9:c4:e8:b1:c5:fd:d6:aa:ef:53:10:bf:f8:b4:76:dd:70:91: c2:0a:ae:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYzxZ7iVWfdAxveBsWoA4xDvIqbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTExMDQxODM1NTRaFw0yNTExMDcxODU1NTRaMDMxMTAvBgNV BAMTKDAxMzZDQzFCNjNDQTBGMzJFQjg4RTA1RTMyNDg2RTk3NDhCMjdBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70W9czHnBT8NmJZ1cDR7A7l7j 0FzanlMBYD9DqldZXwnq12K8ck6qDv19z+3dXT1fHKmzcyZfiV2dYqHfZqclLI3U WZeAylBAceNE347h8LdY7/RAYH2QJnY8Oi6PEwPX29UbKmZYyTJpMKH06IL15QzY Ii8PnGLIvEZCJ+TxrzSKh5g1UWJuHka+OFt/4fAyJL0L87HWfPA2G+BfobY2iIdh h20SNuWVmT346JVH/NoC8vgE7UPMwtarP7wcEO/qP8wTynmQjuCmW6Qp5lmgDkHe t11aPIRtriOr5+zWGloy3x57lav//kHQKBt97pLLiW1ab8rJwREae1QyOMPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUATbMG2PKDzLriOBeMkhul0iyerYwHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0Me8fKPyE2EArceIv1uVQb2dXJxk2W1X7B GTYceYfFamsLsvt0uNrPcGVIEGi4Sc8w72Vu7KwAy35kQUFlRwQMJQEsAyoMAlP0 r+bRuPrvlw88H9jdnjW9IO4TWYQqElR2+JQw7tkrMB7BbAI+q0JsUr5tWbWX6xPZ UtJQE0scX0edW6egOzhnp78qHpOewXBn6lm9QJsTo3S9fXxwGtsWIV9NvO1ZWd49 y3Y6f+CqoEZUxjf+QXqi2XNp6WNnSl9kyQjszF/DTleb0meymnD4ArQMp8czuVQC 6Hy078pYTZMZOL0mdssS9unE6LHF/daq71MQv/i0dt1wkcIKrs4= -----END CERTIFICATE-----Generated at Wed Nov 5 06:22:31 2025 by rpki-client