$ rpki-client -vvf repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft File: 45FD71C7EFF830D20E960225B4A971A14B081364.mft (raw, json) Hash identifier: PC+mA56tm95vuIWgb7jGblMf7cN8jjP680b+uqC6UFA= Subject key identifier: 18:EC:21:FA:F6:35:67:46:00:95:59:E9:E7:C4:66:23:E6:A3:A2:CD Authority key identifier: 45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 Certificate issuer: /CN=45FD71C7EFF830D20E960225B4A971A14B081364 Certificate serial: 75D3870DB31C1DF727448AA4C97F917FBFAD6163 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject info access: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft Manifest number: 04FA Signing time: Wed 06 Aug 2025 01:20:54 +0000 Manifest this update: Wed 06 Aug 2025 01:15:54 +0000 Manifest next update: Sat 09 Aug 2025 02:11:54 +0000 Files and hashes: 1: 3131372e3132312e3230302e302f32342d3234203d3e2030.roa (hash: L0AVu48seGOzT+OjNs4+vHM51Bl8/YcZdTcHUeJSvtI=) 2: 45FD71C7EFF830D20E960225B4A971A14B081364.crl (hash: IgMQzr2MgmdYZXA8wZE7GxmMDTraH/Jt9CJWekmjH3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d3:87:0d:b3:1c:1d:f7:27:44:8a:a4:c9:7f:91:7f:bf:ad:61:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45FD71C7EFF830D20E960225B4A971A14B081364 Validity Not Before: Aug 6 01:15:54 2025 GMT Not After : Aug 9 02:11:54 2025 GMT Subject: CN=18EC21FAF6356746009559E9E7C46623E6A3A2CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:59:0b:fc:c8:8c:9c:52:96:4a:81:9c:93:96: ab:2a:99:9a:df:97:04:65:1a:7e:a3:4a:99:6e:a3: 0c:14:24:31:c5:31:94:b9:b3:68:31:bd:a8:a6:49: 09:f4:fe:4e:2a:78:3f:92:4f:04:32:63:5d:88:cf: 93:10:46:52:13:bf:ec:a4:77:54:80:51:32:cb:45: 24:57:7b:74:25:39:6c:74:a4:b4:c6:84:e7:fa:c6: 87:6e:a7:e9:71:c1:5c:6e:1a:be:79:f6:5c:c7:d2: e4:6e:82:60:65:5b:2c:0d:2b:63:86:b8:ed:19:3f: 08:67:d3:d3:0b:c8:6b:c4:aa:14:78:72:51:7c:c9: b9:0b:11:3b:8b:f7:97:0d:bc:49:c5:71:f1:a1:37: 62:52:75:3c:e5:73:9b:29:4a:2e:6b:b4:41:c5:2d: 68:fc:1e:b7:51:d0:e1:91:d0:d0:4c:d0:f7:63:9e: d7:db:81:92:c5:5c:e6:10:09:2b:35:6a:12:af:6e: 36:18:14:20:34:e3:b3:7e:fb:26:0e:13:9e:e6:db: 25:0a:29:b1:21:dd:cb:d2:28:8e:9e:9c:0f:98:7b: 6d:ff:32:6a:59:07:2f:f0:37:84:0c:f0:76:3c:4d: f8:84:77:be:43:86:94:e6:59:5e:3d:f0:db:d2:b1: de:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EC:21:FA:F6:35:67:46:00:95:59:E9:E7:C4:66:23:E6:A3:A2:CD X509v3 Authority Key Identifier: keyid:45:FD:71:C7:EF:F8:30:D2:0E:96:02:25:B4:A9:71:A1:4B:08:13:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45FD71C7EFF830D20E960225B4A971A14B081364.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/153b067c-ecc9-4dca-987d-b9576815f855/0/45FD71C7EFF830D20E960225B4A971A14B081364.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b1:00:a6:46:9d:d3:d9:72:f0:79:97:d9:64:e6:b2:df:dc: 01:57:72:35:d4:9b:b0:62:5f:4e:f7:c3:46:f9:d7:68:24:80: bf:17:2b:08:41:1d:a0:31:6c:0f:bf:f7:78:ac:4a:15:7c:50: 97:8f:90:aa:38:79:03:8f:f9:3e:54:32:78:4d:66:8f:cb:c0: c5:df:34:f0:b8:93:8f:5a:6b:15:90:75:9c:62:72:85:19:e5: 18:b0:5b:4e:18:f6:ef:74:e7:c2:3d:69:bd:9a:ef:a3:39:fa: f3:f9:9f:9d:6e:8d:28:76:95:2c:36:09:f2:39:12:f2:a0:c3: 5b:f2:bb:5c:ed:72:18:b9:a4:13:ef:d2:27:7f:41:d3:a3:42: 01:f3:ce:b7:af:2f:e3:88:34:ab:b7:fa:68:be:77:22:0c:ca: 8f:de:e9:4c:9d:6b:c7:ff:d5:b3:00:21:01:b0:40:55:27:f5: ec:f4:60:f1:e3:d0:c2:70:c8:16:e4:ae:7a:bf:2b:cf:17:ef: ca:42:58:0f:46:ee:4c:6f:f4:f4:78:d6:0e:ec:c4:9c:3a:62: 79:01:21:a3:e9:e4:55:b9:52:97:f9:d6:25:d7:76:aa:95:b0: ce:fe:9d:46:e9:a8:08:9b:04:fc:0f:68:8e:58:14:64:22:ed: 5a:ab:90:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddOHDbMcHfcnRIqkyX+Rf7+tYWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0 QjA4MTM2NDAeFw0yNTA4MDYwMTE1NTRaFw0yNTA4MDkwMjExNTRaMDMxMTAvBgNV BAMTKDE4RUMyMUZBRjYzNTY3NDYwMDk1NTlFOUU3QzQ2NjIzRTZBM0EyQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWQv8yIycUpZKgZyTlqsqmZrf lwRlGn6jSpluowwUJDHFMZS5s2gxvaimSQn0/k4qeD+STwQyY12Iz5MQRlITv+yk d1SAUTLLRSRXe3QlOWx0pLTGhOf6xodup+lxwVxuGr559lzH0uRugmBlWywNK2OG uO0ZPwhn09MLyGvEqhR4clF8ybkLETuL95cNvEnFcfGhN2JSdTzlc5spSi5rtEHF LWj8HrdR0OGR0NBM0PdjntfbgZLFXOYQCSs1ahKvbjYYFCA047N++yYOE57m2yUK KbEh3cvSKI6enA+Ye23/MmpZBy/wN4QM8HY8TfiEd75DhpTmWV498NvSsd5zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGOwh+vY1Z0YAlVnp58RmI+ajos0wHwYDVR0j BBgwFoAURf1xx+/4MNIOlgIltKlxoUsIE2QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTNiMDY3Yy1lY2M5LTRkY2EtOTg3ZC1iOTU3NjgxNWY4NTUvMC80NUZENzFDN0VG RjgzMEQyMEU5NjAyMjVCNEE5NzFBMTRCMDgxMzY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcxQTE0QjA4 MTM2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTUzYjA2N2MtZWNjOS00ZGNhLTk4 N2QtYjk1NzY4MTVmODU1LzAvNDVGRDcxQzdFRkY4MzBEMjBFOTYwMjI1QjRBOTcx QTE0QjA4MTM2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqxAKZGndPZcvB5l9lk5rLf3AFXcjXUm7Bi X073w0b512gkgL8XKwhBHaAxbA+/93isShV8UJePkKo4eQOP+T5UMnhNZo/LwMXf NPC4k49aaxWQdZxicoUZ5RiwW04Y9u9058I9ab2a76M5+vP5n51ujSh2lSw2CfI5 EvKgw1vyu1ztchi5pBPv0id/QdOjQgHzzrevL+OINKu3+mi+dyIMyo/e6Uyda8f/ 1bMAIQGwQFUn9ez0YPHj0MJwyBbkrnq/K88X78pCWA9G7kxv9PR41g7sxJw6YnkB IaPp5FW5Upf51iXXdqqVsM7+nUbpqAibBPwPaI5YFGQi7VqrkO8= -----END CERTIFICATE-----Generated at Wed Aug 6 16:03:27 2025 by rpki-client