$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: 93/1PZmoWZJ4YIjMUELvXSEnE3pWRxTskMaN44ir4xA= Subject key identifier: 9F:3B:A6:93:66:6C:0E:B2:25:EE:A0:57:05:19:AB:A3:8C:4D:2A:B3 Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 7CADE703349478F461DBEECFBDE4DA1EF122A270 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: 0104 Signing time: Tue 05 Aug 2025 15:11:22 +0000 Manifest this update: Tue 05 Aug 2025 15:06:22 +0000 Manifest next update: Fri 08 Aug 2025 21:07:22 +0000 Files and hashes: 1: 3130332e35312e39392e302f32342d3234203d3e20313530343639.roa (hash: K8NaZjX156AzJZCxAFCtUR2kv1eIuI1LvcL4WWNgNxE=) 2: 3130332e35312e39382e302f32342d3234203d3e20313530343639.roa (hash: 4B7irySfovCa+fs5OrOidwnp7dP+n6xSYZr+/3ur6bs=) 3: 3130332e35312e39382e302f32332d3233203d3e20313530343639.roa (hash: k08Sq9y+e0JBLFkahJuKjCY8UDmOXzCXbCJPnDfG/eg=) 4: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: IywqetBcH2B08A9Z+svGSoTRLndj7M0pikXDPPVngyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 21:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ad:e7:03:34:94:78:f4:61:db:ee:cf:bd:e4:da:1e:f1:22:a2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Aug 5 15:06:22 2025 GMT Not After : Aug 8 21:07:22 2025 GMT Subject: CN=9F3BA693666C0EB225EEA0570519ABA38C4D2AB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:b2:88:2c:88:95:42:e5:de:f8:a3:33:93: 15:fc:97:57:d1:f7:9a:ff:8d:32:46:18:74:61:c1: d6:f4:58:9e:c1:dd:87:97:d7:7c:db:13:0d:5e:13: 1c:58:d4:ab:2d:c7:2a:9b:5a:4c:6d:5d:e5:90:89: 86:b6:88:fa:aa:84:13:b6:a6:63:65:17:3c:de:71: f1:18:5e:be:04:37:7a:b1:4c:4f:74:d9:d6:24:15: 5d:71:26:ec:7b:b6:c8:59:96:03:b1:a7:46:02:7e: 74:8c:5d:06:50:6d:93:37:0a:ff:aa:38:62:b2:e7: f6:4e:42:3b:0a:01:43:a8:9e:e0:d0:60:fa:06:e4: 32:02:50:92:9f:5a:ba:06:8f:4f:ca:ae:0e:60:c7: 78:17:b6:a5:a1:22:e7:39:ae:b4:3a:e5:33:09:15: a5:e0:31:ee:ad:ad:ef:39:0f:f3:6e:61:a9:3b:9d: 4b:43:3b:20:c1:34:2d:b4:b4:61:72:4a:28:be:68: dd:9c:f7:f6:16:f6:15:26:b0:77:9a:ab:bc:40:93: 70:07:80:c9:f9:e8:9a:79:7c:c1:f9:28:95:98:77: 0a:09:27:7f:94:90:8f:89:72:90:07:2f:9b:00:ec: 51:9b:f6:f4:4f:ab:9b:02:7d:57:cd:2f:43:fd:16: ec:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3B:A6:93:66:6C:0E:B2:25:EE:A0:57:05:19:AB:A3:8C:4D:2A:B3 X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a6:83:28:cf:fe:e9:ee:a6:6c:69:c8:ce:af:73:7f:16:10: 8e:42:d5:56:e1:00:bc:1f:44:87:6f:01:89:d5:e0:18:c3:7c: ad:5c:da:f3:58:61:ad:ac:86:d5:a6:c8:fd:7a:88:b2:3f:03: 6e:a5:f2:3c:07:44:79:c4:3d:31:85:90:c6:6e:a9:0c:3d:65: e3:db:7e:6d:7f:2d:2d:59:d2:c1:ca:f2:b1:bf:49:ed:8a:7d: 08:8e:ee:f2:86:fd:12:4c:fa:ca:f2:bb:f5:62:65:36:0e:27: 52:5d:6a:02:46:cb:89:2a:ea:f4:c3:3a:c5:17:ed:48:8a:29: a0:be:10:f0:36:ce:43:38:f7:1b:41:9d:e4:fe:ea:ca:ed:9a: 2d:83:4a:bb:0d:d1:26:9e:d4:6e:b6:ba:06:72:e4:3f:20:d2: e6:8c:d0:86:86:be:af:9e:05:68:0e:00:06:20:47:2e:0f:97: c0:da:e4:40:31:6a:71:d7:ae:4f:ba:28:45:b9:f7:bd:25:af: 40:9c:aa:b0:e1:4a:e2:59:c4:23:c7:c0:5a:01:21:ee:89:d1: ff:04:73:f8:c7:13:cc:3f:85:67:ee:6f:62:b3:03:4b:7d:62: 1c:25:99:04:30:27:a5:6b:55:71:fe:b8:3c:03:eb:a9:34:44: 98:0a:52:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfK3nAzSUePRh2+7PveTaHvEionAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTA4MDUxNTA2MjJaFw0yNTA4MDgyMTA3MjJaMDMxMTAvBgNV BAMTKDlGM0JBNjkzNjY2QzBFQjIyNUVFQTA1NzA1MTlBQkEzOEM0RDJBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJprKILIiVQuXe+KMzkxX8l1fR 95r/jTJGGHRhwdb0WJ7B3YeX13zbEw1eExxY1KstxyqbWkxtXeWQiYa2iPqqhBO2 pmNlFzzecfEYXr4EN3qxTE902dYkFV1xJux7tshZlgOxp0YCfnSMXQZQbZM3Cv+q OGKy5/ZOQjsKAUOonuDQYPoG5DICUJKfWroGj0/Krg5gx3gXtqWhIuc5rrQ65TMJ FaXgMe6tre85D/NuYak7nUtDOyDBNC20tGFySii+aN2c9/YW9hUmsHeaq7xAk3AH gMn56Jp5fMH5KJWYdwoJJ3+UkI+JcpAHL5sA7FGb9vRPq5sCfVfNL0P9FuzJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnzumk2ZsDrIl7qBXBRmro4xNKrMwHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+mgyjP/unupmxpyM6vc38WEI5C1VbhALwf RIdvAYnV4BjDfK1c2vNYYa2shtWmyP16iLI/A26l8jwHRHnEPTGFkMZuqQw9ZePb fm1/LS1Z0sHK8rG/Se2KfQiO7vKG/RJM+sryu/ViZTYOJ1JdagJGy4kq6vTDOsUX 7UiKKaC+EPA2zkM49xtBneT+6srtmi2DSrsN0Sae1G62ugZy5D8g0uaM0IaGvq+e BWgOAAYgRy4Pl8Da5EAxanHXrk+6KEW5970lr0CcqrDhSuJZxCPHwFoBIe6J0f8E c/jHE8w/hWfub2KzA0t9YhwlmQQwJ6VrVXH+uDwD66k0RJgKUvA= -----END CERTIFICATE-----Generated at Thu Aug 7 05:08:15 2025 by rpki-client