$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json) Hash identifier: SW7ex/CgJ6WEbEFKkuU7uW3mA9m8Q5lx10btwBmIJF4= Subject key identifier: 5F:EA:F0:0F:E2:1C:ED:A3:66:FD:52:5E:E1:F1:41:AD:D9:DC:11:6D Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786 Certificate serial: 111C995ED08EC435A741E6299725AB18ABE4D137 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft Manifest number: 0226 Signing time: Tue 04 Nov 2025 04:02:11 +0000 Manifest this update: Tue 04 Nov 2025 03:57:11 +0000 Manifest next update: Fri 07 Nov 2025 07:55:11 +0000 Files and hashes: 1: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: jVoSj4Sbrc9pFak0TP/nz2MdaQTNaIHh5IrO3Bvs6Xk=) 2: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: HzhAdkWVPqyzjRfrKdf+sGJ5e8Q6OGeF8fvX/eoLEO8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:1c:99:5e:d0:8e:c4:35:a7:41:e6:29:97:25:ab:18:ab:e4:d1:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786 Validity Not Before: Nov 4 03:57:11 2025 GMT Not After : Nov 7 07:55:11 2025 GMT Subject: CN=5FEAF00FE21CEDA366FD525EE1F141ADD9DC116D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:2a:8a:82:bc:95:4a:2d:0d:71:f4:4a:09: d7:29:d9:e8:68:99:ac:64:55:b4:5e:6a:20:fc:4d: 43:c8:6c:01:00:1d:38:a5:ef:ff:08:6a:f0:4b:48: 89:a0:c7:73:d1:b4:96:44:e1:70:e0:54:22:93:a1: ef:da:ed:e7:19:77:0f:3a:6c:de:34:35:5d:50:0c: 05:b6:d3:b0:d0:06:80:e2:89:b5:71:25:8f:3a:c4: f5:9f:37:07:7a:6f:f9:0a:65:54:ff:23:ba:83:b8: 1e:d8:e6:5e:48:10:90:f7:5e:da:5a:85:e1:ec:46: 40:70:c7:68:4c:d3:ac:9e:3d:47:06:ef:de:b5:8f: 1c:5e:f0:96:90:46:0c:f7:e1:84:65:43:98:36:2f: 80:40:55:ad:b9:c2:2c:0a:95:9a:10:38:58:0a:7a: be:3e:ee:ca:89:79:69:f6:dc:cd:a6:6a:b0:df:40: 7b:a0:d7:33:01:d4:70:28:cd:e7:da:cc:04:5f:fc: 9d:83:bb:7a:79:23:d8:1c:e1:04:ca:89:8e:34:6f: 71:92:1f:0d:c3:7a:b7:73:98:80:03:44:fa:9d:e3: 19:4e:99:73:25:48:95:2c:5f:c8:5e:36:bd:71:fe: c3:46:20:12:33:44:34:20:fa:1f:43:35:78:17:96: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EA:F0:0F:E2:1C:ED:A3:66:FD:52:5E:E1:F1:41:AD:D9:DC:11:6D X509v3 Authority Key Identifier: keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:6c:ed:b3:42:1c:35:c0:25:18:3a:2b:0e:a6:42:4f:1a:4f: ae:84:04:f8:9e:8b:2a:a4:ca:93:a9:07:47:85:b8:35:5d:7f: 61:49:bd:e7:e8:03:a0:d1:23:8a:44:bc:71:77:e1:c9:df:bb: 94:85:72:b6:fa:7b:f9:cb:c6:58:2f:c3:99:cc:0a:4e:98:2e: e9:d3:ba:25:69:2d:94:8a:b5:c2:5f:e3:75:61:65:34:ce:ea: ca:04:1f:3d:b0:2b:6b:40:ea:23:93:16:3d:8b:17:e3:64:12: 36:26:aa:c4:e1:9f:50:de:e7:1a:2c:54:88:b9:25:82:94:f1: 04:82:a8:ff:a0:ec:27:69:02:c1:31:ad:56:ab:cb:9e:5b:6b: 6f:4e:dc:87:7a:95:a0:73:e0:c3:86:5d:51:87:44:e0:d7:fc: 87:ef:6f:e6:6a:d7:b3:ba:d1:ed:a7:a8:77:43:a2:b5:eb:ef: b9:c1:72:6b:df:22:a1:8a:61:59:47:fa:ab:f0:e3:e5:6f:f4: 12:87:31:ca:fe:e0:f7:df:41:9c:1c:43:f1:01:da:49:f5:6c: 82:3c:9f:35:b1:87:98:ea:a7:28:76:73:dd:b4:2a:ae:70:dc: 6b:61:81:b9:62:6f:ee:f2:23:a6:02:4c:b6:c7:66:f8:54:0a: db:ac:d9:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERyZXtCOxDWnQeYplyWrGKvk0TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF MzM5NTc4NjAeFw0yNTExMDQwMzU3MTFaFw0yNTExMDcwNzU1MTFaMDMxMTAvBgNV BAMTKDVGRUFGMDBGRTIxQ0VEQTM2NkZENTI1RUUxRjE0MUFERDlEQzExNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNriqKgryVSi0NcfRKCdcp2eho maxkVbReaiD8TUPIbAEAHTil7/8IavBLSImgx3PRtJZE4XDgVCKToe/a7ecZdw86 bN40NV1QDAW207DQBoDiibVxJY86xPWfNwd6b/kKZVT/I7qDuB7Y5l5IEJD3Xtpa heHsRkBwx2hM06yePUcG7961jxxe8JaQRgz34YRlQ5g2L4BAVa25wiwKlZoQOFgK er4+7sqJeWn23M2marDfQHug1zMB1HAozefazARf/J2Du3p5I9gc4QTKiY40b3GS Hw3DerdzmIADRPqd4xlOmXMlSJUsX8heNr1x/sNGIBIzRDQg+h9DNXgXltdZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX+rwD+Ic7aNm/VJe4fFBrdncEW0wHwYDVR0j BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5 NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4 MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJs7bNCHDXAJRg6Kw6mQk8aT66EBPieiyqk ypOpB0eFuDVdf2FJvefoA6DRI4pEvHF34cnfu5SFcrb6e/nLxlgvw5nMCk6YLunT uiVpLZSKtcJf43VhZTTO6soEHz2wK2tA6iOTFj2LF+NkEjYmqsThn1De5xosVIi5 JYKU8QSCqP+g7CdpAsExrVary55ba29O3Id6laBz4MOGXVGHRODX/Ifvb+Zq17O6 0e2nqHdDorXr77nBcmvfIqGKYVlH+qvw4+Vv9BKHMcr+4PffQZwcQ/EB2kn1bII8 nzWxh5jqpyh2c920Kq5w3Gthgblib+7yI6YCTLbHZvhUCtus2Wg= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:11 2025 by rpki-client