$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: 2lnfr1F8MemKDU6tOr2emsbGjLtRCwTK69gvliPznow= Subject key identifier: 92:6B:0A:AF:FA:C9:42:ED:A0:0E:EE:20:C3:DC:E8:E0:8C:DF:50:D0 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 46D6AF8575798C0490C5B57FA03B111A0A71BD28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 0224 Signing time: Thu 07 Aug 2025 07:41:04 +0000 Manifest this update: Thu 07 Aug 2025 07:36:04 +0000 Manifest next update: Sun 10 Aug 2025 19:31:04 +0000 Files and hashes: 1: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) 2: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: P8+9fIZBRGihWN2sIvyhqAi1xm7YtQ9rORTmb8BajLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 19:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d6:af:85:75:79:8c:04:90:c5:b5:7f:a0:3b:11:1a:0a:71:bd:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Aug 7 07:36:04 2025 GMT Not After : Aug 10 19:31:04 2025 GMT Subject: CN=926B0AAFFAC942EDA00EEE20C3DCE8E08CDF50D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:fa:51:a9:3e:9c:6a:05:8a:f7:7e:da:23: 34:c7:54:f4:b4:89:e5:11:6e:92:a2:63:36:e2:cb: 30:48:83:40:3e:7d:77:59:ce:fa:b9:a0:b2:8d:52: 5f:d1:c2:b6:5a:87:88:3d:0c:66:13:6e:3b:cb:e0: cc:d4:26:81:ac:b7:d1:aa:a7:d9:ea:21:d1:56:f9: 0f:21:9f:b0:0b:d7:cf:60:43:9d:b5:90:31:af:0d: 6d:94:d3:ae:18:6d:0f:bb:ce:8c:0f:b2:71:47:1e: d3:82:e8:21:cb:94:5d:67:01:24:d6:00:ba:2c:ef: a2:04:d9:f8:1c:db:b3:66:17:6c:c9:11:28:0b:25: 6a:00:e7:90:73:bc:63:5b:c5:51:d0:64:8d:e2:01: 17:3e:0a:cc:31:8e:35:48:ee:01:1c:44:7d:13:7d: fe:5b:71:66:d8:d0:af:f7:fa:07:a8:99:7c:d5:58: 63:f1:71:aa:de:ee:9f:0f:52:f2:7d:df:0a:cc:04: f6:1c:22:25:da:85:20:25:87:1e:5a:57:36:76:0d: da:4c:dd:3c:3a:08:9a:46:3a:21:86:13:f8:db:79: 58:9d:47:e7:cf:43:63:c4:ae:28:84:ea:a3:b6:57: 99:28:c1:e3:52:64:4d:c6:63:34:c3:a5:1f:71:5f: d4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6B:0A:AF:FA:C9:42:ED:A0:0E:EE:20:C3:DC:E8:E0:8C:DF:50:D0 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:45:f3:9d:ea:10:79:88:a1:91:75:99:2b:f7:b1:88:28:63: 27:5f:a1:da:ac:58:cf:65:a2:cc:28:be:8b:16:5d:39:1b:2f: 1d:34:58:f0:1d:1e:a8:1c:6d:2f:a9:bc:8d:1b:4c:a0:f6:2c: e9:bb:23:12:cf:f1:2b:b3:97:de:23:e6:89:99:18:3e:a4:ea: f4:fb:60:c1:90:2c:b5:ca:58:db:26:35:9e:7d:41:38:b9:5c: e0:9e:56:5a:e3:df:d1:6b:7c:4e:9e:51:af:28:ea:25:44:78: 6b:ae:eb:57:15:17:8c:02:1a:1a:71:b9:eb:a7:f8:1b:3b:37: ba:ce:6a:8e:b0:52:18:dd:09:37:a5:34:fc:dd:7a:a6:dd:09: 9a:86:d6:32:48:72:59:28:67:fd:94:57:e6:a2:fd:ee:84:1f: 92:ec:f9:aa:9f:a3:f0:3d:73:5b:33:30:a6:b9:b1:02:45:e8: 81:78:54:b6:25:1a:2f:33:3a:bd:ec:1e:41:a0:45:c5:29:0b: 48:9c:57:85:0a:1b:2b:ef:8d:05:05:11:47:79:ab:cb:28:b6: cf:0e:ab:2c:98:d3:26:08:a3:ae:7f:6d:a7:4c:de:4b:b9:30: 6c:d3:cd:7c:b0:cb:c5:8f:1b:a6:48:8a:29:81:ce:e3:be:1e: 44:ea:83:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtavhXV5jASQxbV/oDsRGgpxvSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTA4MDcwNzM2MDRaFw0yNTA4MTAxOTMxMDRaMDMxMTAvBgNV BAMTKDkyNkIwQUFGRkFDOTQyRURBMDBFRUUyMEMzRENFOEUwOENERjUwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0fpRqT6cagWK937aIzTHVPS0 ieURbpKiYzbiyzBIg0A+fXdZzvq5oLKNUl/RwrZah4g9DGYTbjvL4MzUJoGst9Gq p9nqIdFW+Q8hn7AL189gQ521kDGvDW2U064YbQ+7zowPsnFHHtOC6CHLlF1nASTW ALos76IE2fgc27NmF2zJESgLJWoA55BzvGNbxVHQZI3iARc+CswxjjVI7gEcRH0T ff5bcWbY0K/3+geomXzVWGPxcare7p8PUvJ93wrMBPYcIiXahSAlhx5aVzZ2DdpM 3Tw6CJpGOiGGE/jbeVidR+fPQ2PEriiE6qO2V5koweNSZE3GYzTDpR9xX9RrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkmsKr/rJQu2gDu4gw9zo4IzfUNAwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhF853qEHmIoZF1mSv3sYgoYydfodqsWM9l oswovosWXTkbLx00WPAdHqgcbS+pvI0bTKD2LOm7IxLP8Suzl94j5omZGD6k6vT7 YMGQLLXKWNsmNZ59QTi5XOCeVlrj39FrfE6eUa8o6iVEeGuu61cVF4wCGhpxueun +Bs7N7rOao6wUhjdCTelNPzdeqbdCZqG1jJIclkoZ/2UV+ai/e6EH5Ls+aqfo/A9 c1szMKa5sQJF6IF4VLYlGi8zOr3sHkGgRcUpC0icV4UKGyvvjQUFEUd5q8sots8O qyyY0yYIo65/badM3ku5MGzTzXywy8WPG6ZIiimBzuO+HkTqgyM= -----END CERTIFICATE-----Generated at Sat Aug 9 01:23:02 2025 by rpki-client