$ rpki-client -vvf repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft File: 45422D0C59556C680872F58CC42068EF3ED1BA2E.mft (raw, json) Hash identifier: 4zLkFg8j/wtnBg3yf0hOxxVKMxypQ/UGwbCnSYxzpg4= Subject key identifier: B4:75:BE:C3:01:1D:42:52:96:96:F3:59:6C:52:66:4A:EC:D6:73:23 Authority key identifier: 45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E Certificate issuer: /CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Certificate serial: 1F65F576B8BDF7E3F38877D703F7666DC43EEDDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft Manifest number: 024B Signing time: Sun 02 Nov 2025 15:31:02 +0000 Manifest this update: Sun 02 Nov 2025 15:26:02 +0000 Manifest next update: Wed 05 Nov 2025 16:32:02 +0000 Files and hashes: 1: 45422D0C59556C680872F58CC42068EF3ED1BA2E.crl (hash: leTy8R/uRMHlt/jD6xX+XLhLGc9cfp7pCEGN9+jSLcg=) 2: 3130332e3137322e3132302e302f32332d3234203d3e20313432333938.roa (hash: pXYOCZxRABB//TtVnh1gM8sswwbpc2HW8vVv8Mpvxgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 16:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:65:f5:76:b8:bd:f7:e3:f3:88:77:d7:03:f7:66:6d:c4:3e:ed:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45422D0C59556C680872F58CC42068EF3ED1BA2E Validity Not Before: Nov 2 15:26:02 2025 GMT Not After : Nov 5 16:32:02 2025 GMT Subject: CN=B475BEC3011D42529696F3596C52664AECD67323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:3e:cd:47:3d:66:b0:f3:cd:c8:1a:a8:51: 48:85:05:e4:3d:51:33:ae:f7:13:12:93:ac:80:f6: 62:11:f0:31:f8:84:1f:d5:c3:57:73:f1:98:e4:d5: 7e:13:6f:a2:17:7d:ff:d3:2c:0c:7f:95:9a:a9:72: 27:b8:4f:e5:d5:85:2d:a6:97:42:36:4e:1f:72:3b: 35:40:ca:ea:bc:bd:98:d2:45:a0:f4:4d:2d:a6:46: b8:7d:42:c1:ef:10:0c:71:43:52:2b:91:23:a3:14: 1a:a4:3e:fc:e0:b8:07:da:f3:20:1b:b0:f1:4f:02: f8:89:ae:2a:af:5d:47:79:60:0e:56:7b:68:95:8f: ec:fb:46:90:49:de:6e:bf:49:c1:43:a4:c8:6c:88: 94:86:bc:9f:f7:2b:b1:c7:f0:30:b1:cb:08:5e:7d: e9:98:38:01:80:31:cd:24:e8:58:6f:73:eb:3f:c5: 06:b2:41:61:21:79:60:b2:cf:6e:28:b6:90:9a:a2: 95:c6:6f:29:ee:1e:75:96:ad:72:e8:e6:17:25:d3: bd:6e:89:1b:54:1b:82:16:8f:48:41:f1:e5:a3:60: c3:96:95:46:44:62:25:22:32:a1:89:97:7d:1a:c3: 10:ce:8b:b6:39:ea:7d:41:69:58:dc:ef:f2:9e:37: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:75:BE:C3:01:1D:42:52:96:96:F3:59:6C:52:66:4A:EC:D6:73:23 X509v3 Authority Key Identifier: keyid:45:42:2D:0C:59:55:6C:68:08:72:F5:8C:C4:20:68:EF:3E:D1:BA:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45422D0C59556C680872F58CC42068EF3ED1BA2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78d774f4-2300-4e69-a6ca-7cf48002e2fb/0/45422D0C59556C680872F58CC42068EF3ED1BA2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:fe:a4:90:63:b1:a5:7c:38:15:70:89:e9:51:b8:a6:ba:b7: 73:ef:36:01:ca:5a:74:21:1c:f4:0b:6d:88:6a:18:76:e9:27: b9:f1:30:b4:d2:4e:33:e0:bd:e7:18:3f:e1:ca:88:cd:c1:b1: 02:50:95:46:50:1b:f9:90:a0:2a:85:fe:2f:c1:20:be:df:82: 30:62:c7:82:a0:92:79:f3:59:10:a2:56:c0:75:cc:9a:4f:cc: ca:dd:ba:02:93:79:f9:0c:46:99:e0:21:ae:6c:69:c8:81:cb: 5e:bc:aa:e8:54:e0:63:f4:89:fc:9a:ca:42:3c:bd:d0:92:04: 1f:45:9c:2a:a0:4b:f2:4b:f9:49:10:c7:8d:46:c6:3b:5a:8a: 3e:f5:4c:24:fc:90:dd:41:59:02:01:f5:e8:f5:a8:31:fa:86: 9d:e5:7e:44:f5:11:0a:c0:6f:e4:92:e5:57:90:e8:ca:c0:55: c3:8a:a6:10:c9:eb:be:91:fd:5e:10:f5:1f:5b:42:f7:43:4a: 0e:8c:9d:72:e8:91:b7:10:fb:69:39:e1:ca:a1:ab:72:6f:90: b4:d1:bc:c3:b0:08:ff:6e:8e:84:dc:55:28:be:93:87:67:2b: 14:e7:2d:d4:04:67:7c:db:49:10:ec:8b:64:8c:a0:96:89:c0: d2:84:93:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2X1dri99+PziHfXA/dmbcQ+7d0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYz RUQxQkEyRTAeFw0yNTExMDIxNTI2MDJaFw0yNTExMDUxNjMyMDJaMDMxMTAvBgNV BAMTKEI0NzVCRUMzMDExRDQyNTI5Njk2RjM1OTZDNTI2NjRBRUNENjczMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxj7NRz1msPPNyBqoUUiFBeQ9 UTOu9xMSk6yA9mIR8DH4hB/Vw1dz8Zjk1X4Tb6IXff/TLAx/lZqpcie4T+XVhS2m l0I2Th9yOzVAyuq8vZjSRaD0TS2mRrh9QsHvEAxxQ1IrkSOjFBqkPvzguAfa8yAb sPFPAviJriqvXUd5YA5We2iVj+z7RpBJ3m6/ScFDpMhsiJSGvJ/3K7HH8DCxywhe femYOAGAMc0k6Fhvc+s/xQayQWEheWCyz24otpCaopXGbynuHnWWrXLo5hcl071u iRtUG4IWj0hB8eWjYMOWlUZEYiUiMqGJl30awxDOi7Y56n1BaVjc7/KeN7SVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtHW+wwEdQlKWlvNZbFJmSuzWcyMwHwYDVR0j BBgwFoAURUItDFlVbGgIcvWMxCBo7z7Rui4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGQ3NzRmNC0yMzAwLTRlNjktYTZjYS03Y2Y0ODAwMmUyZmIvMC80NTQyMkQwQzU5 NTU2QzY4MDg3MkY1OENDNDIwNjhFRjNFRDFCQTJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4RUYzRUQx QkEyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhkNzc0ZjQtMjMwMC00ZTY5LWE2 Y2EtN2NmNDgwMDJlMmZiLzAvNDU0MjJEMEM1OTU1NkM2ODA4NzJGNThDQzQyMDY4 RUYzRUQxQkEyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADb+pJBjsaV8OBVwielRuKa6t3PvNgHKWnQh HPQLbYhqGHbpJ7nxMLTSTjPgvecYP+HKiM3BsQJQlUZQG/mQoCqF/i/BIL7fgjBi x4KgknnzWRCiVsB1zJpPzMrdugKTefkMRpngIa5saciBy168quhU4GP0ifyaykI8 vdCSBB9FnCqgS/JL+UkQx41Gxjtaij71TCT8kN1BWQIB9ej1qDH6hp3lfkT1EQrA b+SS5VeQ6MrAVcOKphDJ676R/V4Q9R9bQvdDSg6MnXLokbcQ+2k54cqhq3JvkLTR vMOwCP9ujoTcVSi+k4dnKxTnLdQEZ3zbSRDsi2SMoJaJwNKEk+w= -----END CERTIFICATE-----Generated at Tue Nov 4 15:54:08 2025 by rpki-client