$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: SyyI1+qr8tM5D4ZsdPmD1Y46wBRuKzypkw4jPSZ4CWk= Subject key identifier: F8:61:5A:30:A6:47:8A:03:E5:DF:63:76:A5:2F:C3:DA:39:D2:B2:6A Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 50DA67B65DDF9BFDB71ECF9B615EB698C9944482 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 01ED Signing time: Wed 06 Aug 2025 17:51:31 +0000 Manifest this update: Wed 06 Aug 2025 17:46:31 +0000 Manifest next update: Sat 09 Aug 2025 18:44:31 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: 0lx37QLylS592o1ah4u999Dhwk0vIHQOZvvhT9Rbpgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:44:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:da:67:b6:5d:df:9b:fd:b7:1e:cf:9b:61:5e:b6:98:c9:94:44:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Aug 6 17:46:31 2025 GMT Not After : Aug 9 18:44:31 2025 GMT Subject: CN=F8615A30A6478A03E5DF6376A52FC3DA39D2B26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:63:a6:c6:c3:50:b4:0d:2c:a9:db:11:38: ca:a2:61:81:9d:59:5e:dc:fe:aa:6e:e6:64:13:a9: 1a:62:7d:d9:6c:45:0f:71:30:bf:45:64:cb:c6:43: 43:7c:df:6d:d8:cc:74:e5:83:8a:7e:f0:fa:06:02: 81:dc:3b:34:e1:4e:45:c4:5a:62:c9:3c:4a:73:c6: ac:77:e4:34:ee:31:82:1f:8b:c5:d7:2f:29:2b:be: fa:46:8d:6b:81:8d:1a:a3:3f:3c:db:5f:58:17:48: 32:05:fc:d4:c9:06:e2:37:31:0c:86:9d:69:d7:59: c2:e5:ce:65:8d:16:36:fd:5c:14:8c:ba:d7:bf:ad: 69:ad:23:ce:ff:0f:09:02:e6:24:63:b2:27:74:a3: 77:e2:3e:b9:ab:17:b3:9a:c3:a8:e4:92:db:66:24: b8:bd:72:c1:f8:ba:43:74:2f:95:b9:43:58:f4:33: 21:97:28:98:13:9c:9d:91:03:71:6d:74:b1:09:f8: 06:74:43:91:f1:8c:35:c8:a4:fe:aa:30:1a:49:40: ea:13:0b:40:f2:98:0a:12:62:6b:8f:92:72:4c:cd: 99:3c:27:b4:84:89:74:8b:50:bc:17:84:02:73:a6: aa:30:1b:28:74:bc:16:06:55:90:f0:df:0b:40:94: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:61:5A:30:A6:47:8A:03:E5:DF:63:76:A5:2F:C3:DA:39:D2:B2:6A X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:70:fd:f9:2c:c9:24:49:67:fe:98:73:76:6c:50:24:87:35: 22:9b:c0:75:f9:93:23:93:bb:5d:36:24:42:51:28:5e:1a:3b: 99:53:0c:6f:3e:d2:dc:ef:26:c7:ca:2d:62:fa:69:59:47:51: ae:2b:8d:2b:44:d4:91:25:3c:ab:a3:19:e3:90:68:33:89:3a: 37:0a:23:db:a3:9e:6d:80:ac:14:dc:56:91:e9:08:8d:2e:bd: 50:32:70:18:bd:77:af:83:1f:75:06:5f:a1:3f:de:68:0b:a0: 20:3b:14:d9:03:bf:3f:16:b8:37:80:49:b1:19:ed:ab:75:bb: 74:fb:f9:6e:d8:3f:be:fc:c3:23:7b:35:47:17:4f:e9:21:80: f4:63:58:7c:a3:57:24:58:45:71:bf:d2:59:5a:67:a6:d4:82: be:7c:22:29:39:e0:bc:14:61:52:c7:8c:d3:f0:dc:65:5f:3c: 81:f2:83:1a:33:eb:7e:db:65:df:8b:60:4c:f0:58:84:f8:4c: 44:70:e5:d6:49:e4:58:26:28:b7:81:1d:60:84:33:9a:5c:7f: 50:77:fe:1b:82:15:7b:5f:b5:ff:a7:2f:36:37:db:64:aa:1b: 45:52:b8:7d:7c:3b:e6:03:51:b7:dc:85:93:f9:b3:e9:13:97: 2e:cb:0e:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUNpntl3fm/23Hs+bYV62mMmURIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTA4MDYxNzQ2MzFaFw0yNTA4MDkxODQ0MzFaMDMxMTAvBgNV BAMTKEY4NjE1QTMwQTY0NzhBMDNFNURGNjM3NkE1MkZDM0RBMzlEMkIyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpWOmxsNQtA0sqdsROMqiYYGd WV7c/qpu5mQTqRpifdlsRQ9xML9FZMvGQ0N8323YzHTlg4p+8PoGAoHcOzThTkXE WmLJPEpzxqx35DTuMYIfi8XXLykrvvpGjWuBjRqjPzzbX1gXSDIF/NTJBuI3MQyG nWnXWcLlzmWNFjb9XBSMute/rWmtI87/DwkC5iRjsid0o3fiPrmrF7Oaw6jkkttm JLi9csH4ukN0L5W5Q1j0MyGXKJgTnJ2RA3FtdLEJ+AZ0Q5HxjDXIpP6qMBpJQOoT C0DymAoSYmuPknJMzZk8J7SEiXSLULwXhAJzpqowGyh0vBYGVZDw3wtAlIPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+GFaMKZHigPl32N2pS/D2jnSsmowHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpw/fksySRJZ/6Yc3ZsUCSHNSKbwHX5kyOT u102JEJRKF4aO5lTDG8+0tzvJsfKLWL6aVlHUa4rjStE1JElPKujGeOQaDOJOjcK I9ujnm2ArBTcVpHpCI0uvVAycBi9d6+DH3UGX6E/3mgLoCA7FNkDvz8WuDeASbEZ 7at1u3T7+W7YP778wyN7NUcXT+khgPRjWHyjVyRYRXG/0llaZ6bUgr58Iik54LwU YVLHjNPw3GVfPIHygxoz637bZd+LYEzwWIT4TERw5dZJ5FgmKLeBHWCEM5pcf1B3 /huCFXtftf+nLzY322SqG0VSuH18O+YDUbfchZP5s+kTly7LDhE= -----END CERTIFICATE-----Generated at Thu Aug 7 12:59:58 2025 by rpki-client