$ rpki-client -vvf repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft File: 45E8125013BA38DADC26B1346024A7493BEC69FE.mft (raw, json) Hash identifier: OXCm571jcNEgGAEqqfmdQcS9PMgYlIsT6o9p7yiVm54= Subject key identifier: BF:2E:FF:8D:8F:D4:EA:8B:ED:F6:65:81:2A:32:EA:A9:60:06:6D:E4 Authority key identifier: 45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE Certificate issuer: /CN=45E8125013BA38DADC26B1346024A7493BEC69FE Certificate serial: 7FB74A8B1CE70276745ED2838104AF3636DE8CCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft Manifest number: 0215 Signing time: Mon 03 Nov 2025 05:01:33 +0000 Manifest this update: Mon 03 Nov 2025 04:56:33 +0000 Manifest next update: Thu 06 Nov 2025 16:50:33 +0000 Files and hashes: 1: 45E8125013BA38DADC26B1346024A7493BEC69FE.crl (hash: RgtWy9NUQ/iJcdXjkR789xKlVJGPHJi2jFfXb8f648I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b7:4a:8b:1c:e7:02:76:74:5e:d2:83:81:04:af:36:36:de:8c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45E8125013BA38DADC26B1346024A7493BEC69FE Validity Not Before: Nov 3 04:56:33 2025 GMT Not After : Nov 6 16:50:33 2025 GMT Subject: CN=BF2EFF8D8FD4EA8BEDF665812A32EAA960066DE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:26:0d:86:e9:aa:5c:3d:da:ba:b9:f7:0c:14: 0e:a6:19:72:80:28:ae:ab:3a:66:8d:fc:48:b2:d1: 15:b4:b3:bb:a8:ed:83:48:58:8b:bd:ac:4e:90:8b: 8a:3d:92:e2:d0:e8:bb:e8:f4:66:12:99:ea:0d:a7: 2c:5b:26:bc:19:5d:04:3b:8f:ad:98:46:8a:82:99: fe:33:ac:c8:2f:eb:ff:5a:e5:8c:6c:f8:27:21:b6: cc:9c:a4:1a:d3:c6:0f:43:de:da:ed:11:1e:f6:e6: e0:a1:b4:74:bf:f3:01:e7:be:15:3e:19:03:92:ab: ed:a6:eb:aa:1c:e5:f4:b6:d7:8c:54:77:5c:5e:84: 9c:b6:2a:db:81:73:8e:fe:6e:db:40:de:13:80:60: c4:a9:21:a4:30:19:38:3f:9a:33:b9:12:70:36:84: dc:12:15:a0:48:c9:cc:e0:ff:ba:71:3a:a7:10:68: 91:86:32:4d:2e:eb:00:1c:0b:61:17:1e:f3:d6:9f: d9:b2:91:71:07:8a:88:2d:6f:f9:63:fb:30:de:09: 2f:91:cc:ff:8d:bf:c5:ac:d5:6f:35:6b:64:31:7b: c7:cf:41:ac:2b:a5:9c:da:38:ab:0d:91:a3:54:aa: 26:2e:78:c9:1b:3a:db:db:df:84:3b:04:35:00:4b: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:2E:FF:8D:8F:D4:EA:8B:ED:F6:65:81:2A:32:EA:A9:60:06:6D:E4 X509v3 Authority Key Identifier: keyid:45:E8:12:50:13:BA:38:DA:DC:26:B1:34:60:24:A7:49:3B:EC:69:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45E8125013BA38DADC26B1346024A7493BEC69FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994bef37-745b-4fff-bb1f-aff1f33f5e5a/0/45E8125013BA38DADC26B1346024A7493BEC69FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a5:15:73:06:2c:3a:52:f7:d6:96:52:1a:ee:eb:82:73:89: 10:3c:f0:4d:86:27:f3:f0:3e:3b:67:c7:e5:fb:ba:52:52:cc: 87:db:94:cb:27:0a:d5:f2:4c:88:3e:93:a9:72:a9:63:d6:a8: ff:e1:eb:72:83:cf:d2:bf:4f:a6:88:86:9b:af:7a:a0:7d:cb: 68:f8:10:74:36:15:b9:68:e9:90:f3:0c:c0:03:2b:6c:29:a7: 5b:fa:71:01:2b:a5:24:37:9a:ee:a7:5f:d3:cd:a0:92:fb:a9: 05:ea:be:53:62:1c:28:2b:79:51:a4:df:42:de:eb:1c:c6:48: 67:b5:ed:71:49:b6:d2:d6:32:90:08:52:78:fd:f3:4c:9e:30: 6e:cb:96:e3:f1:91:db:b5:25:a2:80:ea:9d:3a:40:ae:d8:2d: 3b:2e:e0:14:ae:b5:41:4c:33:55:db:a7:9e:b6:a5:da:48:63: 50:fb:ce:a7:87:f0:2e:37:21:71:9c:b5:18:55:7c:ed:86:8a: 6e:46:b7:bd:a8:3e:93:12:b5:32:01:89:cb:cc:d5:e7:4f:5a: d4:16:c4:a9:6c:5b:a3:ee:42:3c:04:0a:77:49:68:76:d2:f3: 49:70:5f:41:f7:3b:95:62:b4:60:0e:35:09:4f:da:15:b6:ed: 0b:00:65:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7dKixznAnZ0XtKDgQSvNjbejM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkz QkVDNjlGRTAeFw0yNTExMDMwNDU2MzNaFw0yNTExMDYxNjUwMzNaMDMxMTAvBgNV BAMTKEJGMkVGRjhEOEZENEVBOEJFREY2NjU4MTJBMzJFQUE5NjAwNjZERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOJg2G6apcPdq6ufcMFA6mGXKA KK6rOmaN/Eiy0RW0s7uo7YNIWIu9rE6Qi4o9kuLQ6Lvo9GYSmeoNpyxbJrwZXQQ7 j62YRoqCmf4zrMgv6/9a5Yxs+CchtsycpBrTxg9D3trtER725uChtHS/8wHnvhU+ GQOSq+2m66oc5fS214xUd1xehJy2KtuBc47+bttA3hOAYMSpIaQwGTg/mjO5EnA2 hNwSFaBIyczg/7pxOqcQaJGGMk0u6wAcC2EXHvPWn9mykXEHiogtb/lj+zDeCS+R zP+Nv8Ws1W81a2Qxe8fPQawrpZzaOKsNkaNUqiYueMkbOtvb34Q7BDUAS4khAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvy7/jY/U6ovt9mWBKjLqqWAGbeQwHwYDVR0j BBgwFoAURegSUBO6ONrcJrE0YCSnSTvsaf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTRiZWYzNy03NDViLTRmZmYtYmIxZi1hZmYxZjMzZjVlNWEvMC80NUU4MTI1MDEz QkEzOERBREMyNkIxMzQ2MDI0QTc0OTNCRUM2OUZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3NDkzQkVD NjlGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk0YmVmMzctNzQ1Yi00ZmZmLWJi MWYtYWZmMWYzM2Y1ZTVhLzAvNDVFODEyNTAxM0JBMzhEQURDMjZCMTM0NjAyNEE3 NDkzQkVDNjlGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGlFXMGLDpS99aWUhru64JziRA88E2GJ/Pw Pjtnx+X7ulJSzIfblMsnCtXyTIg+k6lyqWPWqP/h63KDz9K/T6aIhpuveqB9y2j4 EHQ2Fblo6ZDzDMADK2wpp1v6cQErpSQ3mu6nX9PNoJL7qQXqvlNiHCgreVGk30Le 6xzGSGe17XFJttLWMpAIUnj980yeMG7LluPxkdu1JaKA6p06QK7YLTsu4BSutUFM M1Xbp562pdpIY1D7zqeH8C43IXGctRhVfO2Gim5Gt72oPpMStTIBicvM1edPWtQW xKlsW6PuQjwECndJaHbS80lwX0H3O5VitGAONQlP2hW27QsAZZE= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:31 2025 by rpki-client