$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft File: 45C573917C39C2CCF38654E237AB8B4CF23929FD.mft (raw, json) Hash identifier: TAQU8HuSMwlNTZ60cOBiy8BGuTb9ZtODrT+9qV8z0GE= Subject key identifier: 5C:8B:93:03:21:C4:F8:8A:7B:D5:95:90:9A:24:68:DD:24:76:03:7D Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD Certificate issuer: /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Certificate serial: 54D68AEE5FD04069B78AA29D8B79F61544E8F2CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft Manifest number: 0222 Signing time: Tue 05 Aug 2025 19:52:33 +0000 Manifest this update: Tue 05 Aug 2025 19:47:33 +0000 Manifest next update: Sat 09 Aug 2025 01:50:33 +0000 Files and hashes: 1: 45C573917C39C2CCF38654E237AB8B4CF23929FD.crl (hash: 19y4/U2o9ugXMePqH0QIRl3++OfFH/hA1Z2Wkw8uQXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 01:50:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d6:8a:ee:5f:d0:40:69:b7:8a:a2:9d:8b:79:f6:15:44:e8:f2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD Validity Not Before: Aug 5 19:47:33 2025 GMT Not After : Aug 9 01:50:33 2025 GMT Subject: CN=5C8B930321C4F88A7BD595909A2468DD2476037D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:28:bf:86:d6:67:9a:36:69:89:04:93:0c:8f: 9a:be:46:7a:c3:7f:5d:f3:9e:05:af:19:e2:f7:d8: d1:1c:ee:75:70:c4:06:ee:f1:81:f9:98:12:33:94: c9:82:4c:63:16:4f:ff:88:3d:9c:ba:73:d4:f3:8e: ad:fc:2c:e5:56:44:74:b1:7f:1d:f3:aa:d4:7b:e5: f8:50:d7:83:7a:82:77:c3:32:2a:ab:ff:3f:0e:0d: 0f:2a:97:8f:58:7a:40:54:4b:9a:18:92:a4:0d:28: 5c:9d:0b:d6:af:47:39:0e:32:72:eb:89:9a:79:6c: b7:52:ef:a7:fd:74:35:bb:8d:61:51:87:c7:ef:5f: 02:6e:35:d1:96:9e:c1:78:b9:d9:ff:6a:f9:1f:9c: 8b:cc:c6:fd:06:7f:e4:a1:0d:21:2f:12:36:a5:3b: 41:0d:f5:8c:fa:f4:e8:f7:e6:ed:4b:e9:30:65:59: 78:09:12:c3:e9:7b:e9:17:bf:c8:fd:1d:09:95:4f: 49:79:1e:05:0e:d9:82:ba:ee:d7:09:5b:db:46:aa: 5c:1a:b7:39:0f:a6:1d:16:b0:ac:68:12:f5:42:fc: f3:ec:99:89:1a:63:b6:62:5a:62:a2:e0:bc:27:ba: 1c:a4:3b:95:23:b0:1d:36:67:69:6e:46:55:b7:6d: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8B:93:03:21:C4:F8:8A:7B:D5:95:90:9A:24:68:DD:24:76:03:7D X509v3 Authority Key Identifier: keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:37:5d:d0:db:a4:9a:e8:af:c0:54:f2:7a:51:09:73:c1:c0: 83:0d:22:fb:65:a5:74:04:4f:ee:a5:7f:b4:1d:97:eb:4c:23: 7d:ed:96:16:ca:49:4c:75:70:6f:27:77:c9:02:74:71:4c:09: 12:72:c3:ad:45:67:48:2e:9c:01:48:b2:1a:43:6c:1a:c0:f8: 38:ee:12:b8:f1:f3:3e:3e:07:c5:47:51:ed:de:60:d6:57:31: a4:14:48:05:65:2c:d0:1c:a6:2f:69:85:1b:76:71:78:04:29: 6a:37:ea:00:32:a4:a5:c8:cc:f3:94:53:ba:99:b5:3f:9e:72: 00:e4:30:ee:6f:4a:d3:06:0e:e0:1a:0c:15:97:cd:32:71:a4: 8f:92:61:85:b9:8c:fc:a8:de:57:8a:4f:c1:be:a7:7e:52:54: 38:8c:26:f1:29:25:6d:3d:ee:1c:d2:2a:53:27:2b:ce:c7:0f: cc:c5:55:a9:b4:1b:97:92:fe:c5:01:ce:31:01:68:72:15:72: 7a:92:2e:83:39:2a:fd:2b:a3:56:de:65:d6:e9:ea:7b:9f:74: ef:e9:2e:08:58:bc:de:32:09:ab:45:f0:8f:58:3b:8a:b5:6c: c7:5d:ef:06:ff:23:64:63:28:2e:ad:97:a3:35:fc:2d:3d:4c: 1a:e2:e2:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNaK7l/QQGm3iqKdi3n2FUTo8swwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENG MjM5MjlGRDAeFw0yNTA4MDUxOTQ3MzNaFw0yNTA4MDkwMTUwMzNaMDMxMTAvBgNV BAMTKDVDOEI5MzAzMjFDNEY4OEE3QkQ1OTU5MDlBMjQ2OEREMjQ3NjAzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjKL+G1meaNmmJBJMMj5q+RnrD f13zngWvGeL32NEc7nVwxAbu8YH5mBIzlMmCTGMWT/+IPZy6c9Tzjq38LOVWRHSx fx3zqtR75fhQ14N6gnfDMiqr/z8ODQ8ql49YekBUS5oYkqQNKFydC9avRzkOMnLr iZp5bLdS76f9dDW7jWFRh8fvXwJuNdGWnsF4udn/avkfnIvMxv0Gf+ShDSEvEjal O0EN9Yz69Oj35u1L6TBlWXgJEsPpe+kXv8j9HQmVT0l5HgUO2YK67tcJW9tGqlwa tzkPph0WsKxoEvVC/PPsmYkaY7ZiWmKi4LwnuhykO5UjsB02Z2luRlW3bR7nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXIuTAyHE+Ip71ZWQmiRo3SR2A30wHwYDVR0j BBgwFoAURcVzkXw5wszzhlTiN6uLTPI5Kf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmU5ZjhkOC02ZWY5LTQ3MmYtODRmMC1iYjk3ZjFmNTBjZTcvMC80NUM1NzM5MTdD MzlDMkNDRjM4NjU0RTIzN0FCOEI0Q0YyMzkyOUZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhCNENGMjM5 MjlGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJlOWY4ZDgtNmVmOS00NzJmLTg0 ZjAtYmI5N2YxZjUwY2U3LzAvNDVDNTczOTE3QzM5QzJDQ0YzODY1NEUyMzdBQjhC NENGMjM5MjlGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB83XdDbpJror8BU8npRCXPBwIMNIvtlpXQE T+6lf7Qdl+tMI33tlhbKSUx1cG8nd8kCdHFMCRJyw61FZ0gunAFIshpDbBrA+Dju Erjx8z4+B8VHUe3eYNZXMaQUSAVlLNAcpi9phRt2cXgEKWo36gAypKXIzPOUU7qZ tT+ecgDkMO5vStMGDuAaDBWXzTJxpI+SYYW5jPyo3leKT8G+p35SVDiMJvEpJW09 7hzSKlMnK87HD8zFVam0G5eS/sUBzjEBaHIVcnqSLoM5Kv0ro1beZdbp6nufdO/p LghYvN4yCatF8I9YO4q1bMdd7wb/I2RjKC6tl6M1/C09TBri4gc= -----END CERTIFICATE-----Generated at Thu Aug 7 03:18:58 2025 by rpki-client