$ rpki-client -vvf repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft File: C45A558750D6CF5BE02532DDE80326AEF5012912.mft (raw, json) Hash identifier: ymDF19QMH4ih0LGXZ9VsWZ+bBCzCGd0ga51UCxyEPwQ= Subject key identifier: 8B:8B:62:48:38:63:8B:F9:3D:D2:F4:64:87:D7:70:65:35:C8:C1:F2 Authority key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Certificate issuer: /CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Certificate serial: 276DF81E082BFAC2C17ED08A51D805FAD5F96F08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft Manifest number: 0368 Signing time: Tue 05 Aug 2025 07:21:16 +0000 Manifest this update: Tue 05 Aug 2025 07:16:16 +0000 Manifest next update: Fri 08 Aug 2025 14:26:16 +0000 Files and hashes: 1: 3130332e3137302e3131352e302f32342d3234203d3e20313432333639.roa (hash: wKi20xV5IYiEYg1koyO2hLczrvapaQLTXfUibveAkFE=) 2: C45A558750D6CF5BE02532DDE80326AEF5012912.crl (hash: 6S7/h78kaIpjrzRy9Mv/Gyo4HmOoDKwJOTxqpTP6jyY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6d:f8:1e:08:2b:fa:c2:c1:7e:d0:8a:51:d8:05:fa:d5:f9:6f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Validity Not Before: Aug 5 07:16:16 2025 GMT Not After : Aug 8 14:26:16 2025 GMT Subject: CN=8B8B624838638BF93DD2F46487D7706535C8C1F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:ad:56:2a:dc:2c:ae:63:aa:05:b4:4d:ad: b0:c7:d7:9e:43:ab:ae:02:18:46:c4:76:ec:e0:72: 5f:5b:5d:21:ac:f9:af:04:00:d1:77:fe:9b:e0:5f: b1:93:d9:60:7a:94:35:73:01:c0:5a:98:44:0c:09: 65:3a:fe:9b:6d:b2:9e:bf:69:49:42:ef:f4:4a:49: f9:98:88:9e:30:1a:71:bb:6a:47:73:09:82:49:f4: e9:10:77:66:a1:cf:7a:08:75:7d:5b:ab:9f:ee:6d: 6d:6a:24:ef:8a:7b:44:4f:db:d1:e8:5d:35:bf:82: ba:fa:13:8f:be:d3:25:99:4a:9d:22:65:6a:4d:eb: 45:32:24:91:53:1e:9f:38:de:33:9d:49:ff:47:eb: b8:65:ec:6a:b2:69:54:43:b4:95:6f:b2:58:11:c3: 7d:07:c5:75:ed:9c:c5:50:47:a5:e8:05:aa:5f:f5: c3:4e:ec:32:25:43:ee:15:04:e2:eb:17:ed:18:7d: 64:ce:e0:75:61:32:70:22:b4:af:75:e9:99:82:a9: ed:46:d7:da:d4:d7:38:47:d5:40:47:a1:b6:ab:22: 8c:51:61:cc:d6:27:89:05:75:62:70:1b:9c:3c:2d: a1:88:b6:3c:af:44:6c:bb:65:89:b0:bb:a3:36:f7: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8B:62:48:38:63:8B:F9:3D:D2:F4:64:87:D7:70:65:35:C8:C1:F2 X509v3 Authority Key Identifier: keyid:C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:65:37:c1:c2:14:d5:7d:a2:49:9c:c4:b7:58:d6:f9:60:31: 79:74:95:3e:aa:a9:4f:02:c1:91:01:ba:18:5a:05:ef:10:d2: 24:ba:db:7a:35:0a:4c:78:49:d1:69:22:ff:65:8e:d2:bb:4b: 9c:74:84:b8:d6:a3:4e:35:d2:c0:e7:2f:5b:e9:e6:cc:a6:0b: 48:01:4f:fd:59:cf:71:db:cd:56:aa:8c:09:0e:fa:cc:96:95: 98:01:75:dc:72:fb:bf:3a:31:18:26:99:94:3a:f3:16:80:4e: b0:e6:ca:c4:6a:74:94:65:92:29:98:b4:e0:cc:a5:03:91:7b: 47:6d:b6:ee:b9:26:24:51:60:77:e2:4a:ea:94:e4:52:ee:7f: bb:9e:c4:ab:ff:05:ed:eb:ea:67:50:34:37:5f:15:96:20:1e: d2:4f:eb:a9:14:52:73:64:e6:7d:72:e9:7e:37:ca:f1:a1:77: 00:86:4a:33:c4:56:4f:c0:76:d1:2a:e7:e1:f8:25:ae:2b:41: 86:f5:d2:3f:46:98:a2:43:89:f5:d6:cd:b6:cc:f8:f4:4c:96: 7c:e9:a0:7f:6a:96:64:3e:d3:e9:7c:20:43:18:6f:f0:3d:18: 47:d7:16:11:1c:e7:76:5f:fd:e6:7a:bf:ca:bd:51:be:63:b4: a9:bf:ca:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ234Hggr+sLBftCKUdgF+tX5bwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVG NTAxMjkxMjAeFw0yNTA4MDUwNzE2MTZaFw0yNTA4MDgxNDI2MTZaMDMxMTAvBgNV BAMTKDhCOEI2MjQ4Mzg2MzhCRjkzREQyRjQ2NDg3RDc3MDY1MzVDOEMxRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtda1WKtwsrmOqBbRNrbDH155D q64CGEbEduzgcl9bXSGs+a8EANF3/pvgX7GT2WB6lDVzAcBamEQMCWU6/pttsp6/ aUlC7/RKSfmYiJ4wGnG7akdzCYJJ9OkQd2ahz3oIdX1bq5/ubW1qJO+Ke0RP29Ho XTW/grr6E4++0yWZSp0iZWpN60UyJJFTHp843jOdSf9H67hl7GqyaVRDtJVvslgR w30HxXXtnMVQR6XoBapf9cNO7DIlQ+4VBOLrF+0YfWTO4HVhMnAitK916ZmCqe1G 19rU1zhH1UBHobarIoxRYczWJ4kFdWJwG5w8LaGItjyvRGy7ZYmwu6M29z6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi4tiSDhji/k90vRkh9dwZTXIwfIwHwYDVR0j BBgwFoAUxFpVh1DWz1vgJTLd6AMmrvUBKRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMC9DNDVBNTU4NzUw RDZDRjVCRTAyNTMyRERFODAzMjZBRUY1MDEyOTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2QUVGNTAx MjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiYzNmMjktNmY5ZC00N2QzLTll NzctYzI4OWU1ZmVlNzhlLzAvQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUzMkRERTgwMzI2 QUVGNTAxMjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1lN8HCFNV9okmcxLdY1vlgMXl0lT6qqU8C wZEBuhhaBe8Q0iS623o1Ckx4SdFpIv9ljtK7S5x0hLjWo0410sDnL1vp5symC0gB T/1Zz3HbzVaqjAkO+syWlZgBddxy+786MRgmmZQ68xaATrDmysRqdJRlkimYtODM pQORe0dttu65JiRRYHfiSuqU5FLuf7uexKv/Be3r6mdQNDdfFZYgHtJP66kUUnNk 5n1y6X43yvGhdwCGSjPEVk/AdtEq5+H4Ja4rQYb10j9GmKJDifXWzbbM+PRMlnzp oH9qlmQ+0+l8IEMYb/A9GEfXFhEc53Zf/eZ6v8q9Ub5jtKm/yhY= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:44 2025 by rpki-client