$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft File: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft (raw, json) Hash identifier: JP1Jk7B9JakwiV/lJXITCx/spgVqiNtNQs2YeJDfKxE= Subject key identifier: 34:1F:98:40:86:2A:2D:D1:85:29:DC:7E:D3:BF:F0:24:61:C8:92:C9 Authority key identifier: 16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D Certificate issuer: /CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Certificate serial: 2CE773F8B895F0DA31F901A90234A07C8C9653AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft Manifest number: 10 Signing time: Mon 03 Nov 2025 17:52:22 +0000 Manifest this update: Mon 03 Nov 2025 17:47:22 +0000 Manifest next update: Fri 07 Nov 2025 05:07:22 +0000 Files and hashes: 1: 3132322e3132392e3230302e302f32312d3234203d3e203338373633.roa (hash: psHda3coDjbtJQORQnibdpRgwKCWDI4qgmb+5QVTY6I=) 2: 1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl (hash: b1fa1+D86OnKhWaCJe6/wTMiqsqg2T8ZqRJrocbhd9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e7:73:f8:b8:95:f0:da:31:f9:01:a9:02:34:a0:7c:8c:96:53:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1645B491C350BF8AB4A8F88CC4DCF3F60073D15D Validity Not Before: Nov 3 17:47:22 2025 GMT Not After : Nov 7 05:07:22 2025 GMT Subject: CN=341F9840862A2DD18529DC7ED3BFF02461C892C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:19:91:10:72:f5:58:bc:b1:ff:cd:3f:3e:ab: 08:4a:ad:45:33:e7:16:58:bf:8f:45:29:9f:b7:9e: 8f:fa:50:db:c9:c3:47:c3:d9:86:b0:25:e9:17:8b: d3:01:92:dd:4a:8d:1d:c6:c2:58:02:ed:4c:f8:4b: 7c:94:7f:af:05:cd:44:28:fa:0f:ac:94:d7:b6:e1: 5e:ce:67:e4:44:c4:0a:be:72:ff:5c:94:1a:15:04: d4:0d:27:d8:bd:99:d3:14:df:c7:cd:73:29:36:17: f8:de:4c:32:8a:dc:6c:6d:74:87:39:58:69:f9:19: 3d:68:94:44:b6:2b:c3:2d:69:02:ba:7b:0d:9a:a4: dd:c1:00:01:48:f1:9b:0a:26:bd:52:5d:ef:78:d1: 7b:40:0c:52:a6:94:5f:8f:3a:f3:e0:62:80:0a:c7: c8:dd:5d:fe:2a:58:ad:25:4d:19:5c:45:31:72:c0: 03:e4:72:5c:b4:60:03:4b:0d:e7:54:ff:3c:e6:ca: 52:25:4d:a0:1a:03:37:42:e2:74:39:d2:46:4b:be: fd:c5:d3:fd:6e:38:78:fe:dd:33:f6:b5:87:dd:f9: f2:9f:45:f8:9c:b1:25:4f:41:a4:d4:d6:0b:3e:b6: cc:d3:d0:9b:30:cd:43:83:12:b4:2b:e6:8e:8b:1f: cb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1F:98:40:86:2A:2D:D1:85:29:DC:7E:D3:BF:F0:24:61:C8:92:C9 X509v3 Authority Key Identifier: keyid:16:45:B4:91:C3:50:BF:8A:B4:A8:F8:8C:C4:DC:F3:F6:00:73:D1:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f9f9a1-4ad8-49ce-9fa9-d476573af50f/0/1645B491C350BF8AB4A8F88CC4DCF3F60073D15D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6c:76:6c:38:a3:b7:f2:8f:86:be:a8:b3:d6:44:9a:ee:56: 53:b0:67:4e:61:62:c4:31:6c:3c:e6:fd:79:cc:8e:46:d5:58: 34:ad:85:d4:9e:a0:7a:b9:7a:5d:fa:c2:9a:ce:9d:6b:50:86: b9:ea:ea:e0:22:96:41:44:e7:28:e3:aa:14:ef:8a:4c:eb:6a: 14:92:54:af:15:57:ee:ed:1e:22:70:60:c8:6b:4d:31:94:b0: 53:75:1b:c7:ba:5d:51:1b:95:b2:bb:c4:a3:ee:e8:2d:f1:d3: a4:cd:01:06:37:23:62:18:06:7a:98:f6:3c:12:63:1e:e7:cc: 85:30:72:17:b7:3a:1a:da:7f:58:c4:d2:cc:9f:0f:ed:3e:24: a6:6c:e5:f8:44:2b:8b:40:a1:39:77:5c:65:c9:a7:56:23:47: 3d:01:22:a5:89:dd:03:ea:10:32:0b:d3:82:8b:8e:05:e4:34: 98:04:3f:ff:8f:d6:6b:fa:cb:c9:20:a5:03:9f:17:37:39:1d: b7:a3:4b:eb:38:df:c4:bf:58:92:13:a7:1e:14:7b:24:df:fb: 92:a4:16:fb:23:48:e9:d1:19:3a:37:52:ee:98:e8:22:8b:2b: 88:f1:59:44:db:11:e5:75:a7:16:9c:36:5c:d9:0a:95:77:72: 42:ff:c2:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOdz+LiV8Nox+QGpAjSgfIyWU68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYw MDczRDE1RDAeFw0yNTExMDMxNzQ3MjJaFw0yNTExMDcwNTA3MjJaMDMxMTAvBgNV BAMTKDM0MUY5ODQwODYyQTJERDE4NTI5REM3RUQzQkZGMDI0NjFDODkyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdGZEQcvVYvLH/zT8+qwhKrUUz 5xZYv49FKZ+3no/6UNvJw0fD2YawJekXi9MBkt1KjR3GwlgC7Uz4S3yUf68FzUQo +g+slNe24V7OZ+RExAq+cv9clBoVBNQNJ9i9mdMU38fNcyk2F/jeTDKK3GxtdIc5 WGn5GT1olES2K8MtaQK6ew2apN3BAAFI8ZsKJr1SXe940XtADFKmlF+POvPgYoAK x8jdXf4qWK0lTRlcRTFywAPkcly0YANLDedU/zzmylIlTaAaAzdC4nQ50kZLvv3F 0/1uOHj+3TP2tYfd+fKfRficsSVPQaTU1gs+tszT0JswzUODErQr5o6LH8uXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNB+YQIYqLdGFKdx+07/wJGHIkskwHwYDVR0j BBgwFoAUFkW0kcNQv4q0qPiMxNzz9gBz0V0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGY5ZjlhMS00YWQ4LTQ5Y2UtOWZhOS1kNDc2NTczYWY1MGYvMC8xNjQ1QjQ5MUMz NTBCRjhBQjRBOEY4OENDNERDRjNGNjAwNzNEMTVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0YzRjYwMDcz RDE1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmOWY5YTEtNGFkOC00OWNlLTlm YTktZDQ3NjU3M2FmNTBmLzAvMTY0NUI0OTFDMzUwQkY4QUI0QThGODhDQzREQ0Yz RjYwMDczRDE1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1sdmw4o7fyj4a+qLPWRJruVlOwZ05hYsQx bDzm/XnMjkbVWDSthdSeoHq5el36wprOnWtQhrnq6uAilkFE5yjjqhTvikzrahSS VK8VV+7tHiJwYMhrTTGUsFN1G8e6XVEblbK7xKPu6C3x06TNAQY3I2IYBnqY9jwS Yx7nzIUwche3Ohraf1jE0syfD+0+JKZs5fhEK4tAoTl3XGXJp1YjRz0BIqWJ3QPq EDIL04KLjgXkNJgEP/+P1mv6y8kgpQOfFzc5HbejS+s438S/WJITpx4UeyTf+5Kk FvsjSOnRGTo3Uu6Y6CKLK4jxWUTbEeV1pxacNlzZCpV3ckL/wpA= -----END CERTIFICATE-----Generated at Tue Nov 4 02:06:00 2025 by rpki-client