$ rpki-client -vvf repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft File: 45C9770C2C07C2696447FAA1E820E46170A3C56C.mft (raw, json) Hash identifier: x458H7H+xG1nHurAHoqsoPrOLF8Cr+9d7V0EUTpiRHY= Subject key identifier: 90:2B:55:E3:CB:CF:88:14:76:4E:A9:88:6B:F9:5F:F3:3D:DC:0E:27 Authority key identifier: 45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C Certificate issuer: /CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Certificate serial: 333293309E1406F1B96DF07FF31110CB34844B7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft Manifest number: 02C8 Signing time: Mon 03 Nov 2025 12:50:43 +0000 Manifest this update: Mon 03 Nov 2025 12:45:43 +0000 Manifest next update: Thu 06 Nov 2025 18:38:43 +0000 Files and hashes: 1: 45C9770C2C07C2696447FAA1E820E46170A3C56C.crl (hash: L0mRO8oAn1nmCYZ0Zw7Vi9T+6QH1AiDHuT4WAJYhP9o=) 2: 3130332e3135332e34322e302f32332d3234203d3e20313430343434.roa (hash: vm5PhQ9OCf0FV3z/CHJ+RxKQHUnZeKsqWqWQwv0pY+4=) 3: 3130332e3135332e34332e302f32342d3234203d3e20313430343434.roa (hash: cidgl2SIo3vuKAc4LvPzn48241T8Yqf3Lk4VBRTBdhc=) 4: 3130332e3135332e34322e302f32342d3234203d3e20313430343434.roa (hash: pXWaAnAiDsjhVjMrMqsJ0d+NFEE6GHbDUnVNomzIFpY=) 5: 323030313a6466343a326638303a3a2f34382d3438203d3e20313430343434.roa (hash: eP5B4+66lNDZRwwB0EJUDL9Pn71RI/Oa3/zagGI4Izk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:32:93:30:9e:14:06:f1:b9:6d:f0:7f:f3:11:10:cb:34:84:4b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45C9770C2C07C2696447FAA1E820E46170A3C56C Validity Not Before: Nov 3 12:45:43 2025 GMT Not After : Nov 6 18:38:43 2025 GMT Subject: CN=902B55E3CBCF8814764EA9886BF95FF33DDC0E27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f4:62:81:9f:54:3f:7d:fe:60:75:5f:81:e2: b2:3a:80:ca:c6:3b:7c:a4:80:8e:51:df:25:3f:12: de:2d:4f:a7:e7:69:70:25:47:ea:d5:2a:77:6c:86: 8e:85:c1:1d:b4:7f:d5:c5:9d:a0:41:92:ff:54:78: b1:f7:e1:d5:ed:19:1b:c8:49:11:30:c9:ea:d4:d3: 55:60:8d:3d:1b:1a:ad:e4:0d:c3:3a:1c:53:00:0d: 3e:96:78:4e:9e:6c:2f:e5:e9:97:5e:4f:05:fd:19: 8f:4f:67:fb:c2:b1:92:da:98:2c:bb:d0:01:b4:2c: 8c:77:e2:57:a8:a3:e2:f3:52:46:9b:da:bd:93:01: 6c:8f:92:8a:1a:dc:6d:f8:d5:4d:ce:70:7b:9e:63: 07:82:19:cf:1c:8d:c0:24:48:4b:47:85:93:ee:c4: d4:ce:65:f6:22:45:0d:39:52:4c:4c:f3:56:70:ef: 44:57:4e:d4:db:df:71:03:86:0e:f4:04:d9:1d:5f: 33:5f:9e:04:67:5b:dd:36:d2:e1:b7:10:82:6e:d6: 50:46:24:43:ff:cf:be:1c:4f:a5:06:ab:74:97:c0: 94:dc:14:84:66:29:a6:6a:b9:7d:a3:e2:e8:37:29: a9:f2:fc:b8:55:62:e1:e2:bd:d7:52:e9:7a:1b:26: 2f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2B:55:E3:CB:CF:88:14:76:4E:A9:88:6B:F9:5F:F3:3D:DC:0E:27 X509v3 Authority Key Identifier: keyid:45:C9:77:0C:2C:07:C2:69:64:47:FA:A1:E8:20:E4:61:70:A3:C5:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C9770C2C07C2696447FAA1E820E46170A3C56C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c711559e-d5ec-4c19-b335-ee29ddfbb9d5/0/45C9770C2C07C2696447FAA1E820E46170A3C56C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:af:19:c6:39:f6:b2:5b:68:71:1c:5d:1e:e5:4b:f8:d6:cb: 85:2a:08:5d:be:10:c6:e6:5e:14:87:d8:cf:15:67:ea:95:a4: fe:47:10:74:53:23:e9:13:a8:e2:e1:2e:18:62:f0:8b:2e:a0: 16:ed:fe:8f:48:d6:60:bc:3e:e0:46:a4:52:ac:c9:13:01:b5: ab:a3:40:21:0d:10:0a:d4:3b:35:2b:74:a3:cd:8b:a8:57:4c: 2f:11:0a:f7:a9:b7:6a:67:eb:f1:47:65:93:8d:7f:b9:e2:59: 60:2b:ef:11:d7:a9:58:a9:02:f0:ab:75:70:50:e9:90:12:ff: 3b:13:20:2e:cd:ac:4f:ed:cf:7c:5e:56:2b:15:66:88:be:75: a1:84:c0:39:1b:14:ab:1c:bd:ee:09:04:58:b5:da:31:0d:63: d4:56:30:5b:bb:0a:18:47:5e:ab:7d:2a:0f:58:3d:2c:f3:9e: 68:84:b8:6d:14:04:a9:99:6d:54:cc:0f:5a:57:38:7f:9c:0a: be:d5:a0:22:9d:3c:9a:d7:79:a1:bd:ee:8c:a5:f1:28:b8:41: d2:9c:a4:cf:59:db:3a:f5:77:71:bf:0d:de:fd:1d:54:cb:93: 98:74:d3:97:83:5a:d6:90:fe:d2:03:77:a9:9a:9f:b3:33:26: 19:99:bb:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzKTMJ4UBvG5bfB/8xEQyzSES30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3 MEEzQzU2QzAeFw0yNTExMDMxMjQ1NDNaFw0yNTExMDYxODM4NDNaMDMxMTAvBgNV BAMTKDkwMkI1NUUzQ0JDRjg4MTQ3NjRFQTk4ODZCRjk1RkYzM0REQzBFMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT9GKBn1Q/ff5gdV+B4rI6gMrG O3ykgI5R3yU/Et4tT6fnaXAlR+rVKndsho6FwR20f9XFnaBBkv9UeLH34dXtGRvI SREwyerU01VgjT0bGq3kDcM6HFMADT6WeE6ebC/l6ZdeTwX9GY9PZ/vCsZLamCy7 0AG0LIx34leoo+LzUkab2r2TAWyPkooa3G341U3OcHueYweCGc8cjcAkSEtHhZPu xNTOZfYiRQ05UkxM81Zw70RXTtTb33EDhg70BNkdXzNfngRnW9020uG3EIJu1lBG JEP/z74cT6UGq3SXwJTcFIRmKaZquX2j4ug3Kany/LhVYuHivddS6XobJi8zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkCtV48vPiBR2TqmIa/lf8z3cDicwHwYDVR0j BBgwFoAURcl3DCwHwmlkR/qh6CDkYXCjxWwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzExNTU5ZS1kNWVjLTRjMTktYjMzNS1lZTI5ZGRmYmI5ZDUvMC80NUM5NzcwQzJD MDdDMjY5NjQ0N0ZBQTFFODIwRTQ2MTcwQTNDNTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0NjE3MEEz QzU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzcxMTU1OWUtZDVlYy00YzE5LWIz MzUtZWUyOWRkZmJiOWQ1LzAvNDVDOTc3MEMyQzA3QzI2OTY0NDdGQUExRTgyMEU0 NjE3MEEzQzU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJGvGcY59rJbaHEcXR7lS/jWy4UqCF2+EMbm XhSH2M8VZ+qVpP5HEHRTI+kTqOLhLhhi8IsuoBbt/o9I1mC8PuBGpFKsyRMBtauj QCENEArUOzUrdKPNi6hXTC8RCvept2pn6/FHZZONf7niWWAr7xHXqVipAvCrdXBQ 6ZAS/zsTIC7NrE/tz3xeVisVZoi+daGEwDkbFKscve4JBFi12jENY9RWMFu7ChhH Xqt9Kg9YPSzznmiEuG0UBKmZbVTMD1pXOH+cCr7VoCKdPJrXeaG97oyl8Si4QdKc pM9Z2zr1d3G/Dd79HVTLk5h005eDWtaQ/tIDd6man7MzJhmZu58= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:25 2025 by rpki-client