$ rpki-client -vvf repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft File: 45164C20EAF7FAB583FB12C81727150895FCEC70.mft (raw, json) Hash identifier: tY1J3qdC8Z4o8d6HY6GNUwolOqr80yja8nhjADsbu3M= Subject key identifier: 3A:14:1D:04:37:2E:30:FA:86:63:0F:5B:C7:29:ED:0E:A7:F7:71:A1 Authority key identifier: 45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 Certificate issuer: /CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Certificate serial: 5D536E48DD086CB603A151BBBB6352F34B3DDD8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft Manifest number: 013D Signing time: Mon 03 Nov 2025 21:23:07 +0000 Manifest this update: Mon 03 Nov 2025 21:18:07 +0000 Manifest next update: Fri 07 Nov 2025 08:49:07 +0000 Files and hashes: 1: 45164C20EAF7FAB583FB12C81727150895FCEC70.crl (hash: 2Ak5sUNwypDwKnnV4OGJQm8y+9ZC5zhQoD/AdUjTzUA=) 2: 3130332e3135332e34302e302f32332d3234203d3e20313430343534.roa (hash: TTBU1STvQaNI1wpqoaj9bG2m/T27T+WPjYQLtuioWoo=) 3: 3130332e3130382e3135362e302f32322d3234203d3e20313430343534.roa (hash: cLToJ49OKqVQRgjYGYNvWnWnJYTEY5LWx4h5YZdNEfg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:53:6e:48:dd:08:6c:b6:03:a1:51:bb:bb:63:52:f3:4b:3d:dd:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45164C20EAF7FAB583FB12C81727150895FCEC70 Validity Not Before: Nov 3 21:18:07 2025 GMT Not After : Nov 7 08:49:07 2025 GMT Subject: CN=3A141D04372E30FA86630F5BC729ED0EA7F771A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:cd:5b:37:98:a3:2f:57:a3:e4:2e:4a:6f: de:63:f7:04:c1:6e:78:de:65:23:f8:85:36:c8:5e: e5:ac:34:62:db:1b:98:61:9f:8e:ea:59:be:d6:b8: 12:56:b6:8e:16:8f:4e:b9:a4:30:55:c8:ab:08:56: 06:5e:5e:5d:2c:29:38:c8:44:57:43:a4:6e:5e:fd: e4:17:c0:32:df:48:a8:35:22:64:ee:fe:df:ae:cf: 85:d9:76:5b:2a:8e:9c:25:79:a1:64:ef:b1:47:fd: b6:01:75:f5:e1:7f:2e:44:26:d8:57:fb:14:a2:f6: 39:35:b6:06:94:80:0d:f4:19:55:3d:04:8b:7e:e4: d5:32:a4:a7:9e:06:d5:f6:e1:ef:5b:f2:c2:fa:37: 7c:6d:79:e9:6d:d5:d4:f5:ac:bb:d8:58:9e:6b:bc: 47:53:8c:04:51:50:a2:71:4b:63:43:a9:91:9f:4e: 51:2d:8c:88:a8:5e:95:88:87:28:42:da:81:99:5f: 46:00:74:c8:5f:b3:18:47:c8:3b:12:72:80:40:17: 5e:d0:96:48:49:ad:50:d4:a8:d8:16:51:ae:bb:35: f9:a8:3a:05:08:8c:ac:d2:9c:dd:34:e8:4e:f0:1a: 26:fa:16:a4:f9:2f:ea:97:ff:42:d9:f2:f6:57:c5: 96:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:14:1D:04:37:2E:30:FA:86:63:0F:5B:C7:29:ED:0E:A7:F7:71:A1 X509v3 Authority Key Identifier: keyid:45:16:4C:20:EA:F7:FA:B5:83:FB:12:C8:17:27:15:08:95:FC:EC:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45164C20EAF7FAB583FB12C81727150895FCEC70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1ae12fa-98fd-4e51-980e-ad5f5b90d7a6/0/45164C20EAF7FAB583FB12C81727150895FCEC70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:52:61:6a:c9:82:50:15:fe:a1:b7:a2:2e:c9:83:56:92:76: 2b:72:ca:e7:7b:e9:15:2f:ab:52:a5:6d:d6:15:85:97:13:e9: fd:69:90:2e:07:f2:00:12:9f:c6:10:58:44:e7:7b:d2:59:3f: cb:8e:10:b6:d3:bf:f5:71:63:53:6c:f4:4d:5c:aa:71:32:73: b3:56:fb:ce:3b:3c:15:48:e0:37:f7:bf:0f:9a:f6:ec:8a:36: 1d:56:c7:9b:59:7e:0e:be:1b:19:b3:2b:c8:3f:47:d0:52:90: 55:c1:d5:d5:4a:94:18:2c:9f:ee:ce:31:d9:5d:c4:a0:ac:79: 7a:c9:ae:ac:47:a5:e3:63:62:08:12:bd:d3:fe:bc:eb:63:37: 53:48:cb:06:ec:7b:88:97:42:7a:fd:85:ee:98:73:4f:4a:a5: ee:e8:4b:db:f1:6c:b2:ea:b4:0a:89:29:98:11:9b:0b:cc:e5: 01:05:88:f0:ba:87:b9:d9:a5:26:b7:12:44:76:97:f8:7e:13: 46:4f:b2:90:65:57:94:84:a7:31:fc:ea:db:fe:d9:19:2a:89: cd:04:8a:76:32:d7:05:5b:55:c8:c6:0d:04:e0:b4:13:89:f5: ee:6d:87:ae:1e:a1:ee:b2:54:9a:c9:11:ed:e2:e2:33:84:36: 25:9a:f7:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVNuSN0IbLYDoVG7u2NS80s93YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5 NUZDRUM3MDAeFw0yNTExMDMyMTE4MDdaFw0yNTExMDcwODQ5MDdaMDMxMTAvBgNV BAMTKDNBMTQxRDA0MzcyRTMwRkE4NjYzMEY1QkM3MjlFRDBFQTdGNzcxQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgeM1bN5ijL1ej5C5Kb95j9wTB bnjeZSP4hTbIXuWsNGLbG5hhn47qWb7WuBJWto4Wj065pDBVyKsIVgZeXl0sKTjI RFdDpG5e/eQXwDLfSKg1ImTu/t+uz4XZdlsqjpwleaFk77FH/bYBdfXhfy5EJthX +xSi9jk1tgaUgA30GVU9BIt+5NUypKeeBtX24e9b8sL6N3xteelt1dT1rLvYWJ5r vEdTjARRUKJxS2NDqZGfTlEtjIioXpWIhyhC2oGZX0YAdMhfsxhHyDsScoBAF17Q lkhJrVDUqNgWUa67NfmoOgUIjKzSnN006E7wGib6FqT5L+qX/0LZ8vZXxZbLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhQdBDcuMPqGYw9bxyntDqf3caEwHwYDVR0j BBgwFoAURRZMIOr3+rWD+xLIFycVCJX87HAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWFlMTJmYS05OGZkLTRlNTEtOTgwZS1hZDVmNWI5MGQ3YTYvMC80NTE2NEMyMEVB RjdGQUI1ODNGQjEyQzgxNzI3MTUwODk1RkNFQzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1MDg5NUZD RUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFhZTEyZmEtOThmZC00ZTUxLTk4 MGUtYWQ1ZjViOTBkN2E2LzAvNDUxNjRDMjBFQUY3RkFCNTgzRkIxMkM4MTcyNzE1 MDg5NUZDRUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxSYWrJglAV/qG3oi7Jg1aSdityyud76RUv q1KlbdYVhZcT6f1pkC4H8gASn8YQWETne9JZP8uOELbTv/VxY1Ns9E1cqnEyc7NW +847PBVI4Df3vw+a9uyKNh1Wx5tZfg6+GxmzK8g/R9BSkFXB1dVKlBgsn+7OMdld xKCseXrJrqxHpeNjYggSvdP+vOtjN1NIywbse4iXQnr9he6Yc09Kpe7oS9vxbLLq tAqJKZgRmwvM5QEFiPC6h7nZpSa3EkR2l/h+E0ZPspBlV5SEpzH86tv+2Rkqic0E inYy1wVbVcjGDQTgtBOJ9e5th64eoe6yVJrJEe3i4jOENiWa9+M= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:48 2025 by rpki-client