$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft File: 4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json) Hash identifier: cD5TEYTYornPB1t1HUHIondXULFMO5rVbluU0dDofr4= Subject key identifier: 5A:62:D0:19:2F:E5:71:A0:E4:2E:9E:AD:DA:6E:95:37:29:45:17:DC Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 Certificate issuer: /CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Certificate serial: 51C498DFE018BFEE3BFB044E74B24D888E0FD3C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft Manifest number: 0520 Signing time: Tue 04 Nov 2025 17:21:14 +0000 Manifest this update: Tue 04 Nov 2025 17:16:14 +0000 Manifest next update: Sat 08 Nov 2025 00:53:14 +0000 Files and hashes: 1: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: MKGEqu2Psk6FQlMCBwUj3C02UOwY+xcEBLE/JQF9Mu0=) 2: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: fiWSX9jaPRD2Ywhko21+mTtQFX2M2XSh1M9c2Bz3erg=) 3: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: cwL/Wm98vbTxoyJQfTlH4ycMGF6EbITvKpTsxzWifEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c4:98:df:e0:18:bf:ee:3b:fb:04:4e:74:b2:4d:88:8e:0f:d3:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Validity Not Before: Nov 4 17:16:14 2025 GMT Not After : Nov 8 00:53:14 2025 GMT Subject: CN=5A62D0192FE571A0E42E9EADDA6E9537294517DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f8:1b:73:37:29:d2:ae:9a:75:31:3a:a0:fd: a2:d8:5e:f3:9b:a3:93:61:cb:33:9d:4d:bd:7a:a6: ec:01:2c:43:5a:a4:49:38:66:a0:3f:39:6d:71:85: 97:62:c7:d0:a8:19:75:c7:e8:1b:46:3f:32:8e:1f: 72:e6:e2:10:ac:9d:4d:ce:f3:5d:76:3b:8a:fd:3a: 0b:be:2f:e2:33:72:97:ab:50:3c:5b:a9:1c:92:cc: 4c:a2:66:19:f8:d0:14:8d:77:5c:ce:fb:74:6e:f4: b9:db:c6:bf:b0:c8:70:e7:66:5c:35:fe:e0:f1:00: 11:aa:c0:b0:be:28:bf:df:e3:1b:26:1f:2e:53:e3: 03:98:3e:a5:ae:e3:30:48:40:64:6a:35:68:cd:6d: c9:e2:f6:be:2b:e1:98:96:6c:c9:ff:a0:a0:fa:ce: 52:25:68:23:70:6c:be:d9:41:48:fc:ea:39:13:cb: 2c:ad:4c:a6:dd:6e:2a:56:fa:6f:1d:18:92:aa:67: ad:aa:a3:75:37:e9:31:af:f1:f7:e1:aa:11:b6:36: db:d6:01:da:28:1a:9d:be:22:13:53:af:c7:45:09: 4d:7a:ad:24:e5:9d:de:25:26:4f:4a:4d:b1:b9:50: 39:12:5b:f2:99:48:85:d2:1d:07:f8:62:8e:33:c5: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:62:D0:19:2F:E5:71:A0:E4:2E:9E:AD:DA:6E:95:37:29:45:17:DC X509v3 Authority Key Identifier: keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c7:58:8e:23:d6:43:bb:cf:e8:a4:eb:a5:18:a0:0c:5f:b0: ba:cf:fb:b7:fe:3c:17:92:86:97:be:96:b3:9e:98:58:9a:59: c0:51:64:61:b1:8f:ab:62:7f:8f:b9:53:1d:56:d9:15:97:4c: b6:19:d5:fc:40:34:44:2f:b4:d1:d7:af:44:36:9f:7c:ae:dc: ac:ae:ef:a6:8a:67:51:17:13:2e:20:0a:67:bb:f8:a8:e7:07: 53:d5:c1:5a:26:cd:a2:09:f8:fd:eb:45:bf:a9:c2:3a:51:a5: 2b:4e:7e:2f:38:14:a4:52:a8:91:d0:a0:98:e9:0e:62:8e:5c: ec:3b:78:85:5a:34:eb:c3:80:21:f4:7c:73:8d:0f:a2:9b:5d: d0:9f:11:f1:96:6c:de:b5:30:cc:fd:0c:84:96:77:1c:22:4b: 34:5e:74:e3:1c:9f:13:04:e6:03:ea:49:ba:2d:ad:40:2e:ca: 35:eb:29:f8:5f:6b:72:0d:10:5b:55:84:7e:1b:50:06:38:6e: 6e:48:14:dd:12:12:67:92:b4:5e:67:ab:e8:37:b2:9c:c0:c0: d7:ab:84:08:69:7b:0d:29:7d:e5:34:ba:cd:a6:f4:ea:e4:d3: 9b:86:1d:ed:cc:43:d6:01:a1:80:c9:dc:ee:81:db:96:f8:10: 46:f9:ed:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcSY3+AYv+47+wROdLJNiI4P08EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNF MzVCNEM0NjAeFw0yNTExMDQxNzE2MTRaFw0yNTExMDgwMDUzMTRaMDMxMTAvBgNV BAMTKDVBNjJEMDE5MkZFNTcxQTBFNDJFOUVBRERBNkU5NTM3Mjk0NTE3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+BtzNynSrpp1MTqg/aLYXvOb o5NhyzOdTb16puwBLENapEk4ZqA/OW1xhZdix9CoGXXH6BtGPzKOH3Lm4hCsnU3O 8112O4r9Ogu+L+IzcperUDxbqRySzEyiZhn40BSNd1zO+3Ru9Lnbxr+wyHDnZlw1 /uDxABGqwLC+KL/f4xsmHy5T4wOYPqWu4zBIQGRqNWjNbcni9r4r4ZiWbMn/oKD6 zlIlaCNwbL7ZQUj86jkTyyytTKbdbipW+m8dGJKqZ62qo3U36TGv8ffhqhG2NtvW AdooGp2+IhNTr8dFCU16rSTlnd4lJk9KTbG5UDkSW/KZSIXSHQf4Yo4zxZr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWmLQGS/lcaDkLp6t2m6VNylFF9wwHwYDVR0j BBgwFoAURVGgMsREhf9lk+BDUn4+HONbTEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMC80NTUxQTAzMkM0 NDQ4NUZGNjU5M0UwNDM1MjdFM0UxQ0UzNUI0QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNFMzVC NEM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNF MUNFMzVCNEM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3HWI4j1kO7z+ik66UYoAxfsLrP+7f+PBeS hpe+lrOemFiaWcBRZGGxj6tif4+5Ux1W2RWXTLYZ1fxANEQvtNHXr0Q2n3yu3Kyu 76aKZ1EXEy4gCme7+KjnB1PVwVomzaIJ+P3rRb+pwjpRpStOfi84FKRSqJHQoJjp DmKOXOw7eIVaNOvDgCH0fHOND6KbXdCfEfGWbN61MMz9DISWdxwiSzRedOMcnxME 5gPqSbotrUAuyjXrKfhfa3INEFtVhH4bUAY4bm5IFN0SEmeStF5nq+g3spzAwNer hAhpew0pfeU0us2m9Ork05uGHe3MQ9YBoYDJ3O6B25b4EEb57bc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:11 2025 by rpki-client