$ rpki-client -vvf repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft File: 4551A032C44485FF6593E043527E3E1CE35B4C46.mft (raw, json) Hash identifier: 74f9htCEh2dw/8uTt0xepQ1gZfcjNebilI9zFLrn+XM= Subject key identifier: 12:DF:6F:E0:C8:65:71:F4:05:CE:0C:C8:91:96:0B:8E:D3:E9:F9:7E Authority key identifier: 45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 Certificate issuer: /CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Certificate serial: 20A961A574BD9F961D18513E5D1C06C5956E6D7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft Manifest number: 04F7 Signing time: Tue 05 Aug 2025 11:31:15 +0000 Manifest this update: Tue 05 Aug 2025 11:26:15 +0000 Manifest next update: Fri 08 Aug 2025 13:29:15 +0000 Files and hashes: 1: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: cwL/Wm98vbTxoyJQfTlH4ycMGF6EbITvKpTsxzWifEM=) 2: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: MKGEqu2Psk6FQlMCBwUj3C02UOwY+xcEBLE/JQF9Mu0=) 3: 4551A032C44485FF6593E043527E3E1CE35B4C46.crl (hash: 5DcRTKab4YyYBvYBTeZjoo/wQOTxHjvq3Tmzd2EJmJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a9:61:a5:74:bd:9f:96:1d:18:51:3e:5d:1c:06:c5:95:6e:6d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4551A032C44485FF6593E043527E3E1CE35B4C46 Validity Not Before: Aug 5 11:26:15 2025 GMT Not After : Aug 8 13:29:15 2025 GMT Subject: CN=12DF6FE0C86571F405CE0CC891960B8ED3E9F97E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:44:20:b2:c4:6e:93:ae:11:40:86:73:88:f7: 57:73:81:2b:b4:dd:80:1a:16:83:7c:7e:5b:23:7d: 64:f4:bc:98:1e:9c:4d:a4:e7:5e:6f:9d:c0:99:c5: 8c:af:54:3f:87:93:9e:c8:1b:1e:41:97:97:da:4a: b7:a4:07:21:1b:3c:05:f9:d7:43:9c:d1:74:6a:91: 21:12:d3:6a:32:39:95:45:52:f7:0c:42:d6:39:51: bc:bc:1f:28:fd:c0:8f:4e:bc:81:e0:bb:a0:79:38: 65:15:08:12:f0:96:9d:f1:f9:77:c5:bd:3f:53:95: ad:34:ae:36:94:a2:a5:a5:01:ae:7f:3f:31:40:dc: aa:a4:20:b6:8c:38:09:7b:74:67:00:ec:16:4e:04: e0:8f:3c:20:40:ce:b7:71:df:eb:d4:ef:be:4c:5d: 1a:2d:51:7c:2e:66:db:7e:fc:a2:27:7c:71:97:dc: 78:15:bb:8c:3b:3a:4a:24:e0:68:a5:ff:1d:0c:c0: 7d:5c:0b:41:04:4a:74:eb:9a:e9:b9:0c:fb:d1:80: 70:e5:65:84:f9:c7:44:56:40:f7:08:77:e1:3b:df: 65:fe:96:c6:06:18:b8:4f:82:0e:b7:05:f0:34:2a: 3a:46:8e:da:6f:8a:e5:0c:69:62:57:cb:46:fe:ea: 5d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DF:6F:E0:C8:65:71:F4:05:CE:0C:C8:91:96:0B:8E:D3:E9:F9:7E X509v3 Authority Key Identifier: keyid:45:51:A0:32:C4:44:85:FF:65:93:E0:43:52:7E:3E:1C:E3:5B:4C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4551A032C44485FF6593E043527E3E1CE35B4C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/4551A032C44485FF6593E043527E3E1CE35B4C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a5:29:47:9b:6c:01:2f:b0:ce:48:21:83:2d:5c:1f:61:0e: 9d:f2:02:58:f8:6d:d1:f5:25:58:7a:bd:34:71:d4:c4:3b:63: 39:7a:b5:45:6c:b7:28:6a:51:bf:1b:17:69:3e:af:fd:e1:04: 56:94:9e:3f:4d:dd:da:5e:37:7e:22:18:60:1f:0e:96:2a:9e: b7:2c:64:5b:6f:cd:18:bc:95:92:a3:23:ce:60:98:2d:18:5e: 1f:a3:66:1a:de:ca:85:5b:5c:e9:e4:37:5c:5f:2f:f2:ae:b5: a5:41:b0:d1:b3:31:5f:3e:25:81:69:ab:ce:b3:f2:d8:ae:d3: 13:5a:02:2c:b1:3e:0e:0d:b1:4d:9d:72:ad:73:14:7e:e5:b2: a7:92:ba:74:90:c5:8a:be:85:5e:4c:24:12:bd:6f:71:52:d9: 4a:9c:b8:53:4b:e6:12:90:87:40:d5:78:8f:26:49:25:74:69: 16:56:0d:9a:9b:4a:c9:b7:20:84:26:0e:d8:7a:82:3d:0c:dd: 23:d2:47:d5:92:21:a8:86:7a:58:7e:c0:9e:9e:9a:a8:1c:74: 2e:13:c3:c6:03:85:d5:9f:98:15:34:e5:f5:2f:44:61:4d:15: 25:7b:80:2a:6d:92:f9:45:94:ed:b7:13:bc:92:8a:2a:cb:46: 88:bc:21:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIKlhpXS9n5YdGFE+XRwGxZVubX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNF MzVCNEM0NjAeFw0yNTA4MDUxMTI2MTVaFw0yNTA4MDgxMzI5MTVaMDMxMTAvBgNV BAMTKDEyREY2RkUwQzg2NTcxRjQwNUNFMENDODkxOTYwQjhFRDNFOUY5N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRCCyxG6TrhFAhnOI91dzgSu0 3YAaFoN8flsjfWT0vJgenE2k515vncCZxYyvVD+Hk57IGx5Bl5faSrekByEbPAX5 10Oc0XRqkSES02oyOZVFUvcMQtY5Uby8Hyj9wI9OvIHgu6B5OGUVCBLwlp3x+XfF vT9Tla00rjaUoqWlAa5/PzFA3KqkILaMOAl7dGcA7BZOBOCPPCBAzrdx3+vU775M XRotUXwuZtt+/KInfHGX3HgVu4w7Okok4Gil/x0MwH1cC0EESnTrmum5DPvRgHDl ZYT5x0RWQPcId+E732X+lsYGGLhPgg63BfA0KjpGjtpviuUMaWJXy0b+6l0bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEt9v4MhlcfQFzgzIkZYLjtPp+X4wHwYDVR0j BBgwFoAURVGgMsREhf9lk+BDUn4+HONbTEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2E2MmM5YS1kNGYwLTQ1NGItODA3Zi04NGY5YjNjMjAyYjMvMC80NTUxQTAzMkM0 NDQ4NUZGNjU5M0UwNDM1MjdFM0UxQ0UzNUI0QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNFMUNFMzVC NEM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNhNjJjOWEtZDRmMC00NTRiLTgw N2YtODRmOWIzYzIwMmIzLzAvNDU1MUEwMzJDNDQ0ODVGRjY1OTNFMDQzNTI3RTNF MUNFMzVCNEM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6lKUebbAEvsM5IIYMtXB9hDp3yAlj4bdH1 JVh6vTRx1MQ7Yzl6tUVstyhqUb8bF2k+r/3hBFaUnj9N3dpeN34iGGAfDpYqnrcs ZFtvzRi8lZKjI85gmC0YXh+jZhreyoVbXOnkN1xfL/KutaVBsNGzMV8+JYFpq86z 8tiu0xNaAiyxPg4NsU2dcq1zFH7lsqeSunSQxYq+hV5MJBK9b3FS2UqcuFNL5hKQ h0DVeI8mSSV0aRZWDZqbSsm3IIQmDth6gj0M3SPSR9WSIaiGelh+wJ6emqgcdC4T w8YDhdWfmBU05fUvRGFNFSV7gCptkvlFlO23E7ySiirLRoi8Id8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:19:28 2025 by rpki-client