$ rpki-client -vvf repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft File: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft (raw, json) Hash identifier: nKotefyad05euGspZ8GmTTSoZW1ZQVbhmX+DkgpMNiI= Subject key identifier: 67:D6:33:14:08:FB:F6:30:64:C1:2A:C0:46:E3:05:C1:16:EF:21:13 Authority key identifier: 45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 Certificate issuer: /CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Certificate serial: 79F7F98B7CF495763AAA519515B1539C0507DB16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft Manifest number: 0520 Signing time: Mon 03 Nov 2025 03:30:56 +0000 Manifest this update: Mon 03 Nov 2025 03:25:56 +0000 Manifest next update: Thu 06 Nov 2025 14:29:56 +0000 Files and hashes: 1: 45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl (hash: MQk935on+IGoHUn0P9fAWcPCiVuPQ06CFdOdT2EXibM=) 2: 3130332e3134302e37382e302f32332d3234203d3e20313338383733.roa (hash: DGGFs/nhZ+k7NUxZJLoh30LOsNcccBtIeZpWg8Hba0w=) 3: 323030313a6466303a623238303a3a2f34382d3438203d3e20313338383733.roa (hash: Hrvwt79CsllNFcgj1XkX080ZEGTR3oJEJ5/uQyuwag4=) 4: 3130332e3134302e37382e302f32342d3234203d3e203438343635.roa (hash: rLQgAbVnt3V9mbyukLPioMNmLMKQ2mxQ9vlQUzCluhI=) 5: 3130332e3134302e37392e302f32342d3234203d3e203438343635.roa (hash: DkleJkN5W2PyaQBgkh3h9+A6EIKYUBI0XIE9LsGOkEE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 14:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f7:f9:8b:7c:f4:95:76:3a:aa:51:95:15:b1:53:9c:05:07:db:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45795CE411027C6961B89E9C0FBDB9B73BD61C39 Validity Not Before: Nov 3 03:25:56 2025 GMT Not After : Nov 6 14:29:56 2025 GMT Subject: CN=67D6331408FBF63064C12AC046E305C116EF2113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f2:5d:1c:9e:c2:6e:67:a7:c5:51:2b:0c:94: 6f:de:37:f8:2a:7b:62:8d:a2:9e:1b:0b:b5:0e:77: d9:da:49:b7:54:86:1e:e3:92:5b:74:f3:e5:f4:22: c4:91:60:7c:71:c5:2b:d9:e7:33:d5:2f:ca:e9:0b: b8:e7:6a:72:ee:9d:06:b2:c3:1b:a9:88:38:a6:06: e8:03:38:66:e0:e9:04:03:31:5a:bf:68:58:ad:6d: 40:d8:3c:d1:66:30:bc:b8:62:9a:20:78:c7:54:59: 60:11:be:ed:9d:2f:43:4c:1a:33:0c:65:7b:0f:87: 19:57:b0:4c:54:ad:21:58:3e:16:41:74:3e:8e:2a: 0e:41:ae:ef:a4:54:08:f2:c7:c6:36:d2:f6:e7:eb: b6:4f:a2:b4:b1:21:35:c9:b8:24:56:ae:f4:76:f3: e6:55:87:f9:05:89:60:fd:1b:e8:b4:72:9c:9b:6d: ca:bb:33:f8:a0:14:36:99:ce:9e:19:8a:e3:e3:3b: 72:ab:53:84:1b:8d:99:a6:d5:ec:b3:cc:04:9d:43: f7:67:7f:1e:1c:e0:d7:4c:83:26:1c:e0:88:a1:15: d7:a5:c7:1f:0f:fa:c0:9d:7f:a9:59:05:52:be:13: fc:4b:e0:82:e7:d2:51:44:ae:55:8c:13:4a:d0:81: 4f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D6:33:14:08:FB:F6:30:64:C1:2A:C0:46:E3:05:C1:16:EF:21:13 X509v3 Authority Key Identifier: keyid:45:79:5C:E4:11:02:7C:69:61:B8:9E:9C:0F:BD:B9:B7:3B:D6:1C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45795CE411027C6961B89E9C0FBDB9B73BD61C39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f73ab79d-00d5-49cb-ac10-3bd4f2386bc6/0/45795CE411027C6961B89E9C0FBDB9B73BD61C39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7b:25:44:2c:14:dc:79:53:18:21:c5:07:b5:bd:d6:42:05: d8:0d:e6:ad:77:a8:a1:22:46:21:84:50:7e:ea:83:e8:fe:db: eb:f1:f6:57:b2:75:da:c3:13:75:e3:82:f7:5f:99:c2:bc:bd: f4:65:70:cf:79:40:65:74:29:8d:83:a4:c9:36:19:12:3c:55: 9c:65:23:4e:85:1e:da:97:53:b9:cb:60:3c:bc:1c:03:50:ed: 63:49:06:e0:71:09:6e:90:e7:40:77:fc:94:67:06:9d:ca:80: 74:cd:43:2a:f8:bf:e6:4d:a6:98:06:c0:64:f2:25:c8:94:1e: ef:92:da:2d:20:bc:8c:ba:66:a9:5b:f5:e7:96:14:d0:22:ff: 5f:a7:6c:2d:c7:9c:65:3a:9e:e3:45:88:0b:26:73:f1:6d:e4: 95:bf:9a:04:1a:ea:07:e6:03:0a:08:94:a2:0a:ed:8d:52:32: a8:fd:cd:d8:65:8a:b8:b7:f6:3b:4c:49:3c:59:15:b4:22:d9: 0c:9d:e1:22:6c:75:7b:da:2d:9d:2f:cc:24:95:da:a4:2c:42: 06:aa:09:7f:2d:71:4b:8d:c3:2d:1a:e9:c0:88:f3:de:02:a9: d7:34:66:2b:0d:62:6a:92:bf:93:1b:85:0a:e2:4f:3b:ca:5c: 1d:f4:4b:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeff5i3z0lXY6qlGVFbFTnAUH2xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5Qjcz QkQ2MUMzOTAeFw0yNTExMDMwMzI1NTZaFw0yNTExMDYxNDI5NTZaMDMxMTAvBgNV BAMTKDY3RDYzMzE0MDhGQkY2MzA2NEMxMkFDMDQ2RTMwNUMxMTZFRjIxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc8l0cnsJuZ6fFUSsMlG/eN/gq e2KNop4bC7UOd9naSbdUhh7jklt08+X0IsSRYHxxxSvZ5zPVL8rpC7jnanLunQay wxupiDimBugDOGbg6QQDMVq/aFitbUDYPNFmMLy4YpogeMdUWWARvu2dL0NMGjMM ZXsPhxlXsExUrSFYPhZBdD6OKg5Bru+kVAjyx8Y20vbn67ZPorSxITXJuCRWrvR2 8+ZVh/kFiWD9G+i0cpybbcq7M/igFDaZzp4ZiuPjO3KrU4QbjZmm1eyzzASdQ/dn fx4c4NdMgyYc4IihFdelxx8P+sCdf6lZBVK+E/xL4ILn0lFErlWME0rQgU/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ9YzFAj79jBkwSrARuMFwRbvIRMwHwYDVR0j BBgwFoAURXlc5BECfGlhuJ6cD725tzvWHDkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzNhYjc5ZC0wMGQ1LTQ5Y2ItYWMxMC0zYmQ0ZjIzODZiYzYvMC80NTc5NUNFNDEx MDI3QzY5NjFCODlFOUMwRkJEQjlCNzNCRDYxQzM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5QjczQkQ2 MUMzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjczYWI3OWQtMDBkNS00OWNiLWFj MTAtM2JkNGYyMzg2YmM2LzAvNDU3OTVDRTQxMTAyN0M2OTYxQjg5RTlDMEZCREI5 QjczQkQ2MUMzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACp7JUQsFNx5UxghxQe1vdZCBdgN5q13qKEi RiGEUH7qg+j+2+vx9leyddrDE3XjgvdfmcK8vfRlcM95QGV0KY2DpMk2GRI8VZxl I06FHtqXU7nLYDy8HANQ7WNJBuBxCW6Q50B3/JRnBp3KgHTNQyr4v+ZNppgGwGTy JciUHu+S2i0gvIy6Zqlb9eeWFNAi/1+nbC3HnGU6nuNFiAsmc/Ft5JW/mgQa6gfm AwoIlKIK7Y1SMqj9zdhliri39jtMSTxZFbQi2Qyd4SJsdXvaLZ0vzCSV2qQsQgaq CX8tcUuNwy0a6cCI894Cqdc0ZisNYmqSv5MbhQriTzvKXB30SzY= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:39 2025 by rpki-client