$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: qv/6imAMdCFdaeXaKtWLgd6rBqtG/dg6d+2Zup8wD0c= Subject key identifier: 0E:BB:FD:77:31:47:A1:6C:FB:29:7A:CA:2D:3B:13:38:72:CD:32:6A Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 313B73E439895BF04DE88EF5CE6BE7DBAAD11DC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 04FD Signing time: Thu 21 Aug 2025 11:01:46 +0000 Manifest this update: Thu 21 Aug 2025 10:56:46 +0000 Manifest next update: Sun 24 Aug 2025 17:15:46 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: sky3SdUSR6vsd9Os4m+OGJUzbX3Inb4wpldnJIU4IBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3b:73:e4:39:89:5b:f0:4d:e8:8e:f5:ce:6b:e7:db:aa:d1:1d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Aug 21 10:56:46 2025 GMT Not After : Aug 24 17:15:46 2025 GMT Subject: CN=0EBBFD773147A16CFB297ACA2D3B133872CD326A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:ff:0a:d6:93:b1:b2:11:d4:9e:2f:1c:96: c6:91:9c:2a:c4:c7:42:dc:d0:9b:19:b5:33:7d:c7: b7:6c:9f:61:ab:7b:aa:65:da:61:dc:24:a6:c5:7b: 00:e5:0f:c1:01:6a:21:a0:e9:cb:af:0b:19:ef:92: 1d:3b:98:7d:3f:7e:51:14:59:cc:70:a5:41:1e:01: 11:ea:46:6a:a5:91:1d:71:73:f0:69:b7:cb:f4:3f: ce:a0:fc:0f:51:02:6c:37:c3:65:c0:2a:31:9e:17: ea:58:d8:4e:fc:49:2f:34:a2:6d:98:b3:8d:53:ed: 07:c4:88:00:80:de:fc:15:9d:96:e8:ab:86:43:0b: 94:87:d2:97:e6:66:f4:a5:cd:f9:7b:27:07:60:7d: 05:ba:80:74:15:d1:2b:f5:4b:b0:17:24:d2:ec:ce: ee:2f:61:a1:ff:99:f9:89:a3:2b:ca:8d:4d:48:d9: 04:22:2e:12:e7:b7:c3:43:5e:f0:64:1e:be:41:60: 68:d3:14:b9:68:f0:8e:e4:1f:13:32:ca:d5:bc:88: 45:2c:43:55:cf:73:55:af:df:12:0d:0a:8c:bf:fc: 28:fc:91:80:0f:bd:ab:35:be:1d:6a:4e:24:fa:2f: b8:91:5f:cf:67:20:fe:9e:39:b6:11:13:96:1c:2e: 6a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BB:FD:77:31:47:A1:6C:FB:29:7A:CA:2D:3B:13:38:72:CD:32:6A X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9d:0f:9e:84:0b:fd:54:1f:36:52:f4:c3:b5:42:f3:fa:ca: 7f:69:51:69:ee:47:da:59:b5:89:12:f6:8f:12:01:5d:40:47: 49:f5:68:9a:2f:97:f9:33:57:07:3e:0c:34:a0:c0:93:13:46: 80:6d:e7:78:de:67:57:c4:b9:a3:f3:ce:95:22:c0:5c:45:e6: bf:d9:2b:b0:7c:41:30:3a:94:74:31:05:9f:7d:19:63:36:1c: c1:c1:7d:93:5e:2c:d4:5f:3d:e0:70:77:17:f1:04:bb:e6:87: 97:1e:65:82:88:f0:c3:f9:d3:6b:19:2b:df:12:62:90:b6:a4: 18:5a:23:06:97:47:97:be:8f:ab:6f:25:62:07:bd:a4:72:74: ec:76:ea:b2:85:a3:bc:7b:ec:fd:70:bb:63:82:a0:fd:7b:41: b8:f8:3a:a2:63:87:5a:e7:bb:09:57:d6:2d:0e:41:cc:4d:86: 5b:d0:d2:1c:22:99:0e:c5:fa:ac:55:4b:20:57:5f:66:99:df: 5a:8c:51:99:1f:bf:4e:79:33:12:11:45:e3:17:c5:fa:8e:d9: 65:87:02:49:72:27:bd:96:19:1d:32:d3:75:00:67:40:ae:2b: 18:da:52:84:d0:96:b7:01:2a:73:ad:29:a4:d7:25:15:ef:6f: 3d:c8:9f:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTtz5DmJW/BN6I71zmvn26rRHcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNTA4MjExMDU2NDZaFw0yNTA4MjQxNzE1NDZaMDMxMTAvBgNV BAMTKDBFQkJGRDc3MzE0N0ExNkNGQjI5N0FDQTJEM0IxMzM4NzJDRDMyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbE/8K1pOxshHUni8clsaRnCrE x0Lc0JsZtTN9x7dsn2Gre6pl2mHcJKbFewDlD8EBaiGg6cuvCxnvkh07mH0/flEU WcxwpUEeARHqRmqlkR1xc/Bpt8v0P86g/A9RAmw3w2XAKjGeF+pY2E78SS80om2Y s41T7QfEiACA3vwVnZboq4ZDC5SH0pfmZvSlzfl7JwdgfQW6gHQV0Sv1S7AXJNLs zu4vYaH/mfmJoyvKjU1I2QQiLhLnt8NDXvBkHr5BYGjTFLlo8I7kHxMyytW8iEUs Q1XPc1Wv3xINCoy//Cj8kYAPvas1vh1qTiT6L7iRX89nIP6eObYRE5YcLmonAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDrv9dzFHoWz7KXrKLTsTOHLNMmowHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCdD56EC/1UHzZS9MO1QvP6yn9pUWnuR9pZ tYkS9o8SAV1AR0n1aJovl/kzVwc+DDSgwJMTRoBt53jeZ1fEuaPzzpUiwFxF5r/Z K7B8QTA6lHQxBZ99GWM2HMHBfZNeLNRfPeBwdxfxBLvmh5ceZYKI8MP502sZK98S YpC2pBhaIwaXR5e+j6tvJWIHvaRydOx26rKFo7x77P1wu2OCoP17Qbj4OqJjh1rn uwlX1i0OQcxNhlvQ0hwimQ7F+qxVSyBXX2aZ31qMUZkfv055MxIRReMXxfqO2WWH AklyJ72WGR0y03UAZ0CuKxjaUoTQlrcBKnOtKaTXJRXvbz3Inyo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:09 2025 by rpki-client