$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: 3KZMqW+Pnzm+o7R2D+mAIqUajxNHUGb/VaohC2js7rk= Subject key identifier: BA:D9:7F:74:C5:65:85:A3:98:07:49:FB:4A:D9:8B:13:69:5D:A0:27 Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 1AD873975CEF5C73DF30D80C83D54F47F5ABE9D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 0517 Signing time: Sun 19 Oct 2025 12:11:44 +0000 Manifest this update: Sun 19 Oct 2025 12:06:44 +0000 Manifest next update: Wed 22 Oct 2025 20:05:44 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: MBfbrIN72jHuJMFEnrxMsTWlPwHznC1MTQdK4YcpqKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d8:73:97:5c:ef:5c:73:df:30:d8:0c:83:d5:4f:47:f5:ab:e9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Oct 19 12:06:44 2025 GMT Not After : Oct 22 20:05:44 2025 GMT Subject: CN=BAD97F74C56585A3980749FB4AD98B13695DA027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f7:bb:1f:16:b3:e1:a5:59:53:ee:29:5e:a5: 76:b2:de:39:03:9e:00:46:c9:5f:a1:11:6b:ac:d0: 58:b3:3e:43:00:e9:f5:a3:19:61:66:41:97:ac:42: 29:87:c1:09:c4:d0:5a:7b:81:1b:9f:48:a7:b0:14: 33:16:9a:26:40:63:15:99:9b:46:9b:4e:a9:89:48: cf:da:8f:f6:a5:2d:91:e7:3b:63:95:a8:ab:49:c9: de:14:41:23:c2:c4:9f:6c:3c:6e:39:93:d9:e4:ff: df:08:0b:db:97:4a:0d:66:69:e3:46:73:56:00:cc: 2b:41:aa:ab:6c:5b:50:6a:e6:e3:e6:6f:c3:b0:df: 99:2a:27:f0:db:0f:1a:4d:14:d6:ef:ec:b6:ee:58: e0:21:77:ac:5d:05:94:79:1b:d5:be:10:4a:68:99: e9:d4:26:b9:af:81:3d:a3:e8:1f:fd:49:87:ef:e6: 90:08:5c:ad:95:3a:36:35:2d:36:58:ad:6c:49:f0: 6a:b7:ea:05:35:3b:11:bf:e3:98:d4:87:43:fa:22: 85:44:de:a3:d6:1e:e1:4d:86:81:da:28:01:15:5e: 3c:d6:a0:4f:c5:73:47:e2:0c:a7:55:5e:16:30:34: 40:f4:20:a1:94:8c:80:df:91:96:8e:55:8e:b9:dc: 6d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D9:7F:74:C5:65:85:A3:98:07:49:FB:4A:D9:8B:13:69:5D:A0:27 X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:29:e1:f1:63:78:09:39:93:2a:a4:f8:08:05:90:7b:53:01: bd:3e:61:2e:63:64:a2:5d:90:4d:fd:e2:62:5c:9b:2a:0d:6f: 06:33:7d:45:2d:59:18:cc:f4:df:8e:c3:93:ef:a3:20:1f:80: f2:8a:72:2d:27:71:68:f9:0f:d1:a0:de:fb:2e:b2:53:65:fd: 30:9b:a5:55:24:20:22:19:91:5d:b0:75:6d:3f:fc:91:f6:41: 96:c9:0a:5b:07:e7:b9:08:1e:69:68:36:15:62:4d:e6:86:a0: be:2f:81:d5:2c:34:65:f3:91:27:d2:32:35:83:2c:ca:4d:80: eb:cb:46:0a:ba:aa:15:18:05:cd:79:cd:ef:92:23:85:d2:40: fa:e2:91:92:78:2b:1d:32:e8:98:40:03:96:69:3d:28:81:f6: 31:36:87:fc:c7:a8:cd:10:29:04:b0:e9:02:09:10:7f:c5:4a: 08:79:a6:27:f7:d9:0f:fa:33:01:99:19:24:4f:65:19:72:2f: 96:c2:70:5b:da:d8:d8:14:2a:32:2b:48:fa:30:3c:19:eb:4e: d5:c6:d9:f2:54:b7:7d:e4:97:67:65:c3:72:b9:b5:5e:9b:8a: 87:4e:66:58:a1:e0:33:10:42:45:20:73:3e:7f:46:d5:89:17: 58:71:d0:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGthzl1zvXHPfMNgMg9VPR/Wr6dUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNTEwMTkxMjA2NDRaFw0yNTEwMjIyMDA1NDRaMDMxMTAvBgNV BAMTKEJBRDk3Rjc0QzU2NTg1QTM5ODA3NDlGQjRBRDk4QjEzNjk1REEwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt97sfFrPhpVlT7ilepXay3jkD ngBGyV+hEWus0FizPkMA6fWjGWFmQZesQimHwQnE0Fp7gRufSKewFDMWmiZAYxWZ m0abTqmJSM/aj/alLZHnO2OVqKtJyd4UQSPCxJ9sPG45k9nk/98IC9uXSg1maeNG c1YAzCtBqqtsW1Bq5uPmb8Ow35kqJ/DbDxpNFNbv7LbuWOAhd6xdBZR5G9W+EEpo menUJrmvgT2j6B/9SYfv5pAIXK2VOjY1LTZYrWxJ8Gq36gU1OxG/45jUh0P6IoVE 3qPWHuFNhoHaKAEVXjzWoE/Fc0fiDKdVXhYwNED0IKGUjIDfkZaOVY653G2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUutl/dMVlhaOYB0n7StmLE2ldoCcwHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMp4fFjeAk5kyqk+AgFkHtTAb0+YS5jZKJd kE394mJcmyoNbwYzfUUtWRjM9N+Ow5PvoyAfgPKKci0ncWj5D9Gg3vsuslNl/TCb pVUkICIZkV2wdW0//JH2QZbJClsH57kIHmloNhViTeaGoL4vgdUsNGXzkSfSMjWD LMpNgOvLRgq6qhUYBc15ze+SI4XSQPrikZJ4Kx0y6JhAA5ZpPSiB9jE2h/zHqM0Q KQSw6QIJEH/FSgh5pif32Q/6MwGZGSRPZRlyL5bCcFva2NgUKjIrSPowPBnrTtXG 2fJUt33kl2dlw3K5tV6biodOZlih4DMQQkUgcz5/RtWJF1hx0PU= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:13 2025 by rpki-client