$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: EIUupzRneRKPib32Kmpi7FVNtJpAKBbFkr7ggHYJoRg= Subject key identifier: 06:92:C8:C7:B3:6A:4A:BD:D6:DC:07:43:8B:36:DE:8F:4A:C9:52:44 Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 126755FB10FA6194845AF7937A9428CCDAEC56AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 0280 Signing time: Fri 22 Aug 2025 08:51:10 +0000 Manifest this update: Fri 22 Aug 2025 08:46:10 +0000 Manifest next update: Mon 25 Aug 2025 14:10:10 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: EWvT2rQdfuMQQO/pEONdnOK1pXgmQCTJunwu3r1l2jQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:67:55:fb:10:fa:61:94:84:5a:f7:93:7a:94:28:cc:da:ec:56:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: Aug 22 08:46:10 2025 GMT Not After : Aug 25 14:10:10 2025 GMT Subject: CN=0692C8C7B36A4ABDD6DC07438B36DE8F4AC95244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:2f:98:b2:f5:ac:06:0a:3f:ab:b5:c6:c9: 4d:49:f5:24:f1:b5:0a:f2:1f:b9:ba:50:fe:09:91: 16:4d:72:d1:05:34:63:52:c3:1f:fe:6a:63:86:94: e7:d8:46:ce:ed:ac:ce:1e:16:a4:62:e5:8c:a2:a8: 38:26:da:00:fc:df:7b:d5:61:01:dc:19:6a:cf:e5: 3f:e1:c5:e6:3f:eb:0f:17:6e:f5:fb:49:42:ae:da: 9a:6c:59:94:68:17:f1:9a:0d:e9:72:18:aa:02:05: 55:58:5f:71:75:f6:c6:56:75:a0:fb:f2:d1:fb:af: f3:98:17:3c:ba:82:5a:6f:1e:a3:9a:fb:4b:2e:70: b2:17:56:d2:b0:ef:f2:bf:23:45:d8:16:9d:05:96: 45:43:af:d9:94:05:76:0e:2b:80:e3:58:d1:f5:9c: ee:55:b5:22:1c:bc:60:5b:01:7d:12:33:4c:9e:ed: d0:f6:a0:e8:6d:f7:df:f6:32:50:8d:71:92:c2:ec: 44:ae:0a:4a:5d:92:a9:6f:d0:83:93:c0:ee:48:58: 01:dc:8b:1d:35:5e:75:a7:2b:cb:d3:fa:5d:f3:1c: d2:66:36:af:22:b8:3f:bb:b2:1e:6b:ef:26:64:a0: d0:6d:1a:c8:bb:65:2c:a6:e5:32:de:dc:dd:69:0f: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:92:C8:C7:B3:6A:4A:BD:D6:DC:07:43:8B:36:DE:8F:4A:C9:52:44 X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:39:40:a9:04:71:71:8b:3f:d9:84:b1:fb:08:97:e6:51:20: 3f:3e:4d:ae:c5:6d:1f:ca:86:c8:c3:ee:bb:84:a7:96:ca:b3: 4d:5b:a8:ef:b7:86:c5:3a:3e:da:d5:88:3e:8a:03:53:00:bd: b9:72:18:31:23:c4:6a:d4:6c:ff:ba:da:64:f0:6e:fc:b7:3d: eb:a4:ed:39:d2:25:bf:08:f4:99:a0:d9:85:cc:30:e7:a9:5c: 96:ed:72:20:6d:00:1f:fd:e8:03:f2:68:a9:dc:8d:a0:19:29: f3:a2:74:a9:74:ea:5c:95:dc:68:5f:1e:6d:fb:8f:a8:de:57: 4c:3c:64:99:43:c0:20:1a:7c:aa:d7:36:13:3d:b4:ac:7c:6b: 4f:12:27:4d:a3:16:7b:9c:cb:d9:da:44:87:c4:f3:a9:a1:55: bf:ba:a1:c5:aa:f5:b5:2e:ba:9b:3f:42:dd:9c:94:40:c8:72: 6d:22:0d:2d:0e:6c:57:c2:61:16:cd:7a:12:cd:5b:e1:eb:eb: 18:53:3b:d2:97:ac:7f:03:33:91:8e:76:d0:fc:b1:f3:29:5a: 9f:9a:11:f2:d6:31:39:e3:62:11:b7:a1:00:d9:05:46:f0:c5: 36:d9:4a:9c:06:af:9f:57:d7:93:8e:fa:09:7b:f8:74:42:c9: 13:24:b7:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmdV+xD6YZSEWveTepQozNrsVqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNTA4MjIwODQ2MTBaFw0yNTA4MjUxNDEwMTBaMDMxMTAvBgNV BAMTKDA2OTJDOEM3QjM2QTRBQkRENkRDMDc0MzhCMzZERThGNEFDOTUyNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBi+YsvWsBgo/q7XGyU1J9STx tQryH7m6UP4JkRZNctEFNGNSwx/+amOGlOfYRs7trM4eFqRi5YyiqDgm2gD833vV YQHcGWrP5T/hxeY/6w8XbvX7SUKu2ppsWZRoF/GaDelyGKoCBVVYX3F19sZWdaD7 8tH7r/OYFzy6glpvHqOa+0sucLIXVtKw7/K/I0XYFp0FlkVDr9mUBXYOK4DjWNH1 nO5VtSIcvGBbAX0SM0ye7dD2oOht99/2MlCNcZLC7ESuCkpdkqlv0IOTwO5IWAHc ix01XnWnK8vT+l3zHNJmNq8iuD+7sh5r7yZkoNBtGsi7ZSym5TLe3N1pDxlhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBpLIx7NqSr3W3AdDizbej0rJUkQwHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJE5QKkEcXGLP9mEsfsIl+ZRID8+Ta7FbR/K hsjD7ruEp5bKs01bqO+3hsU6PtrViD6KA1MAvblyGDEjxGrUbP+62mTwbvy3Peuk 7TnSJb8I9Jmg2YXMMOepXJbtciBtAB/96APyaKncjaAZKfOidKl06lyV3GhfHm37 j6jeV0w8ZJlDwCAafKrXNhM9tKx8a08SJ02jFnucy9naRIfE86mhVb+6ocWq9bUu ups/Qt2clEDIcm0iDS0ObFfCYRbNehLNW+Hr6xhTO9KXrH8DM5GOdtD8sfMpWp+a EfLWMTnjYhG3oQDZBUbwxTbZSpwGr59X15OO+gl7+HRCyRMkt3w= -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:03 2025 by rpki-client