$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: irkOA6duM2nd0GqU/WVA67o88UJD9Kg1hOFprG3Tros= Subject key identifier: 17:8F:A6:08:97:C1:40:25:E9:3B:71:42:9B:1B:F7:AF:6B:7C:12:DD Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 5354789B3EB8C5179113B55AD5A256A6D9BCB249 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 0299 Signing time: Sun 19 Oct 2025 05:21:05 +0000 Manifest this update: Sun 19 Oct 2025 05:16:05 +0000 Manifest next update: Wed 22 Oct 2025 09:14:05 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: hj+jBlSgUmTNp+/0lU95T+vLKEXC+woEe5f32OLLw+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:54:78:9b:3e:b8:c5:17:91:13:b5:5a:d5:a2:56:a6:d9:bc:b2:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: Oct 19 05:16:05 2025 GMT Not After : Oct 22 09:14:05 2025 GMT Subject: CN=178FA60897C14025E93B71429B1BF7AF6B7C12DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:50:dd:eb:4c:70:29:95:5e:6c:77:51:de: 5d:c8:95:98:9a:59:d6:50:cf:fa:47:48:2c:ac:33: ed:ff:56:14:fd:c0:0f:62:64:3b:b3:ba:ae:ba:b9: e6:1e:01:94:3a:be:9b:94:4a:9e:15:68:7b:03:d4: 9a:71:bf:03:62:fa:5d:0f:ad:08:bc:ef:39:84:49: 74:3d:dd:e6:3d:d4:45:fc:99:12:d6:f8:84:9e:80: 5b:a5:12:52:9a:f1:b1:16:44:a3:4d:01:22:24:3e: d5:ec:ba:26:11:cd:89:d5:01:32:c0:3c:57:82:54: 34:1f:2e:53:79:99:3b:31:1d:dd:19:f3:f3:fa:06: 3c:51:b4:0f:39:4f:a0:3b:b6:01:4b:fc:1a:ca:f8: 9f:6e:f4:b7:14:c1:40:b6:5c:e5:a4:18:03:f9:ee: a3:58:1c:8b:70:ca:c8:ae:92:f1:ad:1f:a1:ac:d2: c1:38:46:a2:57:8c:43:b6:50:3e:89:fb:63:bc:95: 70:f9:43:ee:e5:20:b9:19:ae:da:f6:69:05:d0:98: b6:1f:f7:c0:fe:c1:62:8c:7a:24:18:9a:9d:40:12: 6b:e1:56:a8:10:ce:63:71:3a:a7:54:c6:85:9e:34: fb:26:18:0c:e0:26:f2:37:7d:6e:af:3a:a7:50:60: 94:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8F:A6:08:97:C1:40:25:E9:3B:71:42:9B:1B:F7:AF:6B:7C:12:DD X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:66:4e:6c:69:e6:38:20:18:6f:38:c9:a1:57:95:ce:32:54: 25:91:cf:99:75:bf:72:4a:ae:d5:61:ec:47:37:93:12:ea:22: cf:91:8a:df:c8:7c:0c:d5:6f:01:86:92:1d:de:8f:d6:6a:a4: af:95:36:3d:c1:b9:3f:b3:d7:47:ba:9f:dd:32:4b:29:a5:96: dc:e3:51:71:72:d7:26:38:39:b6:6e:a2:b6:cc:5d:44:60:8a: 13:e2:33:c9:07:c3:7b:02:7d:c1:9c:47:ca:6e:55:9d:c4:6f: 85:6b:3a:6b:64:3d:4b:58:53:eb:14:83:f9:fa:47:4c:8e:2d: ca:ee:d8:f3:8c:24:47:53:7c:d0:eb:a5:63:a5:23:9b:a1:d4: 2a:0b:58:51:57:50:bb:ed:90:49:3b:f6:07:39:e8:fc:51:67: 5a:4f:ab:04:8d:23:1e:58:4b:4f:56:0d:27:5f:11:05:44:ce: a2:41:e3:59:4d:ec:ad:fd:da:b6:9c:0b:6e:df:f7:33:9f:65: 08:11:f2:70:e0:7a:2d:cd:8e:2d:2e:d1:e4:aa:58:e8:20:5d: 68:6c:19:42:df:e9:a6:aa:1c:63:ac:80:fb:bd:e9:2b:35:eb: 55:cb:89:4c:98:5e:dd:0f:43:3c:2f:52:55:66:ae:9d:ff:a8: e0:0f:99:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU1R4mz64xReRE7Va1aJWptm8skkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNTEwMTkwNTE2MDVaFw0yNTEwMjIwOTE0MDVaMDMxMTAvBgNV BAMTKDE3OEZBNjA4OTdDMTQwMjVFOTNCNzE0MjlCMUJGN0FGNkI3QzEyREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgkVDd60xwKZVebHdR3l3IlZia WdZQz/pHSCysM+3/VhT9wA9iZDuzuq66ueYeAZQ6vpuUSp4VaHsD1JpxvwNi+l0P rQi87zmESXQ93eY91EX8mRLW+ISegFulElKa8bEWRKNNASIkPtXsuiYRzYnVATLA PFeCVDQfLlN5mTsxHd0Z8/P6BjxRtA85T6A7tgFL/BrK+J9u9LcUwUC2XOWkGAP5 7qNYHItwysiukvGtH6Gs0sE4RqJXjEO2UD6J+2O8lXD5Q+7lILkZrtr2aQXQmLYf 98D+wWKMeiQYmp1AEmvhVqgQzmNxOqdUxoWeNPsmGAzgJvI3fW6vOqdQYJRbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4+mCJfBQCXpO3FCmxv3r2t8Et0wHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBmTmxp5jggGG84yaFXlc4yVCWRz5l1v3JK rtVh7Ec3kxLqIs+Rit/IfAzVbwGGkh3ej9ZqpK+VNj3BuT+z10e6n90ySymlltzj UXFy1yY4ObZuorbMXURgihPiM8kHw3sCfcGcR8puVZ3Eb4VrOmtkPUtYU+sUg/n6 R0yOLcru2POMJEdTfNDrpWOlI5uh1CoLWFFXULvtkEk79gc56PxRZ1pPqwSNIx5Y S09WDSdfEQVEzqJB41lN7K392racC27f9zOfZQgR8nDgei3Nji0u0eSqWOggXWhs GULf6aaqHGOsgPu96Ss161XLiUyYXt0PQzwvUlVmrp3/qOAPmV0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:46:38 2025 by rpki-client