$ rpki-client -vvf repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft File: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft (raw, json) Hash identifier: +DGWSQnW5JX2JYhdnjz9d+lLDx3rKT4ImFkaTzo7Ccs= Subject key identifier: A1:D4:11:59:9C:C7:18:30:9A:28:C2:86:F3:7B:64:50:D7:7E:64:A8 Authority key identifier: B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A Certificate issuer: /CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Certificate serial: 1C9A14E705D5AE7E4FD5F0516A6C72A022BD4F0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft Manifest number: 47 Signing time: Fri 22 Aug 2025 17:31:34 +0000 Manifest this update: Fri 22 Aug 2025 17:26:34 +0000 Manifest next update: Tue 26 Aug 2025 01:01:34 +0000 Files and hashes: 1: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl (hash: 29uixARl7tJqLXBrEGE7J3VAFCCbfDyPnttayhvlYTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:9a:14:e7:05:d5:ae:7e:4f:d5:f0:51:6a:6c:72:a0:22:bd:4f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Validity Not Before: Aug 22 17:26:34 2025 GMT Not After : Aug 26 01:01:34 2025 GMT Subject: CN=A1D411599CC718309A28C286F37B6450D77E64A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fb:e0:5d:a7:fa:30:a4:e0:e0:72:78:c0:bc: 60:c6:b3:59:c1:8d:28:a6:b0:16:3e:5b:b0:55:24: df:8f:3b:f8:9b:b2:de:45:a5:e7:9e:41:23:a4:d8: 38:7b:4c:1f:c7:2e:b5:7c:6b:09:53:f1:c5:ae:76: f1:ea:96:49:e2:5e:f8:11:45:a7:90:bc:93:62:88: 51:61:aa:f1:39:0f:a2:4e:69:39:5e:64:0b:2f:90: a7:dd:c6:c5:0f:ac:46:06:bf:56:5b:78:b4:8a:fb: 1f:a2:83:d8:85:e2:b8:bd:c1:92:13:ce:75:10:48: 0a:c0:a6:63:77:73:6f:5c:37:0b:cb:53:d0:68:7d: 7f:58:cc:0e:1f:91:51:67:9a:39:29:d8:15:73:b5: a7:0c:e2:85:d4:5b:7d:f2:4e:05:b7:7c:9d:b4:01: d9:85:02:07:3f:9b:0e:07:25:f7:f9:37:7a:1a:0f: ca:4b:71:57:fe:72:39:f3:10:69:44:22:dc:26:2a: 78:0f:13:e7:a5:49:a9:5b:33:32:ce:b3:44:76:d5: 8e:e3:cd:c4:63:7c:8b:3b:4e:ff:fc:2a:ca:19:c0: 36:7c:67:67:da:94:a0:a6:45:8f:2c:06:72:f0:f9: 12:c0:99:f2:46:56:3e:e3:6d:be:82:5c:8b:c3:2f: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D4:11:59:9C:C7:18:30:9A:28:C2:86:F3:7B:64:50:D7:7E:64:A8 X509v3 Authority Key Identifier: keyid:B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:54:36:0c:87:94:8b:33:be:e8:39:7f:b3:76:63:e9:24:a1: 2d:17:f1:83:13:7a:99:f9:e3:d6:3e:68:f8:6e:3d:cb:69:6d: 2b:02:f7:8f:a8:e1:f4:01:67:ef:da:21:c2:05:f6:12:1c:e1: 59:b0:51:c8:31:cc:6a:24:e2:fd:b2:66:32:23:75:64:86:34: f2:60:a6:19:97:bd:0f:38:fe:05:87:c3:23:75:e7:12:78:94: ce:16:62:2d:2b:00:14:7a:e1:a7:3d:35:0a:50:6c:a6:68:30: d5:45:b4:68:77:ba:ba:da:b4:53:46:01:21:68:57:74:8e:d2: 5b:21:52:da:9a:d5:a5:2d:5d:4d:25:71:a8:b2:b3:5e:9c:20: 47:77:ae:ea:62:cf:1a:ff:a5:e5:97:4d:84:c0:6d:bf:e9:98: 2e:01:53:64:79:3a:d2:7d:a6:61:ad:41:85:aa:c8:11:14:91: 2a:46:e9:e9:b3:e5:16:4d:2b:af:cb:48:31:1f:e7:2b:59:e3: ce:d8:89:ed:cc:41:ab:b2:93:56:d2:52:67:d0:1c:53:50:35: 28:64:5c:86:32:a8:6a:2f:8a:a1:9d:f4:18:ae:83:4e:4d:09: d0:9d:b8:c8:71:fa:6c:f3:87:22:90:3e:71:a2:59:38:39:34: 6a:83:44:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHJoU5wXVrn5P1fBRamxyoCK9Tw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1 M0E3RkI3QTAeFw0yNTA4MjIxNzI2MzRaFw0yNTA4MjYwMTAxMzRaMDMxMTAvBgNV BAMTKEExRDQxMTU5OUNDNzE4MzA5QTI4QzI4NkYzN0I2NDUwRDc3RTY0QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG++Bdp/owpODgcnjAvGDGs1nB jSimsBY+W7BVJN+PO/ibst5FpeeeQSOk2Dh7TB/HLrV8awlT8cWudvHqlkniXvgR RaeQvJNiiFFhqvE5D6JOaTleZAsvkKfdxsUPrEYGv1ZbeLSK+x+ig9iF4ri9wZIT znUQSArApmN3c29cNwvLU9BofX9YzA4fkVFnmjkp2BVztacM4oXUW33yTgW3fJ20 AdmFAgc/mw4HJff5N3oaD8pLcVf+cjnzEGlEItwmKngPE+elSalbMzLOs0R21Y7j zcRjfIs7Tv/8KsoZwDZ8Z2falKCmRY8sBnLw+RLAmfJGVj7jbb6CXIvDL6WrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUodQRWZzHGDCaKMKG83tkUNd+ZKgwHwYDVR0j BBgwFoAUtEFUYbbvcNPUqB7WiPJJfVOn+3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjMzMGQwNi1mOTJkLTQ5NWItOWJhMC1hY2RkODE3YjE0ODMvMC9CNDQxNTQ2MUI2 RUY3MEQzRDRBODFFRDY4OEYyNDk3RDUzQTdGQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1M0E3 RkI3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5 N0Q1M0E3RkI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtUNgyHlIszvug5f7N2Y+kkoS0X8YMTepn5 49Y+aPhuPctpbSsC94+o4fQBZ+/aIcIF9hIc4VmwUcgxzGok4v2yZjIjdWSGNPJg phmXvQ84/gWHwyN15xJ4lM4WYi0rABR64ac9NQpQbKZoMNVFtGh3urratFNGASFo V3SO0lshUtqa1aUtXU0lcaiys16cIEd3rupizxr/peWXTYTAbb/pmC4BU2R5OtJ9 pmGtQYWqyBEUkSpG6emz5RZNK6/LSDEf5ytZ487Yie3MQauyk1bSUmfQHFNQNShk XIYyqGoviqGd9Biug05NCdCduMhx+mzzhyKQPnGiWTg5NGqDRFo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:06:31 2025 by rpki-client