$ rpki-client -vvf repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft File: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft (raw, json) Hash identifier: HAoOsVolrXre+fFgJ1/VMxbzlYqN93oeBBTlIK3Bgz0= Subject key identifier: 1B:D1:C2:2C:17:6B:00:AC:8D:6E:D7:DC:EB:41:6E:7C:38:E1:01:40 Authority key identifier: B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A Certificate issuer: /CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Certificate serial: 6FE12D60AAC50741A9EDFE916D7F25888C876260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft Manifest number: 61 Signing time: Mon 20 Oct 2025 02:51:35 +0000 Manifest this update: Mon 20 Oct 2025 02:46:34 +0000 Manifest next update: Thu 23 Oct 2025 10:35:34 +0000 Files and hashes: 1: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl (hash: piZka1Cf75h7+uITCns8HPPWyOyrXJSBjptNdIfWPRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e1:2d:60:aa:c5:07:41:a9:ed:fe:91:6d:7f:25:88:8c:87:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Validity Not Before: Oct 20 02:46:34 2025 GMT Not After : Oct 23 10:35:34 2025 GMT Subject: CN=1BD1C22C176B00AC8D6ED7DCEB416E7C38E10140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:59:8a:f9:24:b2:18:e2:a0:84:7a:2e:5a: df:59:64:bf:ed:74:59:d6:6a:22:1b:e1:16:51:67: c8:9d:f5:e2:2e:24:0e:27:8f:7b:36:35:4f:81:54: 44:ed:ae:cf:5b:ba:87:0f:0d:e8:59:bb:97:72:38: e3:2d:c0:b8:fd:fa:7a:7c:27:ac:5a:26:c1:59:3a: 45:22:94:5c:9d:f7:1c:a6:fa:95:82:92:86:2b:78: bb:52:a8:25:f5:2b:f1:7d:5a:ff:30:8c:4a:05:f6: 4a:98:7d:d8:4b:06:3b:5b:91:a7:71:89:57:67:75: 1f:03:0a:f3:f8:58:d5:54:10:c7:95:58:1f:b2:1c: 30:04:db:ba:b0:10:e7:49:61:38:06:f5:a0:35:f4: 85:ac:2d:60:96:e7:a9:ad:c2:ea:b2:4e:01:e8:e0: 2d:68:5d:7f:ab:cd:b8:8b:a1:0f:9d:26:c3:51:1a: 44:96:17:75:59:7f:28:7e:f7:06:18:43:61:f8:75: f1:5c:88:3c:4e:d8:2f:e7:f7:82:14:26:5c:c6:23: 1b:31:01:5a:3a:31:2a:91:a3:d8:67:c3:5c:74:54: 70:e9:0d:1b:6c:aa:c1:b5:ff:dd:6e:d0:6a:bf:ad: ac:b1:73:81:45:0f:a7:df:95:4a:2c:5f:9b:af:8c: 47:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D1:C2:2C:17:6B:00:AC:8D:6E:D7:DC:EB:41:6E:7C:38:E1:01:40 X509v3 Authority Key Identifier: keyid:B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:74:a7:43:af:e4:e9:01:e6:6b:c9:05:15:e5:ad:3f:07:ed: 62:8d:df:f1:fc:6c:9b:8e:55:69:9f:74:f4:26:42:20:0d:58: f0:be:bb:a3:33:92:2e:c3:49:df:c7:8c:78:f4:12:9e:ac:70: e7:b8:e5:4a:90:f4:43:2d:16:3e:5e:05:77:41:2d:5d:a7:39: c0:18:f6:03:b0:3b:85:60:e2:ea:3c:0a:d7:b7:df:47:bc:15: d4:5d:dc:0b:14:21:37:68:d6:8b:71:c6:93:85:6c:bf:ec:a1: 2b:59:4c:71:34:c8:eb:85:45:f0:33:96:4d:ef:36:0d:28:52: 77:14:c4:43:f4:41:62:c5:e2:c5:03:03:78:33:1b:55:39:a7: 39:b2:bd:0d:c9:d1:a1:2f:5d:f5:c6:eb:07:97:be:e8:e1:5d: 45:4f:4d:42:fe:7f:c4:bf:5c:27:c3:ea:8c:bf:15:1e:25:66: 7f:f5:65:d1:e9:8d:0c:7a:8a:38:4f:11:b8:9a:5d:a2:9a:91: 6e:7c:07:c2:07:f3:bc:e2:ef:a1:aa:40:ad:a8:32:8e:d1:ec: 13:87:cb:53:c8:47:33:05:58:94:27:ed:78:e8:33:42:46:92: ba:b8:a5:e8:84:ca:1a:c8:e7:af:a5:95:87:26:56:fa:fb:8c: 56:16:73:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb+EtYKrFB0Gp7f6RbX8liIyHYmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1 M0E3RkI3QTAeFw0yNTEwMjAwMjQ2MzRaFw0yNTEwMjMxMDM1MzRaMDMxMTAvBgNV BAMTKDFCRDFDMjJDMTc2QjAwQUM4RDZFRDdEQ0VCNDE2RTdDMzhFMTAxNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1hVmK+SSyGOKghHouWt9ZZL/t dFnWaiIb4RZRZ8id9eIuJA4nj3s2NU+BVETtrs9buocPDehZu5dyOOMtwLj9+np8 J6xaJsFZOkUilFyd9xym+pWCkoYreLtSqCX1K/F9Wv8wjEoF9kqYfdhLBjtbkadx iVdndR8DCvP4WNVUEMeVWB+yHDAE27qwEOdJYTgG9aA19IWsLWCW56mtwuqyTgHo 4C1oXX+rzbiLoQ+dJsNRGkSWF3VZfyh+9wYYQ2H4dfFciDxO2C/n94IUJlzGIxsx AVo6MSqRo9hnw1x0VHDpDRtsqsG1/91u0Gq/rayxc4FFD6fflUosX5uvjEe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9HCLBdrAKyNbtfc60FufDjhAUAwHwYDVR0j BBgwFoAUtEFUYbbvcNPUqB7WiPJJfVOn+3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjMzMGQwNi1mOTJkLTQ5NWItOWJhMC1hY2RkODE3YjE0ODMvMC9CNDQxNTQ2MUI2 RUY3MEQzRDRBODFFRDY4OEYyNDk3RDUzQTdGQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1M0E3 RkI3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5 N0Q1M0E3RkI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD10p0Ov5OkB5mvJBRXlrT8H7WKN3/H8bJuO VWmfdPQmQiANWPC+u6Mzki7DSd/HjHj0Ep6scOe45UqQ9EMtFj5eBXdBLV2nOcAY 9gOwO4Vg4uo8Cte330e8FdRd3AsUITdo1otxxpOFbL/soStZTHE0yOuFRfAzlk3v Ng0oUncUxEP0QWLF4sUDA3gzG1U5pzmyvQ3J0aEvXfXG6weXvujhXUVPTUL+f8S/ XCfD6oy/FR4lZn/1ZdHpjQx6ijhPEbiaXaKakW58B8IH87zi76GqQK2oMo7R7BOH y1PIRzMFWJQn7XjoM0JGkrq4peiEyhrI56+llYcmVvr7jFYWcz8= -----END CERTIFICATE-----Generated at Tue Oct 21 06:33:29 2025 by rpki-client