$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: 5kgDGVpphKNCcsEKdARki60hsgSJjB+WEe/3YWxhR7w= Subject key identifier: DB:4F:61:AD:F5:13:72:C5:E1:28:1C:DE:CA:7C:5A:24:1D:D8:47:FB Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 4172FA139D6371DE43E3014757B0F0AA02B3F617 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 01FF Signing time: Thu 21 Aug 2025 11:21:07 +0000 Manifest this update: Thu 21 Aug 2025 11:16:07 +0000 Manifest next update: Sun 24 Aug 2025 21:38:07 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: arSBDppFGOhwPGxPRe1nfMcK4La3njAZCGo23ywV4CI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:72:fa:13:9d:63:71:de:43:e3:01:47:57:b0:f0:aa:02:b3:f6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Aug 21 11:16:07 2025 GMT Not After : Aug 24 21:38:07 2025 GMT Subject: CN=DB4F61ADF51372C5E1281CDECA7C5A241DD847FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:ae:e6:fd:68:e1:6c:21:78:0f:38:7a:5b: fb:b9:c3:6d:ea:ba:a9:38:0c:f5:2a:40:d6:2b:fd: e2:15:be:8e:0a:54:6a:23:eb:37:ac:c1:bf:24:12: 23:60:e9:92:55:30:c8:15:66:41:a6:78:7b:32:c1: 3f:cc:55:76:f0:a3:1a:80:13:57:87:9f:d8:a8:95: 2f:60:c3:9f:30:e9:b6:8b:c8:b5:af:04:7d:36:9b: 0c:85:b9:bd:fe:23:46:85:8c:14:9a:5e:0a:ff:19: ff:4f:e5:dc:cf:c8:3c:e3:61:67:2a:ce:79:65:49: 30:f0:02:e7:19:4d:6d:80:9a:8d:be:70:66:f4:aa: 66:55:18:16:95:da:f4:57:06:f8:e0:11:24:5b:33: 65:8b:25:93:64:35:40:83:9a:0a:bf:9e:89:0d:91: 45:24:bb:79:b1:1c:67:a4:34:69:fe:74:9d:4a:b2: 30:44:a5:1a:34:55:3d:dd:23:10:ba:3f:49:aa:21: a3:42:cc:bd:25:46:94:1a:11:81:f9:9c:83:c7:84: 10:18:74:e2:83:ab:50:2d:2e:4b:3e:92:13:6c:e7: 93:29:84:7a:d5:fa:00:30:8f:d1:bc:08:24:df:18: ac:93:15:14:ae:4c:2e:b7:bf:f7:1a:e9:c9:a0:d5: 6e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4F:61:AD:F5:13:72:C5:E1:28:1C:DE:CA:7C:5A:24:1D:D8:47:FB X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bb:fc:96:cd:ac:85:30:7b:6f:e4:69:b0:9a:3a:5b:ce:9b: ce:a4:0c:12:a6:86:ce:bb:03:ac:03:42:9d:ee:4a:5f:dc:11: 8e:d5:04:18:b7:2f:60:1f:fb:f9:6d:05:f2:55:6e:6e:7a:10: 40:82:46:4e:03:f8:86:99:5a:de:39:4a:4b:35:16:91:19:7c: 36:49:f1:28:75:79:21:53:c2:f3:f3:e7:86:48:28:ac:7d:40: ac:90:01:a3:08:7d:35:21:be:b0:b9:03:6e:65:98:f7:39:40: b6:db:5b:23:1f:5f:d2:cb:68:8b:5f:15:ae:0d:0a:97:23:f6: 58:e4:11:af:3f:f1:8f:66:f9:2a:75:d8:32:a5:03:38:c1:aa: 28:5c:c2:ad:2b:a5:fb:b0:a4:32:23:0d:f3:cb:e3:9e:38:49: 31:3d:33:98:d0:28:8a:cb:da:c7:da:7b:b7:8f:b4:5b:96:2f: 77:00:d3:95:0e:83:8f:6d:29:10:69:40:d1:23:86:b0:35:9a: 09:93:59:1c:4e:95:1f:64:ae:22:4e:1d:20:55:17:e7:01:a7: 17:c7:27:e0:ca:08:61:1e:19:1b:b2:c1:90:e5:d4:7d:1b:06: c3:6c:4e:7f:21:2e:b7:46:26:76:2c:29:3f:ba:b4:d7:f9:b7: 93:03:7b:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXL6E51jcd5D4wFHV7DwqgKz9hcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNTA4MjExMTE2MDdaFw0yNTA4MjQyMTM4MDdaMDMxMTAvBgNV BAMTKERCNEY2MUFERjUxMzcyQzVFMTI4MUNERUNBN0M1QTI0MUREODQ3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSK7m/WjhbCF4Dzh6W/u5w23q uqk4DPUqQNYr/eIVvo4KVGoj6zeswb8kEiNg6ZJVMMgVZkGmeHsywT/MVXbwoxqA E1eHn9iolS9gw58w6baLyLWvBH02mwyFub3+I0aFjBSaXgr/Gf9P5dzPyDzjYWcq znllSTDwAucZTW2Amo2+cGb0qmZVGBaV2vRXBvjgESRbM2WLJZNkNUCDmgq/nokN kUUku3mxHGekNGn+dJ1KsjBEpRo0VT3dIxC6P0mqIaNCzL0lRpQaEYH5nIPHhBAY dOKDq1AtLks+khNs55MphHrV+gAwj9G8CCTfGKyTFRSuTC63v/ca6cmg1W7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU209hrfUTcsXhKBzeynxaJB3YR/swHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy7/JbNrIUwe2/kabCaOlvOm86kDBKmhs67 A6wDQp3uSl/cEY7VBBi3L2Af+/ltBfJVbm56EECCRk4D+IaZWt45Sks1FpEZfDZJ 8Sh1eSFTwvPz54ZIKKx9QKyQAaMIfTUhvrC5A25lmPc5QLbbWyMfX9LLaItfFa4N Cpcj9ljkEa8/8Y9m+Sp12DKlAzjBqihcwq0rpfuwpDIjDfPL4544STE9M5jQKIrL 2sfae7ePtFuWL3cA05UOg49tKRBpQNEjhrA1mgmTWRxOlR9kriJOHSBVF+cBpxfH J+DKCGEeGRuywZDl1H0bBsNsTn8hLrdGJnYsKT+6tNf5t5MDe58= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:09 2025 by rpki-client