$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: TvPW7PfNoq/ZI2jwagpnlcxpCbhMrcZ2P4hiKoSAQR0= Subject key identifier: 3C:42:38:81:18:C7:19:40:7B:45:DC:0C:3D:74:66:F2:F8:A9:94:60 Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 7347ECDD5B581EA4E92E54BB999AB236763E45D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 021A Signing time: Sun 19 Oct 2025 18:01:07 +0000 Manifest this update: Sun 19 Oct 2025 17:56:07 +0000 Manifest next update: Thu 23 Oct 2025 01:24:07 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: BVVcINVwOi+qrSvGhjAZkVAnD7Y7wbwenezS9Ay1/o4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:47:ec:dd:5b:58:1e:a4:e9:2e:54:bb:99:9a:b2:36:76:3e:45:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Oct 19 17:56:07 2025 GMT Not After : Oct 23 01:24:07 2025 GMT Subject: CN=3C42388118C719407B45DC0C3D7466F2F8A99460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d5:5f:22:a1:55:72:3e:0d:78:6f:7a:b7:75: 96:c6:8c:3f:d0:34:4c:6f:d8:51:2c:00:e5:b3:e1: e7:04:16:60:04:5b:6a:c9:44:12:8d:e0:4e:21:88: 4c:f0:e4:c8:19:e9:3d:a3:d3:98:6d:20:74:8d:db: 60:15:79:ad:e4:ae:a2:e2:d7:a4:6d:41:c7:e8:61: 5e:18:83:45:b1:9c:2f:12:06:f7:9e:bf:62:a4:3c: 1a:60:24:b0:c2:10:ba:a4:cc:74:ef:c1:aa:47:0c: e1:71:69:0e:ad:3c:9f:35:c6:19:30:2d:7e:76:cf: f2:51:fe:d7:6d:62:3a:02:e8:2c:53:2a:15:6c:09: 89:03:5c:d6:7f:5a:bc:eb:6e:8c:3f:39:98:d4:a6: b8:6c:ed:34:8a:aa:1d:6e:97:9a:3f:a0:4a:4b:b3: 46:41:7e:bd:1f:5c:ff:fe:d4:7d:33:d1:37:a1:da: 63:31:88:be:28:5c:81:75:11:5f:14:42:b5:f9:54: 43:e2:c9:be:ce:87:53:d4:b6:b9:57:9d:74:08:99: e7:08:be:d4:0b:c9:c9:37:28:90:c2:33:f9:87:76: f4:0a:15:74:97:f8:13:d8:c9:6a:c1:5a:00:a2:b3: 06:ad:5a:31:28:89:62:3f:e6:88:d7:55:03:c7:be: 4c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:42:38:81:18:C7:19:40:7B:45:DC:0C:3D:74:66:F2:F8:A9:94:60 X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:af:16:39:da:ef:ae:b3:cc:76:f8:67:60:74:a9:cd:f7:65: a2:a9:f2:07:03:ad:7e:83:75:03:82:83:8e:be:61:0c:6e:2c: ea:8c:ac:d2:56:85:94:22:41:1c:de:24:c0:2a:34:7f:70:62: d3:55:5f:4b:af:cb:fd:32:e9:2c:3b:ac:c7:62:6c:bb:ea:70: 9b:ad:b7:ce:6c:72:31:bd:7c:87:11:f0:85:db:48:eb:4c:78: 2c:79:f5:2d:be:ed:f2:67:79:79:a5:7c:81:62:a1:65:b7:6d: a1:54:da:a8:67:b6:b9:92:2f:b8:22:e2:bf:95:45:ae:fa:8d: bf:3b:a6:c8:73:7c:ba:b7:f8:ea:57:64:d0:6a:a3:a3:a6:cb: fb:7c:2c:3b:d4:67:4d:5c:1c:e4:18:c9:0c:1d:46:2a:71:e5: 51:3f:54:c4:33:e1:e7:f4:1c:3e:8f:14:d4:76:99:15:f0:1e: 83:7b:7a:56:77:6c:74:db:cb:48:44:c7:b3:4c:43:66:e7:9f: 7a:29:27:6a:f8:b9:a8:97:d9:d4:39:fc:d9:d4:2c:34:dc:a4: 67:bf:21:c2:17:2c:e6:83:ff:1d:69:a8:80:e8:12:98:d6:55: 66:dd:92:bc:7b:3d:e3:cc:1b:7a:f5:8d:d9:b0:87:d2:28:17: df:0f:9a:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0fs3VtYHqTpLlS7mZqyNnY+RdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNTEwMTkxNzU2MDdaFw0yNTEwMjMwMTI0MDdaMDMxMTAvBgNV BAMTKDNDNDIzODgxMThDNzE5NDA3QjQ1REMwQzNENzQ2NkYyRjhBOTk0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu1V8ioVVyPg14b3q3dZbGjD/Q NExv2FEsAOWz4ecEFmAEW2rJRBKN4E4hiEzw5MgZ6T2j05htIHSN22AVea3krqLi 16RtQcfoYV4Yg0WxnC8SBveev2KkPBpgJLDCELqkzHTvwapHDOFxaQ6tPJ81xhkw LX52z/JR/tdtYjoC6CxTKhVsCYkDXNZ/Wrzrbow/OZjUprhs7TSKqh1ul5o/oEpL s0ZBfr0fXP/+1H0z0Teh2mMxiL4oXIF1EV8UQrX5VEPiyb7Oh1PUtrlXnXQImecI vtQLyck3KJDCM/mHdvQKFXSX+BPYyWrBWgCiswatWjEoiWI/5ojXVQPHvkybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPEI4gRjHGUB7RdwMPXRm8viplGAwHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6vFjna766zzHb4Z2B0qc33ZaKp8gcDrX6D dQOCg46+YQxuLOqMrNJWhZQiQRzeJMAqNH9wYtNVX0uvy/0y6Sw7rMdibLvqcJut t85scjG9fIcR8IXbSOtMeCx59S2+7fJneXmlfIFioWW3baFU2qhntrmSL7gi4r+V Ra76jb87pshzfLq3+OpXZNBqo6Omy/t8LDvUZ01cHOQYyQwdRipx5VE/VMQz4ef0 HD6PFNR2mRXwHoN7elZ3bHTby0hEx7NMQ2bnn3opJ2r4uaiX2dQ5/NnULDTcpGe/ IcIXLOaD/x1pqIDoEpjWVWbdkrx7PePMG3r1jdmwh9IoF98Pmjo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:40 2025 by rpki-client