$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json) Hash identifier: ykyCLo3evh7+tjyYXW8Yj0+IRSUofDxoVnD9MyQmYbw= Subject key identifier: 76:78:F0:55:C7:4E:FD:37:94:BE:74:8A:40:25:64:C0:D6:98:E4:BE Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Certificate serial: 19CB7563F19F64D16B2D9F05ED54F5E8CB434707 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft Manifest number: 01F5 Signing time: Mon 20 Oct 2025 07:01:19 +0000 Manifest this update: Mon 20 Oct 2025 06:56:19 +0000 Manifest next update: Thu 23 Oct 2025 10:26:19 +0000 Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: nAXrxssB4VOwG5jzhmcVDFLyCnmO5GQXjiapYcKFvHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:cb:75:63:f1:9f:64:d1:6b:2d:9f:05:ed:54:f5:e8:cb:43:47:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Validity Not Before: Oct 20 06:56:19 2025 GMT Not After : Oct 23 10:26:19 2025 GMT Subject: CN=7678F055C74EFD3794BE748A402564C0D698E4BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:cc:54:08:30:93:5c:1a:46:20:34:b7:b8: 90:d0:64:d9:43:4f:b5:b8:67:ae:bb:90:12:e2:a6: 91:fa:d1:5f:8e:a5:00:32:08:9a:b2:d6:24:c2:9f: d9:53:40:cc:bf:f2:f9:5c:e4:3b:92:f8:f4:8d:f6: b9:ac:d8:1e:93:99:23:dd:a9:01:8a:60:20:af:e8: 0a:fd:c2:d3:67:7d:2a:4e:28:fc:7f:35:53:10:20: 4d:c8:f6:82:c2:b5:54:43:1d:03:91:48:25:af:bf: 2e:52:83:e4:76:b5:40:a1:1b:94:5c:e0:38:d6:04: 2c:08:85:80:ee:b4:07:d9:f9:56:bf:8f:ef:a7:cc: 8b:d6:11:21:06:82:ce:8f:6d:cd:70:83:8c:50:48: 6d:20:21:de:26:07:cc:42:cb:b9:3f:af:b3:2c:b6: 1c:9d:4d:e7:e2:f1:ec:c0:b7:bb:b2:9d:0f:af:ab: 12:4a:9a:82:54:f7:a0:8d:56:09:22:94:75:60:e3: 98:e7:45:f7:4a:76:96:fd:dd:85:13:df:5a:4d:6a: 44:db:25:9c:3f:1e:a8:0f:1a:bd:11:2f:78:a5:7d: f7:3f:22:05:55:95:b4:17:82:87:f6:e0:34:1a:84: f1:3e:df:1a:81:00:c4:4c:5b:12:43:b7:ba:f3:1c: d2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:78:F0:55:C7:4E:FD:37:94:BE:74:8A:40:25:64:C0:D6:98:E4:BE X509v3 Authority Key Identifier: keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:37:49:10:89:4c:2a:27:bf:e0:58:7f:9c:59:84:7c:ab:5a: 70:ba:0f:ad:98:ab:71:aa:49:d3:61:2d:73:a6:c0:b2:3e:a2: 0b:a6:fc:3d:e9:49:af:15:0c:07:37:f5:14:3b:0e:aa:8c:30: 02:fc:3e:0f:bb:7c:4c:14:51:1c:5c:2f:63:73:80:04:db:60: e8:e7:9e:49:bf:98:51:c6:34:34:58:b7:61:e8:03:0f:4b:11: 9b:08:eb:3b:37:6e:a4:49:df:a6:a7:aa:38:a1:77:81:24:d5: 13:f3:9d:f3:59:ab:da:9d:b9:dc:ad:2f:56:e3:ef:68:5f:0a: cc:d2:1f:3d:df:f4:43:3c:a5:64:09:c4:a7:7f:a1:6e:58:8d: ef:00:12:31:21:ed:dc:e7:c8:f6:f1:d3:d8:eb:a7:34:19:d2: 05:b5:c7:0f:ae:e5:04:69:38:4d:a5:e9:eb:55:00:5b:aa:06: 61:f1:85:a9:e1:59:c8:99:c9:e6:b3:a5:70:22:28:4f:92:07: fc:24:f4:e4:17:9d:d1:4c:ed:e9:04:26:cf:77:d4:b5:a4:4b: b1:1a:e4:d2:5e:49:8d:96:e6:2b:72:46:34:e1:fe:37:ed:bd: 07:b3:a6:30:18:05:1f:bc:b0:30:21:a3:f4:bd:79:0c:33:f9: ee:f2:fc:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGct1Y/GfZNFrLZ8F7VT16MtDRwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3 OTdDNDE2NTAeFw0yNTEwMjAwNjU2MTlaFw0yNTEwMjMxMDI2MTlaMDMxMTAvBgNV BAMTKDc2NzhGMDU1Qzc0RUZEMzc5NEJFNzQ4QTQwMjU2NEMwRDY5OEU0QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACsxUCDCTXBpGIDS3uJDQZNlD T7W4Z667kBLippH60V+OpQAyCJqy1iTCn9lTQMy/8vlc5DuS+PSN9rms2B6TmSPd qQGKYCCv6Ar9wtNnfSpOKPx/NVMQIE3I9oLCtVRDHQORSCWvvy5Sg+R2tUChG5Rc 4DjWBCwIhYDutAfZ+Va/j++nzIvWESEGgs6Pbc1wg4xQSG0gId4mB8xCy7k/r7Ms thydTefi8ezAt7uynQ+vqxJKmoJU96CNVgkilHVg45jnRfdKdpb93YUT31pNakTb JZw/HqgPGr0RL3ilffc/IgVVlbQXgof24DQahPE+3xqBAMRMWxJDt7rzHNJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdnjwVcdO/TeUvnSKQCVkwNaY5L4wHwYDVR0j BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4 OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHo3SRCJTConv+BYf5xZhHyrWnC6D62Yq3Gq SdNhLXOmwLI+ogum/D3pSa8VDAc39RQ7DqqMMAL8Pg+7fEwUURxcL2NzgATbYOjn nkm/mFHGNDRYt2HoAw9LEZsI6zs3bqRJ36anqjihd4Ek1RPznfNZq9qdudytL1bj 72hfCszSHz3f9EM8pWQJxKd/oW5Yje8AEjEh7dznyPbx09jrpzQZ0gW1xw+u5QRp OE2l6etVAFuqBmHxhanhWciZyeazpXAiKE+SB/wk9OQXndFM7ekEJs931LWkS7Ea 5NJeSY2W5ityRjTh/jftvQezpjAYBR+8sDAho/S9eQwz+e7y/Cc= -----END CERTIFICATE-----Generated at Mon Oct 20 13:04:35 2025 by rpki-client