$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json) Hash identifier: yB+aw5aUNSsk/emrbVjFXkMZht0LzXIR9bAK192B5+I= Subject key identifier: 3B:24:CB:38:9F:FB:1D:A0:09:28:D9:18:64:24:51:D6:D9:F9:DC:FB Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Certificate serial: 2FA75B64CB92742729498B4549B2059B7ABE817B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft Manifest number: 01DB Signing time: Fri 22 Aug 2025 05:11:16 +0000 Manifest this update: Fri 22 Aug 2025 05:06:16 +0000 Manifest next update: Mon 25 Aug 2025 15:37:16 +0000 Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: hIf1k/DQrv6goqt0ZBQ+A9E4iyXjf0BnjiYpXrKa8dk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a7:5b:64:cb:92:74:27:29:49:8b:45:49:b2:05:9b:7a:be:81:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Validity Not Before: Aug 22 05:06:16 2025 GMT Not After : Aug 25 15:37:16 2025 GMT Subject: CN=3B24CB389FFB1DA00928D918642451D6D9F9DCFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9d:c0:84:15:fa:89:31:0c:cd:ee:cf:c6:6a: dc:03:d2:6c:db:d5:71:f0:0f:68:e0:2a:46:17:45: 4d:5c:0a:73:47:a1:00:2a:48:f8:06:6d:c9:4c:1e: 83:46:02:78:4c:02:34:55:07:69:d2:b6:48:48:5f: 2a:8a:65:a1:94:7f:62:4a:83:72:18:81:5b:37:97: 7e:0e:62:a6:3a:9a:4f:bf:3e:88:d3:d4:7e:87:60: 38:34:b8:53:a0:c2:a4:ae:07:8d:d4:60:db:24:fe: 3d:5e:3d:b7:88:b8:84:44:b8:19:b9:4c:9d:e0:3e: a9:d2:fb:53:88:52:b9:70:0e:f0:78:f7:0a:44:d0: 51:3a:ed:55:e2:de:86:ac:91:f4:8d:2f:8c:77:3b: 81:d4:12:b3:84:88:ce:a0:94:ba:c8:4c:c7:8b:33: 69:b6:bb:5d:36:20:14:d3:f0:63:a5:95:2c:10:da: 76:93:a5:1d:68:9e:8e:e3:83:e5:7b:3b:4c:be:60: 0a:c2:c4:dc:51:b1:3f:33:20:3a:6b:76:cb:81:fb: fd:c2:d9:54:01:e3:68:8e:29:3b:21:12:bf:0e:8b: c8:e6:1c:f1:77:b6:3d:78:90:4a:1e:b3:f7:86:32: 4c:cf:28:d8:ed:a4:76:5d:4d:54:bd:cc:92:3e:bd: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:24:CB:38:9F:FB:1D:A0:09:28:D9:18:64:24:51:D6:D9:F9:DC:FB X509v3 Authority Key Identifier: keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:79:b5:3e:68:79:ec:d1:e5:c9:b4:97:df:2a:9e:7c:f7:95: 12:d7:73:34:a3:53:07:4e:e3:ef:cc:70:b3:06:79:9d:97:f8: a6:20:65:45:68:4e:63:2c:3e:e4:6b:6e:2b:14:8a:ae:e3:92: fa:c5:08:2f:63:ee:14:2a:65:1a:85:1b:af:43:f4:bd:40:a0: 6e:0b:8f:bd:62:13:57:de:3b:84:39:9a:66:3c:c5:05:22:99: ed:b5:7d:0d:ff:be:44:2a:6d:94:27:8a:c5:14:18:ff:2c:06: 34:9c:79:91:7b:25:e8:cb:0b:3f:b3:9a:d8:f3:a8:f6:65:a3: c7:3a:6b:94:b8:c5:3d:3f:5f:30:11:06:3f:e7:be:50:b4:63: 9d:9a:a7:ca:49:7f:d0:13:5e:fb:a4:4d:f7:74:3f:dc:6e:9c: 89:5d:67:20:5f:c2:cb:43:69:4d:0c:07:e4:6b:4f:c9:75:c8: ab:10:cc:98:3e:03:5f:b4:e8:75:a1:0d:fb:6e:06:2d:68:9a: 0c:f0:43:6b:b8:e2:bd:24:a5:71:96:3a:7d:f3:82:30:12:7a: fc:65:65:5c:57:cc:a1:65:93:36:ce:34:dd:23:fe:c2:50:05: 3d:28:a6:55:e4:43:4b:04:cd:4a:ff:b7:05:ac:1e:7a:15:c3: 22:79:df:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6dbZMuSdCcpSYtFSbIFm3q+gXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3 OTdDNDE2NTAeFw0yNTA4MjIwNTA2MTZaFw0yNTA4MjUxNTM3MTZaMDMxMTAvBgNV BAMTKDNCMjRDQjM4OUZGQjFEQTAwOTI4RDkxODY0MjQ1MUQ2RDlGOURDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJncCEFfqJMQzN7s/GatwD0mzb 1XHwD2jgKkYXRU1cCnNHoQAqSPgGbclMHoNGAnhMAjRVB2nStkhIXyqKZaGUf2JK g3IYgVs3l34OYqY6mk+/PojT1H6HYDg0uFOgwqSuB43UYNsk/j1ePbeIuIREuBm5 TJ3gPqnS+1OIUrlwDvB49wpE0FE67VXi3oaskfSNL4x3O4HUErOEiM6glLrITMeL M2m2u102IBTT8GOllSwQ2naTpR1ono7jg+V7O0y+YArCxNxRsT8zIDprdsuB+/3C 2VQB42iOKTshEr8Oi8jmHPF3tj14kEoes/eGMkzPKNjtpHZdTVS9zJI+vZtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOyTLOJ/7HaAJKNkYZCRR1tn53PswHwYDVR0j BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4 OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALx5tT5oeezR5cm0l98qnnz3lRLXczSjUwdO 4+/McLMGeZ2X+KYgZUVoTmMsPuRrbisUiq7jkvrFCC9j7hQqZRqFG69D9L1AoG4L j71iE1feO4Q5mmY8xQUime21fQ3/vkQqbZQnisUUGP8sBjSceZF7JejLCz+zmtjz qPZlo8c6a5S4xT0/XzARBj/nvlC0Y52ap8pJf9ATXvukTfd0P9xunIldZyBfwstD aU0MB+RrT8l1yKsQzJg+A1+06HWhDftuBi1omgzwQ2u44r0kpXGWOn3zgjASevxl ZVxXzKFlkzbONN0j/sJQBT0oplXkQ0sEzUr/twWsHnoVwyJ532Q= -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:44 2025 by rpki-client