$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json) Hash identifier: SHqt3dNbNeJn4zfcuZa/9+jzNnH13rRHouTnY+RK+mo= Subject key identifier: 8C:B4:20:3A:17:41:7C:94:16:04:F2:0F:89:91:37:A9:4F:B4:CA:E2 Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Certificate serial: 6B03B490EEACB6C59E5CD39761E757A17C7B13CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft Manifest number: 01C3 Signing time: Tue 01 Jul 2025 03:31:16 +0000 Manifest this update: Tue 01 Jul 2025 03:26:16 +0000 Manifest next update: Fri 04 Jul 2025 04:54:16 +0000 Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: dnVHmSvYonLe8utT/jMG78ChAnPF/BSAZR2qwZ54+QA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 04:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:03:b4:90:ee:ac:b6:c5:9e:5c:d3:97:61:e7:57:a1:7c:7b:13:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Validity Not Before: Jul 1 03:26:16 2025 GMT Not After : Jul 4 04:54:16 2025 GMT Subject: CN=8CB4203A17417C941604F20F899137A94FB4CAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8b:ec:c6:41:d3:d8:de:68:75:ed:50:e6:aa: 0a:52:cf:c8:8d:93:ee:f0:e3:99:ab:73:03:01:dc: 70:59:02:de:20:a8:6a:b2:c4:32:d6:29:09:d1:31: d2:52:d4:ce:24:a1:78:51:fd:db:05:12:a3:58:25: ed:d8:9d:1b:ca:17:e0:2e:32:8d:6f:99:bd:74:55: 12:d2:f0:69:1d:ab:1d:18:29:cf:7f:12:d3:35:e0: a1:e0:dd:38:2b:87:3e:19:02:89:7f:8f:37:f7:68: e2:56:c7:14:1c:97:80:78:f7:21:fa:45:76:c0:fa: e1:0e:65:a9:68:bd:f9:71:a7:80:ff:17:ab:b4:28: 50:63:56:0c:c7:e8:44:cc:33:8a:91:eb:25:32:cd: a2:0a:b2:58:2b:91:44:b0:eb:86:8b:f8:82:44:cd: da:6a:62:76:6e:68:62:ee:83:58:d8:dc:b8:f4:bf: 7a:c2:6d:2f:ef:c0:5b:6b:11:d1:40:fd:b6:a0:1c: a6:86:8a:55:94:c6:7f:25:a8:67:96:fe:24:1c:51: 85:81:6b:98:11:1f:53:6d:80:61:07:7c:96:fc:43: 37:89:a2:23:c7:ed:b7:73:bb:f6:aa:a0:58:90:65: 74:47:8e:e6:71:eb:97:2e:c6:b3:fe:c3:9e:c2:76: 55:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B4:20:3A:17:41:7C:94:16:04:F2:0F:89:91:37:A9:4F:B4:CA:E2 X509v3 Authority Key Identifier: keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:19:55:9e:b5:61:21:31:71:f1:27:84:12:64:a7:49:22:25: b1:1c:a4:78:25:aa:41:45:d7:e2:36:a5:dc:e6:06:6d:6b:96: 12:b5:43:60:de:a2:64:ab:93:5e:94:8e:50:59:7a:1a:bf:ea: a6:2e:4c:74:65:1a:99:dc:a3:0e:83:4e:08:7a:7e:b4:dc:b4: f5:31:39:6f:b5:1d:c7:84:3f:22:72:8f:0a:9c:57:1b:9b:ad: cf:5a:fb:9b:c7:31:15:38:fd:5e:da:b3:9b:90:30:95:c0:2b: b4:54:c5:84:a8:d3:d9:2b:eb:5d:48:e8:70:af:85:c9:64:5c: 3e:83:fb:71:83:c9:e5:72:71:af:fb:3d:40:df:83:6d:05:74: 59:84:3b:64:98:56:80:6f:08:a6:4b:e7:d8:9c:7a:84:dc:a2: d4:e3:ca:9c:0d:a8:bb:51:70:8a:98:55:0d:ac:0e:41:38:55: 57:db:c9:52:72:7f:b9:36:b6:fc:01:e4:a6:c9:d7:4f:69:cd: 3c:15:9a:eb:07:e6:e3:45:6d:a5:5d:80:81:3e:17:42:23:cb: 1b:b5:4c:d9:5f:eb:a3:c3:56:43:04:ad:87:cb:8c:35:34:e8: f3:87:ef:98:c9:2d:e3:1f:72:85:48:ad:f3:f7:93:4b:72:57: 76:f6:93:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUawO0kO6stsWeXNOXYedXoXx7E80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3 OTdDNDE2NTAeFw0yNTA3MDEwMzI2MTZaFw0yNTA3MDQwNDU0MTZaMDMxMTAvBgNV BAMTKDhDQjQyMDNBMTc0MTdDOTQxNjA0RjIwRjg5OTEzN0E5NEZCNENBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCei+zGQdPY3mh17VDmqgpSz8iN k+7w45mrcwMB3HBZAt4gqGqyxDLWKQnRMdJS1M4koXhR/dsFEqNYJe3YnRvKF+Au Mo1vmb10VRLS8Gkdqx0YKc9/EtM14KHg3Tgrhz4ZAol/jzf3aOJWxxQcl4B49yH6 RXbA+uEOZalovflxp4D/F6u0KFBjVgzH6ETMM4qR6yUyzaIKslgrkUSw64aL+IJE zdpqYnZuaGLug1jY3Lj0v3rCbS/vwFtrEdFA/bagHKaGilWUxn8lqGeW/iQcUYWB a5gRH1NtgGEHfJb8QzeJoiPH7bdzu/aqoFiQZXRHjuZx65cuxrP+w57CdlVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjLQgOhdBfJQWBPIPiZE3qU+0yuIwHwYDVR0j BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4 OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkZVZ61YSExcfEnhBJkp0kiJbEcpHglqkFF 1+I2pdzmBm1rlhK1Q2DeomSrk16UjlBZehq/6qYuTHRlGpncow6DTgh6frTctPUx OW+1HceEPyJyjwqcVxubrc9a+5vHMRU4/V7as5uQMJXAK7RUxYSo09kr611I6HCv hclkXD6D+3GDyeVyca/7PUDfg20FdFmEO2SYVoBvCKZL59iceoTcotTjypwNqLtR cIqYVQ2sDkE4VVfbyVJyf7k2tvwB5KbJ109pzTwVmusH5uNFbaVdgIE+F0Ijyxu1 TNlf66PDVkMErYfLjDU06POH75jJLeMfcoVIrfP3k0tyV3b2k4I= -----END CERTIFICATE-----Generated at Wed Jul 2 14:40:09 2025 by rpki-client