$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: C82aiz9k+JZCqQSsze5jp3OWXCTE92F8UHEbuO/L5gw= Subject key identifier: 03:B4:41:16:53:69:E3:30:E2:94:26:2E:02:BE:C8:2D:20:E1:06:1B Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 2BF855A333F51E0B87191CAA1C61837A1AFDCBCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: 010A Signing time: Fri 04 Jul 2025 12:31:50 +0000 Manifest this update: Fri 04 Jul 2025 12:26:50 +0000 Manifest next update: Mon 07 Jul 2025 15:23:50 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: ZrYwKVSnLjnsSdl1XwkTP11naNLwGJAbPIwqBeBygkE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f8:55:a3:33:f5:1e:0b:87:19:1c:aa:1c:61:83:7a:1a:fd:cb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Jul 4 12:26:50 2025 GMT Not After : Jul 7 15:23:50 2025 GMT Subject: CN=03B441165369E330E294262E02BEC82D20E1061B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:31:aa:83:07:85:1e:46:25:69:d4:ea:34: 81:bf:7c:dd:69:7e:fc:ac:51:e8:af:73:4c:ba:4b: d4:c4:44:d7:ee:6d:90:46:a2:a2:91:55:07:2a:7e: 43:5e:5a:2f:dc:17:da:1d:f2:32:24:13:d4:62:7b: 94:26:48:08:f1:6b:fb:31:ef:d5:6a:ff:84:18:81: bc:4d:68:f4:67:b5:37:f3:af:80:39:80:ce:b8:d3: 77:34:45:4a:5d:19:95:18:80:a9:7c:03:70:95:a7: 85:dd:e0:8a:8d:62:19:c1:a8:b5:bd:7e:a9:31:2d: 22:9e:f5:ed:5b:12:92:a7:e6:58:af:2a:13:15:ed: fb:b0:8f:23:6f:24:19:f0:7b:e9:ca:a7:1e:33:58: 7d:64:8e:24:a2:98:3a:b3:dc:95:4e:87:06:3a:e5: 0e:04:9d:f2:ea:d8:3d:08:ba:a7:5e:23:bb:80:3b: 7c:47:13:91:b2:fe:8c:55:fb:d9:6d:a5:87:b9:9c: 2b:fc:58:b0:f4:89:d6:bf:7b:be:01:66:6a:68:d0: 4f:dd:3e:9c:4c:bd:11:9a:98:70:ea:ce:ee:bf:83: 2a:bb:8b:6a:05:ed:1b:22:3a:05:6d:3b:8b:90:85: f3:ef:a6:bc:9f:8e:ce:b0:2b:dc:38:aa:73:45:fe: 40:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B4:41:16:53:69:E3:30:E2:94:26:2E:02:BE:C8:2D:20:E1:06:1B X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:86:04:d3:e9:13:5c:8f:eb:a0:c3:89:b8:d9:82:2d:b4:b3: 4a:66:89:d3:b9:51:28:99:66:45:fb:71:5e:1e:ae:bc:58:8a: c3:f6:79:93:4d:68:c4:1a:05:17:a3:4b:b0:14:f0:36:5f:d1: 47:8d:61:67:c0:44:e5:34:c2:4f:5a:51:96:39:12:9d:1f:fb: a0:20:d1:78:95:75:35:96:be:4d:67:5e:03:89:17:e3:aa:c9: 18:34:b3:70:d8:09:98:1f:e6:17:6a:2a:2f:5e:6c:e0:56:f9: 85:cc:fb:8a:68:bc:e2:54:7c:63:d8:e0:41:23:cb:82:bb:0e: 10:b2:d9:2a:18:4e:50:cc:d1:c6:11:fe:60:54:e5:ce:45:1d: 42:94:2e:7f:46:9e:2e:54:92:32:24:a6:1a:94:41:bf:b3:e4: 0c:76:30:2a:5f:d2:1b:bc:84:12:be:c9:3a:c6:32:08:fb:c2: 83:48:5a:07:e7:f3:f0:5f:93:30:91:6d:ec:3d:d5:82:cb:9e: b7:c5:25:af:c4:77:d2:a8:bc:e9:f5:ff:a4:05:1d:ff:4d:0d: 75:c3:fa:5e:8c:da:92:2d:a2:a7:16:80:09:9f:6e:c4:de:26: 3a:8f:ac:87:fe:bd:fb:b3:76:77:8b:a3:6c:8f:a3:cb:dc:31: 3d:b8:83:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/hVozP1HguHGRyqHGGDehr9y8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNTA3MDQxMjI2NTBaFw0yNTA3MDcxNTIzNTBaMDMxMTAvBgNV BAMTKDAzQjQ0MTE2NTM2OUUzMzBFMjk0MjYyRTAyQkVDODJEMjBFMTA2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATTGqgweFHkYladTqNIG/fN1p fvysUeivc0y6S9TERNfubZBGoqKRVQcqfkNeWi/cF9od8jIkE9Rie5QmSAjxa/sx 79Vq/4QYgbxNaPRntTfzr4A5gM6403c0RUpdGZUYgKl8A3CVp4Xd4IqNYhnBqLW9 fqkxLSKe9e1bEpKn5livKhMV7fuwjyNvJBnwe+nKpx4zWH1kjiSimDqz3JVOhwY6 5Q4EnfLq2D0IuqdeI7uAO3xHE5Gy/oxV+9ltpYe5nCv8WLD0ida/e74BZmpo0E/d PpxMvRGamHDqzu6/gyq7i2oF7RsiOgVtO4uQhfPvpryfjs6wK9w4qnNF/kDhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA7RBFlNp4zDilCYuAr7ILSDhBhswHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASGBNPpE1yP66DDibjZgi20s0pmidO5USiZ ZkX7cV4errxYisP2eZNNaMQaBRejS7AU8DZf0UeNYWfAROU0wk9aUZY5Ep0f+6Ag 0XiVdTWWvk1nXgOJF+OqyRg0s3DYCZgf5hdqKi9ebOBW+YXM+4povOJUfGPY4EEj y4K7DhCy2SoYTlDM0cYR/mBU5c5FHUKULn9Gni5UkjIkphqUQb+z5Ax2MCpf0hu8 hBK+yTrGMgj7woNIWgfn8/BfkzCRbew91YLLnrfFJa/Ed9KovOn1/6QFHf9NDXXD +l6M2pItoqcWgAmfbsTeJjqPrIf+vfuzdneLo2yPo8vcMT24g84= -----END CERTIFICATE-----Generated at Fri Jul 4 18:04:09 2025 by rpki-client