$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: lBNRwYi7YG5cDB56yKVF6POiZyrpxdoC5X8RX5q9CIw= Subject key identifier: FA:70:38:C9:AB:50:22:99:5F:DE:0E:10:CA:78:AE:47:99:43:F9:CD Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 485D8F3A7AEDD00C4A7D75298E211EC51FE77957 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: 0139 Signing time: Sat 18 Oct 2025 12:41:53 +0000 Manifest this update: Sat 18 Oct 2025 12:36:53 +0000 Manifest next update: Tue 21 Oct 2025 17:14:53 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: kHWl402Pul9r31JTrPIyuEdMEmNmdYInCJVJsw3ruPU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 17:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5d:8f:3a:7a:ed:d0:0c:4a:7d:75:29:8e:21:1e:c5:1f:e7:79:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Oct 18 12:36:53 2025 GMT Not After : Oct 21 17:14:53 2025 GMT Subject: CN=FA7038C9AB5022995FDE0E10CA78AE479943F9CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:ab:14:6d:b3:47:d8:c5:64:0a:6c:2e:9b: 23:f6:20:58:4b:f2:87:c8:b0:3c:bb:b7:7b:fd:c0: 2f:c2:c8:bf:ae:0d:d0:2e:34:6e:58:b7:3e:6c:e0: 3b:85:68:a4:6c:0f:77:71:9f:4e:f1:0a:60:db:aa: e0:e9:b2:43:96:75:d7:9c:db:8d:c7:bd:1b:75:e5: 87:bb:2b:20:de:55:c8:ca:95:8f:de:9f:f4:ca:ab: 52:e2:cf:d7:4c:3f:2e:35:48:da:2d:ed:0c:99:ff: a0:41:68:45:64:6b:73:1a:d7:ec:e4:22:6d:63:83: bd:72:b6:94:e3:13:bc:ae:b8:f6:fe:ea:6f:fc:69: f3:86:e1:d3:f9:f1:4d:94:d1:b7:8d:3f:29:fb:fa: bf:0a:a6:ad:08:20:7a:c4:4f:5f:52:65:2d:b7:73: 8c:43:fb:ed:fb:bf:c4:5c:e5:8b:95:c9:a5:57:4b: 64:77:bf:7e:4c:37:16:f5:0b:9d:e8:1a:41:a8:01: f6:d7:1a:c2:cb:b1:e1:87:5d:f6:2c:29:39:19:5c: e4:c6:35:19:3c:dc:bf:08:de:e6:80:df:e7:7c:68: 23:1a:db:65:23:78:7e:41:aa:e9:87:7f:71:a5:a6: 60:3c:9a:32:ef:d7:47:a3:74:ad:7c:bb:73:87:6a: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:70:38:C9:AB:50:22:99:5F:DE:0E:10:CA:78:AE:47:99:43:F9:CD X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:93:09:6f:d9:45:85:8b:bf:77:7b:63:2a:85:85:1d:74:1b: 50:f4:6a:98:3e:b3:fd:31:0c:09:9f:d3:2e:6e:c6:43:12:92: d1:3d:54:5a:52:9c:a0:d9:82:8e:0d:91:8d:a1:c0:6e:50:d8: c5:17:05:e3:cc:30:ef:f3:b6:94:25:7a:16:2d:7e:c0:8f:61: e1:8a:52:85:24:bd:a9:b7:56:fc:73:b7:74:eb:5c:0b:90:ee: f9:6f:85:e6:8a:44:6c:fd:7b:e3:41:31:35:d4:41:6b:52:96: b2:8c:de:d7:9a:9d:8a:50:3a:e1:da:36:5b:29:39:52:6e:ca: 87:10:7d:21:9a:66:a9:24:ad:26:35:04:3a:6a:7d:68:45:d0: ba:41:9a:11:66:9c:13:9e:38:22:04:09:e4:01:b7:c5:f3:01: 01:25:ac:01:ec:9c:d8:10:78:9d:54:f0:2a:03:a5:1d:b3:99: cf:47:a3:ec:74:aa:c5:41:9e:a6:11:8c:fa:d6:3a:11:bb:90: a5:b7:98:af:58:b3:b8:5b:af:71:b7:4a:1b:64:20:36:53:a7: 57:6a:c9:cc:fa:32:ab:22:1d:32:d8:14:04:f1:b8:17:63:c6: 73:21:95:27:95:54:e3:f6:56:a1:63:05:8b:45:ae:f3:a4:5e: d5:c7:f9:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSF2POnrt0AxKfXUpjiEexR/neVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNTEwMTgxMjM2NTNaFw0yNTEwMjExNzE0NTNaMDMxMTAvBgNV BAMTKEZBNzAzOEM5QUI1MDIyOTk1RkRFMEUxMENBNzhBRTQ3OTk0M0Y5Q0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHqsUbbNH2MVkCmwumyP2IFhL 8ofIsDy7t3v9wC/CyL+uDdAuNG5Ytz5s4DuFaKRsD3dxn07xCmDbquDpskOWddec 243HvRt15Ye7KyDeVcjKlY/en/TKq1Liz9dMPy41SNot7QyZ/6BBaEVka3Ma1+zk Im1jg71ytpTjE7yuuPb+6m/8afOG4dP58U2U0beNPyn7+r8Kpq0IIHrET19SZS23 c4xD++37v8Rc5YuVyaVXS2R3v35MNxb1C53oGkGoAfbXGsLLseGHXfYsKTkZXOTG NRk83L8I3uaA3+d8aCMa22UjeH5BqumHf3GlpmA8mjLv10ejdK18u3OHajjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+nA4yatQIplf3g4QyniuR5lD+c0wHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF2TCW/ZRYWLv3d7YyqFhR10G1D0apg+s/0x DAmf0y5uxkMSktE9VFpSnKDZgo4NkY2hwG5Q2MUXBePMMO/ztpQlehYtfsCPYeGK UoUkvam3Vvxzt3TrXAuQ7vlvheaKRGz9e+NBMTXUQWtSlrKM3teanYpQOuHaNlsp OVJuyocQfSGaZqkkrSY1BDpqfWhF0LpBmhFmnBOeOCIECeQBt8XzAQElrAHsnNgQ eJ1U8CoDpR2zmc9Ho+x0qsVBnqYRjPrWOhG7kKW3mK9Ys7hbr3G3ShtkIDZTp1dq ycz6MqsiHTLYFATxuBdjxnMhlSeVVOP2VqFjBYtFrvOkXtXH+X4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:45 2025 by rpki-client