$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: nJhV7Bboc2I2roymjZoChLXhzNjlWfuOIE1qsfd5tBg= Subject key identifier: 27:AF:55:9D:10:F6:68:03:63:97:E2:B1:3F:DC:19:78:E4:FE:58:E9 Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 33B8BBDB7DA863AC7B1BCFCC41DB9FDADB084C29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: 0120 Signing time: Fri 22 Aug 2025 15:01:51 +0000 Manifest this update: Fri 22 Aug 2025 14:56:51 +0000 Manifest next update: Mon 25 Aug 2025 16:42:51 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: Ahxd6UjNb4UeQY32v8FX3BtkrdK02HA0j6OW3JMETBM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b8:bb:db:7d:a8:63:ac:7b:1b:cf:cc:41:db:9f:da:db:08:4c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Aug 22 14:56:51 2025 GMT Not After : Aug 25 16:42:51 2025 GMT Subject: CN=27AF559D10F668036397E2B13FDC1978E4FE58E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3b:b0:51:93:ad:6a:a3:02:7b:5e:f4:90:15: 1d:62:60:8d:d4:99:40:43:d2:e4:94:aa:99:a8:91: d8:b6:23:19:9e:0c:37:67:f9:d0:9d:35:61:dc:91: 96:87:89:88:b2:c9:0b:9a:d7:f1:76:c2:f2:ed:3f: 54:bd:43:6b:be:4d:b2:81:a5:26:2e:52:8b:2e:05: 02:b4:28:05:56:73:68:39:dc:dc:e8:77:41:06:56: 76:74:6d:11:7d:36:dc:25:5f:3e:9d:50:53:1a:91: 9c:ae:ce:4a:8b:2e:6e:c4:f9:9d:b0:d0:0d:a3:86: 81:0b:07:07:59:80:0c:7a:78:56:09:18:97:a3:00: 9e:51:77:73:3f:d5:b8:65:e0:49:69:53:82:dd:17: bd:25:c4:e1:a1:ee:a8:a6:08:f8:cc:15:44:cc:44: 40:41:a6:83:3b:81:60:3b:33:bf:d5:03:c2:90:87: d1:b3:22:0b:bb:de:cd:67:98:1e:5c:4c:1d:58:91: 5b:c1:09:b3:b7:19:e1:b6:65:59:f3:bf:d9:c3:90: 2c:f4:c4:9a:70:dd:b5:d2:bc:4e:48:3c:92:cd:2a: f3:dd:e3:30:d8:38:39:91:0f:33:36:f9:3a:d1:8b: 38:ee:dc:57:fd:90:74:51:e2:e6:9e:bb:03:75:ee: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AF:55:9D:10:F6:68:03:63:97:E2:B1:3F:DC:19:78:E4:FE:58:E9 X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:31:0e:eb:3c:36:85:16:07:ea:7f:59:a2:ab:51:ac:3b:f0: e6:0d:74:a6:75:0f:51:6a:1e:5e:9f:f7:12:70:80:d8:a7:b4: 77:f2:64:5d:80:7d:aa:e9:f8:6b:83:5f:8b:67:a8:40:5f:f3: 28:95:73:fe:8d:ff:db:3a:3d:c8:bf:63:33:62:86:c3:30:57: 36:75:53:6b:7d:92:8f:be:54:ce:de:33:b2:42:40:34:8e:7b: f1:16:fe:16:02:25:28:f3:14:65:be:23:a8:ce:4f:87:33:cd: 12:d8:d2:88:2b:b7:d5:00:4a:20:9d:4b:21:69:e5:32:f4:ff: ec:c1:8e:93:79:66:23:a8:05:1b:90:7e:40:e6:71:18:97:36: f4:98:b9:c6:a2:e8:0a:d9:6a:2c:4b:6e:6d:0c:50:05:05:93: df:73:ee:75:10:e2:cd:99:2f:82:22:4a:9e:2b:39:4a:67:20: fa:c5:3c:9e:08:7f:41:ee:6e:00:85:2b:a7:d4:96:96:0a:dd: 6d:ef:d0:46:68:bc:07:bc:18:b8:0b:1e:79:35:55:ad:81:83: e9:f2:ff:80:11:22:f6:63:93:ee:45:18:9e:44:4a:bb:0c:e0: 7a:b7:ca:d8:27:39:4b:f8:11:ed:54:dd:7c:15:9f:19:34:02: 10:92:fa:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7i7232oY6x7G8/MQduf2tsITCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNTA4MjIxNDU2NTFaFw0yNTA4MjUxNjQyNTFaMDMxMTAvBgNV BAMTKDI3QUY1NTlEMTBGNjY4MDM2Mzk3RTJCMTNGREMxOTc4RTRGRTU4RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEO7BRk61qowJ7XvSQFR1iYI3U mUBD0uSUqpmokdi2IxmeDDdn+dCdNWHckZaHiYiyyQua1/F2wvLtP1S9Q2u+TbKB pSYuUosuBQK0KAVWc2g53Nzod0EGVnZ0bRF9NtwlXz6dUFMakZyuzkqLLm7E+Z2w 0A2jhoELBwdZgAx6eFYJGJejAJ5Rd3M/1bhl4ElpU4LdF70lxOGh7qimCPjMFUTM REBBpoM7gWA7M7/VA8KQh9GzIgu73s1nmB5cTB1YkVvBCbO3GeG2ZVnzv9nDkCz0 xJpw3bXSvE5IPJLNKvPd4zDYODmRDzM2+TrRizju3Ff9kHRR4uaeuwN17qBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ69VnRD2aANjl+KxP9wZeOT+WOkwHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4xDus8NoUWB+p/WaKrUaw78OYNdKZ1D1Fq Hl6f9xJwgNintHfyZF2Afarp+GuDX4tnqEBf8yiVc/6N/9s6Pci/YzNihsMwVzZ1 U2t9ko++VM7eM7JCQDSOe/EW/hYCJSjzFGW+I6jOT4czzRLY0ogrt9UASiCdSyFp 5TL0/+zBjpN5ZiOoBRuQfkDmcRiXNvSYucai6ArZaixLbm0MUAUFk99z7nUQ4s2Z L4IiSp4rOUpnIPrFPJ4If0HubgCFK6fUlpYK3W3v0EZovAe8GLgLHnk1Va2Bg+ny /4ARIvZjk+5FGJ5ESrsM4Hq3ytgnOUv4Ee1U3XwVnxk0AhCS+nQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:40:41 2025 by rpki-client