$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: Di9DXHk2Kp/tWSyjaK/Uu++9YUFyHBWVaAJtB+23tSM= Subject key identifier: 7C:10:C1:A7:6F:4E:2D:4A:2C:4D:32:00:93:4B:B6:03:D4:36:65:65 Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 5C5C40ADEFCBBFE906446EEE1AFF3002D78E01F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 048E Signing time: Fri 22 Aug 2025 08:21:27 +0000 Manifest this update: Fri 22 Aug 2025 08:16:27 +0000 Manifest next update: Mon 25 Aug 2025 09:11:27 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: pS4+6IUrfntXMv2WlO7UyKQDbF5cLHHjdQmvHAtPvX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5c:40:ad:ef:cb:bf:e9:06:44:6e:ee:1a:ff:30:02:d7:8e:01:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: Aug 22 08:16:27 2025 GMT Not After : Aug 25 09:11:27 2025 GMT Subject: CN=7C10C1A76F4E2D4A2C4D3200934BB603D4366565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:90:0c:88:46:24:b2:57:31:d5:1b:c2:88:9a: b6:0c:06:e4:3b:7f:97:22:17:a7:ad:c5:1a:50:45: 4b:8b:3b:35:59:c7:43:1b:7f:4a:96:12:23:40:ea: d8:69:f0:67:23:cc:a7:7f:43:c5:0e:9e:d6:e8:ec: 5d:3d:fb:57:02:58:91:97:d1:76:51:c3:72:e9:7d: d1:ce:8d:ec:b2:4b:81:2b:f5:e9:00:27:da:98:dc: 34:60:2c:d4:59:9d:8c:df:33:b2:04:76:13:e0:ec: 11:8b:08:3d:2a:8f:22:f9:cb:fd:9d:cd:8a:46:ba: 1c:f2:46:40:11:ff:8d:6a:72:ea:bc:5c:f5:f5:4a: 2a:2d:d6:78:ae:8b:1b:b4:77:e4:6f:36:9b:07:fb: 62:4c:be:50:42:2c:51:b4:ca:ce:7c:54:37:df:55: 64:5a:bb:6d:04:99:a3:60:8a:3c:e9:c0:1b:e6:e4: db:79:1c:64:67:98:ad:68:fc:42:c0:79:5e:14:8d: 1b:2d:d1:f0:ab:b9:c7:ee:1c:d0:9b:d4:d0:1f:25: f5:6a:f5:53:96:21:08:55:46:33:ca:63:53:50:3e: 23:99:42:52:6e:3b:46:f3:33:28:5a:2c:98:95:2f: 5d:7d:ad:80:eb:ec:38:09:96:c6:32:73:d3:59:20: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:10:C1:A7:6F:4E:2D:4A:2C:4D:32:00:93:4B:B6:03:D4:36:65:65 X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:14:96:ff:1c:3b:6e:cc:00:ba:fd:2e:57:8b:7c:5f:0e:8f: 8a:dd:09:e0:f7:88:e5:f0:67:b6:38:70:ba:b7:36:e8:5c:fa: d6:71:8f:b7:c2:1c:86:26:cf:21:eb:35:db:3f:96:21:53:09: 01:24:cf:64:ef:1c:63:6f:b5:32:15:7f:b5:d4:4a:90:c3:26: 0e:e9:e9:28:b2:88:c3:af:94:59:2d:37:81:9e:e5:b7:cb:92: 5e:86:e3:f2:3f:d0:5f:bb:4e:80:36:e8:48:ea:ef:b6:b4:a7: f1:b3:81:25:35:a9:7d:0a:43:e0:a0:e1:8f:07:c1:e2:d6:76: 25:1e:50:fd:cd:c7:9b:97:57:6b:ba:7d:d7:3c:32:7b:bc:a1: 0e:46:05:17:6a:c3:ee:67:c0:7e:7b:5e:0e:b2:f3:74:98:53: 0c:b7:d1:94:90:d5:c5:7d:c3:7c:0d:8f:d4:a9:af:6d:c2:47: 08:b5:e6:42:a1:42:f9:ff:bb:e8:1a:a9:78:30:d0:ec:c5:8f: b0:01:e1:9c:61:2f:9c:a3:20:69:ca:92:06:c7:fb:08:0c:0c: 5d:a7:9e:f3:a4:7f:a2:26:f7:9e:b8:b6:40:26:53:bc:74:cf: bf:e9:fc:56:12:a2:91:4b:35:8b:a3:9e:1f:de:fb:85:ec:3a: 59:77:62:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFxAre/Lv+kGRG7uGv8wAteOAfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNTA4MjIwODE2MjdaFw0yNTA4MjUwOTExMjdaMDMxMTAvBgNV BAMTKDdDMTBDMUE3NkY0RTJENEEyQzREMzIwMDkzNEJCNjAzRDQzNjY1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkAyIRiSyVzHVG8KImrYMBuQ7 f5ciF6etxRpQRUuLOzVZx0Mbf0qWEiNA6thp8GcjzKd/Q8UOntbo7F09+1cCWJGX 0XZRw3LpfdHOjeyyS4Er9ekAJ9qY3DRgLNRZnYzfM7IEdhPg7BGLCD0qjyL5y/2d zYpGuhzyRkAR/41qcuq8XPX1Siot1niuixu0d+RvNpsH+2JMvlBCLFG0ys58VDff VWRau20EmaNgijzpwBvm5Nt5HGRnmK1o/ELAeV4UjRst0fCrucfuHNCb1NAfJfVq 9VOWIQhVRjPKY1NQPiOZQlJuO0bzMyhaLJiVL119rYDr7DgJlsYyc9NZIAoHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfBDBp29OLUosTTIAk0u2A9Q2ZWUwHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQUlv8cO27MALr9LleLfF8Oj4rdCeD3iOXw Z7Y4cLq3Nuhc+tZxj7fCHIYmzyHrNds/liFTCQEkz2TvHGNvtTIVf7XUSpDDJg7p 6SiyiMOvlFktN4Ge5bfLkl6G4/I/0F+7ToA26Ejq77a0p/GzgSU1qX0KQ+Cg4Y8H weLWdiUeUP3Nx5uXV2u6fdc8Mnu8oQ5GBRdqw+5nwH57Xg6y83SYUwy30ZSQ1cV9 w3wNj9Spr23CRwi15kKhQvn/u+gaqXgw0OzFj7AB4ZxhL5yjIGnKkgbH+wgMDF2n nvOkf6Im9564tkAmU7x0z7/p/FYSopFLNYujnh/e+4XsOll3YrM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:47:49 2025 by rpki-client