$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: Z5is88NseHNHSDHBfyoNv1eqJKwvpwJDmWcAed2slSs= Subject key identifier: C5:43:C3:C8:44:E2:2A:BC:33:DD:4B:DB:F7:C7:DE:E8:4A:8B:2E:45 Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 20B1AB2DEDE6F9A8C869C07BFF8510496F1530A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 04A7 Signing time: Sat 18 Oct 2025 06:51:28 +0000 Manifest this update: Sat 18 Oct 2025 06:46:28 +0000 Manifest next update: Tue 21 Oct 2025 08:27:28 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: z570nnO0EjVSw48ZRo5g1VrETYqOTpKLy4MYpKUMu/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:b1:ab:2d:ed:e6:f9:a8:c8:69:c0:7b:ff:85:10:49:6f:15:30:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: Oct 18 06:46:28 2025 GMT Not After : Oct 21 08:27:28 2025 GMT Subject: CN=C543C3C844E22ABC33DD4BDBF7C7DEE84A8B2E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:4c:fd:e7:a1:a9:a1:3d:7e:84:71:8c:66: e5:00:ab:9f:7f:32:03:0b:79:47:1f:4e:f6:e7:f6: 12:2c:ec:16:e4:b9:5f:e9:5c:90:2c:51:1a:0f:67: 6d:76:d0:6b:68:08:87:67:43:b8:1d:ae:5f:c0:72: 4c:4e:5f:66:66:28:88:89:cb:c5:4c:ce:e5:84:b4: a9:8e:27:1d:22:f2:60:f8:09:2a:b9:ae:b7:b0:00: 57:fc:dc:6b:7a:c6:60:d8:da:f1:55:23:8b:c3:d3: 8d:f2:1b:4a:24:6d:f1:ca:b5:45:3c:82:29:c0:88: a2:e3:44:ff:0f:cc:21:53:cb:16:43:74:4f:33:89: 6f:35:ba:10:12:6a:4b:31:4d:d2:83:62:cd:cd:14: 9e:70:59:02:24:25:34:29:ad:5e:4c:73:51:76:36: 49:73:64:e7:2c:e4:c2:47:7b:f1:23:37:3f:a7:ff: 4b:ed:6a:d5:3d:a0:99:86:b4:71:ca:65:e7:50:8e: d2:0d:b0:9f:3c:6a:02:89:0a:84:f4:2a:3d:40:3a: 10:ab:2d:b2:86:51:6a:65:8f:64:e2:f4:24:8a:16: 41:23:73:df:49:1f:01:fd:8f:81:89:d1:be:fd:a2: 22:97:65:1b:04:bf:e4:3e:df:65:d9:75:b6:f0:ca: c5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:43:C3:C8:44:E2:2A:BC:33:DD:4B:DB:F7:C7:DE:E8:4A:8B:2E:45 X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:9d:f4:ee:81:69:6a:8d:ad:cf:8d:76:f6:8f:d7:9d:25:ad: 16:3e:4e:e3:ca:51:6e:98:96:bc:bc:0f:90:7d:11:3d:45:e5: 4f:76:64:79:16:30:3f:14:30:90:38:0e:1f:5c:50:f3:b8:05: 73:5e:e0:81:b0:cb:ed:f5:cb:fe:41:d3:08:dd:aa:3c:9c:f7: 0d:0b:ac:54:37:ac:06:06:eb:6d:b1:e9:36:95:28:e4:12:e3: 91:d4:b7:4d:68:1a:13:f4:43:8a:d3:c0:7d:f7:9c:de:0e:49: b4:53:b9:a8:49:3e:6a:6f:aa:ae:6f:e3:f9:8e:2c:52:ce:25: 66:5c:75:27:1c:6b:0b:a9:33:0e:2e:59:21:c2:4a:c9:79:03: 33:28:f8:53:58:5c:71:31:04:a4:92:8b:a7:87:82:c4:23:f9: c3:0e:30:e4:04:fe:1b:a4:9a:38:3d:91:e5:c2:95:a3:5c:21: ce:e8:bd:0d:11:42:a6:c4:4e:21:98:00:58:78:2e:96:69:0b: df:ff:98:47:dd:f7:39:55:9f:ec:7c:cd:4e:be:62:a6:60:f3: 26:7f:05:81:43:df:f7:75:10:aa:3f:7f:d2:8f:de:a0:68:5f: 09:5a:e5:19:5c:04:ba:57:84:c5:a4:6c:1b:e8:f3:a1:8a:57: b8:fb:32:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUILGrLe3m+ajIacB7/4UQSW8VMKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNTEwMTgwNjQ2MjhaFw0yNTEwMjEwODI3MjhaMDMxMTAvBgNV BAMTKEM1NDNDM0M4NDRFMjJBQkMzM0RENEJEQkY3QzdERUU4NEE4QjJFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hkz956GpoT1+hHGMZuUAq59/ MgMLeUcfTvbn9hIs7BbkuV/pXJAsURoPZ2120GtoCIdnQ7gdrl/AckxOX2ZmKIiJ y8VMzuWEtKmOJx0i8mD4CSq5rrewAFf83Gt6xmDY2vFVI4vD043yG0okbfHKtUU8 ginAiKLjRP8PzCFTyxZDdE8ziW81uhASaksxTdKDYs3NFJ5wWQIkJTQprV5Mc1F2 NklzZOcs5MJHe/EjNz+n/0vtatU9oJmGtHHKZedQjtINsJ88agKJCoT0Kj1AOhCr LbKGUWplj2Ti9CSKFkEjc99JHwH9j4GJ0b79oiKXZRsEv+Q+32XZdbbwysWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxUPDyETiKrwz3Uvb98fe6EqLLkUwHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6d9O6BaWqNrc+NdvaP150lrRY+TuPKUW6Y lry8D5B9ET1F5U92ZHkWMD8UMJA4Dh9cUPO4BXNe4IGwy+31y/5B0wjdqjyc9w0L rFQ3rAYG622x6TaVKOQS45HUt01oGhP0Q4rTwH33nN4OSbRTuahJPmpvqq5v4/mO LFLOJWZcdSccawupMw4uWSHCSsl5AzMo+FNYXHExBKSSi6eHgsQj+cMOMOQE/huk mjg9keXClaNcIc7ovQ0RQqbETiGYAFh4LpZpC9//mEfd9zlVn+x8zU6+YqZg8yZ/ BYFD3/d1EKo/f9KP3qBoXwla5RlcBLpXhMWkbBvo86GKV7j7MrY= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:55 2025 by rpki-client