$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: 6vaj7FfPAcWI+111MGQIPME+IsNz1en/19HnK67XWVA= Subject key identifier: 04:C8:44:AA:5F:29:C6:50:C8:2D:E8:F5:4D:81:BB:95:29:96:28:93 Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 513F249C2EC848CE5AD9578CB93CD934EE4AAC74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 0208 Signing time: Sun 19 Oct 2025 03:31:31 +0000 Manifest this update: Sun 19 Oct 2025 03:26:31 +0000 Manifest next update: Wed 22 Oct 2025 14:06:31 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: ZN5m//m4P1WnPpdeE41Cc99Is/Wfxrv0kAZGBfL8ZCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:3f:24:9c:2e:c8:48:ce:5a:d9:57:8c:b9:3c:d9:34:ee:4a:ac:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Oct 19 03:26:31 2025 GMT Not After : Oct 22 14:06:31 2025 GMT Subject: CN=04C844AA5F29C650C82DE8F54D81BB9529962893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:96:22:aa:0b:1f:14:a5:d5:8b:18:fe:af:8d: 15:40:70:e2:f2:8a:c6:14:3a:12:61:5a:bf:8d:01: c6:0c:c0:34:07:40:fc:04:bd:98:9c:bf:61:85:09: 36:f7:ee:f4:b6:13:78:dc:18:26:df:37:dc:72:71: 71:97:1b:b1:71:2b:62:78:b5:40:42:98:f1:90:51: f1:cf:ce:61:e7:b7:de:b0:a0:a1:7d:8b:73:d5:71: 78:ab:a4:f3:44:50:3b:c6:29:f1:57:7c:3a:4c:80: 78:ab:16:d4:fe:66:00:3c:9a:2f:ae:47:f0:74:c0: 0a:fe:ff:af:1f:ed:ea:d7:fc:0c:7a:7b:e3:a6:70: ab:4f:3a:f5:ca:b7:4e:b9:20:0a:ba:a4:6e:bd:6f: 30:f1:02:56:4a:18:b7:bf:bd:50:77:00:f5:4a:1d: f3:59:a6:50:1d:08:6c:0d:0c:82:05:a5:18:4b:c5: b6:9e:94:12:90:32:52:5e:7e:62:ec:cc:fd:bf:80: 2e:6b:db:0c:3a:7d:68:db:44:af:f0:1e:65:96:53: 37:2f:e2:b5:21:64:e8:14:38:5d:a1:35:90:a3:74: bf:9d:74:60:99:6a:61:34:4a:a2:49:75:00:c2:5b: 43:86:8d:6f:5e:4b:e5:4b:c5:b2:08:e1:54:cf:7f: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C8:44:AA:5F:29:C6:50:C8:2D:E8:F5:4D:81:BB:95:29:96:28:93 X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:bc:7a:7b:fc:02:7b:fe:a5:5b:ac:22:e7:4d:89:8d:a4:5e: 8c:77:57:ce:2e:49:e1:26:0b:93:ed:ae:7f:78:0f:6c:fe:3e: 87:c7:55:48:b2:7e:f7:ea:c9:72:04:8c:6d:35:9f:0f:d9:b8: fa:49:6f:16:4d:57:d1:e4:9a:8a:5b:63:2c:dd:dc:40:7c:67: e1:a0:ed:2c:09:ad:ee:1a:90:9d:bd:fd:30:fc:6d:5e:4e:26: 71:00:75:8a:2e:39:1e:e8:34:89:34:9f:18:84:ab:23:40:5e: f4:45:59:99:27:4b:8f:1a:ca:b3:b4:d1:12:d9:13:02:26:b9: f9:62:99:71:9e:0b:b2:b2:68:04:ec:89:cb:10:4d:cc:7b:80: 24:42:46:20:43:3b:f5:d4:7d:89:11:6c:b9:ee:71:c6:5b:2b: fd:6b:27:43:c7:99:bd:6f:20:0a:59:2c:3c:dc:42:17:43:d9: 7e:c0:ff:c8:fd:26:0e:31:6f:93:b9:4f:a7:2c:9f:aa:aa:70: 11:f8:7d:46:ca:5e:8f:7a:7d:17:2e:92:6b:9e:a0:fe:9c:ae: 2b:9d:8b:a7:fe:be:4c:19:ec:2a:1d:83:e3:95:ef:f2:10:94: 3d:72:b6:ed:44:76:d1:98:99:a5:fc:0f:ea:90:66:46:a0:ee: d1:c4:37:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUT8knC7ISM5a2VeMuTzZNO5KrHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNTEwMTkwMzI2MzFaFw0yNTEwMjIxNDA2MzFaMDMxMTAvBgNV BAMTKDA0Qzg0NEFBNUYyOUM2NTBDODJERThGNTREODFCQjk1Mjk5NjI4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWliKqCx8UpdWLGP6vjRVAcOLy isYUOhJhWr+NAcYMwDQHQPwEvZicv2GFCTb37vS2E3jcGCbfN9xycXGXG7FxK2J4 tUBCmPGQUfHPzmHnt96woKF9i3PVcXirpPNEUDvGKfFXfDpMgHirFtT+ZgA8mi+u R/B0wAr+/68f7erX/Ax6e+OmcKtPOvXKt065IAq6pG69bzDxAlZKGLe/vVB3APVK HfNZplAdCGwNDIIFpRhLxbaelBKQMlJefmLszP2/gC5r2ww6fWjbRK/wHmWWUzcv 4rUhZOgUOF2hNZCjdL+ddGCZamE0SqJJdQDCW0OGjW9eS+VLxbII4VTPfyZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMhEql8pxlDILej1TYG7lSmWKJMwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJm8env8Anv+pVusIudNiY2kXox3V84uSeEm C5Ptrn94D2z+PofHVUiyfvfqyXIEjG01nw/ZuPpJbxZNV9HkmopbYyzd3EB8Z+Gg 7SwJre4akJ29/TD8bV5OJnEAdYouOR7oNIk0nxiEqyNAXvRFWZknS48ayrO00RLZ EwImuflimXGeC7KyaATsicsQTcx7gCRCRiBDO/XUfYkRbLnuccZbK/1rJ0PHmb1v IApZLDzcQhdD2X7A/8j9Jg4xb5O5T6csn6qqcBH4fUbKXo96fRcukmueoP6criud i6f+vkwZ7Codg+OV7/IQlD1ytu1EdtGYmaX8D+qQZkag7tHENyY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:52 2025 by rpki-client