$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: LViRMDbTkBU5led4lweL9GN2bUM+gpcroUECEAJSvgA= Subject key identifier: C7:92:8F:8F:07:E6:6A:B5:6B:FD:A5:97:24:19:E1:9E:6D:4C:F7:3C Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 3C7CCFBA8201E0765CCEA8EC9A435A8970E9D84C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 01EF Signing time: Sat 23 Aug 2025 00:11:29 +0000 Manifest this update: Sat 23 Aug 2025 00:06:29 +0000 Manifest next update: Tue 26 Aug 2025 11:12:29 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: 22+XMRB/N2kJdwNIfr7eo28cR+uFQwxp1+CNuXPN79E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7c:cf:ba:82:01:e0:76:5c:ce:a8:ec:9a:43:5a:89:70:e9:d8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Aug 23 00:06:29 2025 GMT Not After : Aug 26 11:12:29 2025 GMT Subject: CN=C7928F8F07E66AB56BFDA5972419E19E6D4CF73C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:a5:c2:30:13:31:fc:06:18:a7:e9:2f:2f: 9e:16:fc:cc:50:8a:46:1c:90:62:4a:35:70:22:64: bf:53:46:90:34:4f:25:ea:b4:ed:65:c0:3f:e1:58: 74:4e:aa:00:ee:00:2d:ad:5d:b7:61:8c:a1:19:37: b8:32:bc:45:44:42:89:69:95:aa:a4:cc:d0:e1:b9: 27:b5:75:47:83:b3:80:d3:11:aa:11:f4:48:7c:8d: 49:59:14:65:73:de:09:cc:41:5a:1a:e0:89:37:6e: 37:48:72:b4:28:15:45:0a:02:12:c0:f0:c1:1b:62: 7d:c5:c3:2e:27:b5:3f:6a:0f:51:66:a6:64:fa:ac: 95:8c:a9:a4:7a:d9:75:50:2d:cb:00:96:f8:b0:03: d9:46:ba:c5:ff:02:6f:22:70:7c:42:46:c6:75:bc: 6c:29:30:ac:56:44:bd:5a:3b:f1:f1:06:32:31:a5: 65:2c:c7:5d:31:db:e4:06:8f:07:d5:43:9e:c9:02: 11:a8:8e:a4:b2:09:35:99:04:9e:5d:5a:bb:3f:2d: 89:ef:72:92:a1:da:e0:09:13:96:a8:93:58:2c:61: 3e:f0:a9:32:09:c4:24:ef:ee:9c:7b:a9:a6:44:f6: f7:7a:04:55:76:00:4a:80:a0:c0:81:53:0c:60:16: f4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:92:8F:8F:07:E6:6A:B5:6B:FD:A5:97:24:19:E1:9E:6D:4C:F7:3C X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:80:9c:fc:9e:e0:d7:ef:43:22:fc:b2:c4:71:62:8d:4a:eb: 3a:8a:13:b7:ea:d6:b1:49:05:81:92:11:26:a0:3e:1e:00:52: ce:91:92:75:30:7a:2b:fc:d8:4d:54:bf:07:c5:e8:f5:40:0c: 6d:8f:26:ec:9e:16:26:b4:6a:8d:ee:73:af:c5:f3:61:c2:e4: cd:8b:52:22:99:49:41:d4:62:eb:cd:e4:6e:03:8c:bf:de:7c: 14:9e:5c:cd:78:c5:f0:97:76:5f:4d:11:38:36:d4:2b:54:ea: 02:d3:5d:5b:d5:ce:e9:99:c5:50:ab:68:18:4d:27:c1:6c:35: c3:cf:4c:5b:2a:db:3f:59:cb:60:d0:c5:ad:33:57:7e:21:c8: 96:69:05:49:7a:70:a6:73:98:d6:ce:bc:fd:5d:36:88:d2:51: 34:1a:d9:67:c0:2a:ab:89:dc:6c:2d:3d:05:3f:5e:b1:31:9a: 59:5e:d7:03:4a:3f:84:a1:0f:ff:28:6f:23:23:b3:d8:2c:15: 7e:7c:eb:e0:67:1f:75:59:3a:8a:c1:83:3a:f6:93:b9:e1:0a: 92:41:ac:de:a6:0c:f9:00:5f:25:1d:49:bb:cc:a9:5d:7b:ab: c9:88:08:41:a3:4f:08:1a:cf:04:bc:bd:dd:c6:f4:d3:b0:ac: 36:19:7f:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPHzPuoIB4HZczqjsmkNaiXDp2EwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNTA4MjMwMDA2MjlaFw0yNTA4MjYxMTEyMjlaMDMxMTAvBgNV BAMTKEM3OTI4RjhGMDdFNjZBQjU2QkZEQTU5NzI0MTlFMTlFNkQ0Q0Y3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzT6XCMBMx/AYYp+kvL54W/MxQ ikYckGJKNXAiZL9TRpA0TyXqtO1lwD/hWHROqgDuAC2tXbdhjKEZN7gyvEVEQolp laqkzNDhuSe1dUeDs4DTEaoR9Eh8jUlZFGVz3gnMQVoa4Ik3bjdIcrQoFUUKAhLA 8MEbYn3Fwy4ntT9qD1FmpmT6rJWMqaR62XVQLcsAlviwA9lGusX/Am8icHxCRsZ1 vGwpMKxWRL1aO/HxBjIxpWUsx10x2+QGjwfVQ57JAhGojqSyCTWZBJ5dWrs/LYnv cpKh2uAJE5aok1gsYT7wqTIJxCTv7px7qaZE9vd6BFV2AEqAoMCBUwxgFvQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx5KPjwfmarVr/aWXJBnhnm1M9zwwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmAnPye4NfvQyL8ssRxYo1K6zqKE7fq1rFJ BYGSESagPh4AUs6RknUweiv82E1UvwfF6PVADG2PJuyeFia0ao3uc6/F82HC5M2L UiKZSUHUYuvN5G4DjL/efBSeXM14xfCXdl9NETg21CtU6gLTXVvVzumZxVCraBhN J8FsNcPPTFsq2z9Zy2DQxa0zV34hyJZpBUl6cKZzmNbOvP1dNojSUTQa2WfAKquJ 3GwtPQU/XrExmlle1wNKP4ShD/8obyMjs9gsFX586+BnH3VZOorBgzr2k7nhCpJB rN6mDPkAXyUdSbvMqV17q8mICEGjTwgazwS8vd3G9NOwrDYZf4I= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:50 2025 by rpki-client