$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: waLnY84gXdccFenQwA8MmZIE3TqSpd83h2UuGbU0wGA= Subject key identifier: 66:DA:E4:3F:8E:56:A9:5D:E9:9E:F6:74:8C:C4:BF:F0:2A:8C:68:C4 Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 0E7F5A1CE631B6771C18DD098A994598F3AD9C2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 04F6 Signing time: Tue 05 Aug 2025 17:01:44 +0000 Manifest this update: Tue 05 Aug 2025 16:56:43 +0000 Manifest next update: Fri 08 Aug 2025 22:04:43 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: sqMQ3ym+vIuw/JQOi7LKktsfIMwq9jSg2fFudeigrPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 22:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7f:5a:1c:e6:31:b6:77:1c:18:dd:09:8a:99:45:98:f3:ad:9c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Aug 5 16:56:43 2025 GMT Not After : Aug 8 22:04:43 2025 GMT Subject: CN=66DAE43F8E56A95DE99EF6748CC4BFF02A8C68C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:29:b2:8b:6b:3b:4b:89:42:20:c8:bd:97:6c: 6e:79:d7:67:b4:5e:24:1c:48:34:57:2f:46:8a:2f: a2:83:7e:b5:db:70:27:2e:b2:bc:46:f0:11:21:66: cd:ec:98:55:07:4c:fd:05:3d:01:b5:38:5c:9c:c9: 24:da:78:fa:7c:71:07:12:da:0a:02:2b:e2:72:22: e3:62:15:25:5c:0a:c2:ff:84:c6:72:a4:55:09:e1: be:c0:54:96:19:76:11:d3:7a:3d:48:d4:1a:b5:c9: a4:19:4a:99:d7:28:86:fe:86:c2:62:9c:22:e1:fb: 63:d4:8d:ba:a4:24:ee:fd:1f:69:52:1a:c2:84:df: de:53:1f:fb:36:ee:9e:be:90:aa:64:a0:2e:9a:8c: b8:39:fc:ee:22:92:e8:38:47:d4:b0:fb:b8:66:3e: a8:c0:e9:3a:63:7d:85:5f:f9:78:05:11:6c:28:35: 1e:18:32:af:ca:b8:c0:75:62:6e:ff:df:a9:cc:93: 36:f6:f1:7d:3e:96:6c:80:27:7a:bd:72:2b:73:68: c9:37:77:b9:a2:27:f9:3d:be:0d:3d:99:50:e7:be: 31:48:a4:d2:63:90:f4:17:a1:b7:cc:5c:60:9b:b2: a7:63:12:b2:72:12:e7:f8:9a:71:10:f1:7e:83:ed: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DA:E4:3F:8E:56:A9:5D:E9:9E:F6:74:8C:C4:BF:F0:2A:8C:68:C4 X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:d3:97:6b:11:af:5e:09:75:4d:5b:c9:1a:b1:c0:35:80:1d: 0c:c4:ff:cb:d2:c4:78:64:31:eb:ca:7a:69:2f:67:43:c4:d8: 24:f9:fd:3e:f2:e4:e8:6b:ca:ef:52:23:d0:56:9b:8a:13:04: 97:c0:a4:d5:0a:c0:59:fa:55:0f:c3:76:ff:98:f1:d4:75:12: 6f:5a:da:1b:76:c1:fa:d7:5c:eb:aa:53:1b:f8:2c:62:bc:f0: 03:e3:35:6f:b2:ce:3e:73:da:52:fb:03:c7:12:a2:0f:ae:a4: 6c:a5:dd:2a:80:71:f9:99:e7:63:66:f2:02:68:e0:40:42:53: 76:f3:6f:60:e1:9b:ad:fd:7e:1f:9c:e4:13:37:6f:ca:ae:b5: ac:7a:8a:f9:a5:b0:cf:dd:e0:29:21:22:0c:b2:29:59:15:01: f1:65:2b:a9:7f:b7:72:f9:12:12:cf:e4:e5:88:df:95:7e:4b: 06:1b:2e:6e:59:e2:59:e6:0c:d9:86:03:94:cb:47:3f:80:7e: a0:ef:09:c3:b5:ff:a6:1a:24:03:5a:11:ca:7c:41:9a:58:77: 88:53:58:34:e5:95:d8:92:7d:82:6b:c8:0e:46:37:33:ed:3c: 42:bd:de:03:00:f2:b3:28:02:ff:ea:72:56:f2:59:7e:5a:42: a1:d8:7f:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDn9aHOYxtnccGN0JiplFmPOtnC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNTA4MDUxNjU2NDNaFw0yNTA4MDgyMjA0NDNaMDMxMTAvBgNV BAMTKDY2REFFNDNGOEU1NkE5NURFOTlFRjY3NDhDQzRCRkYwMkE4QzY4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChKbKLaztLiUIgyL2XbG5512e0 XiQcSDRXL0aKL6KDfrXbcCcusrxG8BEhZs3smFUHTP0FPQG1OFycySTaePp8cQcS 2goCK+JyIuNiFSVcCsL/hMZypFUJ4b7AVJYZdhHTej1I1Bq1yaQZSpnXKIb+hsJi nCLh+2PUjbqkJO79H2lSGsKE395TH/s27p6+kKpkoC6ajLg5/O4ikug4R9Sw+7hm PqjA6TpjfYVf+XgFEWwoNR4YMq/KuMB1Ym7/36nMkzb28X0+lmyAJ3q9citzaMk3 d7miJ/k9vg09mVDnvjFIpNJjkPQXobfMXGCbsqdjErJyEuf4mnEQ8X6D7TNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZtrkP45WqV3pnvZ0jMS/8CqMaMQwHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLTl2sRr14JdU1byRqxwDWAHQzE/8vSxHhk MevKemkvZ0PE2CT5/T7y5Ohryu9SI9BWm4oTBJfApNUKwFn6VQ/Ddv+Y8dR1Em9a 2ht2wfrXXOuqUxv4LGK88APjNW+yzj5z2lL7A8cSog+upGyl3SqAcfmZ52Nm8gJo 4EBCU3bzb2Dhm639fh+c5BM3b8qutax6ivmlsM/d4CkhIgyyKVkVAfFlK6l/t3L5 EhLP5OWI35V+SwYbLm5Z4lnmDNmGA5TLRz+AfqDvCcO1/6YaJANaEcp8QZpYd4hT WDTlldiSfYJryA5GNzPtPEK93gMA8rMoAv/qclbyWX5aQqHYfz8= -----END CERTIFICATE-----Generated at Thu Aug 7 03:49:51 2025 by rpki-client