$ rpki-client -vvf repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft File: 461B039429CF609C76235D70C58DE1D0AB6EA915.mft (raw, json) Hash identifier: 121NKMVbFOBH+gAS6UjsiH6ebNK/wifLDLNIsUgmnN8= Subject key identifier: 6A:85:7C:A1:5D:36:4A:A4:C5:11:C4:73:97:7E:F7:2A:99:25:0D:3C Authority key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 Certificate issuer: /CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Certificate serial: 5A7A19E1291D3FCA4538CFD94EE24986441C63B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft Manifest number: 010B Signing time: Sun 02 Nov 2025 00:41:31 +0000 Manifest this update: Sun 02 Nov 2025 00:36:31 +0000 Manifest next update: Wed 05 Nov 2025 11:37:31 +0000 Files and hashes: 1: 461B039429CF609C76235D70C58DE1D0AB6EA915.crl (hash: 19C4jri11GhQOy2Pkq2DHANgIcPiAuceO5Ukcm7G5lQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 11:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7a:19:e1:29:1d:3f:ca:45:38:cf:d9:4e:e2:49:86:44:1c:63:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Validity Not Before: Nov 2 00:36:31 2025 GMT Not After : Nov 5 11:37:31 2025 GMT Subject: CN=6A857CA15D364AA4C511C473977EF72A99250D3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:46:b2:d8:eb:28:dd:cf:65:59:c1:fd:0c: 36:be:26:ce:04:6a:6a:c3:53:22:08:14:9b:a1:6b: ac:1f:9b:cc:10:6b:b1:73:7e:1f:d9:3b:ae:b6:95: 16:ef:2d:63:76:a1:1a:62:23:49:bc:d5:74:3e:eb: 20:46:d0:4d:85:2c:f6:87:33:26:7c:81:04:a3:0f: c4:08:29:ea:38:73:82:dc:b0:0b:46:e6:3f:75:d5: f9:a9:61:79:a2:e8:43:94:cb:1e:cc:70:71:51:a2: 88:37:63:9d:8d:ab:8e:9a:71:1f:27:58:62:18:9b: 14:84:2c:aa:26:69:ce:57:40:a4:2e:38:bd:8f:1b: 7a:96:d0:a4:ad:27:10:49:22:02:30:93:a9:5e:a9: cf:3e:ef:08:ee:bb:e4:22:57:8e:12:10:7e:f8:e4: 6a:42:bc:05:59:8b:91:ea:03:42:46:17:ed:9e:88: 55:ee:26:a2:a6:67:7c:f4:4f:d5:e8:c9:35:62:3c: 75:59:ed:77:31:55:ed:c9:63:a1:0f:c9:b7:0b:42: 58:b7:57:e6:dc:13:a0:80:3d:16:4c:0b:42:ac:53: d9:53:3f:e7:7c:59:a1:39:5c:ed:22:67:ac:e0:98: 49:80:86:e9:ab:d7:44:63:af:57:ed:8f:48:54:d5: d1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:85:7C:A1:5D:36:4A:A4:C5:11:C4:73:97:7E:F7:2A:99:25:0D:3C X509v3 Authority Key Identifier: keyid:46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b9:e6:92:2f:cf:48:79:b5:8e:52:92:88:76:cc:d5:e5:84: 6a:75:1a:cb:c1:66:f2:64:ef:a9:2c:b0:fa:e6:b2:8d:f0:12: 0f:49:36:79:82:32:cb:b7:14:c5:a5:26:49:b9:2a:95:c0:76: b8:96:74:9d:d1:78:0a:c8:9a:0e:c1:7a:bf:84:bb:58:f3:41: 07:64:76:bf:f2:da:38:70:63:53:3f:7c:4e:ec:33:80:5d:b3: eb:80:7c:12:36:80:f7:58:87:54:e6:53:d0:75:49:ef:85:e3: b6:e0:90:b1:8b:fd:e2:fd:d7:bb:ac:a3:46:80:a8:7c:e2:2f: ae:da:40:64:2d:27:4f:b0:ce:95:26:3e:89:4c:fa:79:8e:3a: 93:4a:90:91:98:cc:63:46:6b:05:18:4b:a5:e0:c8:2f:74:e2: c4:7f:34:e9:d0:28:11:41:71:98:ce:dd:53:91:48:8b:05:33: 75:6b:b4:02:52:65:23:50:ca:40:21:0c:fd:3d:a5:a3:51:6e: 2f:a8:da:d2:5d:44:85:06:c2:3e:d1:72:5d:86:0d:f9:e0:4e: 39:6a:8d:cf:04:eb:63:28:88:70:36:18:3e:d4:42:21:5b:c8: 2c:87:bf:8c:6d:41:05:3e:5e:27:60:a8:7d:79:0f:b9:24:4b: 99:d9:82:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWnoZ4SkdP8pFOM/ZTuJJhkQcY7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBB QjZFQTkxNTAeFw0yNTExMDIwMDM2MzFaFw0yNTExMDUxMTM3MzFaMDMxMTAvBgNV BAMTKDZBODU3Q0ExNUQzNjRBQTRDNTExQzQ3Mzk3N0VGNzJBOTkyNTBEM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHp0ay2Oso3c9lWcH9DDa+Js4E amrDUyIIFJuha6wfm8wQa7Fzfh/ZO662lRbvLWN2oRpiI0m81XQ+6yBG0E2FLPaH MyZ8gQSjD8QIKeo4c4LcsAtG5j911fmpYXmi6EOUyx7McHFRoog3Y52Nq46acR8n WGIYmxSELKomac5XQKQuOL2PG3qW0KStJxBJIgIwk6leqc8+7wjuu+QiV44SEH74 5GpCvAVZi5HqA0JGF+2eiFXuJqKmZ3z0T9XoyTViPHVZ7XcxVe3JY6EPybcLQli3 V+bcE6CAPRZMC0KsU9lTP+d8WaE5XO0iZ6zgmEmAhumr10Rjr1ftj0hU1dFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaoV8oV02SqTFEcRzl373KpklDTwwHwYDVR0j BBgwFoAURhsDlCnPYJx2I11wxY3h0KtuqRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDI3ZmEwMi1lNDlmLTQyMTUtODYyYi03ZmFhZWZkOGFiM2UvMC80NjFCMDM5NDI5 Q0Y2MDlDNzYyMzVENzBDNThERTFEMEFCNkVBOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBBQjZF QTkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUx RDBBQjZFQTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHG55pIvz0h5tY5Skoh2zNXlhGp1GsvBZvJk 76kssPrmso3wEg9JNnmCMsu3FMWlJkm5KpXAdriWdJ3ReArImg7Ber+Eu1jzQQdk dr/y2jhwY1M/fE7sM4Bds+uAfBI2gPdYh1TmU9B1Se+F47bgkLGL/eL917uso0aA qHziL67aQGQtJ0+wzpUmPolM+nmOOpNKkJGYzGNGawUYS6XgyC904sR/NOnQKBFB cZjO3VORSIsFM3VrtAJSZSNQykAhDP09paNRbi+o2tJdRIUGwj7Rcl2GDfngTjlq jc8E62MoiHA2GD7UQiFbyCyHv4xtQQU+XidgqH15D7kkS5nZgt4= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:26 2025 by rpki-client