$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: XTz+iKQlnTJ/qoELXRCI15uGyTgibqv9Ufh+luaDL9Y= Subject key identifier: 50:AF:84:02:B8:C3:0B:F6:DE:EA:04:FE:B1:56:62:17:4A:29:45:13 Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 6DC3B2B2966C35628E8CFC15E0D2F9E9280EFFEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 02A0 Signing time: Mon 03 Nov 2025 23:11:05 +0000 Manifest this update: Mon 03 Nov 2025 23:06:05 +0000 Manifest next update: Fri 07 Nov 2025 11:05:05 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: NUwgaq3stm1iYlPVRioLiGBPEDM/PuiQ1v5ITttnb80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 11:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c3:b2:b2:96:6c:35:62:8e:8c:fc:15:e0:d2:f9:e9:28:0e:ff:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: Nov 3 23:06:05 2025 GMT Not After : Nov 7 11:05:05 2025 GMT Subject: CN=50AF8402B8C30BF6DEEA04FEB15662174A294513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:0c:79:02:2f:da:99:c4:66:ff:f6:db:2e: 6d:36:ff:75:ae:12:0f:21:78:67:93:16:0f:4c:4d: 34:71:9a:f2:29:e4:dc:fe:f2:c4:51:61:13:37:f2: 62:db:c9:50:4f:1b:b2:69:00:fb:3c:78:7f:ef:a2: 7d:a0:6e:1f:e5:57:4d:77:15:75:2a:0f:7b:22:a2: ac:e6:69:da:7b:e3:87:f3:f5:43:4b:c0:6c:21:15: 82:48:aa:f8:56:f6:a8:f5:d0:dd:4b:38:77:3c:63: 97:04:93:af:b1:45:31:9a:a0:e2:63:5b:0b:c5:87: d3:1a:b0:67:0b:b2:de:61:c7:e4:e8:33:75:8b:c3: 57:f3:6a:67:dc:4d:97:32:11:f3:0b:04:d2:03:4a: 32:d0:88:0f:de:6e:85:ab:f3:59:96:60:b0:c0:76: ef:a1:f1:79:a9:0a:8e:e0:23:67:d0:30:5e:0d:99: 10:80:6a:7c:50:8a:c1:18:f6:2b:0f:b5:d4:44:00: a8:2e:38:82:8c:15:c3:c7:7c:75:43:92:05:40:63: 98:ac:d2:20:48:34:a3:9f:54:24:c7:f5:96:84:f1: 23:e5:ed:bd:d3:19:e0:f4:f5:90:d2:2b:ae:01:48: 13:f0:ac:b2:a0:5a:f8:1b:bd:77:64:c2:22:17:10: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AF:84:02:B8:C3:0B:F6:DE:EA:04:FE:B1:56:62:17:4A:29:45:13 X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:17:cf:a4:51:fe:de:9d:b4:bd:61:d0:20:c9:84:72:ac:82: 04:99:09:58:4c:59:17:c1:31:40:65:03:c9:f0:db:51:c4:15: ba:26:ee:c1:0d:a9:14:fd:ca:8d:f0:24:73:f3:32:f2:f4:44: 0d:ff:95:41:d7:f7:87:06:6d:78:02:27:1e:1e:05:a0:68:44: aa:56:ba:ef:21:75:7e:55:79:8e:fa:ce:53:ef:60:6f:9d:26: ce:d2:ab:bd:0f:7f:37:ae:18:f9:5b:44:a2:c3:ae:dc:2b:b9: 5a:6f:2c:6b:e2:7f:8e:eb:01:db:c7:ae:99:f1:ac:ec:1b:07: d4:d8:3c:e3:5a:e7:7b:c4:91:fb:08:44:53:a7:03:0f:51:e4: d6:9a:e0:7f:34:88:78:d7:b4:87:25:a0:d0:b0:66:10:47:56: 7d:85:b1:6d:87:6b:6d:f4:4b:71:a6:f0:eb:90:85:cc:c8:bd: 31:e1:e8:c0:a4:79:e6:48:8d:50:a9:9a:89:e0:f5:5c:d7:ae: d4:67:24:db:18:09:4e:7f:67:7d:85:b4:17:eb:a6:83:d8:9a: aa:bb:19:02:00:00:d5:4e:d6:06:03:92:8c:23:b7:76:f4:1b: 0a:15:94:de:c3:6b:7c:72:a7:63:3e:04:98:4e:3c:7b:0a:3a: 94:1b:7b:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbcOyspZsNWKOjPwV4NL56SgO/+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNTExMDMyMzA2MDVaFw0yNTExMDcxMTA1MDVaMDMxMTAvBgNV BAMTKDUwQUY4NDAyQjhDMzBCRjZERUVBMDRGRUIxNTY2MjE3NEEyOTQ1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWgx5Ai/amcRm//bbLm02/3Wu Eg8heGeTFg9MTTRxmvIp5Nz+8sRRYRM38mLbyVBPG7JpAPs8eH/von2gbh/lV013 FXUqD3sioqzmadp744fz9UNLwGwhFYJIqvhW9qj10N1LOHc8Y5cEk6+xRTGaoOJj WwvFh9MasGcLst5hx+ToM3WLw1fzamfcTZcyEfMLBNIDSjLQiA/eboWr81mWYLDA du+h8XmpCo7gI2fQMF4NmRCAanxQisEY9isPtdREAKguOIKMFcPHfHVDkgVAY5is 0iBINKOfVCTH9ZaE8SPl7b3TGeD09ZDSK64BSBPwrLKgWvgbvXdkwiIXEEGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUK+EArjDC/be6gT+sVZiF0opRRMwHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgXz6RR/t6dtL1h0CDJhHKsggSZCVhMWRfB MUBlA8nw21HEFbom7sENqRT9yo3wJHPzMvL0RA3/lUHX94cGbXgCJx4eBaBoRKpW uu8hdX5VeY76zlPvYG+dJs7Sq70PfzeuGPlbRKLDrtwruVpvLGvif47rAdvHrpnx rOwbB9TYPONa53vEkfsIRFOnAw9R5Naa4H80iHjXtIcloNCwZhBHVn2FsW2Ha230 S3Gm8OuQhczIvTHh6MCkeeZIjVCpmong9VzXrtRnJNsYCU5/Z32FtBfrpoPYmqq7 GQIAANVO1gYDkowjt3b0GwoVlN7Da3xyp2M+BJhOPHsKOpQbeyk= -----END CERTIFICATE-----Generated at Tue Nov 4 12:38:43 2025 by rpki-client