$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: BLQEqi1fMZ3lZfAI2HcNjeKfZFWtXWMHJxHImF3stXw= Subject key identifier: 36:7A:3C:38:71:AC:15:F8:8C:51:F0:B3:EA:2B:D2:F5:51:AE:2A:0A Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 01A5151D3FEC50E2BF1DB8AA744399B55180E554 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 0279 Signing time: Wed 06 Aug 2025 01:41:04 +0000 Manifest this update: Wed 06 Aug 2025 01:36:04 +0000 Manifest next update: Sat 09 Aug 2025 10:32:04 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: 9wPMgf0GcIQvRxa9GH/T87WWOYSdWMDzcP4oDBCn8YA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a5:15:1d:3f:ec:50:e2:bf:1d:b8:aa:74:43:99:b5:51:80:e5:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: Aug 6 01:36:04 2025 GMT Not After : Aug 9 10:32:04 2025 GMT Subject: CN=367A3C3871AC15F88C51F0B3EA2BD2F551AE2A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:e2:69:f2:c3:fa:07:13:94:c1:3a:00:6c: b6:b9:01:f9:f5:58:8f:20:17:0b:56:6c:1c:4f:e6: 0b:13:2b:bd:10:b2:7e:fc:11:4b:92:2f:a9:49:61: 46:23:7e:8b:6a:3c:34:34:66:92:bb:3c:db:d0:c3: 3e:8d:93:7d:b3:d2:b1:53:9d:ab:ae:e8:4a:1d:59: 67:72:89:07:d5:20:b0:b8:24:f2:a9:6d:68:79:1d: 5c:47:2d:bd:59:8c:4e:e0:04:31:35:58:ae:90:dd: c5:e5:16:e6:36:68:d5:bb:ad:06:60:5e:a9:46:f5: c5:48:1f:2e:61:54:33:e3:e4:e4:1d:4e:ea:b6:5d: 11:52:ba:58:ec:b6:8e:83:08:c6:f9:cf:01:68:9c: 18:72:c3:50:59:43:f8:fb:3a:db:b6:d0:7c:b1:e3: 19:cf:f0:3e:b1:81:94:52:00:49:13:cd:90:6f:ed: e1:74:2d:da:ad:82:97:f5:07:29:90:94:78:b0:d1: a9:b4:38:2c:0f:8c:19:c8:82:b3:72:f3:92:ed:60: dd:92:a5:33:3d:b5:0d:2f:17:4e:8b:df:e5:3a:2c: 2a:5a:1c:a3:da:f4:97:cb:ee:2f:9c:48:87:18:ac: 2a:72:23:6b:b8:41:62:65:c2:6b:ae:ef:bc:52:59: eb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7A:3C:38:71:AC:15:F8:8C:51:F0:B3:EA:2B:D2:F5:51:AE:2A:0A X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:62:36:1e:f0:64:2e:5b:d0:6b:2f:c3:cc:c7:8e:07:4b:86: f7:a0:77:6e:97:ce:d7:33:c2:9b:59:86:1d:97:bd:b9:99:e2: ff:c1:27:ce:fb:6e:fb:58:e0:4d:de:be:ca:36:31:56:6a:65: ae:2e:8c:6d:39:b1:df:55:85:13:f5:44:ba:f6:a0:e0:ea:2a: 67:2d:5e:34:0e:02:c2:fa:f7:13:03:17:7f:69:11:37:cc:cf: 02:e0:fa:02:63:6e:63:7f:6f:b3:34:e9:68:44:b9:ec:a6:75: 0c:19:a2:29:67:0c:1c:13:87:d5:42:94:ab:54:d2:7c:83:00: 5e:de:77:bc:f8:8a:01:6e:cd:d3:f7:26:88:bf:03:05:14:42: 8a:22:09:20:44:5b:b7:66:11:10:e2:f7:0f:b9:8e:d2:4b:6b: 3a:d8:2c:30:36:6f:43:74:81:17:75:2c:4d:32:51:9d:92:f6: 8f:0f:c4:a8:85:7c:c3:00:86:55:06:81:fe:06:05:92:c4:78: b7:a1:56:19:c5:82:91:f1:fc:9a:65:36:35:ca:73:b7:4d:cf: b3:8f:97:23:e2:35:21:56:10:7f:1b:88:3c:88:66:b8:81:07: 32:c3:03:49:0b:17:ab:85:7a:a2:4b:b3:76:a7:ad:58:97:dd: c9:46:71:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaUVHT/sUOK/HbiqdEOZtVGA5VQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNTA4MDYwMTM2MDRaFw0yNTA4MDkxMDMyMDRaMDMxMTAvBgNV BAMTKDM2N0EzQzM4NzFBQzE1Rjg4QzUxRjBCM0VBMkJEMkY1NTFBRTJBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0+Jp8sP6BxOUwToAbLa5Afn1 WI8gFwtWbBxP5gsTK70Qsn78EUuSL6lJYUYjfotqPDQ0ZpK7PNvQwz6Nk32z0rFT nauu6EodWWdyiQfVILC4JPKpbWh5HVxHLb1ZjE7gBDE1WK6Q3cXlFuY2aNW7rQZg XqlG9cVIHy5hVDPj5OQdTuq2XRFSuljsto6DCMb5zwFonBhyw1BZQ/j7Otu20Hyx 4xnP8D6xgZRSAEkTzZBv7eF0Ldqtgpf1BymQlHiw0am0OCwPjBnIgrNy85LtYN2S pTM9tQ0vF06L3+U6LCpaHKPa9JfL7i+cSIcYrCpyI2u4QWJlwmuu77xSWevBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNno8OHGsFfiMUfCz6ivS9VGuKgowHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxiNh7wZC5b0Gsvw8zHjgdLhvegd26Xztcz wptZhh2XvbmZ4v/BJ877bvtY4E3evso2MVZqZa4ujG05sd9VhRP1RLr2oODqKmct XjQOAsL69xMDF39pETfMzwLg+gJjbmN/b7M06WhEueymdQwZoilnDBwTh9VClKtU 0nyDAF7ed7z4igFuzdP3Joi/AwUUQooiCSBEW7dmERDi9w+5jtJLazrYLDA2b0N0 gRd1LE0yUZ2S9o8PxKiFfMMAhlUGgf4GBZLEeLehVhnFgpHx/JplNjXKc7dNz7OP lyPiNSFWEH8biDyIZriBBzLDA0kLF6uFeqJLs3anrViX3clGcaU= -----END CERTIFICATE-----Generated at Thu Aug 7 02:07:41 2025 by rpki-client