$ rpki-client -vvf repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft File: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft (raw, json) Hash identifier: KBI91nopTb/m+zoezJw+AR6kzdGKBEe1+SoMqxqrNns= Subject key identifier: 4B:5C:34:E7:5E:BB:95:59:BF:64:45:36:C7:03:3A:00:32:8D:EE:35 Authority key identifier: B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A Certificate issuer: /CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Certificate serial: 1D4A643168B392BC355EE7D58A171D9CEEC58B9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft Manifest number: 41 Signing time: Fri 08 Aug 2025 16:41:36 +0000 Manifest this update: Fri 08 Aug 2025 16:36:36 +0000 Manifest next update: Tue 12 Aug 2025 02:22:36 +0000 Files and hashes: 1: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl (hash: SgqwXs2+ikhlG1D6omaMrnJOf1V2iDsUV74rI9EbwY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4a:64:31:68:b3:92:bc:35:5e:e7:d5:8a:17:1d:9c:ee:c5:8b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Validity Not Before: Aug 8 16:36:36 2025 GMT Not After : Aug 12 02:22:36 2025 GMT Subject: CN=4B5C34E75EBB9559BF644536C7033A00328DEE35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ad:69:03:c3:28:3a:ca:79:c6:86:88:77:73: 9f:b1:0d:12:8c:3a:c2:19:d7:2c:1c:cb:14:d9:a0: 4a:ae:7c:08:eb:96:e3:4b:b0:b8:70:e2:99:0a:7c: 72:63:20:70:43:9e:48:67:76:7c:32:73:aa:0a:69: c3:72:0d:8d:15:cb:be:4b:9e:2a:33:b9:17:98:b9: 21:57:fd:ef:64:6e:73:27:1a:62:92:c4:51:83:e7: 31:f1:68:1c:6d:01:53:26:41:32:7b:fd:ca:71:94: 5c:29:16:f2:0a:f7:96:5b:bc:2c:83:fb:e9:65:60: 54:aa:b1:ec:39:40:15:5d:55:9b:f0:91:69:9a:1a: 6f:17:27:84:cd:03:76:37:6e:6e:5b:54:45:d0:86: d0:bf:00:f2:37:ea:1c:ca:f0:e4:b8:4c:bb:00:07: f5:78:8f:c9:f7:00:85:e0:fc:8a:2c:41:46:60:9d: ef:62:e9:dc:0b:2d:c7:f5:8a:27:10:61:f8:09:64: bb:2b:2b:ac:30:81:6e:b8:94:3a:6a:e8:45:21:3e: f5:4c:1b:06:6c:11:ff:22:40:b6:51:f3:2c:31:56: 7c:d0:e6:19:6e:0c:c5:58:6b:0e:45:88:35:df:23: 7f:d5:58:40:15:99:5d:cf:81:b0:03:54:d6:c6:ae: 03:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5C:34:E7:5E:BB:95:59:BF:64:45:36:C7:03:3A:00:32:8D:EE:35 X509v3 Authority Key Identifier: keyid:B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:32:72:97:ec:0c:15:9e:5d:3a:20:1e:75:4d:82:53:6f:74: 5b:d4:dd:74:5f:98:13:2c:39:7f:66:50:fb:5a:0f:bb:f7:79: 59:f2:21:32:ca:d1:53:48:fd:a3:ca:69:d8:00:c7:17:c9:a6: 43:47:30:c9:1f:f3:e0:cc:d5:77:a8:db:6e:1d:f7:17:c7:51: 9e:7b:03:dd:23:00:17:67:ef:4b:2d:d2:08:d6:5c:75:d1:73: 48:45:b3:05:02:dc:ac:9e:d1:51:76:91:71:97:68:90:28:4f: be:4c:a5:c4:1e:d1:d4:18:23:48:35:73:22:c7:d2:55:58:c2: 5e:02:bd:6c:6b:75:b2:8c:9f:92:dc:f3:83:8d:b0:d7:8a:85: d5:cc:55:df:14:07:79:f5:fb:1f:fb:05:bd:5e:11:7a:c5:54: d0:99:e1:83:e0:96:65:44:69:64:d3:5e:5e:75:ed:db:1b:22: 1b:c0:1f:1c:89:3d:2d:c8:71:2f:49:55:f4:9c:86:1e:f0:27: 72:b6:3f:65:03:f9:99:38:e4:b8:a5:6c:33:1e:c6:a7:8c:8b: f9:e4:35:79:45:56:e1:2b:cc:9e:22:9c:e8:b4:88:6a:d2:7f: cd:4c:51:19:91:35:31:c3:89:13:41:b7:49:5f:7b:9e:b3:26: 85:bd:72:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHUpkMWizkrw1XufVihcdnO7Fi5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1 M0E3RkI3QTAeFw0yNTA4MDgxNjM2MzZaFw0yNTA4MTIwMjIyMzZaMDMxMTAvBgNV BAMTKDRCNUMzNEU3NUVCQjk1NTlCRjY0NDUzNkM3MDMzQTAwMzI4REVFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rWkDwyg6ynnGhoh3c5+xDRKM OsIZ1ywcyxTZoEqufAjrluNLsLhw4pkKfHJjIHBDnkhndnwyc6oKacNyDY0Vy75L niozuReYuSFX/e9kbnMnGmKSxFGD5zHxaBxtAVMmQTJ7/cpxlFwpFvIK95ZbvCyD ++llYFSqsew5QBVdVZvwkWmaGm8XJ4TNA3Y3bm5bVEXQhtC/API36hzK8OS4TLsA B/V4j8n3AIXg/IosQUZgne9i6dwLLcf1iicQYfgJZLsrK6wwgW64lDpq6EUhPvVM GwZsEf8iQLZR8ywxVnzQ5hluDMVYaw5FiDXfI3/VWEAVmV3PgbADVNbGrgNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS1w05167lVm/ZEU2xwM6ADKN7jUwHwYDVR0j BBgwFoAUtEFUYbbvcNPUqB7WiPJJfVOn+3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjMzMGQwNi1mOTJkLTQ5NWItOWJhMC1hY2RkODE3YjE0ODMvMC9CNDQxNTQ2MUI2 RUY3MEQzRDRBODFFRDY4OEYyNDk3RDUzQTdGQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1M0E3 RkI3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5 N0Q1M0E3RkI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAycpfsDBWeXTogHnVNglNvdFvU3XRfmBMs OX9mUPtaD7v3eVnyITLK0VNI/aPKadgAxxfJpkNHMMkf8+DM1Xeo224d9xfHUZ57 A90jABdn70st0gjWXHXRc0hFswUC3Kye0VF2kXGXaJAoT75MpcQe0dQYI0g1cyLH 0lVYwl4CvWxrdbKMn5Lc84ONsNeKhdXMVd8UB3n1+x/7Bb1eEXrFVNCZ4YPglmVE aWTTXl517dsbIhvAHxyJPS3IcS9JVfSchh7wJ3K2P2UD+Zk45LilbDMexqeMi/nk NXlFVuErzJ4inOi0iGrSf81MURmRNTHDiRNBt0lfe56zJoW9cn8= -----END CERTIFICATE-----Generated at Sat Aug 9 22:40:24 2025 by rpki-client