$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: yBslRjx+peA3W+QO3qJ3xHZHQlciMbT0lkzzJn99tkM= Subject key identifier: 86:83:AB:67:B5:AA:11:DD:50:24:98:8D:52:E8:EF:BF:B7:65:A3:38 Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 3F57F191A06BFA3E12A1261229AFDC129167E3BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 01F8 Signing time: Tue 05 Aug 2025 21:51:06 +0000 Manifest this update: Tue 05 Aug 2025 21:46:06 +0000 Manifest next update: Fri 08 Aug 2025 22:31:06 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: oeXB85rqW9kBedW9CU9bhq9hCN+9YFwlHwoasM3XeQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 22:31:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:57:f1:91:a0:6b:fa:3e:12:a1:26:12:29:af:dc:12:91:67:e3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Aug 5 21:46:06 2025 GMT Not After : Aug 8 22:31:06 2025 GMT Subject: CN=8683AB67B5AA11DD5024988D52E8EFBFB765A338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:9c:da:73:a5:67:af:a2:d0:d2:f8:8f:2c: 7a:e3:e3:b7:20:52:44:e9:26:5a:4f:d8:fd:7f:bd: 70:6a:01:27:f9:4b:e1:de:22:3f:4e:0e:04:de:27: 76:5a:d3:5e:05:de:4f:c1:e9:86:31:a7:50:f4:79: 26:8d:b8:0a:a1:a0:ce:f5:78:f1:1b:f8:ea:6d:0b: d2:5f:c0:b5:1a:c3:68:79:ae:d5:a1:cd:e0:7f:0d: b0:71:a8:85:72:14:cd:54:58:68:98:6f:c7:f9:5d: 57:38:6f:6e:79:35:16:d1:dd:63:c4:64:96:ff:1c: d6:0c:bf:dc:57:96:88:9b:7a:9f:fb:5c:64:ad:18: 85:d6:da:28:b8:ae:c6:da:7a:28:55:78:fb:0c:83: 2a:22:ba:92:d6:a8:f4:95:ac:c3:1d:a5:d6:04:31: 30:37:b7:6e:76:a5:7f:7a:e6:5f:cb:97:07:25:27: 01:f9:9c:7c:6d:c1:15:0f:94:81:3b:b6:8b:7e:2f: 6b:c2:10:47:c6:95:e3:f1:5f:90:71:56:2e:28:d1: 6c:e9:07:55:fa:f6:9d:5e:79:ce:92:49:e4:7b:ea: a2:ff:ae:0f:e4:33:6c:86:37:a7:66:49:00:e7:d0: cb:40:24:42:2e:2d:1b:38:f7:67:32:c7:6c:e7:71: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:83:AB:67:B5:AA:11:DD:50:24:98:8D:52:E8:EF:BF:B7:65:A3:38 X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c3:1d:b6:d1:14:ed:09:63:12:7b:bd:9a:e7:ba:c5:0e:2c: c8:db:fe:41:4b:f7:7e:9e:6c:e9:e1:29:80:ed:0b:3e:25:eb: 4a:f9:a2:0c:01:f7:51:1f:fe:db:83:aa:c1:d2:96:1a:b5:59: d8:e1:de:09:c0:35:cf:61:5b:03:4e:ac:50:84:65:25:93:c8: 18:fc:c4:00:07:e6:7f:19:9d:44:d1:dc:b9:e0:22:92:d4:7b: a1:a4:0d:c4:13:89:4d:d1:0f:6c:f6:95:26:81:dd:d2:a2:57: 99:4d:b0:65:1f:c1:26:24:60:ab:15:b6:21:e7:a1:ce:b7:7a: c6:71:63:c5:6c:67:ff:6c:6f:be:c3:e7:8e:20:b3:4b:4e:39: 40:a3:0e:a8:54:3c:dc:1f:ee:10:a1:ca:80:93:77:2f:d3:7d: d4:ed:05:95:dc:52:1f:ff:3d:70:e0:5d:22:94:f5:5b:87:ba: 7b:cd:e2:19:4a:0e:73:88:56:f6:f9:30:df:f7:8f:88:ce:ff: 58:f6:31:a4:f1:3d:1a:40:e7:d5:4a:79:55:be:f4:c2:34:d4: 50:41:56:df:f9:3d:6c:c2:fa:c1:53:c5:e2:3f:39:bf:9c:02: bb:83:fe:7d:1f:4c:ac:fd:7d:d3:26:7d:3d:75:ba:f1:1d:0a: d0:a1:02:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1fxkaBr+j4SoSYSKa/cEpFn47swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNTA4MDUyMTQ2MDZaFw0yNTA4MDgyMjMxMDZaMDMxMTAvBgNV BAMTKDg2ODNBQjY3QjVBQTExREQ1MDI0OTg4RDUyRThFRkJGQjc2NUEzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5B5zac6Vnr6LQ0viPLHrj47cg UkTpJlpP2P1/vXBqASf5S+HeIj9ODgTeJ3Za014F3k/B6YYxp1D0eSaNuAqhoM71 ePEb+OptC9JfwLUaw2h5rtWhzeB/DbBxqIVyFM1UWGiYb8f5XVc4b255NRbR3WPE ZJb/HNYMv9xXloibep/7XGStGIXW2ii4rsbaeihVePsMgyoiupLWqPSVrMMdpdYE MTA3t252pX965l/LlwclJwH5nHxtwRUPlIE7tot+L2vCEEfGlePxX5BxVi4o0Wzp B1X69p1eec6SSeR76qL/rg/kM2yGN6dmSQDn0MtAJEIuLRs492cyx2zncbpXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhoOrZ7WqEd1QJJiNUujvv7dlozgwHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHPDHbbRFO0JYxJ7vZrnusUOLMjb/kFL936e bOnhKYDtCz4l60r5ogwB91Ef/tuDqsHSlhq1Wdjh3gnANc9hWwNOrFCEZSWTyBj8 xAAH5n8ZnUTR3LngIpLUe6GkDcQTiU3RD2z2lSaB3dKiV5lNsGUfwSYkYKsVtiHn oc63esZxY8VsZ/9sb77D544gs0tOOUCjDqhUPNwf7hChyoCTdy/TfdTtBZXcUh// PXDgXSKU9VuHunvN4hlKDnOIVvb5MN/3j4jO/1j2MaTxPRpA59VKeVW+9MI01FBB Vt/5PWzC+sFTxeI/Ob+cAruD/n0fTKz9fdMmfT11uvEdCtChAhA= -----END CERTIFICATE-----Generated at Wed Aug 6 10:04:34 2025 by rpki-client