$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json) Hash identifier: gEbyIXC2oBri88H3QwjT9P1WThnnO8lC7uMFMzUu76E= Subject key identifier: 03:45:8D:2E:0C:1A:E5:F9:75:CB:9C:24:D1:87:DB:3B:3C:F2:0C:CF Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Certificate serial: 6B1A9FA640DED783EFB1177E928445DD4F385928 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft Manifest number: 01D5 Signing time: Sat 09 Aug 2025 12:21:22 +0000 Manifest this update: Sat 09 Aug 2025 12:16:22 +0000 Manifest next update: Tue 12 Aug 2025 12:36:22 +0000 Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: 1QHM6f4PoQ8xICiDInJMYIiMAXdHpFeE/+sfYH+yd68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 12:36:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:1a:9f:a6:40:de:d7:83:ef:b1:17:7e:92:84:45:dd:4f:38:59:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Validity Not Before: Aug 9 12:16:22 2025 GMT Not After : Aug 12 12:36:22 2025 GMT Subject: CN=03458D2E0C1AE5F975CB9C24D187DB3B3CF20CCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:05:75:61:07:58:d6:df:24:64:3f:6c:b5:d0: ed:a5:16:e1:80:12:54:a5:96:6e:d9:88:32:c9:64: 9c:2c:33:a5:9d:b0:26:79:c9:d8:5c:9f:40:c7:29: f2:47:65:62:b9:9d:a3:40:e7:68:cc:52:b3:da:87: 9f:aa:63:4a:a5:4d:f0:b8:39:29:28:e3:71:f1:91: 63:68:b4:50:a2:e8:3e:c5:a7:9f:37:46:cb:51:75: d0:de:d6:07:5f:ae:f1:07:6a:36:03:85:03:9e:ff: ba:5c:23:e9:38:3c:35:27:73:d3:a3:b1:3b:b2:71: 15:75:de:a2:e6:16:e8:51:4b:7c:7d:52:f5:3b:e5: d5:d3:4c:f2:46:4b:f5:66:eb:b5:fa:17:67:db:99: 69:6e:12:1e:dc:af:f1:d0:22:9e:70:b3:37:7e:95: fe:b1:16:46:e5:eb:20:94:2a:f5:d5:49:35:7c:fc: 99:be:4c:99:6d:ad:63:57:38:20:8d:0f:76:f7:94: 93:48:5c:77:de:09:d7:aa:60:f5:11:10:e2:01:2e: a0:4c:31:13:db:b7:32:14:14:91:23:83:ad:ec:dc: d2:ce:be:d1:29:e2:50:eb:a9:6d:06:aa:20:c5:ef: 0d:af:45:3d:eb:0b:65:81:47:80:1e:e4:12:96:b9: 20:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:45:8D:2E:0C:1A:E5:F9:75:CB:9C:24:D1:87:DB:3B:3C:F2:0C:CF X509v3 Authority Key Identifier: keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:94:0d:91:a9:ba:de:81:5d:ef:d8:08:40:4c:22:7d:38:59: bf:75:43:ec:9c:36:66:e2:31:53:63:97:4e:0d:5b:9b:91:fd: 7d:05:62:c0:b0:03:1d:ab:0b:b9:e8:4d:8d:d8:ad:b8:94:50: c4:97:ac:06:7d:97:6d:65:74:86:34:7d:1c:c7:e3:f0:cd:91: ab:1e:d5:29:24:cf:8f:4b:ce:10:22:cf:5a:d2:74:ac:cb:4e: fd:66:0f:54:41:e4:83:d2:c0:6d:ef:8b:68:e2:47:96:cd:32: 55:c0:f5:a9:f3:5e:92:ff:aa:83:a8:15:07:2c:50:a6:81:2a: 44:b4:27:0e:ed:90:44:96:35:69:86:70:f1:07:26:d6:3f:a0: b1:3f:e5:f3:ed:2a:65:4a:99:ef:8a:f5:29:ee:a3:a8:d6:13: 90:79:dd:a7:d4:50:b0:ae:7d:ad:87:fe:43:35:34:c1:6c:60: 7c:1c:86:4e:38:1f:69:f8:af:3c:74:ca:a9:3a:a3:32:dd:62: d2:4b:dd:9a:a4:59:93:01:28:48:13:e7:21:c3:6d:f4:21:8e: 29:f1:2c:a9:23:39:06:b8:e4:48:bf:ac:72:3c:25:b6:66:03: f0:6f:a0:52:d0:61:ca:95:a3:bb:a2:d4:1b:58:3f:f8:af:ba: 2c:d2:ed:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaxqfpkDe14PvsRd+koRF3U84WSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3 OTdDNDE2NTAeFw0yNTA4MDkxMjE2MjJaFw0yNTA4MTIxMjM2MjJaMDMxMTAvBgNV BAMTKDAzNDU4RDJFMEMxQUU1Rjk3NUNCOUMyNEQxODdEQjNCM0NGMjBDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsBXVhB1jW3yRkP2y10O2lFuGA ElSllm7ZiDLJZJwsM6WdsCZ5ydhcn0DHKfJHZWK5naNA52jMUrPah5+qY0qlTfC4 OSko43HxkWNotFCi6D7Fp583RstRddDe1gdfrvEHajYDhQOe/7pcI+k4PDUnc9Oj sTuycRV13qLmFuhRS3x9UvU75dXTTPJGS/Vm67X6F2fbmWluEh7cr/HQIp5wszd+ lf6xFkbl6yCUKvXVSTV8/Jm+TJltrWNXOCCND3b3lJNIXHfeCdeqYPUREOIBLqBM MRPbtzIUFJEjg63s3NLOvtEp4lDrqW0GqiDF7w2vRT3rC2WBR4Ae5BKWuSCzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0WNLgwa5fl1y5wk0YfbOzzyDM8wHwYDVR0j BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4 OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOUDZGput6BXe/YCEBMIn04Wb91Q+ycNmbi MVNjl04NW5uR/X0FYsCwAx2rC7noTY3YrbiUUMSXrAZ9l21ldIY0fRzH4/DNkase 1Skkz49LzhAiz1rSdKzLTv1mD1RB5IPSwG3vi2jiR5bNMlXA9anzXpL/qoOoFQcs UKaBKkS0Jw7tkESWNWmGcPEHJtY/oLE/5fPtKmVKme+K9Snuo6jWE5B53afUULCu fa2H/kM1NMFsYHwchk44H2n4rzx0yqk6ozLdYtJL3ZqkWZMBKEgT5yHDbfQhjinx LKkjOQa45Ei/rHI8JbZmA/BvoFLQYcqVo7ui1BtYP/ivuizS7Q8= -----END CERTIFICATE-----Generated at Sat Aug 9 22:40:45 2025 by rpki-client