$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: hpX2rJphR2WHfFlUthXYdkJqschVUy8xU/04x4YSjAQ= Subject key identifier: DE:13:31:09:53:32:BC:45:B2:72:E7:EE:BE:86:AD:EB:42:05:D0:E4 Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 67499C876A3DAD46754ED761F2A8D2647849E523 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: 0102 Signing time: Mon 16 Jun 2025 21:41:51 +0000 Manifest this update: Mon 16 Jun 2025 21:36:51 +0000 Manifest next update: Fri 20 Jun 2025 01:06:51 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: d6unKayheGB8L+Qf6B14AVnWquZ0cMfvr7aJrYPkj7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:49:9c:87:6a:3d:ad:46:75:4e:d7:61:f2:a8:d2:64:78:49:e5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Jun 16 21:36:51 2025 GMT Not After : Jun 20 01:06:51 2025 GMT Subject: CN=DE1331095332BC45B272E7EEBE86ADEB4205D0E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:72:28:6f:8c:99:6b:9c:a8:12:15:c2:1c: 9e:4e:3f:c9:a5:5c:57:30:bf:74:1d:81:46:f8:d1: 06:2d:b4:be:08:4e:ca:67:53:30:25:43:ad:36:c1: d1:88:94:40:45:35:70:33:bd:f3:e4:1f:2f:4e:e4: 23:e4:4e:71:bd:e4:9c:1d:66:40:59:a4:c5:67:21: 2c:ae:52:7c:0d:89:90:98:ce:c6:54:c5:0c:35:3f: fa:71:53:c4:15:9d:6d:86:f8:7c:6c:ca:4c:ff:47: 1b:3a:09:2d:2d:cc:7a:ae:4e:03:c6:ac:2e:53:9d: 02:2b:3b:42:34:91:24:7c:6e:9e:d9:b4:01:5f:ef: 51:da:2a:e2:40:16:f6:e4:05:bb:4a:44:fa:94:0f: 2e:78:69:94:e6:ed:3c:c9:7a:77:32:34:dd:fe:48: 74:d0:94:71:f5:46:de:c6:a4:0b:7e:28:77:fe:07: 2f:04:0c:2b:1a:42:ea:af:dc:87:b9:82:89:c5:34: 3e:19:06:62:cb:12:ac:62:7b:50:94:35:05:cf:cc: 03:b2:03:a4:1f:14:15:6b:87:40:0d:7c:14:de:d5: d6:c5:83:3a:02:fd:ae:2b:7e:ce:a8:c9:da:61:f2: 31:fd:a7:6a:cf:e7:0b:e8:b4:26:45:d3:d3:36:12: 38:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:13:31:09:53:32:BC:45:B2:72:E7:EE:BE:86:AD:EB:42:05:D0:E4 X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b8:54:7a:0f:91:be:99:1b:1d:42:37:5f:21:3e:f5:20:3d: 85:80:3c:59:42:e6:87:8f:7c:68:96:14:f0:e0:2b:dd:45:f8: f9:9a:65:b9:39:2d:ab:df:e7:f4:5c:a9:d1:da:4a:da:87:fe: f1:1c:90:16:03:5b:f5:62:15:0c:0b:84:2a:d5:6b:b1:13:9c: 9d:de:29:17:94:d9:28:2c:cc:99:59:a5:91:28:01:5b:7a:ea: 31:43:f7:c2:ea:7f:23:28:98:39:4f:d9:61:25:f1:c4:23:cd: e4:04:0d:60:13:50:7c:7d:53:c4:94:0c:5d:8b:fe:cb:da:b4: dd:a8:51:dd:2e:15:bf:e9:11:ed:64:9d:bf:3e:b0:e4:65:19: 56:5e:27:19:a5:b4:23:1d:bb:0e:b6:2d:8a:55:bb:aa:52:ec: 71:26:e4:02:be:6a:bf:d3:87:28:24:08:d8:86:25:0c:2f:eb: e8:0b:15:72:86:f4:43:2c:ec:85:60:83:d1:d4:6f:54:2d:d8: 91:fd:3b:d6:aa:b5:4d:f7:c9:f2:10:56:bc:74:9f:98:ff:b5: ef:c7:a9:bd:05:e5:78:22:91:05:a3:76:af:10:05:c6:ac:de: 9e:92:e4:30:f9:bf:d8:a1:71:2a:bd:aa:a2:c0:8a:65:fa:cf: 74:b9:eb:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ0mch2o9rUZ1Ttdh8qjSZHhJ5SMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNTA2MTYyMTM2NTFaFw0yNTA2MjAwMTA2NTFaMDMxMTAvBgNV BAMTKERFMTMzMTA5NTMzMkJDNDVCMjcyRTdFRUJFODZBREVCNDIwNUQwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG43Iob4yZa5yoEhXCHJ5OP8ml XFcwv3QdgUb40QYttL4ITspnUzAlQ602wdGIlEBFNXAzvfPkHy9O5CPkTnG95Jwd ZkBZpMVnISyuUnwNiZCYzsZUxQw1P/pxU8QVnW2G+Hxsykz/Rxs6CS0tzHquTgPG rC5TnQIrO0I0kSR8bp7ZtAFf71HaKuJAFvbkBbtKRPqUDy54aZTm7TzJencyNN3+ SHTQlHH1Rt7GpAt+KHf+By8EDCsaQuqv3Ie5gonFND4ZBmLLEqxie1CUNQXPzAOy A6QfFBVrh0ANfBTe1dbFgzoC/a4rfs6oydph8jH9p2rP5wvotCZF09M2Ejj1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3hMxCVMyvEWycufuvoat60IF0OQwHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF64VHoPkb6ZGx1CN18hPvUgPYWAPFlC5oeP fGiWFPDgK91F+PmaZbk5Lavf5/RcqdHaStqH/vEckBYDW/ViFQwLhCrVa7ETnJ3e KReU2SgszJlZpZEoAVt66jFD98LqfyMomDlP2WEl8cQjzeQEDWATUHx9U8SUDF2L /svatN2oUd0uFb/pEe1knb8+sORlGVZeJxmltCMduw62LYpVu6pS7HEm5AK+ar/T hygkCNiGJQwv6+gLFXKG9EMs7IVgg9HUb1Qt2JH9O9aqtU33yfIQVrx0n5j/te/H qb0F5XgikQWjdq8QBcas3p6S5DD5v9ihcSq9qqLAimX6z3S5670= -----END CERTIFICATE-----Generated at Wed Jun 18 06:37:51 2025 by rpki-client