$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: QG8uv1iyoLnprtT8ge8V0IkysRAJfKDqgREkRoLmwJE= Subject key identifier: 63:88:52:0E:67:D0:6A:25:DB:56:96:10:E9:39:12:EB:A1:7C:83:79 Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 5BED1B11642D4D0A93142B456FAB96F13FFFC782 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: 0141 Signing time: Wed 05 Nov 2025 06:01:54 +0000 Manifest this update: Wed 05 Nov 2025 05:56:54 +0000 Manifest next update: Sat 08 Nov 2025 08:16:54 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: EbUzNJm4krLO8agD7pmzz1sJFbsl/9Xhvt3zFGy0d0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 08:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ed:1b:11:64:2d:4d:0a:93:14:2b:45:6f:ab:96:f1:3f:ff:c7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Nov 5 05:56:54 2025 GMT Not After : Nov 8 08:16:54 2025 GMT Subject: CN=6388520E67D06A25DB569610E93912EBA17C8379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:65:73:40:2f:42:98:9c:b3:57:40:3b:92:ab: ef:9e:3c:36:11:84:3b:b0:ce:d4:10:3a:b7:1e:e1: 64:6e:2f:a6:81:1d:21:ba:32:20:b5:a6:b2:25:00: eb:31:2e:47:18:ef:01:cb:06:82:1a:97:4a:40:76: 8c:a4:e5:c0:52:5b:b2:51:a3:25:07:8c:bf:1b:c2: e4:4d:26:f4:e5:c5:1e:1b:21:bb:75:f4:f3:95:a4: e0:79:66:cd:6e:13:db:21:5f:ea:59:fa:45:f0:cd: c2:ef:8c:38:d6:36:f6:ca:01:43:9a:69:e4:62:5c: 19:d1:ab:18:5d:2c:26:df:af:0e:77:6a:10:e5:08: 7b:77:28:45:0c:60:b0:df:9a:90:b3:6b:88:90:15: 8e:a3:1d:55:c3:a7:f9:95:c0:b6:b6:88:b4:ef:01: df:93:51:c4:9e:6a:76:00:a2:e4:81:90:4e:7d:82: e5:17:c2:9f:06:cf:8b:98:86:04:4e:3d:87:78:d5: c9:eb:33:da:6b:8e:99:19:eb:fb:0b:70:b9:c8:27: c2:07:79:d7:bb:3e:95:ba:ad:b5:ec:08:72:df:a5: e1:f2:ac:16:ba:50:05:b2:84:d0:a7:85:a9:22:3e: 68:a5:37:f9:ab:7e:fd:4e:83:c2:b9:27:0d:4b:39: 3a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:88:52:0E:67:D0:6A:25:DB:56:96:10:E9:39:12:EB:A1:7C:83:79 X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8c:73:0b:18:8b:3c:ff:b2:8d:86:c3:bc:9a:69:74:9a:d2: e0:92:c7:71:5c:c7:40:ab:3a:15:b3:d1:17:38:67:5e:90:da: 87:a9:6b:ec:d4:cc:ce:26:00:7f:fa:82:cf:70:1e:19:65:1e: ea:dd:07:38:d3:d6:e0:15:b9:32:38:77:de:76:a7:0c:6e:6a: 94:7a:87:dd:85:24:d4:ee:17:5b:d3:d3:b7:ad:dd:f2:06:bc: 7c:ba:89:c5:69:e7:a6:15:68:c7:94:87:af:a4:20:16:a4:2e: fb:4d:83:9d:6f:f5:48:a8:72:62:a0:22:1c:74:5c:57:f1:7f: 54:1a:69:13:65:c9:51:fe:61:89:39:21:a5:27:5f:64:f8:13: f5:e1:37:af:d4:01:cf:c0:9a:eb:34:0c:58:5f:a4:15:a3:ee: 42:5b:b0:82:46:ce:bd:40:c1:8f:4c:9b:b4:5a:d8:0a:00:6b: a3:44:a1:4a:9c:cd:3a:54:12:26:56:b0:d6:dd:f0:9c:d1:4d: 7e:12:bd:aa:c3:b1:0f:77:29:be:4e:d1:ed:7d:42:68:4a:50: 4c:3e:b3:a1:86:28:d7:45:83:94:a1:ef:d6:1b:fa:64:14:aa: f9:80:5a:68:4b:9d:3c:16:99:26:35:0c:ff:b1:0d:84:af:fe: bc:dc:12:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+0bEWQtTQqTFCtFb6uW8T//x4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNTExMDUwNTU2NTRaFw0yNTExMDgwODE2NTRaMDMxMTAvBgNV BAMTKDYzODg1MjBFNjdEMDZBMjVEQjU2OTYxMEU5MzkxMkVCQTE3QzgzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZXNAL0KYnLNXQDuSq++ePDYR hDuwztQQOrce4WRuL6aBHSG6MiC1prIlAOsxLkcY7wHLBoIal0pAdoyk5cBSW7JR oyUHjL8bwuRNJvTlxR4bIbt19POVpOB5Zs1uE9shX+pZ+kXwzcLvjDjWNvbKAUOa aeRiXBnRqxhdLCbfrw53ahDlCHt3KEUMYLDfmpCza4iQFY6jHVXDp/mVwLa2iLTv Ad+TUcSeanYAouSBkE59guUXwp8Gz4uYhgROPYd41cnrM9prjpkZ6/sLcLnIJ8IH ede7PpW6rbXsCHLfpeHyrBa6UAWyhNCnhakiPmilN/mrfv1Og8K5Jw1LOTodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4hSDmfQaiXbVpYQ6TkS66F8g3kwHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmMcwsYizz/so2Gw7yaaXSa0uCSx3Fcx0Cr OhWz0Rc4Z16Q2oepa+zUzM4mAH/6gs9wHhllHurdBzjT1uAVuTI4d952pwxuapR6 h92FJNTuF1vT07et3fIGvHy6icVp56YVaMeUh6+kIBakLvtNg51v9UiocmKgIhx0 XFfxf1QaaRNlyVH+YYk5IaUnX2T4E/XhN6/UAc/Amus0DFhfpBWj7kJbsIJGzr1A wY9Mm7Ra2AoAa6NEoUqczTpUEiZWsNbd8JzRTX4SvarDsQ93Kb5O0e19QmhKUEw+ s6GGKNdFg5Sh79Yb+mQUqvmAWmhLnTwWmSY1DP+xDYSv/rzcEtg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:08:40 2025 by rpki-client