$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: /jc+3e57VBaMHv7QbfYA59S8T6sKUzBPd7hXqpUMXEE= Subject key identifier: 8E:37:82:F4:D9:C0:8D:D3:C0:FE:1F:1B:BB:E3:98:9A:35:DB:12:60 Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 5543E67CBEBA9DF606AA3F77004E660A1D38C1AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 020F Signing time: Tue 04 Nov 2025 03:51:29 +0000 Manifest this update: Tue 04 Nov 2025 03:46:29 +0000 Manifest next update: Fri 07 Nov 2025 09:47:29 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: g6W3hd8IK2sFlbYHHu1J0/DzCeQ+y2AUZ5PoOWG03n8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:43:e6:7c:be:ba:9d:f6:06:aa:3f:77:00:4e:66:0a:1d:38:c1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Nov 4 03:46:29 2025 GMT Not After : Nov 7 09:47:29 2025 GMT Subject: CN=8E3782F4D9C08DD3C0FE1F1BBBE3989A35DB1260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:66:40:4b:9b:96:2d:47:ec:c9:36:44:ab: 4d:36:ba:42:00:d3:37:f9:c1:e2:e8:74:2e:d2:ff: 25:89:d8:de:13:00:66:e9:dc:f1:10:6b:2d:13:21: a1:8a:b1:6b:78:f4:5d:80:59:93:e3:a9:ca:ed:2f: 98:df:b2:fb:8c:99:5a:5b:02:51:5f:e8:17:e5:35: 32:54:93:f2:d5:c0:39:8b:37:6f:f0:ef:67:52:3f: 54:55:04:51:5a:30:b9:30:1b:17:10:f1:24:61:86: d3:24:e9:43:c3:ab:65:4d:74:33:10:54:88:a2:62: ae:57:54:59:f0:8a:ed:c0:9e:7b:7c:81:be:4b:24: a0:54:a1:cc:86:26:e1:98:7c:96:1e:5e:e4:ae:38: 60:49:99:45:0d:58:26:d8:c0:d1:ff:8b:03:d4:87: 94:46:0c:45:c7:bc:f7:91:04:7b:7e:3f:4c:b1:66: 7d:35:51:36:90:89:ab:f3:a0:8f:0c:ed:4f:48:6f: 98:52:33:b1:58:b0:cd:67:84:c8:47:11:58:fa:d2: d7:c6:2e:26:cf:7c:c7:24:19:85:fb:99:30:b1:b7: 9b:7b:92:72:50:3f:e2:0a:37:72:63:a5:af:a9:fe: 09:9c:32:c0:64:97:2c:71:97:79:0c:76:17:3a:ad: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:37:82:F4:D9:C0:8D:D3:C0:FE:1F:1B:BB:E3:98:9A:35:DB:12:60 X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:69:0e:60:9c:4f:e0:80:ce:50:ca:45:51:a0:70:fe:b3:3c: 48:19:04:9c:22:0c:d3:4e:2c:3c:23:c3:ae:85:a4:dd:37:98: 1b:a0:08:38:a1:7d:ab:ef:1e:e7:80:73:18:ae:20:54:e1:21: 0d:57:f1:07:bb:75:3b:40:de:97:14:26:ed:80:fe:c3:d0:1b: 84:27:1b:4b:ae:16:2e:48:3e:17:86:37:22:2e:79:bb:fa:d7: fa:28:c8:b4:74:de:f4:c2:20:e9:53:7b:7b:3d:ab:3b:70:2f: 5d:46:36:46:24:d9:9a:e0:cd:fb:d7:82:c1:05:53:bb:24:d8: d7:28:c8:b0:54:25:e8:5c:d6:73:d2:ba:5d:42:d9:72:9c:b5: 80:0c:cf:88:c1:ef:84:fe:f8:db:49:f8:e7:e4:5a:08:92:08: 83:39:1b:de:e0:c6:dc:bb:06:71:ad:4b:dd:98:a0:db:78:8b: d1:aa:a2:45:d8:c1:e1:e7:6e:01:79:72:16:c3:a2:b3:ae:a7: dc:21:ec:d6:22:6b:2e:79:17:52:91:68:fc:22:ea:e6:6c:89: 29:c4:8a:b9:81:ad:ac:52:7a:ad:d4:b1:8e:f3:ae:b3:9a:03: e1:18:17:46:f7:05:2c:5f:95:d8:a8:aa:4b:19:e1:26:2b:5b: a6:db:23:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUPmfL66nfYGqj93AE5mCh04waswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNTExMDQwMzQ2MjlaFw0yNTExMDcwOTQ3MjlaMDMxMTAvBgNV BAMTKDhFMzc4MkY0RDlDMDhERDNDMEZFMUYxQkJCRTM5ODlBMzVEQjEyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGDWZAS5uWLUfsyTZEq002ukIA 0zf5weLodC7S/yWJ2N4TAGbp3PEQay0TIaGKsWt49F2AWZPjqcrtL5jfsvuMmVpb AlFf6BflNTJUk/LVwDmLN2/w72dSP1RVBFFaMLkwGxcQ8SRhhtMk6UPDq2VNdDMQ VIiiYq5XVFnwiu3Annt8gb5LJKBUocyGJuGYfJYeXuSuOGBJmUUNWCbYwNH/iwPU h5RGDEXHvPeRBHt+P0yxZn01UTaQiavzoI8M7U9Ib5hSM7FYsM1nhMhHEVj60tfG LibPfMckGYX7mTCxt5t7knJQP+IKN3Jjpa+p/gmcMsBklyxxl3kMdhc6rVxnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjjeC9NnAjdPA/h8bu+OYmjXbEmAwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBpDmCcT+CAzlDKRVGgcP6zPEgZBJwiDNNO LDwjw66FpN03mBugCDihfavvHueAcxiuIFThIQ1X8Qe7dTtA3pcUJu2A/sPQG4Qn G0uuFi5IPheGNyIuebv61/ooyLR03vTCIOlTe3s9qztwL11GNkYk2ZrgzfvXgsEF U7sk2NcoyLBUJehc1nPSul1C2XKctYAMz4jB74T++NtJ+OfkWgiSCIM5G97gxty7 BnGtS92YoNt4i9GqokXYweHnbgF5chbDorOup9wh7NYiay55F1KRaPwi6uZsiSnE irmBraxSeq3UsY7zrrOaA+EYF0b3BSxfldioqksZ4SYrW6bbI8M= -----END CERTIFICATE-----Generated at Tue Nov 4 16:46:44 2025 by rpki-client