$ rpki-client -vvf repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft File: 461B039429CF609C76235D70C58DE1D0AB6EA915.mft (raw, json) Hash identifier: ALxppWbDeddkb3UGhzE1Xy+Ya6MaTK55AQeWwcGnYM0= Subject key identifier: C5:EE:B3:6D:FE:7D:5A:55:93:DB:E3:97:36:D9:42:29:43:5A:AA:EE Authority key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 Certificate issuer: /CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Certificate serial: 166224EBF9E29DB4CB90E38A02CD89CE00FFF29F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft Manifest number: DD Signing time: Tue 22 Jul 2025 04:01:29 +0000 Manifest this update: Tue 22 Jul 2025 03:56:29 +0000 Manifest next update: Fri 25 Jul 2025 09:25:29 +0000 Files and hashes: 1: 461B039429CF609C76235D70C58DE1D0AB6EA915.crl (hash: Cj9KG7RI4Y5mbYlOTqmUk7AmstDYoNoILOW0kkK5s5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 09:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:62:24:eb:f9:e2:9d:b4:cb:90:e3:8a:02:cd:89:ce:00:ff:f2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Validity Not Before: Jul 22 03:56:29 2025 GMT Not After : Jul 25 09:25:29 2025 GMT Subject: CN=C5EEB36DFE7D5A5593DBE39736D94229435AAAEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:97:e9:c4:a0:4a:04:53:1b:b9:1b:b7:44: 5b:da:04:c4:2a:2c:e4:9e:b4:0d:7b:b6:3b:36:45: c4:ba:c4:e3:34:1a:de:4a:36:9b:b4:b7:9c:50:c9: 0c:27:0e:cf:6e:26:fb:4b:dc:ec:db:f2:7e:a6:be: 7f:ae:21:e6:5b:43:7e:a9:74:1f:fd:c5:2f:e0:b7: 5f:5e:cd:43:27:c3:49:cd:bc:74:03:f9:29:a6:65: 1a:45:b5:f9:9e:78:c2:31:cb:80:e1:97:d5:64:c5: ee:25:4e:0a:bf:04:26:4c:e5:ab:d3:04:e8:3e:b6: 36:4c:10:63:1e:4d:8e:eb:5c:93:21:9c:4a:ff:31: 62:62:f1:3a:89:f6:de:92:b2:89:23:62:26:f0:89: 01:73:6e:96:38:7a:bd:de:d5:1f:b9:42:45:2a:cc: ea:dc:3b:86:3e:b4:e7:17:2d:e8:16:e3:ed:b0:d7: 5e:60:78:0a:f3:6c:b8:63:c4:ae:cc:41:d5:77:16: de:c6:de:c7:30:80:0a:8f:21:81:e9:44:23:83:e0: 2c:99:51:fb:0f:0d:29:f3:d5:08:e6:cf:2a:d9:a5: 28:6d:80:a2:ef:d2:18:23:0c:9c:a7:d6:fa:6e:51: 9d:bc:1b:44:e4:dc:21:43:62:81:08:2a:56:b5:12: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EE:B3:6D:FE:7D:5A:55:93:DB:E3:97:36:D9:42:29:43:5A:AA:EE X509v3 Authority Key Identifier: keyid:46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:72:c0:1d:f8:7f:8e:7c:45:2b:04:15:4a:f2:f6:6f:d8:30: 26:3b:1d:fe:ac:f0:ad:ff:79:ac:27:af:3c:d0:7c:05:49:2b: 57:33:42:b9:4a:7a:4d:7f:4e:15:87:a6:fd:34:21:42:ee:4d: a1:21:6b:21:c4:58:10:f6:b2:a7:b0:35:94:78:6d:40:3a:66: 8e:88:b6:33:41:10:82:a6:8c:f0:3d:fd:5e:64:73:ce:fb:06: d8:3e:a7:50:d3:bc:6f:03:41:51:bb:36:0f:69:6b:63:9b:02: c7:f4:70:ab:23:db:b1:51:71:ee:e7:46:d4:fe:dd:57:44:a6: 58:f1:cf:bc:4c:cc:1d:e9:74:22:7f:9f:46:4d:dc:a6:0e:89: a0:1b:f3:31:f3:b3:78:1c:23:f3:b3:39:90:a6:dd:7d:87:77: 62:b7:d8:18:96:54:c0:c5:3f:68:cb:dd:d9:75:7a:3e:af:10: 5c:dc:84:e1:12:79:17:1d:aa:34:2a:4f:8a:c9:11:c1:4c:35: af:ca:fb:ea:e5:da:c0:ea:4d:ba:38:99:fe:38:5e:7a:4c:5a: c0:51:1e:7a:7a:fc:5a:82:df:8a:4e:a5:3e:6f:05:77:ad:bf: be:0f:a6:61:b9:97:80:97:df:2a:ce:a8:9c:92:be:f7:80:f3: bd:11:55:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmIk6/ninbTLkOOKAs2JzgD/8p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBB QjZFQTkxNTAeFw0yNTA3MjIwMzU2MjlaFw0yNTA3MjUwOTI1MjlaMDMxMTAvBgNV BAMTKEM1RUVCMzZERkU3RDVBNTU5M0RCRTM5NzM2RDk0MjI5NDM1QUFBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTo5fpxKBKBFMbuRu3RFvaBMQq LOSetA17tjs2RcS6xOM0Gt5KNpu0t5xQyQwnDs9uJvtL3Ozb8n6mvn+uIeZbQ36p dB/9xS/gt19ezUMnw0nNvHQD+SmmZRpFtfmeeMIxy4Dhl9Vkxe4lTgq/BCZM5avT BOg+tjZMEGMeTY7rXJMhnEr/MWJi8TqJ9t6SsokjYibwiQFzbpY4er3e1R+5QkUq zOrcO4Y+tOcXLegW4+2w115geArzbLhjxK7MQdV3Ft7G3scwgAqPIYHpRCOD4CyZ UfsPDSnz1QjmzyrZpShtgKLv0hgjDJyn1vpuUZ28G0Tk3CFDYoEIKla1EujBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxe6zbf59WlWT2+OXNtlCKUNaqu4wHwYDVR0j BBgwFoAURhsDlCnPYJx2I11wxY3h0KtuqRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDI3ZmEwMi1lNDlmLTQyMTUtODYyYi03ZmFhZWZkOGFiM2UvMC80NjFCMDM5NDI5 Q0Y2MDlDNzYyMzVENzBDNThERTFEMEFCNkVBOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBBQjZF QTkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUx RDBBQjZFQTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtywB34f458RSsEFUry9m/YMCY7Hf6s8K3/ eawnrzzQfAVJK1czQrlKek1/ThWHpv00IULuTaEhayHEWBD2sqewNZR4bUA6Zo6I tjNBEIKmjPA9/V5kc877Btg+p1DTvG8DQVG7Ng9pa2ObAsf0cKsj27FRce7nRtT+ 3VdEpljxz7xMzB3pdCJ/n0ZN3KYOiaAb8zHzs3gcI/OzOZCm3X2Hd2K32BiWVMDF P2jL3dl1ej6vEFzchOESeRcdqjQqT4rJEcFMNa/K++rl2sDqTbo4mf44XnpMWsBR Hnp6/FqC34pOpT5vBXetv74PpmG5l4CX3yrOqJySvveA870RVUo= -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:47 2025 by rpki-client