$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: nTKWxpjHmjtd72zBgX3DCoSw2pm65wtYp1K95/PeiPg= Subject key identifier: 81:DA:60:F8:0A:9A:B6:FC:6D:25:22:26:18:4B:40:EE:D3:36:7B:85 Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: BF846B88A914DBFED7E6BA24A77B46072AED4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 0272 Signing time: Mon 21 Jul 2025 07:41:03 +0000 Manifest this update: Mon 21 Jul 2025 07:36:03 +0000 Manifest next update: Thu 24 Jul 2025 13:47:03 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: EO/gsmcz8zN47S1J7gLgsCfjndafFR1EWOUaHY1X670=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 13:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: bf:84:6b:88:a9:14:db:fe:d7:e6:ba:24:a7:7b:46:07:2a:ed:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: Jul 21 07:36:03 2025 GMT Not After : Jul 24 13:47:03 2025 GMT Subject: CN=81DA60F80A9AB6FC6D252226184B40EED3367B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ea:22:14:32:c6:b7:42:a2:71:93:ac:dc:fd: 94:09:3e:0f:7e:df:37:d1:7a:75:5e:6f:7a:e4:db: 39:32:1b:ef:8d:06:d1:ae:82:02:b6:df:8f:84:f1: 68:dd:f7:c2:eb:d4:fc:a4:e9:b9:45:aa:65:46:d7: 0e:b1:fd:9e:4a:98:22:24:b9:12:03:72:ee:af:8b: a8:c6:00:c8:58:43:6b:7b:2c:a1:4b:a3:bc:b2:0a: 75:84:a5:32:59:07:c6:56:b4:48:6a:e8:1f:50:0b: 91:c7:f9:27:0e:cd:2c:08:b6:5a:61:b7:07:3e:01: cf:97:d5:21:2d:84:1c:e2:19:6d:c8:32:df:cb:75: 9e:25:c3:cb:65:44:af:6f:0b:cd:6b:be:b4:18:6a: aa:ca:3d:ad:0c:9b:0c:e8:be:fb:f5:38:f9:b9:b4: e2:16:ec:66:d4:03:ad:d4:12:b6:de:4f:aa:e4:74: be:62:37:f0:c7:6b:c7:1a:96:1c:31:20:d6:d5:ad: 77:e3:a9:89:68:ae:13:c0:b3:58:a3:2a:dc:a1:50: c5:e7:66:c6:da:b0:9e:59:3b:68:bf:37:15:60:3d: e5:be:fd:f7:69:74:49:31:ab:a7:0b:0c:69:ad:99: 6f:e0:65:be:98:5a:f9:24:18:d5:03:6f:2f:3d:3b: fe:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DA:60:F8:0A:9A:B6:FC:6D:25:22:26:18:4B:40:EE:D3:36:7B:85 X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:62:88:9e:aa:b3:58:c9:e9:d0:ef:6c:66:4a:e9:fb:9f:16: ee:11:53:5e:79:00:78:74:ea:4a:ee:64:03:b8:bb:f6:df:ba: 55:f5:8f:63:60:5a:f7:04:b3:97:a5:75:b9:44:ef:44:36:da: 2d:56:d3:d7:11:87:28:d0:54:36:25:f6:c5:9d:fa:65:85:d1: c4:9d:e2:1a:88:26:89:f7:66:88:cb:96:e4:85:2f:cf:37:4d: 1b:d3:dd:e9:24:d9:36:b0:d2:28:fe:06:86:69:ba:9d:11:51: 2a:15:e0:56:18:55:98:e6:6f:51:8b:1e:36:0b:5c:d5:e1:d8: ef:89:47:53:2d:19:df:a9:6b:c7:11:a3:e2:45:6a:15:27:c9: bd:7c:f6:ee:9e:7b:c9:95:f9:07:8f:e8:27:f4:3c:df:98:1c: f9:51:9d:75:89:4f:ef:18:13:f4:3b:3c:6c:5d:51:b3:8d:a4: c2:51:ce:6e:d8:0c:8f:73:20:94:46:ee:d3:37:23:19:f7:94: f7:bf:0b:e0:9a:9e:74:38:6b:8f:b5:70:78:7a:90:95:b8:ae: d6:fa:1e:79:f0:89:cb:3c:16:12:2b:22:62:10:84:31:34:73: ce:4a:79:79:7e:43:15:6a:18:75:a8:75:53:ac:5d:27:70:65: 5a:4a:fe:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAL+Ea4ipFNv+1+a6JKd7Rgcq7UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNTA3MjEwNzM2MDNaFw0yNTA3MjQxMzQ3MDNaMDMxMTAvBgNV BAMTKDgxREE2MEY4MEE5QUI2RkM2RDI1MjIyNjE4NEI0MEVFRDMzNjdCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC06iIUMsa3QqJxk6zc/ZQJPg9+ 3zfRenVeb3rk2zkyG++NBtGuggK234+E8Wjd98Lr1Pyk6blFqmVG1w6x/Z5KmCIk uRIDcu6vi6jGAMhYQ2t7LKFLo7yyCnWEpTJZB8ZWtEhq6B9QC5HH+ScOzSwItlph twc+Ac+X1SEthBziGW3IMt/LdZ4lw8tlRK9vC81rvrQYaqrKPa0Mmwzovvv1OPm5 tOIW7GbUA63UErbeT6rkdL5iN/DHa8calhwxINbVrXfjqYlorhPAs1ijKtyhUMXn ZsbasJ5ZO2i/NxVgPeW+/fdpdEkxq6cLDGmtmW/gZb6YWvkkGNUDby89O/6nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgdpg+AqatvxtJSImGEtA7tM2e4UwHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFiiJ6qs1jJ6dDvbGZK6fufFu4RU155AHh0 6kruZAO4u/bfulX1j2NgWvcEs5eldblE70Q22i1W09cRhyjQVDYl9sWd+mWF0cSd 4hqIJon3ZojLluSFL883TRvT3ekk2Taw0ij+BoZpup0RUSoV4FYYVZjmb1GLHjYL XNXh2O+JR1MtGd+pa8cRo+JFahUnyb189u6ee8mV+QeP6Cf0PN+YHPlRnXWJT+8Y E/Q7PGxdUbONpMJRzm7YDI9zIJRG7tM3Ixn3lPe/C+CannQ4a4+1cHh6kJW4rtb6 Hnnwics8FhIrImIQhDE0c85KeXl+QxVqGHWodVOsXSdwZVpK/u0= -----END CERTIFICATE-----Generated at Tue Jul 22 11:56:43 2025 by rpki-client