$ rpki-client -vvf repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft File: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft (raw, json) Hash identifier: U+JNuCynz0Agcp8EKGvJVpvyZ6v2se2QFvwuYxSQIYo= Subject key identifier: 8E:31:09:E7:28:B2:15:C1:A7:6F:91:44:AD:90:E7:50:FE:81:15:EA Authority key identifier: B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A Certificate issuer: /CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Certificate serial: 1955C27068B7C28AFC256675A869E5CF44CC8411 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft Manifest number: 39 Signing time: Mon 21 Jul 2025 16:51:33 +0000 Manifest this update: Mon 21 Jul 2025 16:46:33 +0000 Manifest next update: Thu 24 Jul 2025 21:13:33 +0000 Files and hashes: 1: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl (hash: 40lc8g9VXSHUhSenGbYjUqV8Cy6HiwuXpGvNM52H28k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 21:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:55:c2:70:68:b7:c2:8a:fc:25:66:75:a8:69:e5:cf:44:cc:84:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Validity Not Before: Jul 21 16:46:33 2025 GMT Not After : Jul 24 21:13:33 2025 GMT Subject: CN=8E3109E728B215C1A76F9144AD90E750FE8115EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:b5:bd:3e:4c:d3:b6:fe:fc:2d:41:fc:cd: cc:87:9c:14:33:f0:e8:84:5f:4b:fa:80:82:3f:4d: 42:b4:6b:58:5b:b2:92:f8:0a:5b:99:cb:31:b8:ec: 2b:7f:85:a3:89:d0:08:56:63:ab:ec:d2:8c:77:a7: 3c:6b:0e:98:1c:b2:03:8b:82:c3:0e:14:12:b4:21: 05:f0:9a:07:8f:e2:ee:0f:3b:f8:93:23:e4:d6:ed: 85:1d:76:7f:79:74:2b:8d:05:60:24:af:3b:8e:71: 62:dc:31:b4:92:4b:c1:dd:37:22:5c:42:5a:89:64: 54:1b:17:79:5d:05:3b:6f:45:7f:f0:b9:c8:c7:c9: 99:78:2e:21:a8:b2:62:21:95:44:7b:76:28:a7:76: f3:40:c4:a2:3b:86:c5:97:43:b4:e9:a2:cb:13:29: eb:33:a6:82:17:44:c5:44:1e:fd:34:9c:83:a7:fe: 20:75:7c:93:e6:a5:65:52:89:44:d1:13:ec:82:42: c5:11:03:8c:a2:d7:ae:25:c8:fe:d6:7c:93:ff:6a: 0a:e6:92:6c:47:7c:ea:d1:d8:18:b9:ed:00:e8:8a: 15:86:90:b5:08:10:53:be:30:c3:35:10:35:d5:d1: f3:bd:97:b1:3a:9e:dc:b0:ef:08:6e:09:b0:f0:70: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:31:09:E7:28:B2:15:C1:A7:6F:91:44:AD:90:E7:50:FE:81:15:EA X509v3 Authority Key Identifier: keyid:B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:14:b9:f6:82:ee:1b:93:3c:bf:15:31:b9:11:31:fa:94:54: 42:b8:ab:1b:bc:a8:75:6d:77:2d:2f:e9:b4:46:32:4e:bf:e5: a7:d2:4f:9d:ae:6b:1a:13:57:b3:ea:94:66:68:5e:da:f7:de: 2a:78:f1:45:8e:14:a9:bb:27:de:5c:62:5a:85:3e:ff:29:70: dc:f6:6d:d3:d8:e3:d6:bf:5e:d3:68:20:db:5f:77:91:b4:0e: dd:71:7b:ee:e3:7a:ee:f7:ea:99:fd:0d:43:3a:db:27:83:41: e9:40:80:0f:6a:58:60:07:c5:e3:29:43:bc:d3:53:16:40:c2: 4a:21:2f:32:91:cc:f9:01:e5:39:49:61:f6:4f:22:5e:3e:8c: 5c:08:00:fb:be:29:a2:00:0b:75:2a:a9:68:94:e2:c2:91:c7: 49:ee:2a:39:2f:af:10:1c:2f:7f:1e:67:03:66:7e:6e:3d:43: 03:b3:c5:67:fd:0f:ca:94:a8:ff:3d:e7:6e:37:32:94:5d:2d: bf:58:40:21:9f:d5:01:33:27:0f:db:f0:9d:c4:35:18:36:c0: 8f:1b:7a:0f:e5:73:be:9b:41:57:cf:c0:a4:19:75:7c:27:39: 9c:bb:5a:81:07:ea:b5:9c:74:84:9c:2a:9f:9d:eb:38:d1:cd: ce:01:e7:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGVXCcGi3wor8JWZ1qGnlz0TMhBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1 M0E3RkI3QTAeFw0yNTA3MjExNjQ2MzNaFw0yNTA3MjQyMTEzMzNaMDMxMTAvBgNV BAMTKDhFMzEwOUU3MjhCMjE1QzFBNzZGOTE0NEFEOTBFNzUwRkU4MTE1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXwbW9PkzTtv78LUH8zcyHnBQz 8OiEX0v6gII/TUK0a1hbspL4CluZyzG47Ct/haOJ0AhWY6vs0ox3pzxrDpgcsgOL gsMOFBK0IQXwmgeP4u4PO/iTI+TW7YUddn95dCuNBWAkrzuOcWLcMbSSS8HdNyJc QlqJZFQbF3ldBTtvRX/wucjHyZl4LiGosmIhlUR7diindvNAxKI7hsWXQ7TpossT KeszpoIXRMVEHv00nIOn/iB1fJPmpWVSiUTRE+yCQsURA4yi164lyP7WfJP/agrm kmxHfOrR2Bi57QDoihWGkLUIEFO+MMM1EDXV0fO9l7E6ntyw7whuCbDwcEOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjjEJ5yiyFcGnb5FErZDnUP6BFeowHwYDVR0j BBgwFoAUtEFUYbbvcNPUqB7WiPJJfVOn+3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjMzMGQwNi1mOTJkLTQ5NWItOWJhMC1hY2RkODE3YjE0ODMvMC9CNDQxNTQ2MUI2 RUY3MEQzRDRBODFFRDY4OEYyNDk3RDUzQTdGQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1M0E3 RkI3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5 N0Q1M0E3RkI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEUufaC7huTPL8VMbkRMfqUVEK4qxu8qHVt dy0v6bRGMk6/5afST52uaxoTV7PqlGZoXtr33ip48UWOFKm7J95cYlqFPv8pcNz2 bdPY49a/XtNoINtfd5G0Dt1xe+7jeu736pn9DUM62yeDQelAgA9qWGAHxeMpQ7zT UxZAwkohLzKRzPkB5TlJYfZPIl4+jFwIAPu+KaIAC3UqqWiU4sKRx0nuKjkvrxAc L38eZwNmfm49QwOzxWf9D8qUqP895243MpRdLb9YQCGf1QEzJw/b8J3ENRg2wI8b eg/lc76bQVfPwKQZdXwnOZy7WoEH6rWcdIScKp+d6zjRzc4B5yg= -----END CERTIFICATE-----Generated at Wed Jul 23 02:20:05 2025 by rpki-client