$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json) Hash identifier: qWbHNV5GRU4beT6H8UoQp493xEeWZrng+D9iEI1ytlU= Subject key identifier: A3:91:B5:1A:D9:DB:12:CE:2E:4B:E3:04:F6:6D:E6:BB:2F:D2:F8:30 Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Certificate serial: 23636650FA6FCBF65D27B52489D916129C920598 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft Manifest number: 01CC Signing time: Sun 20 Jul 2025 17:21:16 +0000 Manifest this update: Sun 20 Jul 2025 17:16:16 +0000 Manifest next update: Thu 24 Jul 2025 02:42:16 +0000 Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: allntOV9L94jyCndRUev+eo7HVP1b2ftKrg/pbiH6hI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 02:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:63:66:50:fa:6f:cb:f6:5d:27:b5:24:89:d9:16:12:9c:92:05:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Validity Not Before: Jul 20 17:16:16 2025 GMT Not After : Jul 24 02:42:16 2025 GMT Subject: CN=A391B51AD9DB12CE2E4BE304F66DE6BB2FD2F830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:e7:4b:ee:58:ae:e3:d7:b2:bb:7e:01:9a: 73:dc:b3:63:8e:07:28:ee:f5:c3:67:9b:61:6b:0b: 1e:a3:5d:2f:bf:5c:f3:63:9d:3f:86:ad:39:ec:d4: 4d:34:17:3c:cf:f1:9c:cd:1f:81:ca:46:f5:30:83: d4:90:03:54:c9:39:b0:75:62:76:18:3d:7b:78:2e: f3:54:66:fd:92:2f:05:5b:62:e7:6a:a9:a0:39:97: f0:40:4a:22:2b:37:dd:d5:af:af:36:b8:f9:39:93: 59:f5:83:09:8d:8d:84:09:e0:ce:c1:85:c1:71:06: cf:d3:fe:eb:da:e1:33:71:27:52:97:46:32:a2:f5: 3a:c5:54:31:0c:43:d5:4e:14:3c:2a:bb:a6:8e:5a: ef:38:41:c2:23:bd:a8:3b:9f:2f:66:eb:cf:b9:91: bc:5f:2f:6a:33:75:51:d7:76:19:34:4e:bd:35:3d: 58:92:e5:de:08:6c:77:5d:50:5e:e7:9f:22:be:b4: d2:32:3f:24:3d:b3:6e:fc:fd:95:25:44:32:97:c2: 9f:68:6c:eb:20:99:9e:37:07:74:ad:02:8a:9d:1e: 59:77:fc:25:1d:d6:4a:1a:0b:2c:e0:be:8b:dc:b1: c2:25:e2:b9:8a:d6:9f:80:1e:2d:d1:b5:1d:aa:a0: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:91:B5:1A:D9:DB:12:CE:2E:4B:E3:04:F6:6D:E6:BB:2F:D2:F8:30 X509v3 Authority Key Identifier: keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:40:dc:00:e5:ca:7c:92:39:4d:42:02:69:dc:6e:84:93:bf: ac:c8:f4:33:08:59:48:6c:ed:93:a6:64:cd:03:c4:33:fd:b3: 13:a3:b9:8f:3e:d3:28:d0:e3:6c:5c:6b:d7:aa:36:a3:da:f2: 6f:61:b5:10:be:5b:c3:82:40:3c:dc:5b:6f:e3:ef:b6:32:03: 0e:d7:b3:fb:ff:c0:4a:ee:99:6d:ef:58:c1:d3:db:b5:f6:a2: 09:f7:4e:84:61:ff:6d:dc:f1:d9:7f:60:b9:2a:cb:bc:77:be: 96:d1:44:19:25:e5:35:a6:27:da:e3:70:26:6f:76:19:44:a8: 2d:b8:b9:19:89:7c:05:c5:f2:a7:3f:be:0d:c7:68:bf:51:ea: 8b:90:b1:61:5c:34:7b:8c:c7:68:56:f1:0e:d3:21:af:c2:61: ec:df:5c:35:8b:73:f7:88:af:23:db:3e:79:2c:5b:47:e7:e1: 92:72:7e:58:ac:82:46:f9:3d:f2:86:49:e9:dc:de:10:f6:6b: 4a:28:c2:e0:d1:b9:a9:ff:c4:23:a4:18:f9:33:53:b8:76:e1: 02:e4:11:3d:62:83:6f:de:83:70:7f:4b:8b:02:a3:cc:5c:e7: be:7d:25:73:12:d5:27:20:dd:96:10:34:01:be:90:31:78:b2: 0c:46:f9:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2NmUPpvy/ZdJ7UkidkWEpySBZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3 OTdDNDE2NTAeFw0yNTA3MjAxNzE2MTZaFw0yNTA3MjQwMjQyMTZaMDMxMTAvBgNV BAMTKEEzOTFCNTFBRDlEQjEyQ0UyRTRCRTMwNEY2NkRFNkJCMkZEMkY4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7+dL7liu49eyu34BmnPcs2OO Byju9cNnm2FrCx6jXS+/XPNjnT+GrTns1E00FzzP8ZzNH4HKRvUwg9SQA1TJObB1 YnYYPXt4LvNUZv2SLwVbYudqqaA5l/BASiIrN93Vr682uPk5k1n1gwmNjYQJ4M7B hcFxBs/T/uva4TNxJ1KXRjKi9TrFVDEMQ9VOFDwqu6aOWu84QcIjvag7ny9m68+5 kbxfL2ozdVHXdhk0Tr01PViS5d4IbHddUF7nnyK+tNIyPyQ9s278/ZUlRDKXwp9o bOsgmZ43B3StAoqdHll3/CUd1koaCyzgvovcscIl4rmK1p+AHi3RtR2qoJ8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo5G1GtnbEs4uS+ME9m3muy/S+DAwHwYDVR0j BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4 OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVA3ADlynySOU1CAmncboSTv6zI9DMIWUhs 7ZOmZM0DxDP9sxOjuY8+0yjQ42xca9eqNqPa8m9htRC+W8OCQDzcW2/j77YyAw7X s/v/wErumW3vWMHT27X2ogn3ToRh/23c8dl/YLkqy7x3vpbRRBkl5TWmJ9rjcCZv dhlEqC24uRmJfAXF8qc/vg3HaL9R6ouQsWFcNHuMx2hW8Q7TIa/CYezfXDWLc/eI ryPbPnksW0fn4ZJyflisgkb5PfKGSenc3hD2a0oowuDRuan/xCOkGPkzU7h24QLk ET1ig2/eg3B/S4sCo8xc5759JXMS1Scg3ZYQNAG+kDF4sgxG+Vw= -----END CERTIFICATE-----Generated at Wed Jul 23 02:20:26 2025 by rpki-client