$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: 9hfGXuSslgcUYSyi8BlZ8ew0kiMaGJ9ZkfEI4Z+uLpI= Subject key identifier: FC:E2:30:CE:30:A0:2F:81:9E:15:4C:5F:76:BD:3E:3B:97:54:75:A1 Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 6B8D2691A3A972041DDCF5838ADF26EBA551AAA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 0504 Signing time: Sat 06 Sep 2025 11:21:44 +0000 Manifest this update: Sat 06 Sep 2025 11:16:44 +0000 Manifest next update: Tue 09 Sep 2025 12:09:44 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: N3dHWS4iuXFGX5JvUyi7vU54zDVxScVhWdNUYYWx0lc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 12:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8d:26:91:a3:a9:72:04:1d:dc:f5:83:8a:df:26:eb:a5:51:aa:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Sep 6 11:16:44 2025 GMT Not After : Sep 9 12:09:44 2025 GMT Subject: CN=FCE230CE30A02F819E154C5F76BD3E3B975475A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:43:a1:97:7a:dd:a9:bf:b7:7e:5b:3b:f1:87: cf:0b:87:90:d2:b1:c0:ef:8f:b4:08:e4:47:25:88: b9:45:80:9d:f1:27:16:3a:10:10:04:d9:18:ef:52: dd:bc:c3:f6:1c:4f:a0:45:70:49:0c:45:e5:90:e9: ee:4e:da:c8:56:9a:88:aa:d8:4a:8b:cc:6d:0a:c8: 5a:98:dd:bb:3d:aa:e2:24:ce:73:5c:3e:e6:b1:14: 86:70:6a:2e:24:6a:51:0e:b6:b6:4b:3d:7d:02:3e: 00:6d:1c:1d:67:81:03:cd:75:75:e3:ce:69:f8:dc: be:08:a9:56:fe:13:4d:6d:40:da:1a:ef:fa:3e:e3: 83:2a:78:c4:e2:fa:3a:06:e8:a4:ab:c3:0a:35:40: 95:62:94:1a:5b:36:fd:e4:86:30:ad:0d:b5:f2:ba: 60:9d:49:86:98:d8:00:ed:3d:18:0b:42:d7:94:52: ee:ac:47:cc:06:a4:26:2a:d7:a1:e6:a1:de:99:18: dc:b2:86:2c:4e:bd:fe:6c:23:47:50:14:26:36:59: 53:b6:a5:b7:cc:f0:a8:b7:e9:73:a2:14:34:a6:33: 51:8e:a4:54:c2:33:70:e4:1a:40:46:10:83:d6:b7: de:ac:34:a7:74:81:4a:91:1c:0a:51:7c:38:9d:a1: d1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E2:30:CE:30:A0:2F:81:9E:15:4C:5F:76:BD:3E:3B:97:54:75:A1 X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:70:3c:cc:49:3c:00:d5:19:c2:ac:b3:f6:74:e6:0a:de:73: 81:ee:a2:07:0a:18:e8:09:19:0c:5c:89:47:10:9a:9e:2e:ee: 46:1c:fd:ab:70:32:32:7e:4e:25:b2:01:ad:a2:95:93:a2:f3: cb:08:30:5a:08:09:98:26:b3:2a:fa:7a:5a:ba:6c:18:6c:cf: 41:a8:9a:82:5a:1e:46:24:a1:91:1b:45:41:d1:81:71:06:93: 9e:e2:bb:cc:d1:f3:09:15:f0:2a:98:2b:f6:11:ca:87:00:76: 5e:2a:ea:56:12:d9:a4:f0:16:48:c1:82:0c:36:b3:f6:6a:a1: b6:7a:ea:6e:bd:b7:bb:aa:d6:3f:e8:3e:75:84:8e:98:65:8b: 5c:e1:86:b5:51:19:2f:a0:ce:cb:17:83:b8:24:b7:a2:c4:ad: 40:6b:a8:f6:a7:9b:82:d0:43:8b:39:10:1c:1f:c5:73:3c:47: 3b:8b:db:6f:86:5f:fc:cf:3d:24:0b:e1:19:0f:cb:d0:18:cd: f9:2e:9c:d8:0c:f3:e3:58:b3:d2:86:6c:f4:91:56:14:93:ee: c5:eb:95:38:3f:65:75:11:be:52:7b:f7:e6:67:5c:ce:ef:1b: 1e:77:57:b3:65:a9:66:4d:95:92:ec:c6:84:cd:30:25:93:29: 6c:45:11:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa40mkaOpcgQd3PWDit8m66VRqqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNTA5MDYxMTE2NDRaFw0yNTA5MDkxMjA5NDRaMDMxMTAvBgNV BAMTKEZDRTIzMENFMzBBMDJGODE5RTE1NEM1Rjc2QkQzRTNCOTc1NDc1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQ6GXet2pv7d+Wzvxh88Lh5DS scDvj7QI5EcliLlFgJ3xJxY6EBAE2RjvUt28w/YcT6BFcEkMReWQ6e5O2shWmoiq 2EqLzG0KyFqY3bs9quIkznNcPuaxFIZwai4kalEOtrZLPX0CPgBtHB1ngQPNdXXj zmn43L4IqVb+E01tQNoa7/o+44MqeMTi+joG6KSrwwo1QJVilBpbNv3khjCtDbXy umCdSYaY2ADtPRgLQteUUu6sR8wGpCYq16Hmod6ZGNyyhixOvf5sI0dQFCY2WVO2 pbfM8Ki36XOiFDSmM1GOpFTCM3DkGkBGEIPWt96sNKd0gUqRHApRfDidodG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/OIwzjCgL4GeFUxfdr0+O5dUdaEwHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxwPMxJPADVGcKss/Z05grec4HuogcKGOgJ GQxciUcQmp4u7kYc/atwMjJ+TiWyAa2ilZOi88sIMFoICZgmsyr6elq6bBhsz0Go moJaHkYkoZEbRUHRgXEGk57iu8zR8wkV8CqYK/YRyocAdl4q6lYS2aTwFkjBggw2 s/ZqobZ66m69t7uq1j/oPnWEjphli1zhhrVRGS+gzssXg7gkt6LErUBrqPanm4LQ Q4s5EBwfxXM8RzuL22+GX/zPPSQL4RkPy9AYzfkunNgM8+NYs9KGbPSRVhST7sXr lTg/ZXURvlJ79+ZnXM7vGx53V7NlqWZNlZLsxoTNMCWTKWxFEeE= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:09 2025 by rpki-client