$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: 8yHkTNauNITKQzlGu86ubYokvvlRIEWpRGDP0TCSv0g= Subject key identifier: B5:0C:39:E7:99:EB:63:0A:48:62:FB:F3:DA:08:D1:C5:57:92:49:47 Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 2762C2711E03F72F2F5564F2720CDC4B45DF3498 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 0206 Signing time: Sat 06 Sep 2025 04:11:06 +0000 Manifest this update: Sat 06 Sep 2025 04:06:06 +0000 Manifest next update: Tue 09 Sep 2025 06:46:06 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: okhF2hu6oN7ZijLOG678w9Q7LQl9OUSWziyWqY+NAW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:62:c2:71:1e:03:f7:2f:2f:55:64:f2:72:0c:dc:4b:45:df:34:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Sep 6 04:06:06 2025 GMT Not After : Sep 9 06:46:06 2025 GMT Subject: CN=B50C39E799EB630A4862FBF3DA08D1C557924947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:44:de:58:04:94:24:b3:4e:e2:f6:16:05: 26:3f:8b:f8:61:e3:de:5d:ec:d8:5a:0a:de:36:68: 84:f6:26:44:bc:45:6e:e6:26:ec:6d:0e:08:72:1a: 3f:0c:a8:4c:66:9e:92:e2:75:b0:d7:92:40:d6:fa: e6:e7:e5:78:f5:03:5f:6c:e1:92:c4:bf:d3:14:b4: aa:8b:22:05:db:6c:48:8a:11:7e:22:3a:b7:c8:97: 10:d9:1c:5e:9c:0a:0f:36:36:8b:53:00:2b:05:bf: db:22:63:a4:c4:70:f6:3d:0a:19:13:c7:54:bd:aa: e0:ed:df:57:cc:a4:11:a7:20:a0:03:81:f2:b0:d0: e1:fd:f8:21:51:06:ce:6f:95:c4:92:52:66:ca:d8: 56:c0:5e:61:b6:4b:1f:5b:d5:36:cc:57:0e:f7:f5: 03:59:6e:5b:fb:f0:92:27:ef:66:0d:be:93:bc:2d: fa:8e:3f:8a:bb:1f:48:19:af:b1:c9:1c:19:ed:58: 7a:11:2f:cf:70:ca:a2:11:c7:46:d5:3a:6c:15:2b: 4e:be:8a:8f:1b:1f:6f:db:7d:6e:74:b3:08:62:93: bd:ed:db:b7:2e:28:5c:e3:1d:6e:7b:4c:91:46:25: 57:57:f1:51:1b:ca:83:48:00:02:d6:73:a8:90:55: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0C:39:E7:99:EB:63:0A:48:62:FB:F3:DA:08:D1:C5:57:92:49:47 X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:48:2c:3e:3f:c7:ed:af:96:9c:8a:fb:d0:72:6b:6e:a3:84: 3f:55:fe:d7:a6:6e:22:27:9e:ad:eb:c3:0b:d4:32:29:4b:23: 3d:ff:66:ba:56:10:83:c3:51:1a:4d:c3:be:1c:45:c3:69:6e: f3:0c:45:d1:fd:43:a1:fc:68:94:78:b0:94:35:56:93:a7:37: 0d:34:91:67:f3:f6:ad:bd:55:62:4a:18:bf:74:39:0b:0e:84: a3:b1:45:5c:26:a0:1a:aa:b7:32:34:e2:6a:92:1d:ee:cb:bc: 3b:cd:cb:89:f0:a0:69:44:a2:52:cd:25:c6:63:da:55:f5:9f: 5d:7b:97:9d:52:5e:3e:44:5b:04:cd:c2:94:8d:1f:4b:31:6c: d1:da:17:01:77:c1:01:f7:6c:80:9d:14:5d:73:2d:34:53:7e: 67:d2:f6:1e:71:fe:c4:29:8b:24:94:4d:3d:35:8a:5a:a6:d8: e0:ec:a2:e7:82:a8:91:ec:22:75:1b:77:8f:9b:64:ca:f6:b4: d0:3a:5d:3a:b4:e1:5c:c1:b1:57:12:f4:7b:3f:e8:1b:18:f5: a5:61:51:db:99:86:83:a4:e3:93:71:dc:ec:fa:2b:62:f0:f8: df:69:e9:d5:27:82:a6:26:29:e8:7b:32:9f:2e:55:28:5b:26: fd:b2:5a:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2LCcR4D9y8vVWTycgzcS0XfNJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNTA5MDYwNDA2MDZaFw0yNTA5MDkwNjQ2MDZaMDMxMTAvBgNV BAMTKEI1MEMzOUU3OTlFQjYzMEE0ODYyRkJGM0RBMDhEMUM1NTc5MjQ5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+kTeWASUJLNO4vYWBSY/i/hh 495d7NhaCt42aIT2JkS8RW7mJuxtDghyGj8MqExmnpLidbDXkkDW+ubn5Xj1A19s 4ZLEv9MUtKqLIgXbbEiKEX4iOrfIlxDZHF6cCg82NotTACsFv9siY6TEcPY9ChkT x1S9quDt31fMpBGnIKADgfKw0OH9+CFRBs5vlcSSUmbK2FbAXmG2Sx9b1TbMVw73 9QNZblv78JIn72YNvpO8LfqOP4q7H0gZr7HJHBntWHoRL89wyqIRx0bVOmwVK06+ io8bH2/bfW50swhik73t27cuKFzjHW57TJFGJVdX8VEbyoNIAALWc6iQVS6HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtQw555nrYwpIYvvz2gjRxVeSSUcwHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJILD4/x+2vlpyK+9Bya26jhD9V/tembiIn nq3rwwvUMilLIz3/ZrpWEIPDURpNw74cRcNpbvMMRdH9Q6H8aJR4sJQ1VpOnNw00 kWfz9q29VWJKGL90OQsOhKOxRVwmoBqqtzI04mqSHe7LvDvNy4nwoGlEolLNJcZj 2lX1n117l51SXj5EWwTNwpSNH0sxbNHaFwF3wQH3bICdFF1zLTRTfmfS9h5x/sQp iySUTT01ilqm2ODsoueCqJHsInUbd4+bZMr2tNA6XTq04VzBsVcS9Hs/6BsY9aVh UduZhoOk45Nx3Oz6K2Lw+N9p6dUngqYmKeh7Mp8uVShbJv2yWhU= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:47 2025 by rpki-client