$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: CdGyVot2BamhA72SQv4nXKDWg6iuqwxkPD0gGBa1/2c= Subject key identifier: 00:C5:37:D6:C8:98:5E:15:F7:B0:F8:AB:7F:16:B7:FB:1A:82:1F:33 Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 226D561035D0942325F0E5B3FF75062738F1B2BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: 0126 Signing time: Fri 05 Sep 2025 00:21:52 +0000 Manifest this update: Fri 05 Sep 2025 00:16:52 +0000 Manifest next update: Mon 08 Sep 2025 07:29:52 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: AyDhfFeAk6TgEVlPGOwkB5vqFriAX912byk8TzwYLCY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6d:56:10:35:d0:94:23:25:f0:e5:b3:ff:75:06:27:38:f1:b2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Sep 5 00:16:52 2025 GMT Not After : Sep 8 07:29:52 2025 GMT Subject: CN=00C537D6C8985E15F7B0F8AB7F16B7FB1A821F33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:ca:9d:dd:92:05:bb:8a:90:6d:2a:c6:35: 39:b3:14:ea:77:20:4d:a5:7f:6f:f2:12:d1:0c:e5: fa:51:3d:57:06:ce:b3:35:4f:3d:99:43:53:8f:6b: 12:3e:ce:7a:87:bc:2e:10:7a:8f:af:d3:5c:f5:5f: 95:16:18:8a:3b:5e:37:6c:ea:ba:f8:08:f8:3a:70: 98:b5:14:e3:b9:74:db:f3:0b:42:06:49:44:1a:5a: 6f:3d:ff:22:de:e4:7b:6d:8e:73:cc:7a:57:ed:64: 0d:1e:45:55:ae:2e:f0:d1:c9:64:3c:20:e1:4f:42: d1:54:e1:86:6f:94:5b:4c:a3:c2:5b:50:5a:62:04: b6:e4:76:e1:66:10:f7:fd:a8:9f:fe:bd:9d:51:6c: 22:ff:cd:52:ed:f9:6b:1d:27:e0:44:66:4f:1a:99: 93:9e:aa:9b:1e:01:a1:0e:86:8e:e1:4a:bf:b2:ca: e5:dc:72:48:3f:7e:3b:75:27:c2:7a:00:a2:0c:f8: 5b:71:87:0f:49:2e:74:ec:09:98:20:0c:5d:e2:da: 91:e5:de:58:9b:b5:2d:97:99:1c:0e:24:85:05:ac: 41:da:7b:15:65:fd:5e:e3:d8:71:84:6e:86:de:c3: c5:f2:fb:77:92:b9:b1:b3:52:00:84:8d:cb:ed:73: ad:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C5:37:D6:C8:98:5E:15:F7:B0:F8:AB:7F:16:B7:FB:1A:82:1F:33 X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:52:ed:4f:6b:15:99:fd:03:06:c3:5d:c8:5d:64:24:1a:5d: 61:f4:a3:d0:b6:dc:00:d7:77:51:6d:c8:75:7f:7a:14:42:b5: 28:7e:62:b0:75:34:b5:97:c1:6f:aa:93:be:6f:96:f3:e3:04: 20:a5:34:26:66:0e:ba:3e:d8:e4:58:4c:c2:ba:4d:cc:3d:fe: 37:8c:32:04:9e:fa:91:24:fc:1b:90:47:40:66:fe:eb:e3:23: 4e:06:e2:01:3c:d2:d6:6e:4b:7a:e3:5f:fd:2f:4d:1c:38:52: d5:89:c5:57:df:03:b2:25:e5:64:85:28:8c:e3:9d:74:21:8d: f7:1f:04:88:fb:f5:2a:5e:8e:27:38:6d:ef:78:60:f1:82:71: c9:f9:fc:74:b1:f5:bc:b4:6d:c0:aa:cd:6c:c4:19:1f:b9:b9: f0:22:4c:0f:34:8e:b2:7a:06:6f:bc:de:6e:5c:6e:f8:62:b5: e8:29:fc:28:a6:7f:87:76:ab:69:72:9a:e1:cf:eb:98:91:98: fd:f3:b1:48:cc:63:c4:46:8a:6d:18:ef:44:24:ed:4d:f1:26: 2b:e4:3b:b0:72:d7:4f:8b:22:b3:85:65:35:fc:42:e9:ce:15: a3:4c:13:75:bc:13:8a:ce:fa:5a:28:df:d6:82:62:1a:f6:1e: 65:4f:6a:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIm1WEDXQlCMl8OWz/3UGJzjxsr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNTA5MDUwMDE2NTJaFw0yNTA5MDgwNzI5NTJaMDMxMTAvBgNV BAMTKDAwQzUzN0Q2Qzg5ODVFMTVGN0IwRjhBQjdGMTZCN0ZCMUE4MjFGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1msqd3ZIFu4qQbSrGNTmzFOp3 IE2lf2/yEtEM5fpRPVcGzrM1Tz2ZQ1OPaxI+znqHvC4Qeo+v01z1X5UWGIo7Xjds 6rr4CPg6cJi1FOO5dNvzC0IGSUQaWm89/yLe5HttjnPMelftZA0eRVWuLvDRyWQ8 IOFPQtFU4YZvlFtMo8JbUFpiBLbkduFmEPf9qJ/+vZ1RbCL/zVLt+WsdJ+BEZk8a mZOeqpseAaEOho7hSr+yyuXcckg/fjt1J8J6AKIM+Ftxhw9JLnTsCZggDF3i2pHl 3libtS2XmRwOJIUFrEHaexVl/V7j2HGEbobew8Xy+3eSubGzUgCEjcvtc62zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMU31siYXhX3sPirfxa3+xqCHzMwHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBS7U9rFZn9AwbDXchdZCQaXWH0o9C23ADX d1FtyHV/ehRCtSh+YrB1NLWXwW+qk75vlvPjBCClNCZmDro+2ORYTMK6Tcw9/jeM MgSe+pEk/BuQR0Bm/uvjI04G4gE80tZuS3rjX/0vTRw4UtWJxVffA7Il5WSFKIzj nXQhjfcfBIj79Spejic4be94YPGCccn5/HSx9by0bcCqzWzEGR+5ufAiTA80jrJ6 Bm+83m5cbvhitegp/Cimf4d2q2lymuHP65iRmP3zsUjMY8RGim0Y70Qk7U3xJivk O7By10+LIrOFZTX8QunOFaNME3W8E4rO+loo39aCYhr2HmVPaus= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:38 2025 by rpki-client