$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: T+pmc3z3307G3yVuXdT3nhxAbBZvntT87Fmuz4jIoGo= Subject key identifier: 2F:05:1B:94:E2:21:86:AC:DA:FB:1B:E7:75:6D:50:83:6C:88:E6:75 Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 5E20D97FF5CD37A0F164E3139D52DC901A56DBDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 0495 Signing time: Sun 07 Sep 2025 02:41:28 +0000 Manifest this update: Sun 07 Sep 2025 02:36:28 +0000 Manifest next update: Wed 10 Sep 2025 10:18:28 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: OFLjTR5MWqTHFn5nemthgkz0gN68YiOnMRQ0yO/O2Kw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:20:d9:7f:f5:cd:37:a0:f1:64:e3:13:9d:52:dc:90:1a:56:db:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: Sep 7 02:36:28 2025 GMT Not After : Sep 10 10:18:28 2025 GMT Subject: CN=2F051B94E22186ACDAFB1BE7756D50836C88E675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ce:1e:d9:73:1c:6c:51:6f:f9:84:16:aa:93: a8:b4:c1:82:fb:9a:a1:da:39:b4:56:bb:91:8f:98: 1f:cb:ba:5f:bc:50:c3:6b:4f:48:a5:6e:21:97:af: 89:d7:ad:57:5a:c3:b1:93:68:f2:27:e1:61:8d:3d: 69:3d:11:74:fa:f1:4f:26:c4:7f:c9:89:e8:24:1c: d8:f4:73:64:12:4d:2a:a6:aa:ae:7d:bd:c7:75:37: 0e:32:cf:5a:08:6a:86:1d:47:70:a9:c4:b7:61:dc: 88:63:e6:a1:71:b4:8f:cb:56:f2:fa:88:9b:92:36: cd:4f:18:f5:33:cc:04:1c:25:5e:88:68:da:31:9a: 3d:55:f1:d2:fc:e8:f0:68:6e:a0:76:f8:78:4c:e1: d1:bb:e0:20:1a:a3:5a:f3:6c:1c:1a:40:b4:53:11: 5f:3e:b2:a5:e2:66:18:e5:12:69:c7:fe:33:63:a8: 83:a6:93:f6:48:12:54:96:a1:7b:ad:fc:b1:d1:11: e8:e7:a7:52:84:1a:64:d7:b6:83:04:2f:d1:e5:35: 55:9f:41:b4:f1:b0:2a:71:49:77:0b:8d:57:13:d6: fd:ef:08:3a:8c:c5:cb:fb:c6:0a:d4:cd:8b:31:b5: c7:4a:cc:c1:53:8e:f3:a8:07:fb:a3:7e:be:e6:0c: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:05:1B:94:E2:21:86:AC:DA:FB:1B:E7:75:6D:50:83:6C:88:E6:75 X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:8e:a7:d1:18:52:6a:76:31:8e:a0:14:c3:ed:3e:69:be:f6: 68:b8:86:13:36:a6:c8:1b:0b:0c:cf:dd:6f:0a:b2:48:5d:67: 70:75:d4:bc:d4:49:91:ca:0b:de:56:a6:1c:9a:3b:c5:2b:c0: ef:15:af:46:5b:ff:54:f3:f3:2c:e0:6a:fd:d9:b5:3c:d8:98: 3d:51:4e:ba:b4:0a:9e:ae:d6:b1:76:1a:51:3e:fa:d8:58:70: ec:be:a4:d4:ed:1e:55:b0:c2:97:67:b5:fb:7b:48:cf:23:47: e1:13:07:bd:3c:b8:2d:6c:94:58:b9:26:66:ee:e0:e2:0b:7e: 0b:bc:05:c7:6c:d4:ac:29:33:fc:0d:2a:40:01:05:79:8b:1d: 92:c9:15:28:61:20:d8:48:42:f2:9d:28:ef:83:08:d2:51:e5: 4e:15:1f:95:f1:0e:74:ea:1d:d4:c8:15:cb:44:df:71:aa:a9: 44:fd:1e:26:96:41:27:62:1b:60:31:3b:78:c8:bf:48:c5:96: 8b:7f:22:a3:a8:5d:8f:77:68:a9:fa:48:00:df:5a:f3:1e:1d: b2:6a:4a:28:95:7e:04:3d:62:df:e0:1f:d7:51:91:cb:92:ac: f6:6d:09:9d:a3:e7:00:8b:2d:74:01:e0:42:ab:f2:3c:23:f6: 00:e8:ba:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXiDZf/XNN6DxZOMTnVLckBpW298wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNTA5MDcwMjM2MjhaFw0yNTA5MTAxMDE4MjhaMDMxMTAvBgNV BAMTKDJGMDUxQjk0RTIyMTg2QUNEQUZCMUJFNzc1NkQ1MDgzNkM4OEU2NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDizh7ZcxxsUW/5hBaqk6i0wYL7 mqHaObRWu5GPmB/Lul+8UMNrT0ilbiGXr4nXrVdaw7GTaPIn4WGNPWk9EXT68U8m xH/JiegkHNj0c2QSTSqmqq59vcd1Nw4yz1oIaoYdR3CpxLdh3Ihj5qFxtI/LVvL6 iJuSNs1PGPUzzAQcJV6IaNoxmj1V8dL86PBobqB2+HhM4dG74CAao1rzbBwaQLRT EV8+sqXiZhjlEmnH/jNjqIOmk/ZIElSWoXut/LHREejnp1KEGmTXtoMEL9HlNVWf QbTxsCpxSXcLjVcT1v3vCDqMxcv7xgrUzYsxtcdKzMFTjvOoB/ujfr7mDN0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULwUblOIhhqza+xvndW1Qg2yI5nUwHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISOp9EYUmp2MY6gFMPtPmm+9mi4hhM2psgb CwzP3W8KskhdZ3B11LzUSZHKC95WphyaO8UrwO8Vr0Zb/1Tz8yzgav3ZtTzYmD1R Trq0Cp6u1rF2GlE++thYcOy+pNTtHlWwwpdntft7SM8jR+ETB708uC1slFi5Jmbu 4OILfgu8Bcds1KwpM/wNKkABBXmLHZLJFShhINhIQvKdKO+DCNJR5U4VH5XxDnTq HdTIFctE33GqqUT9HiaWQSdiG2AxO3jIv0jFlot/IqOoXY93aKn6SADfWvMeHbJq SiiVfgQ9Yt/gH9dRkcuSrPZtCZ2j5wCLLXQB4EKr8jwj9gDoumo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:11 2025 by rpki-client