$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: /TSnPRWPXHzOMSW/eQFeSaN6xA+wfUSrqKhzRbxEaxY= Subject key identifier: 93:D4:13:27:69:57:03:8F:C0:90:60:11:3F:24:EE:A9:AB:F2:FC:BA Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 243641C6A98898126C20D7FD1A133FEB6EEEA611 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: 0105 Signing time: Sun 19 Oct 2025 09:00:36 +0000 Manifest this update: Sun 19 Oct 2025 08:55:36 +0000 Manifest next update: Wed 22 Oct 2025 12:27:36 +0000 Files and hashes: 1: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) 2: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: 5YLXtssAcVEJQ1UWX6yXfGQPxnaP6EOUaBS+OsP9pv4=) 3: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) 4: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:36:41:c6:a9:88:98:12:6c:20:d7:fd:1a:13:3f:eb:6e:ee:a6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Oct 19 08:55:36 2025 GMT Not After : Oct 22 12:27:36 2025 GMT Subject: CN=93D413276957038FC09060113F24EEA9ABF2FCBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:74:59:43:5d:21:a9:e8:fd:37:04:0e:21: 04:db:25:8e:3b:b4:81:93:5f:07:a2:1a:71:2b:4d: 43:52:fe:47:ce:a9:a1:ea:96:12:70:7c:7e:28:1a: 68:5a:46:66:e3:14:e5:d2:e1:62:47:ea:88:4b:6e: 5c:ed:4c:f1:8f:94:95:4c:a4:c6:f4:c2:08:1e:a5: 18:8f:af:ea:a1:29:b7:c8:a6:93:67:5b:bd:d1:ab: d9:c4:b6:93:ca:c9:14:ca:56:7b:cd:c0:76:a8:1e: cd:12:52:c6:90:78:4a:df:d7:9d:f3:56:6a:6f:19: dd:df:78:7a:8b:72:a9:a9:81:5a:37:3b:df:d5:2f: 7c:b2:ee:f6:bb:39:bf:74:7e:62:da:9a:e2:e4:58: 98:2e:47:75:d1:3d:a4:15:a9:5c:09:35:63:e7:29: d5:3f:c4:d5:57:3f:43:5e:21:8a:8a:22:28:08:48: 6e:93:72:f2:62:f8:bc:c2:df:e9:14:7e:59:dc:a1: 90:d1:c0:f2:7a:69:3a:31:b1:25:ba:e2:e5:02:6e: ff:07:20:8a:8c:52:35:d7:a9:75:ca:ff:a2:62:83: 3a:4f:b0:f3:0d:36:b2:1f:48:3f:c6:26:e8:61:cd: a3:e6:62:b5:a7:dc:0f:3b:cb:c0:78:81:03:36:af: 60:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D4:13:27:69:57:03:8F:C0:90:60:11:3F:24:EE:A9:AB:F2:FC:BA X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:0c:98:b1:8c:4a:88:dd:2e:b0:22:14:b7:5a:93:46:28:14: 06:db:08:c0:b6:c4:0e:31:7c:f6:7e:96:a7:c7:f8:e2:8b:d1: f2:05:13:9b:cb:de:2b:20:a5:c5:55:4f:7c:55:9f:4c:30:a9: 44:82:5f:52:f3:bf:d7:e3:5b:6f:75:87:a9:af:a8:b5:44:d4: 31:64:e2:9c:db:06:58:c7:a0:8b:b7:9e:10:7b:9d:ce:eb:3d: d2:92:ba:55:5e:bc:3f:53:86:08:06:e6:f5:bb:bb:83:17:be: 92:33:58:ef:d1:cb:83:12:a7:ba:f2:23:5f:e5:ee:7b:02:e4: 9e:6d:a8:b3:c4:db:48:0a:46:3d:69:6e:a7:e0:d2:d4:1a:52: 26:bf:e3:61:a7:41:1d:ca:d3:09:e3:c2:53:70:94:e4:1d:a1: ca:0c:e7:f4:2a:51:5a:07:40:fa:74:d9:04:2f:95:cc:61:7c: f1:d3:dd:48:a1:62:1d:dc:a2:3c:66:10:10:c6:14:6d:b1:4e: 1c:00:a2:fc:a2:99:d5:32:fb:16:f5:d1:40:c9:8f:ee:cc:98: f0:91:7d:f8:d6:f6:5a:8e:8a:bc:18:8e:23:c8:55:9e:f0:48: 85:dd:43:f3:9f:99:6d:ad:af:fd:3a:3b:b0:94:36:37:c7:9f: 59:c1:26:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDZBxqmImBJsINf9GhM/627uphEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNTEwMTkwODU1MzZaFw0yNTEwMjIxMjI3MzZaMDMxMTAvBgNV BAMTKDkzRDQxMzI3Njk1NzAzOEZDMDkwNjAxMTNGMjRFRUE5QUJGMkZDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbHRZQ10hqej9NwQOIQTbJY47 tIGTXweiGnErTUNS/kfOqaHqlhJwfH4oGmhaRmbjFOXS4WJH6ohLblztTPGPlJVM pMb0wggepRiPr+qhKbfIppNnW73Rq9nEtpPKyRTKVnvNwHaoHs0SUsaQeErf153z VmpvGd3feHqLcqmpgVo3O9/VL3yy7va7Ob90fmLamuLkWJguR3XRPaQVqVwJNWPn KdU/xNVXP0NeIYqKIigISG6TcvJi+LzC3+kUflncoZDRwPJ6aToxsSW64uUCbv8H IIqMUjXXqXXK/6JigzpPsPMNNrIfSD/GJuhhzaPmYrWn3A87y8B4gQM2r2BHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk9QTJ2lXA4/AkGARPyTuqavy/LowHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIMmLGMSojdLrAiFLdak0YoFAbbCMC2xA4x fPZ+lqfH+OKL0fIFE5vL3isgpcVVT3xVn0wwqUSCX1Lzv9fjW291h6mvqLVE1DFk 4pzbBljHoIu3nhB7nc7rPdKSulVevD9ThggG5vW7u4MXvpIzWO/Ry4MSp7ryI1/l 7nsC5J5tqLPE20gKRj1pbqfg0tQaUia/42GnQR3K0wnjwlNwlOQdocoM5/QqUVoH QPp02QQvlcxhfPHT3UihYh3cojxmEBDGFG2xThwAovyimdUy+xb10UDJj+7MmPCR ffjW9lqOirwYjiPIVZ7wSIXdQ/OfmW2tr/06O7CUNjfHn1nBJtY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:36:20 2025 by rpki-client