$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: p+3j/JctCnxx5nNh9eQicmDPSduoyhcpKwwEoTsIRes= Subject key identifier: D2:26:5E:7D:9C:8B:36:89:3E:62:BD:49:C8:0D:98:E5:1D:F3:51:D3 Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 63A15213B50E7BFC2304D764152A92B4DDEF6224 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: EC Signing time: Sat 23 Aug 2025 00:20:36 +0000 Manifest this update: Sat 23 Aug 2025 00:15:36 +0000 Manifest next update: Tue 26 Aug 2025 03:14:36 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) 2: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) 3: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) 4: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: hc8sYqGuJQeKMeMCpFtIiBjKxP62Upf9V5Gual3eYHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a1:52:13:b5:0e:7b:fc:23:04:d7:64:15:2a:92:b4:dd:ef:62:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Aug 23 00:15:36 2025 GMT Not After : Aug 26 03:14:36 2025 GMT Subject: CN=D2265E7D9C8B36893E62BD49C80D98E51DF351D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:cb:51:2c:ec:37:cd:07:2d:83:29:43:3b: 45:81:b3:92:50:83:90:ba:42:da:b2:97:99:12:28: 69:d2:aa:3f:1f:cc:e4:a2:fc:df:c4:63:ef:58:a4: 0b:33:8e:99:a6:7c:9a:e0:fb:20:de:a7:1d:80:cd: 34:e9:59:9e:36:16:1f:86:55:4b:2e:49:6c:15:a2: 99:c4:1a:fa:6b:06:1e:23:6a:fd:af:b3:cf:54:20: 87:e3:2d:09:d4:14:55:4d:71:a3:14:4f:1b:b1:77: 27:4b:48:08:d9:e2:0a:02:26:e7:07:d4:42:ed:67: bc:58:d8:a1:c1:4d:db:9e:ef:6d:20:be:4f:1f:58: 3d:2c:c4:77:f8:d8:97:83:9a:0e:4e:29:98:e8:c0: 2c:25:17:ba:51:77:fd:51:b0:69:32:4e:5f:b1:52: 83:40:4d:e5:9f:20:ca:17:46:53:03:bc:6d:4b:e3: 8d:e6:15:90:b5:23:73:ee:1f:1b:94:7c:63:aa:3a: 58:69:82:90:00:b0:5d:c8:a3:94:f4:48:a6:48:f6: 50:74:16:b2:af:f4:16:46:ac:51:55:f5:74:c7:55: f6:0c:40:32:be:75:55:d9:d0:4e:f1:45:0c:00:cc: b1:94:0a:51:fc:07:15:a8:a7:b9:b5:36:af:c9:cc: b9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:26:5E:7D:9C:8B:36:89:3E:62:BD:49:C8:0D:98:E5:1D:F3:51:D3 X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d0:9e:2f:f4:09:83:d2:93:a7:29:da:d4:4d:e1:f1:ac:6d: 00:96:b2:e7:53:21:b6:f9:0c:7d:cc:a2:cd:20:c5:67:23:7d: e3:94:97:10:2f:fb:b7:cf:e3:f6:97:99:c3:87:47:1b:d6:64: a0:c8:50:44:bb:71:35:e1:7a:4b:5a:e4:a0:56:43:90:31:f9: 62:fe:03:ba:2f:af:99:26:2d:3d:a4:b2:91:5c:b5:ff:07:ee: 9c:6f:2a:46:19:2f:ff:69:80:5d:21:35:48:44:f4:a8:6c:ab: 30:00:4f:84:de:19:c0:03:41:1a:c0:dc:21:b4:e7:7e:a7:36: 31:71:39:4a:7c:10:9c:4d:66:f7:9a:ee:10:52:df:50:84:c1: e6:e1:a4:30:22:d5:8c:fb:df:cd:3b:3f:32:19:64:76:5b:37: a1:ae:29:a8:92:38:21:3b:d7:b2:3a:c6:93:e5:d8:a0:22:e1: 2b:7c:f3:14:0e:b6:36:40:45:a3:1c:fd:95:18:19:67:42:95: 70:5c:70:29:57:35:0c:0c:83:f9:65:90:64:3b:c1:60:ab:57: 84:8b:84:72:0a:fc:31:10:34:9d:86:cf:8a:11:c4:2b:af:d0: ea:bd:a9:01:09:84:48:36:a1:a8:bf:f5:a0:06:d4:71:fe:9b: 62:e8:77:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY6FSE7UOe/wjBNdkFSqStN3vYiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNTA4MjMwMDE1MzZaFw0yNTA4MjYwMzE0MzZaMDMxMTAvBgNV BAMTKEQyMjY1RTdEOUM4QjM2ODkzRTYyQkQ0OUM4MEQ5OEU1MURGMzUxRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbMtRLOw3zQctgylDO0WBs5JQ g5C6Qtqyl5kSKGnSqj8fzOSi/N/EY+9YpAszjpmmfJrg+yDepx2AzTTpWZ42Fh+G VUsuSWwVopnEGvprBh4jav2vs89UIIfjLQnUFFVNcaMUTxuxdydLSAjZ4goCJucH 1ELtZ7xY2KHBTdue720gvk8fWD0sxHf42JeDmg5OKZjowCwlF7pRd/1RsGkyTl+x UoNATeWfIMoXRlMDvG1L443mFZC1I3PuHxuUfGOqOlhpgpAAsF3Io5T0SKZI9lB0 FrKv9BZGrFFV9XTHVfYMQDK+dVXZ0E7xRQwAzLGUClH8BxWop7m1Nq/JzLlbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0iZefZyLNok+Yr1JyA2Y5R3zUdMwHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7Qni/0CYPSk6cp2tRN4fGsbQCWsudTIbb5 DH3Mos0gxWcjfeOUlxAv+7fP4/aXmcOHRxvWZKDIUES7cTXhekta5KBWQ5Ax+WL+ A7ovr5kmLT2kspFctf8H7pxvKkYZL/9pgF0hNUhE9KhsqzAAT4TeGcADQRrA3CG0 536nNjFxOUp8EJxNZvea7hBS31CEwebhpDAi1Yz73807PzIZZHZbN6GuKaiSOCE7 17I6xpPl2KAi4St88xQOtjZARaMc/ZUYGWdClXBccClXNQwMg/llkGQ7wWCrV4SL hHIK/DEQNJ2Gz4oRxCuv0Oq9qQEJhEg2oai/9aAG1HH+m2Lod84= -----END CERTIFICATE-----Generated at Sat Aug 23 21:48:01 2025 by rpki-client