$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: 6MRWvbinAeXFqEsFOkPXTnN6Fhhg0gyoAoH4sjD//fY= Subject key identifier: D3:5A:AF:F0:AF:87:DB:9A:C1:BA:DB:55:FD:38:86:C9:D5:38:D8:5A Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 47E32040A5A8BE925CEDF0E30532C9ABC8E4A708 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: BC Signing time: Thu 08 May 2025 01:10:35 +0000 Manifest this update: Thu 08 May 2025 01:05:35 +0000 Manifest next update: Sun 11 May 2025 06:21:35 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) 2: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) 3: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) 4: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: XTva/S6vmfpS03ZwMVX8wzfT7aiq0N+wnS/mYxBGniw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 06:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e3:20:40:a5:a8:be:92:5c:ed:f0:e3:05:32:c9:ab:c8:e4:a7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: May 8 01:05:35 2025 GMT Not After : May 11 06:21:35 2025 GMT Subject: CN=D35AAFF0AF87DB9AC1BADB55FD3886C9D538D85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:86:9e:b8:b8:67:a5:41:ce:c7:56:1c:2a: 30:c1:00:fa:61:6b:84:f1:2d:79:a3:d6:e9:5e:98: c6:ac:9c:1c:6d:ea:b5:dc:9b:bb:2d:17:b2:b9:9a: 06:d6:67:5a:0d:a2:d8:0d:ed:8c:16:47:1d:a0:e6: a3:38:6a:e3:71:26:c6:c4:a9:a4:e1:0b:9c:34:5e: 5b:0d:93:de:fe:6d:d7:f3:67:c3:ac:69:7f:d2:da: de:9e:e2:c9:1c:60:f3:13:c6:0f:c1:90:ee:d4:b0: 1d:86:49:d1:dc:67:33:13:d5:a5:1b:ae:76:4d:3c: d5:16:61:ff:66:e4:73:14:93:4c:fd:87:8e:12:12: 05:95:31:5c:fb:62:b3:51:dd:b2:82:70:60:6f:a8: f5:2a:a7:7c:0b:42:35:6b:49:dd:db:da:61:77:85: 14:a2:76:a0:e2:ce:58:b6:03:9c:a8:e1:eb:73:53: 96:80:fe:53:56:8c:6b:f9:46:b0:c1:f9:22:75:40: 36:96:8e:06:b3:4a:d9:12:56:48:55:84:fd:18:72: ee:3c:46:5c:07:8f:10:44:ec:48:10:2e:ab:d4:91: b8:b3:93:08:62:6d:63:a3:4f:95:1e:5c:fb:f0:b5: fa:fb:d4:fd:d6:1f:96:9a:3c:4a:c1:33:64:0d:c8: d7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5A:AF:F0:AF:87:DB:9A:C1:BA:DB:55:FD:38:86:C9:D5:38:D8:5A X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8f:ac:06:75:31:d2:0a:e4:b0:2d:ea:05:50:ca:77:ef:bd: f1:7f:36:5d:54:d9:49:94:ea:11:43:f8:d1:14:8e:2a:13:a5: a3:e6:13:c6:f7:90:c6:36:10:c0:59:28:a0:a4:4a:bb:cd:63: 5e:5e:ae:97:55:a5:d0:0a:14:a3:ee:0b:56:54:fe:0e:22:9c: cd:1c:c7:c0:d8:08:c3:53:2c:da:c8:5a:5e:a9:6c:80:bf:4f: 15:25:76:8c:30:fb:ef:89:7c:4d:82:44:b0:b8:ad:39:c3:25: bd:ff:48:23:f4:a2:83:ad:47:f3:d3:30:60:b9:98:79:ec:16: 20:f1:4c:96:66:98:cf:0c:53:a8:a7:e2:cb:ed:74:ae:e1:a9: 96:e6:56:2a:1e:39:ca:72:8d:8c:55:59:d4:91:0b:ac:92:48: 75:f4:1a:f6:7f:9d:bf:d3:a8:8a:83:a2:9f:50:83:fd:0a:58: 4a:1d:3d:4c:a5:12:27:b5:0b:b3:32:ba:ae:52:41:98:10:99: a4:03:b9:33:cc:52:d0:cc:54:56:b5:f5:d4:81:df:dd:2d:f8: ff:08:16:b6:7d:a4:8e:a5:11:81:6f:a8:59:34:75:1e:8f:cb: 6a:19:47:46:c2:fb:aa:32:db:43:0f:6c:0d:ba:3a:aa:22:1f: 94:e0:6c:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR+MgQKWovpJc7fDjBTLJq8jkpwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNTA1MDgwMTA1MzVaFw0yNTA1MTEwNjIxMzVaMDMxMTAvBgNV BAMTKEQzNUFBRkYwQUY4N0RCOUFDMUJBREI1NUZEMzg4NkM5RDUzOEQ4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4SIaeuLhnpUHOx1YcKjDBAPph a4TxLXmj1ulemMasnBxt6rXcm7stF7K5mgbWZ1oNotgN7YwWRx2g5qM4auNxJsbE qaThC5w0XlsNk97+bdfzZ8OsaX/S2t6e4skcYPMTxg/BkO7UsB2GSdHcZzMT1aUb rnZNPNUWYf9m5HMUk0z9h44SEgWVMVz7YrNR3bKCcGBvqPUqp3wLQjVrSd3b2mF3 hRSidqDizli2A5yo4etzU5aA/lNWjGv5RrDB+SJ1QDaWjgazStkSVkhVhP0Ycu48 RlwHjxBE7EgQLqvUkbizkwhibWOjT5UeXPvwtfr71P3WH5aaPErBM2QNyNclAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU01qv8K+H25rButtV/TiGydU42FowHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSPrAZ1MdIK5LAt6gVQynfvvfF/Nl1U2UmU 6hFD+NEUjioTpaPmE8b3kMY2EMBZKKCkSrvNY15erpdVpdAKFKPuC1ZU/g4inM0c x8DYCMNTLNrIWl6pbIC/TxUldoww+++JfE2CRLC4rTnDJb3/SCP0ooOtR/PTMGC5 mHnsFiDxTJZmmM8MU6in4svtdK7hqZbmVioeOcpyjYxVWdSRC6ySSHX0GvZ/nb/T qIqDop9Qg/0KWEodPUylEie1C7Myuq5SQZgQmaQDuTPMUtDMVFa19dSB390t+P8I FrZ9pI6lEYFvqFk0dR6Py2oZR0bC+6oy20MPbA26OqoiH5TgbMs= -----END CERTIFICATE-----Generated at Thu May 8 18:03:51 2025 by rpki-client