$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: 8mfFphYYGmc6DltxXp41u3qyaDC0cZPSSHyrLtpsLTI= Subject key identifier: D5:D6:CD:E3:49:0E:F8:43:73:DA:17:9A:50:A5:04:5B:25:19:70:72 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 2CB5EA42F38A279921F9732D66038EEBC1D09582 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 0503 Signing time: Thu 21 Aug 2025 17:21:51 +0000 Manifest this update: Thu 21 Aug 2025 17:16:51 +0000 Manifest next update: Sun 24 Aug 2025 20:08:51 +0000 Files and hashes: 1: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: tMBMGhv9YjX/51Zpl9hRg7OiczFk3z9Ztjt69orSrec=) 2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: HELC9mdQ84lzVVvguuZaZieGiyQ03u73Eihy4Pkp6bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b5:ea:42:f3:8a:27:99:21:f9:73:2d:66:03:8e:eb:c1:d0:95:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Aug 21 17:16:51 2025 GMT Not After : Aug 24 20:08:51 2025 GMT Subject: CN=D5D6CDE3490EF84373DA179A50A5045B25197072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:f7:d5:a2:66:a6:e2:d9:98:6c:94:e2:a3: 9e:e0:cc:0a:bd:32:c8:c7:14:00:05:7c:a4:c4:fe: 6d:c2:90:a8:de:97:38:e4:79:d8:c0:67:7d:49:3f: 44:b7:7e:69:71:ef:c0:ad:46:20:6d:bc:73:99:2f: 92:99:25:75:73:9d:e6:3e:5d:99:e9:34:8f:0f:4a: 06:e1:6b:bb:d8:57:4b:26:bd:81:82:47:8a:8a:1a: 27:98:0b:89:09:97:b8:1f:bc:dc:ad:9f:7c:f2:06: bc:21:ee:e1:1f:86:11:58:b8:03:92:d3:c5:ba:b6: d2:8e:66:e3:7f:7a:d5:f3:17:48:91:1c:8e:8e:db: 8f:ae:32:68:a2:f0:77:06:04:9d:cb:39:f4:3e:0a: 4c:ec:66:2d:21:49:03:86:1d:8b:c8:4a:35:9c:13: 59:1f:ae:f4:c3:eb:16:49:72:f8:84:13:0f:e7:98: 3a:d7:63:99:ca:5b:09:f5:57:8c:ce:5f:7d:c7:53: 5b:1a:15:fd:54:1b:fe:98:6f:12:79:6e:49:1e:e3: 26:27:ca:6d:69:11:ee:e7:01:fa:73:78:68:b1:d9: 6e:c6:f7:a4:78:ad:5d:96:ee:ad:7c:c9:e8:2f:89: fa:7d:4d:29:79:f4:0f:5f:67:86:e5:2b:fb:48:ba: 5c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D6:CD:E3:49:0E:F8:43:73:DA:17:9A:50:A5:04:5B:25:19:70:72 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:5c:82:43:0b:ce:df:e6:ca:a3:f3:71:af:4c:c4:99:33:77: c5:d5:7f:12:dd:22:d8:9c:d3:25:d2:f7:18:f4:c5:87:1f:0b: 18:89:c5:29:f4:f0:e7:07:7a:1b:2f:a7:dd:94:34:eb:c4:c6: 98:de:fd:d3:a9:ba:68:15:df:5a:c4:4c:28:1c:bc:fa:9e:d2: 54:8c:38:64:5b:a6:95:46:7d:b9:d8:1a:f7:71:dc:e6:02:61: 8a:df:a1:b3:86:8c:71:bc:bf:fa:25:60:5d:b2:a8:b4:a6:5d: ad:f8:f4:da:fb:51:14:87:65:75:7e:a5:e1:e5:ae:a4:92:13: da:f8:27:7c:4b:d8:ca:1f:18:45:3a:39:57:37:3c:cd:64:cf: 77:70:3f:0d:d9:1b:b7:56:cd:82:70:05:a9:7f:87:22:89:7c: e6:93:84:32:91:34:41:76:8e:61:25:dc:85:cb:ee:1a:2d:0d: 0f:bc:6f:8d:3a:f5:d7:92:18:28:cd:14:3f:e1:70:34:1f:7e: 6f:34:63:c0:2e:6a:75:ee:62:30:29:41:ae:a6:e9:b1:e2:f2: 70:3b:3d:a4:81:25:86:26:ea:ab:be:a5:b6:e1:21:84:8d:02: a6:13:8e:00:c4:d8:2b:de:23:52:ac:65:f0:bd:6b:91:7b:8a: 8d:df:92:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLXqQvOKJ5kh+XMtZgOO68HQlYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNTA4MjExNzE2NTFaFw0yNTA4MjQyMDA4NTFaMDMxMTAvBgNV BAMTKEQ1RDZDREUzNDkwRUY4NDM3M0RBMTc5QTUwQTUwNDVCMjUxOTcwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmo/fVomam4tmYbJTio57gzAq9 MsjHFAAFfKTE/m3CkKjelzjkedjAZ31JP0S3fmlx78CtRiBtvHOZL5KZJXVzneY+ XZnpNI8PSgbha7vYV0smvYGCR4qKGieYC4kJl7gfvNytn3zyBrwh7uEfhhFYuAOS 08W6ttKOZuN/etXzF0iRHI6O24+uMmii8HcGBJ3LOfQ+CkzsZi0hSQOGHYvISjWc E1kfrvTD6xZJcviEEw/nmDrXY5nKWwn1V4zOX33HU1saFf1UG/6YbxJ5bkke4yYn ym1pEe7nAfpzeGix2W7G96R4rV2W7q18yegvifp9TSl59A9fZ4blK/tIulyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1dbN40kO+ENz2heaUKUEWyUZcHIwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJcgkMLzt/myqPzca9MxJkzd8XVfxLdItic 0yXS9xj0xYcfCxiJxSn08OcHehsvp92UNOvExpje/dOpumgV31rETCgcvPqe0lSM OGRbppVGfbnYGvdx3OYCYYrfobOGjHG8v/olYF2yqLSmXa349Nr7URSHZXV+peHl rqSSE9r4J3xL2MofGEU6OVc3PM1kz3dwPw3ZG7dWzYJwBal/hyKJfOaThDKRNEF2 jmEl3IXL7hotDQ+8b4069deSGCjNFD/hcDQffm80Y8AuanXuYjApQa6m6bHi8nA7 PaSBJYYm6qu+pbbhIYSNAqYTjgDE2CveI1KsZfC9a5F7io3fkos= -----END CERTIFICATE-----Generated at Sat Aug 23 12:29:09 2025 by rpki-client