$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: /9srPF7KeAiwOx4NdZhtuD4DEfdxE5NiGmXwLU6cc/4= Subject key identifier: 8A:81:78:7E:A4:21:CD:A7:20:61:D9:E7:38:C1:6B:4E:1F:0A:F5:CE Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 3B4AA9AF864F7BA74C586F8B1F35B12AC8DED454 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 04EB Signing time: Tue 01 Jul 2025 02:11:48 +0000 Manifest this update: Tue 01 Jul 2025 02:06:48 +0000 Manifest next update: Fri 04 Jul 2025 09:00:48 +0000 Files and hashes: 1: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: Yh4xuv/PRSOezSfMjQUDUMf6FMOxpvoClVmZ9CrBK0Y=) 2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: bKZ9Kr5vGdouh2ZI4N+bxQ7MC1/jdvf7JVbCsDM4qhY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4a:a9:af:86:4f:7b:a7:4c:58:6f:8b:1f:35:b1:2a:c8:de:d4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Jul 1 02:06:48 2025 GMT Not After : Jul 4 09:00:48 2025 GMT Subject: CN=8A81787EA421CDA72061D9E738C16B4E1F0AF5CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:b4:09:c8:f0:71:25:90:f6:52:21:e8:0d: 5d:fe:c9:23:2a:a4:2f:be:ff:d5:90:dc:99:12:d7: 97:c1:88:f6:c8:98:f2:67:71:10:62:32:87:a8:dd: d1:0d:17:b4:36:41:b2:20:c6:a4:3d:25:f1:83:ea: 4d:06:d6:c8:e1:4b:ee:b1:a4:dc:36:e4:9d:70:6e: 7b:4b:9b:49:15:92:be:e8:1a:b5:e0:e5:1b:39:d8: 4d:79:78:90:96:9b:1c:8f:91:83:36:cb:29:d9:54: 88:2f:92:70:61:fe:21:55:a3:0b:d9:40:70:6a:61: 5e:2a:1d:4a:45:6b:57:dd:1c:19:f6:d9:83:af:8b: 41:4b:30:5b:cd:ab:b4:a6:d9:c4:61:3d:de:a8:40: ec:8f:0a:9b:c1:e7:e9:22:2b:d8:77:0f:97:31:bc: 90:5e:c5:12:f1:88:cc:42:44:10:78:69:d3:9a:cb: 0d:f9:6e:12:f4:5d:c0:10:e7:78:1b:a1:ac:23:40: 14:e7:6b:56:44:fb:3e:8d:91:5e:d9:ae:d5:23:16: 3f:19:f0:9a:ab:0a:0c:11:b6:3e:4a:86:92:d9:36: bc:89:32:46:c6:33:1a:e2:d3:2f:2a:44:a4:e2:df: 27:e1:27:07:27:0c:32:7a:cd:96:44:fc:b0:2f:73: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:81:78:7E:A4:21:CD:A7:20:61:D9:E7:38:C1:6B:4E:1F:0A:F5:CE X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:5a:be:5b:a4:5d:b9:43:fe:1f:9b:69:db:4e:dc:86:f0:dc: e9:fa:c6:37:f2:57:00:81:36:ab:53:fb:75:a0:5b:d2:f6:a8: 23:7c:42:66:2d:fc:53:44:2e:b0:6e:2e:03:a8:e3:f7:7f:db: 94:bd:45:cc:63:4f:31:0d:d9:60:ab:d8:8f:d5:87:f4:c2:42: 87:d6:4b:e8:a6:41:86:ef:78:d0:9b:b2:84:69:93:af:a6:dd: 1f:2d:45:b7:7a:1d:b1:b6:95:dc:50:27:c0:f3:23:ca:72:b7: 64:47:59:46:cb:e3:4e:a3:11:a2:65:a0:4a:0e:0e:a7:c7:92: 7e:5e:21:ce:8d:95:13:8c:c1:33:fe:c8:bf:cd:07:fb:d2:67: 30:f3:5e:19:9e:19:18:43:8c:3e:37:8b:d3:6d:77:22:ab:de: 9f:1a:95:8d:b3:6c:ca:d8:3c:e2:12:ad:c2:9e:26:2b:ea:8d: 1d:8c:67:f5:83:85:0d:4e:22:01:ad:ea:23:c3:68:4e:df:8b: b3:eb:8f:e4:fe:f6:fd:6f:35:23:a3:31:93:e9:89:8a:c3:01: fd:d4:4c:9b:b3:94:3a:1b:f0:89:b4:7f:80:ae:ab:1b:36:5c: 72:a2:73:28:b1:c8:79:41:38:4b:99:bd:3e:8d:ca:67:89:ea: 0e:d6:d2:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0qpr4ZPe6dMWG+LHzWxKsje1FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNTA3MDEwMjA2NDhaFw0yNTA3MDQwOTAwNDhaMDMxMTAvBgNV BAMTKDhBODE3ODdFQTQyMUNEQTcyMDYxRDlFNzM4QzE2QjRFMUYwQUY1Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCsrQJyPBxJZD2UiHoDV3+ySMq pC++/9WQ3JkS15fBiPbImPJncRBiMoeo3dENF7Q2QbIgxqQ9JfGD6k0G1sjhS+6x pNw25J1wbntLm0kVkr7oGrXg5Rs52E15eJCWmxyPkYM2yynZVIgvknBh/iFVowvZ QHBqYV4qHUpFa1fdHBn22YOvi0FLMFvNq7Sm2cRhPd6oQOyPCpvB5+kiK9h3D5cx vJBexRLxiMxCRBB4adOayw35bhL0XcAQ53gboawjQBTna1ZE+z6NkV7ZrtUjFj8Z 8JqrCgwRtj5KhpLZNryJMkbGMxri0y8qRKTi3yfhJwcnDDJ6zZZE/LAvc8PrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUioF4fqQhzacgYdnnOMFrTh8K9c4wHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdavlukXblD/h+badtO3Ibw3On6xjfyVwCB NqtT+3WgW9L2qCN8QmYt/FNELrBuLgOo4/d/25S9RcxjTzEN2WCr2I/Vh/TCQofW S+imQYbveNCbsoRpk6+m3R8tRbd6HbG2ldxQJ8DzI8pyt2RHWUbL406jEaJloEoO DqfHkn5eIc6NlROMwTP+yL/NB/vSZzDzXhmeGRhDjD43i9NtdyKr3p8alY2zbMrY POISrcKeJivqjR2MZ/WDhQ1OIgGt6iPDaE7fi7Prj+T+9v1vNSOjMZPpiYrDAf3U TJuzlDob8Im0f4Cuqxs2XHKicyixyHlBOEuZvT6NymeJ6g7W0h8= -----END CERTIFICATE-----Generated at Tue Jul 1 10:18:12 2025 by rpki-client