$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: n6GIDvgRg4/pLhHTFFH/YfMjcs3b/tJCWlU+ixjO+DE= Subject key identifier: A6:C1:C3:BA:61:A0:69:C9:D5:2F:FC:88:37:F2:3C:58:8B:9D:F0:E9 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 0CF18AE666ED92DC9D92A5743E2C7EAC855044CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 051E Signing time: Mon 20 Oct 2025 13:41:51 +0000 Manifest this update: Mon 20 Oct 2025 13:36:51 +0000 Manifest next update: Thu 23 Oct 2025 19:30:51 +0000 Files and hashes: 1: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: HELC9mdQ84lzVVvguuZaZieGiyQ03u73Eihy4Pkp6bs=) 2: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: VhZhSmIPDFUZyJ4Igb6DcXuGcZTtb5Zp3B72vbfo3EM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f1:8a:e6:66:ed:92:dc:9d:92:a5:74:3e:2c:7e:ac:85:50:44:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Oct 20 13:36:51 2025 GMT Not After : Oct 23 19:30:51 2025 GMT Subject: CN=A6C1C3BA61A069C9D52FFC8837F23C588B9DF0E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:68:9c:e8:da:d2:82:5b:00:25:4b:4a:d5:df: 5d:43:a5:a8:2e:bb:f9:29:49:1c:e2:0e:47:5a:3e: f2:cb:44:e2:e4:7b:4a:07:f8:36:e0:84:87:64:f8: 77:58:1c:fa:c9:0f:82:37:8b:bf:67:96:71:20:fe: b0:1c:6b:6b:b9:d8:8b:37:b3:0d:77:66:aa:10:72: d5:26:cf:a3:45:a0:10:a8:ab:b3:7a:78:35:7d:45: f9:60:f4:62:73:e1:f9:be:1b:7c:c0:c7:8d:7b:de: 28:d4:72:1b:f1:17:67:09:c2:71:41:96:c1:76:a4: 5d:61:ae:01:d2:72:a2:34:8c:47:8a:09:f5:76:64: af:a4:ed:e5:4b:b7:04:13:20:2b:c9:56:ca:2d:70: 34:85:87:61:5f:4a:32:41:22:f6:b1:22:2e:82:db: a6:83:ee:d3:c3:36:e2:a1:3c:7e:6d:f9:7d:d4:05: bd:b6:11:c2:dc:9b:4a:6c:e3:04:2b:47:bd:2c:ae: a6:eb:d1:c7:28:3f:c8:06:13:d5:af:69:e8:7a:ab: d7:ed:72:a1:e0:4e:ca:20:3a:ee:40:db:24:fa:9a: e2:8a:2b:4f:03:b7:5d:52:5c:ca:77:88:4b:d4:ac: 77:c9:47:43:fc:59:d1:74:71:b4:fe:f7:3a:28:ea: c5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C1:C3:BA:61:A0:69:C9:D5:2F:FC:88:37:F2:3C:58:8B:9D:F0:E9 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b6:33:eb:0f:e2:95:b4:04:7b:48:41:e6:86:e6:02:9b:b9: a6:9f:e8:93:a0:14:a6:6e:f6:e3:34:cc:25:c6:13:59:53:7d: 71:10:04:4e:67:7d:0c:8c:1a:05:44:dd:ea:1e:50:95:43:99: 58:0d:97:36:ef:e4:38:5d:dd:d4:f5:53:14:4b:2e:1e:30:56: 30:29:da:8f:f6:ae:a9:ac:35:fb:d8:65:ec:12:13:df:eb:6c: 65:57:29:31:cf:77:e7:96:39:ae:d2:da:0e:68:5a:72:7a:a2: a4:c9:16:88:66:38:81:cc:03:2d:4d:65:3b:8e:9d:7a:07:93: 88:49:b8:e6:24:de:ce:34:ae:fe:44:c0:42:5a:bf:12:ba:62: 27:f6:84:19:cd:e0:ec:8d:55:34:92:0d:64:01:03:3b:4e:ba: e8:46:de:31:05:d9:ea:c9:6c:31:30:53:e7:1e:a6:92:e1:04: 54:c8:38:bf:5e:e3:61:66:ae:34:cd:17:ce:ba:47:d2:83:5b: 32:48:f2:d2:a9:31:a6:5c:3d:8d:6d:1e:a0:5c:2d:5e:c1:92: 35:44:18:12:71:f0:17:d8:82:07:ff:d8:e4:5f:81:8c:21:b5: 2f:9b:5b:c8:f3:6a:c6:9d:6b:7e:3a:08:57:4c:f4:a0:9f:a7: 95:2f:3d:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPGK5mbtktydkqV0Pix+rIVQRMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNTEwMjAxMzM2NTFaFw0yNTEwMjMxOTMwNTFaMDMxMTAvBgNV BAMTKEE2QzFDM0JBNjFBMDY5QzlENTJGRkM4ODM3RjIzQzU4OEI5REYwRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlaJzo2tKCWwAlS0rV311Dpagu u/kpSRziDkdaPvLLROLke0oH+DbghIdk+HdYHPrJD4I3i79nlnEg/rAca2u52Is3 sw13ZqoQctUmz6NFoBCoq7N6eDV9Rflg9GJz4fm+G3zAx4173ijUchvxF2cJwnFB lsF2pF1hrgHScqI0jEeKCfV2ZK+k7eVLtwQTICvJVsotcDSFh2FfSjJBIvaxIi6C 26aD7tPDNuKhPH5t+X3UBb22EcLcm0ps4wQrR70srqbr0ccoP8gGE9Wvaeh6q9ft cqHgTsogOu5A2yT6muKKK08Dt11SXMp3iEvUrHfJR0P8WdF0cbT+9zoo6sVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpsHDumGgacnVL/yIN/I8WIud8OkwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACa2M+sP4pW0BHtIQeaG5gKbuaaf6JOgFKZu 9uM0zCXGE1lTfXEQBE5nfQyMGgVE3eoeUJVDmVgNlzbv5Dhd3dT1UxRLLh4wVjAp 2o/2rqmsNfvYZewSE9/rbGVXKTHPd+eWOa7S2g5oWnJ6oqTJFohmOIHMAy1NZTuO nXoHk4hJuOYk3s40rv5EwEJavxK6Yif2hBnN4OyNVTSSDWQBAztOuuhG3jEF2erJ bDEwU+ceppLhBFTIOL9e42FmrjTNF866R9KDWzJI8tKpMaZcPY1tHqBcLV7BkjVE GBJx8BfYggf/2ORfgYwhtS+bW8jzasada346CFdM9KCfp5UvPSY= -----END CERTIFICATE-----Generated at Tue Oct 21 00:13:06 2025 by rpki-client