$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json) Hash identifier: zRv99h1FMBS1VdMStt2olal/594lcPFuZFiBNRXHSSk= Subject key identifier: 18:E5:90:F2:72:DA:1D:BE:96:2E:5E:B9:39:A2:19:70:28:F6:33:75 Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Certificate serial: 3F57D3A6B7EA57BAC212050132438F6A7DF5EF6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft Manifest number: 0518 Signing time: Sun 19 Oct 2025 10:02:25 +0000 Manifest this update: Sun 19 Oct 2025 09:57:25 +0000 Manifest next update: Wed 22 Oct 2025 13:44:25 +0000 Files and hashes: 1: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: KEjMeNYdQ3wO2hNJZkRSeKh+dHqO3b4ddKBucvvhANg=) 2: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: 4Nmw1fLmOShLUzPpmEzdZOQ+qEZBBauKqV3+7mgcSNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:57:d3:a6:b7:ea:57:ba:c2:12:05:01:32:43:8f:6a:7d:f5:ef:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Validity Not Before: Oct 19 09:57:25 2025 GMT Not After : Oct 22 13:44:25 2025 GMT Subject: CN=18E590F272DA1DBE962E5EB939A2197028F63375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:4b:15:ed:81:ef:33:8c:a8:c0:74:9a:61: f3:60:62:84:82:35:b3:16:f7:54:26:91:47:de:5e: 81:13:20:0c:a6:20:a2:79:72:e3:71:30:96:92:c2: b7:35:a6:8c:9e:7c:b4:4a:94:84:d5:e1:06:00:61: 24:57:89:48:04:5c:06:36:eb:c5:48:7e:4c:2a:82: 96:2e:3f:35:75:cc:70:e9:ec:d2:5c:e8:87:a6:ba: 10:4c:8f:f4:8c:37:f6:f0:49:c2:07:2e:a1:78:40: 7a:7f:1f:d7:61:3d:52:15:54:d0:00:18:19:31:0c: 4b:05:36:1d:b0:81:a9:99:57:b3:4d:79:c6:18:f2: 65:8c:7d:ec:33:33:cf:0e:72:74:1b:f7:50:51:a7: 2d:7d:72:83:b2:10:cb:d4:75:60:57:d8:6a:f4:e9: 55:73:f2:17:c0:4c:0b:d9:c7:69:08:fb:7c:bb:83: c3:f4:a2:ea:ff:3e:d3:b7:08:bf:e3:04:dd:de:89: 1d:73:cb:07:df:89:4f:e6:3d:7d:d9:ed:f0:f6:f1: 10:21:97:55:77:8e:62:d0:99:97:af:b2:5b:5c:05: 56:c8:91:e7:c6:22:e2:2a:6e:d1:5a:d5:cb:9b:12: f1:6d:c7:8a:c7:1e:e0:ca:1b:7a:e3:6c:d9:0d:e1: bd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:E5:90:F2:72:DA:1D:BE:96:2E:5E:B9:39:A2:19:70:28:F6:33:75 X509v3 Authority Key Identifier: keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:35:a5:1a:1d:4f:6f:3c:22:bb:f5:2a:a6:bf:da:10:ac:49: 5d:9a:b7:da:4b:ca:ad:d9:5e:d2:d9:af:c0:63:28:5a:3a:a7: e9:04:b9:17:24:00:fd:e9:d2:6a:ab:43:63:b2:3f:01:38:30: 67:30:1f:0e:e4:b7:51:2c:32:57:dd:fe:40:7d:8e:a9:79:09: 2a:61:0c:e8:bc:48:e0:22:3c:20:a4:e5:12:fb:10:42:1c:d8: 3e:2c:bd:11:93:cf:2c:97:7e:d9:f7:50:d5:2f:74:4e:bb:81: 49:96:2a:d2:50:e7:c9:26:31:8b:c7:f4:e3:f0:93:58:37:c2: 45:f0:1e:be:a3:55:dc:c5:35:5d:34:9e:5e:a9:26:ae:5d:fe: d3:88:58:a7:23:e6:53:c8:85:af:c6:4e:52:85:78:7c:4f:4d: d9:fd:b9:4d:8a:ca:5d:c3:cc:b4:94:b2:a6:a5:3e:35:7c:62: fd:40:73:b2:e6:56:59:2b:b9:b2:77:30:dd:a4:c6:8e:32:d4: ea:78:74:f4:80:95:f2:e4:cb:d0:cb:c5:fc:5c:4a:02:ff:e5: cc:ab:7b:42:77:ba:8f:d7:10:5b:3d:6f:f4:30:f2:b2:52:8b: 6c:3b:6b:90:17:61:fc:23:06:2c:14:b0:f5:30:3f:ce:f2:a1: dc:a9:a0:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1fTprfqV7rCEgUBMkOPan31720wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAy QTA5NjYyMDAeFw0yNTEwMTkwOTU3MjVaFw0yNTEwMjIxMzQ0MjVaMDMxMTAvBgNV BAMTKDE4RTU5MEYyNzJEQTFEQkU5NjJFNUVCOTM5QTIxOTcwMjhGNjMzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYC0sV7YHvM4yowHSaYfNgYoSC NbMW91QmkUfeXoETIAymIKJ5cuNxMJaSwrc1poyefLRKlITV4QYAYSRXiUgEXAY2 68VIfkwqgpYuPzV1zHDp7NJc6IemuhBMj/SMN/bwScIHLqF4QHp/H9dhPVIVVNAA GBkxDEsFNh2wgamZV7NNecYY8mWMfewzM88OcnQb91BRpy19coOyEMvUdWBX2Gr0 6VVz8hfATAvZx2kI+3y7g8P0our/PtO3CL/jBN3eiR1zywffiU/mPX3Z7fD28RAh l1V3jmLQmZevsltcBVbIkefGIuIqbtFa1cubEvFtx4rHHuDKG3rjbNkN4b3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGOWQ8nLaHb6WLl65OaIZcCj2M3UwHwYDVR0j BBgwFoAUQav3ktFBIqqmfkK9Quu44CoJZiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTQ1ZWJhYi1lYzE2LTQ1ODktYTlhNi04YTM2NjFkNDNlM2UvMC80MUFCRjc5MkQx NDEyMkFBQTY3RTQyQkQ0MkVCQjhFMDJBMDk2NjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAyQTA5 NjYyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5 YTYtOGEzNjYxZDQzZTNlLzAvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4 RTAyQTA5NjYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGU1pRodT288Irv1Kqa/2hCsSV2at9pLyq3Z XtLZr8BjKFo6p+kEuRckAP3p0mqrQ2OyPwE4MGcwHw7kt1EsMlfd/kB9jql5CSph DOi8SOAiPCCk5RL7EEIc2D4svRGTzyyXftn3UNUvdE67gUmWKtJQ58kmMYvH9OPw k1g3wkXwHr6jVdzFNV00nl6pJq5d/tOIWKcj5lPIha/GTlKFeHxPTdn9uU2Kyl3D zLSUsqalPjV8Yv1Ac7LmVlkrubJ3MN2kxo4y1Op4dPSAlfLky9DLxfxcSgL/5cyr e0J3uo/XEFs9b/Qw8rJSi2w7a5AXYfwjBiwUsPUwP87yodypoI4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:46 2025 by rpki-client