$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json) Hash identifier: ZmSg/EcGIZQcEFCpdI0O/SQKnkDvqBcxv4WAvm+9B60= Subject key identifier: EC:A4:60:F8:5C:C2:CF:FE:07:D6:1F:7D:BD:28:75:FF:ED:98:3C:F0 Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Certificate serial: 1F2D658583BEFDF6A8C73EE64C2E93FB2E0C035E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft Manifest number: 04CF Signing time: Fri 09 May 2025 21:52:20 +0000 Manifest this update: Fri 09 May 2025 21:47:20 +0000 Manifest next update: Tue 13 May 2025 09:18:20 +0000 Files and hashes: 1: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: Zy/NJKeKjidnIPLl6h/+7laOItzYda0CXXx2a3r6Otc=) 2: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: e363Qmmr7aShBd/1Dt6hRaygfxaujoi+LkakMl8KvrY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:2d:65:85:83:be:fd:f6:a8:c7:3e:e6:4c:2e:93:fb:2e:0c:03:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Validity Not Before: May 9 21:47:20 2025 GMT Not After : May 13 09:18:20 2025 GMT Subject: CN=ECA460F85CC2CFFE07D61F7DBD2875FFED983CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ac:2b:a3:68:9b:90:0d:83:c0:ec:21:a3:a8: 57:42:bf:e9:15:cd:30:88:44:ae:87:30:35:66:15: 0f:6f:c7:52:34:d8:bb:de:bc:4d:4a:b9:85:e8:4b: 70:1c:fd:d4:2b:ff:87:b8:15:03:05:7d:4d:8d:e1: 18:ab:58:97:94:6f:90:40:30:09:c5:9e:ca:b2:b4: f9:13:d3:5b:f6:d7:5a:0d:ee:1c:15:1c:ff:bb:81: ee:43:d6:a2:ac:19:46:e2:c6:cf:d7:25:88:6c:a6: e6:f0:22:ac:d2:9f:a9:f3:0c:8d:82:b6:95:c3:0a: a2:bd:02:e5:f1:c2:7f:8b:c2:7f:ee:59:11:00:d4: 87:d6:a8:91:aa:f6:72:30:d6:5f:2d:bc:56:98:d0: 47:85:6e:fa:d1:a1:f9:1a:2c:35:ba:da:23:42:a7: 6c:cf:65:33:51:e2:2e:5e:d3:d6:eb:d5:0b:2c:87: 8c:d3:3d:a7:e9:7a:0f:28:09:86:cd:87:95:d1:e2: 0f:74:58:cc:86:68:fa:91:fd:3c:f6:37:cd:40:dd: 4b:d5:e7:ff:7e:bd:32:30:f4:1f:46:66:eb:bc:a0: 9c:47:6a:63:68:55:e6:52:f2:b1:7e:5f:0f:02:7b: 1f:2b:60:dc:ec:d0:95:91:e4:e6:a5:41:a1:c9:32: c1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A4:60:F8:5C:C2:CF:FE:07:D6:1F:7D:BD:28:75:FF:ED:98:3C:F0 X509v3 Authority Key Identifier: keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e6:6e:8d:b7:ba:0f:0b:6d:46:e4:5f:24:4e:58:85:42:69: e7:d3:7b:18:e5:74:68:46:fc:a4:0a:92:4c:a2:4f:a0:df:67: 6f:49:18:7a:c5:ec:3c:ed:17:a5:4f:3c:e5:8a:a9:e6:a8:b8: cc:7b:02:31:79:ce:bf:6c:ef:ef:33:98:12:33:3f:e0:50:55: 2a:2f:2e:1a:e0:73:65:fc:a7:d4:ec:bc:29:c2:95:97:84:a0: 2a:9c:91:b0:82:2d:62:56:eb:5c:1d:47:bb:76:29:ba:01:ca: 07:59:e9:8c:e7:a3:c0:ec:06:c6:e1:16:ed:f1:8d:46:41:64: 90:84:8c:4d:92:90:e4:95:94:46:a5:3a:ba:6f:66:03:82:63: 7f:18:df:df:ee:5b:9b:cb:59:8a:78:ed:c5:6b:0c:84:e7:93: 9c:17:02:85:4b:5c:9e:15:79:1f:e3:08:63:dc:ae:48:29:12: 79:cf:8a:11:57:00:11:f9:91:7c:13:04:11:0a:15:cb:69:36: 50:88:7a:43:d7:8b:af:49:a2:53:c0:bd:64:37:89:c0:4f:da: 6a:2a:4f:ee:94:af:88:40:82:77:da:ac:17:5a:6f:ee:ba:3e: d7:ba:e9:be:ca:de:e4:af:a5:42:8e:9e:ec:0c:a0:c7:49:75: ba:48:ae:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHy1lhYO+/faoxz7mTC6T+y4MA14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAy QTA5NjYyMDAeFw0yNTA1MDkyMTQ3MjBaFw0yNTA1MTMwOTE4MjBaMDMxMTAvBgNV BAMTKEVDQTQ2MEY4NUNDMkNGRkUwN0Q2MUY3REJEMjg3NUZGRUQ5ODNDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXrCujaJuQDYPA7CGjqFdCv+kV zTCIRK6HMDVmFQ9vx1I02LvevE1KuYXoS3Ac/dQr/4e4FQMFfU2N4RirWJeUb5BA MAnFnsqytPkT01v211oN7hwVHP+7ge5D1qKsGUbixs/XJYhspubwIqzSn6nzDI2C tpXDCqK9AuXxwn+Lwn/uWREA1IfWqJGq9nIw1l8tvFaY0EeFbvrRofkaLDW62iNC p2zPZTNR4i5e09br1Qssh4zTPafpeg8oCYbNh5XR4g90WMyGaPqR/Tz2N81A3UvV 5/9+vTIw9B9GZuu8oJxHamNoVeZS8rF+Xw8Cex8rYNzs0JWR5OalQaHJMsE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7KRg+FzCz/4H1h99vSh1/+2YPPAwHwYDVR0j BBgwFoAUQav3ktFBIqqmfkK9Quu44CoJZiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTQ1ZWJhYi1lYzE2LTQ1ODktYTlhNi04YTM2NjFkNDNlM2UvMC80MUFCRjc5MkQx NDEyMkFBQTY3RTQyQkQ0MkVCQjhFMDJBMDk2NjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAyQTA5 NjYyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5 YTYtOGEzNjYxZDQzZTNlLzAvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4 RTAyQTA5NjYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzmbo23ug8LbUbkXyROWIVCaefTexjldGhG /KQKkkyiT6DfZ29JGHrF7DztF6VPPOWKqeaouMx7AjF5zr9s7+8zmBIzP+BQVSov Lhrgc2X8p9TsvCnClZeEoCqckbCCLWJW61wdR7t2KboBygdZ6Yzno8DsBsbhFu3x jUZBZJCEjE2SkOSVlEalOrpvZgOCY38Y39/uW5vLWYp47cVrDITnk5wXAoVLXJ4V eR/jCGPcrkgpEnnPihFXABH5kXwTBBEKFctpNlCIekPXi69JolPAvWQ3icBP2moq T+6Ur4hAgnfarBdab+66Pte66b7K3uSvpUKOnuwMoMdJdbpIrmw= -----END CERTIFICATE-----Generated at Sat May 10 18:47:30 2025 by rpki-client