$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json) Hash identifier: +GOE3qY1UKJ+pDrDlgR8qDk4XAbvfykMdnj8PosnG2k= Subject key identifier: D5:E1:B8:FE:A3:3C:0E:19:49:88:D2:46:2A:29:B7:4F:79:3F:A4:76 Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Certificate serial: 395E0C79B87064F233B318866909316DA5E588B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft Manifest number: 04FE Signing time: Fri 22 Aug 2025 07:12:22 +0000 Manifest this update: Fri 22 Aug 2025 07:07:22 +0000 Manifest next update: Mon 25 Aug 2025 12:16:22 +0000 Files and hashes: 1: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: SFM8F3AKkqoDCHya9WgosN34u8158yecBk4HNkuGnh4=) 2: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: 4Nmw1fLmOShLUzPpmEzdZOQ+qEZBBauKqV3+7mgcSNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5e:0c:79:b8:70:64:f2:33:b3:18:86:69:09:31:6d:a5:e5:88:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Validity Not Before: Aug 22 07:07:22 2025 GMT Not After : Aug 25 12:16:22 2025 GMT Subject: CN=D5E1B8FEA33C0E194988D2462A29B74F793FA476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:ee:96:aa:29:92:49:3e:f9:fe:f1:4a:03: fc:90:95:3c:10:3a:a0:49:80:93:31:f1:e8:c1:42: 6b:e1:c2:d2:9e:ac:63:5b:e7:ac:7e:9e:e2:fd:b0: a3:32:44:5b:ce:a6:49:90:ed:08:d3:e9:34:0e:5b: 0d:af:51:01:e9:42:74:d6:ff:20:32:6f:05:e1:d4: 5d:d4:38:59:78:2e:03:12:7c:b6:4b:12:81:c6:a4: 18:d7:2c:1e:f8:c6:82:54:43:bc:34:db:15:e6:77: 49:ec:f1:8b:0c:9b:63:e1:c1:86:8d:72:4c:e8:2b: 01:f5:a2:df:39:97:da:d5:b5:0e:75:e9:de:29:ec: 55:0a:af:2c:64:44:38:66:7b:a9:22:7d:1e:6e:de: 98:f1:72:06:42:c9:44:5e:41:d5:13:c1:e9:5c:a7: 53:14:9b:5e:04:45:6c:1b:f4:0e:2d:cb:3d:a7:65: e1:84:d3:14:6a:ea:8b:b8:03:4e:85:04:03:54:e7: 7c:50:90:09:5d:ff:9a:1e:cd:37:a0:10:da:1f:38: da:08:1f:c6:d4:25:a1:0e:b2:28:06:42:e0:78:ff: 2b:44:3a:0e:46:11:a7:67:51:83:ce:50:e0:8f:0d: bf:d5:4c:18:04:5d:97:5f:a5:1c:57:9b:00:bc:55: e8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E1:B8:FE:A3:3C:0E:19:49:88:D2:46:2A:29:B7:4F:79:3F:A4:76 X509v3 Authority Key Identifier: keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:cd:b6:be:65:7f:14:88:a7:81:51:bf:ef:00:4e:e8:74:44: 29:2e:fc:31:3f:cb:a1:07:e3:a8:29:92:d1:26:14:40:5e:42: ab:7f:d9:a4:66:b3:91:f3:e6:95:a0:87:c4:95:bf:8c:88:93: 48:29:86:81:6b:89:99:33:1a:de:9d:ce:a2:7c:18:b4:0d:7e: 81:46:49:65:58:22:d2:0f:df:3e:ef:c4:28:7d:68:a7:c4:ad: 74:eb:92:8e:c4:eb:5a:44:e5:7c:df:e3:c0:0a:8a:d0:10:99: c0:3e:3e:60:c7:56:ed:08:20:c9:9b:d6:f5:fb:fd:99:30:cf: 62:79:68:fb:ac:dd:54:dc:3b:46:ef:09:ff:61:7c:df:e6:50: 85:be:56:0e:23:0d:21:79:19:a6:fd:bc:b5:41:ab:27:71:0f: 15:a2:02:00:f7:7f:c3:37:2d:f1:3e:73:3a:6b:1e:be:1c:ef: 8c:e2:b0:2f:94:64:25:37:b9:b4:52:31:c9:57:90:99:3a:0d: c7:68:75:9d:c0:66:86:b4:7d:3d:e0:05:02:dc:60:f1:4c:7c: 3a:cb:aa:18:b0:8b:cc:41:f9:35:6d:95:59:69:a4:fd:a0:9c: 2b:3a:cf:0d:11:f6:c5:45:b1:89:61:78:ba:7e:13:82:0d:69: 67:8d:bb:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOV4MebhwZPIzsxiGaQkxbaXliLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAy QTA5NjYyMDAeFw0yNTA4MjIwNzA3MjJaFw0yNTA4MjUxMjE2MjJaMDMxMTAvBgNV BAMTKEQ1RTFCOEZFQTMzQzBFMTk0OTg4RDI0NjJBMjlCNzRGNzkzRkE0NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPM+6WqimSST75/vFKA/yQlTwQ OqBJgJMx8ejBQmvhwtKerGNb56x+nuL9sKMyRFvOpkmQ7QjT6TQOWw2vUQHpQnTW /yAybwXh1F3UOFl4LgMSfLZLEoHGpBjXLB74xoJUQ7w02xXmd0ns8YsMm2PhwYaN ckzoKwH1ot85l9rVtQ516d4p7FUKryxkRDhme6kifR5u3pjxcgZCyUReQdUTwelc p1MUm14ERWwb9A4tyz2nZeGE0xRq6ou4A06FBANU53xQkAld/5oezTegENofONoI H8bUJaEOsigGQuB4/ytEOg5GEadnUYPOUOCPDb/VTBgEXZdfpRxXmwC8VegXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1eG4/qM8DhlJiNJGKim3T3k/pHYwHwYDVR0j BBgwFoAUQav3ktFBIqqmfkK9Quu44CoJZiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTQ1ZWJhYi1lYzE2LTQ1ODktYTlhNi04YTM2NjFkNDNlM2UvMC80MUFCRjc5MkQx NDEyMkFBQTY3RTQyQkQ0MkVCQjhFMDJBMDk2NjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAyQTA5 NjYyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5 YTYtOGEzNjYxZDQzZTNlLzAvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4 RTAyQTA5NjYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXNtr5lfxSIp4FRv+8ATuh0RCku/DE/y6EH 46gpktEmFEBeQqt/2aRms5Hz5pWgh8SVv4yIk0gphoFriZkzGt6dzqJ8GLQNfoFG SWVYItIP3z7vxCh9aKfErXTrko7E61pE5Xzf48AKitAQmcA+PmDHVu0IIMmb1vX7 /Zkwz2J5aPus3VTcO0bvCf9hfN/mUIW+Vg4jDSF5Gab9vLVBqydxDxWiAgD3f8M3 LfE+czprHr4c74zisC+UZCU3ubRSMclXkJk6DcdodZ3AZoa0fT3gBQLcYPFMfDrL qhiwi8xB+TVtlVlppP2gnCs6zw0R9sVFsYlheLp+E4INaWeNuxA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:29 2025 by rpki-client