$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: Hbs2IwGU6lF8S+gMi9dv3gSpdNtkYM79zjdt/1k5oO8= Subject key identifier: 28:0A:0C:0F:5A:5E:72:CB:31:F1:02:41:94:BE:D4:53:58:F5:CB:D4 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 09A96A3AC83745CD654A8006E7D98BD41974E247 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 04F4 Signing time: Mon 21 Jul 2025 14:31:48 +0000 Manifest this update: Mon 21 Jul 2025 14:26:48 +0000 Manifest next update: Thu 24 Jul 2025 15:02:48 +0000 Files and hashes: 1: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: bKZ9Kr5vGdouh2ZI4N+bxQ7MC1/jdvf7JVbCsDM4qhY=) 2: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: fWVraIK0peV5pfUxKou+LybdsOxdUrTK7o8XFGEfc8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a9:6a:3a:c8:37:45:cd:65:4a:80:06:e7:d9:8b:d4:19:74:e2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Jul 21 14:26:48 2025 GMT Not After : Jul 24 15:02:48 2025 GMT Subject: CN=280A0C0F5A5E72CB31F1024194BED45358F5CBD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:9b:64:8f:d8:94:8a:c7:3b:85:26:29:32: 50:7b:f3:0b:72:9a:de:63:b1:33:b4:37:70:4f:8c: 8b:56:56:6b:57:9e:18:f3:fa:b2:1a:9b:6c:f3:79: 58:d2:9e:6f:3f:74:98:3f:d4:7d:2d:95:75:6f:30: 16:4a:d2:a5:c2:e7:a5:8a:cc:d1:f2:67:d1:5b:85: dc:06:32:5e:10:4a:cc:3f:e2:ea:73:b4:75:4d:85: 95:8b:f0:98:46:3d:e8:d9:2f:3d:a7:7b:02:c0:50: c6:c6:1c:eb:b3:34:22:36:d6:9d:bd:17:47:25:43: b7:79:3a:ad:cf:d3:d3:73:35:91:45:5f:71:d7:32: 54:b1:92:eb:4c:c5:74:60:dc:7d:c7:64:4c:47:85: b0:1d:eb:43:9c:1a:93:9e:14:ac:6d:d5:a2:33:38: 2a:33:85:91:10:34:6f:8f:25:37:7e:0e:44:46:d6: 4f:a2:08:70:0f:47:69:88:e0:e3:55:4c:5c:51:4a: 1a:e8:ae:3e:53:7e:59:a4:e8:ad:31:88:cf:d6:0f: 8c:14:59:a7:57:c3:dc:3a:64:10:81:94:65:77:ee: bb:c5:1b:c6:c5:7d:d7:e2:83:27:42:1a:ad:41:d9: 70:1d:ee:45:46:9f:93:40:25:e6:59:dc:60:2a:44: 63:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0A:0C:0F:5A:5E:72:CB:31:F1:02:41:94:BE:D4:53:58:F5:CB:D4 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:62:86:62:8d:40:81:3d:b5:75:33:3e:8e:1f:d0:8c:07:53: 72:1c:38:c5:9f:90:77:30:f2:9c:40:86:bc:40:22:28:f9:47: 1b:89:83:ce:09:5c:1f:82:9b:3c:45:5a:34:51:58:13:4d:23: 37:a7:4a:f4:51:d2:7f:37:13:e7:9d:60:3f:24:8e:aa:28:a1: ba:30:bf:93:92:28:f7:c4:0c:53:ee:26:fe:76:95:58:1e:d6: 11:99:52:6e:ba:e4:93:d5:ff:6e:1d:6c:e4:4e:b6:61:3a:20: 91:b3:17:84:8f:af:ac:0e:dc:09:77:43:65:4e:f6:fa:65:1b: 37:69:26:f6:d7:2b:8b:01:f3:3f:96:c0:80:fb:9e:92:e7:ff: c6:d0:fd:92:d8:c2:7b:02:99:79:dd:bc:66:0e:76:05:c3:75: 01:28:e0:d6:ba:ed:2f:ba:b8:ff:7f:bf:73:34:c0:be:da:86: 75:2c:b7:00:3e:67:87:11:e2:2c:41:a8:6b:75:29:3b:88:ba: c0:94:14:e8:2f:1f:e3:bf:a1:9a:dd:8d:f1:0b:46:b4:93:03: 3d:f7:ce:e1:fb:7a:96:85:82:cd:c3:d6:dc:50:d3:87:90:96: dd:88:f4:e5:3a:0d:92:e7:50:d3:72:26:90:a6:aa:8a:5d:46: 57:35:ba:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCalqOsg3Rc1lSoAG59mL1Bl04kcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNTA3MjExNDI2NDhaFw0yNTA3MjQxNTAyNDhaMDMxMTAvBgNV BAMTKDI4MEEwQzBGNUE1RTcyQ0IzMUYxMDI0MTk0QkVENDUzNThGNUNCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKv5tkj9iUisc7hSYpMlB78wty mt5jsTO0N3BPjItWVmtXnhjz+rIam2zzeVjSnm8/dJg/1H0tlXVvMBZK0qXC56WK zNHyZ9FbhdwGMl4QSsw/4upztHVNhZWL8JhGPejZLz2newLAUMbGHOuzNCI21p29 F0clQ7d5Oq3P09NzNZFFX3HXMlSxkutMxXRg3H3HZExHhbAd60OcGpOeFKxt1aIz OCozhZEQNG+PJTd+DkRG1k+iCHAPR2mI4ONVTFxRShrorj5Tflmk6K0xiM/WD4wU WadXw9w6ZBCBlGV37rvFG8bFfdfigydCGq1B2XAd7kVGn5NAJeZZ3GAqRGMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKAoMD1pecssx8QJBlL7UU1j1y9QwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVihmKNQIE9tXUzPo4f0IwHU3IcOMWfkHcw 8pxAhrxAIij5RxuJg84JXB+CmzxFWjRRWBNNIzenSvRR0n83E+edYD8kjqooobow v5OSKPfEDFPuJv52lVge1hGZUm665JPV/24dbOROtmE6IJGzF4SPr6wO3Al3Q2VO 9vplGzdpJvbXK4sB8z+WwID7npLn/8bQ/ZLYwnsCmXndvGYOdgXDdQEo4Na67S+6 uP9/v3M0wL7ahnUstwA+Z4cR4ixBqGt1KTuIusCUFOgvH+O/oZrdjfELRrSTAz33 zuH7epaFgs3D1txQ04eQlt2I9OU6DZLnUNNyJpCmqopdRlc1ugY= -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:34 2025 by rpki-client