$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft File: 41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json) Hash identifier: nsfQQATl5RWk91BuazTFplczPB5Lb4TXlbnmYaaEMN8= Subject key identifier: DC:34:37:13:1B:1E:F7:DF:A5:2C:DF:1D:1A:A8:FE:35:17:17:34:1B Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 Certificate issuer: /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Certificate serial: 3DE48E4796FE7D29EBF0EB334C42353900C15187 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft Manifest number: 01E7 Signing time: Mon 21 Jul 2025 20:42:22 +0000 Manifest this update: Mon 21 Jul 2025 20:37:22 +0000 Manifest next update: Fri 25 Jul 2025 00:42:22 +0000 Files and hashes: 1: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: S3FgE0+gcaLyx6nH2zsRG+Hi0BgVRkLf/ndGC4F7z/0=) 2: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: rOAF+Xmimm1wpHwTT5xb5GN771pLf/3Ipe1/1h9oX6Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 00:42:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e4:8e:47:96:fe:7d:29:eb:f0:eb:33:4c:42:35:39:00:c1:51:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Validity Not Before: Jul 21 20:37:22 2025 GMT Not After : Jul 25 00:42:22 2025 GMT Subject: CN=DC3437131B1EF7DFA52CDF1D1AA8FE351717341B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:75:0b:55:4b:ba:e7:fa:7c:72:50:70:fa: 4c:b9:10:d4:f3:d5:31:6e:da:b8:95:f1:be:dd:a4: 26:59:38:4a:a7:18:45:ba:87:45:10:5f:a1:40:d9: 8f:0f:c7:f9:fa:14:52:66:29:ce:12:d4:c5:b7:c5: 9d:8b:e2:6f:b0:e0:a1:2d:e3:a3:35:96:7e:fa:93: 30:61:e5:b8:10:e0:53:cc:0b:93:91:02:27:00:a4: 78:45:8a:31:c1:89:8a:1f:b2:af:26:fe:bb:e1:b7: 8a:38:06:92:9b:bb:1a:f2:dd:9e:c6:9a:e9:fc:55: 0e:b8:a6:56:a0:a4:a3:82:0d:21:88:fb:de:ee:ab: 18:da:03:f8:7d:d6:d8:ec:1b:00:cb:fd:c3:93:3b: a0:03:9c:87:82:b0:04:b6:fc:41:7c:86:c9:87:59: fa:5f:c5:2a:44:5e:6d:c4:96:a6:16:43:c4:58:1b: 03:c1:be:51:66:0a:13:42:2c:23:75:f3:43:80:b5: 4f:27:5d:f4:85:56:10:e3:af:ce:dc:3f:84:dd:a3: 5e:b0:69:8b:fb:f7:1a:f3:ad:9c:f7:ba:4d:9b:d4: 99:a8:35:10:e0:6b:75:83:00:82:ec:97:87:87:3d: 1e:fe:96:2f:43:5b:9b:75:73:63:17:fb:97:fb:b6: ee:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:34:37:13:1B:1E:F7:DF:A5:2C:DF:1D:1A:A8:FE:35:17:17:34:1B X509v3 Authority Key Identifier: keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:eb:0e:e3:c8:17:2a:2d:a8:7e:a1:71:ef:9f:85:f1:44:e7: 9d:65:6c:48:31:55:db:b6:71:c1:61:b2:bd:78:6e:23:79:0d: 65:16:1a:8a:4f:ce:c0:e0:ba:c3:73:ec:63:53:6d:c7:d1:59: 3e:5a:da:31:d4:6a:c2:c4:22:d7:0a:d6:0b:0e:58:29:07:e0: 51:78:cf:ce:82:ec:4e:18:59:cd:b2:53:d2:52:b7:91:43:ec: b9:12:be:09:69:63:de:70:84:30:cc:4d:85:1e:68:4a:26:a5: e5:1e:bb:3f:c7:d7:6a:09:74:ea:c6:d4:6a:e2:80:e8:ab:5b: 03:ec:8f:14:98:4d:d3:2f:93:36:15:df:8a:25:ba:82:10:64: 54:1b:05:00:96:7c:a7:89:29:e4:d9:b8:22:73:c7:51:39:d5: 87:53:92:c5:37:f2:4b:41:69:14:3f:15:82:c9:2e:ea:88:fe: f3:dd:2b:73:b4:8b:f6:77:cd:09:53:82:0a:b9:2f:fe:e5:bd: e4:27:68:89:c6:90:b4:5b:41:80:d1:d7:76:38:db:3b:2f:23: 0d:76:f2:fe:b6:38:0e:b0:5b:1f:c7:72:41:92:61:0a:fe:8d: 11:11:27:9a:48:50:45:ba:b1:a9:e6:57:85:e6:fa:2d:ba:88: f3:98:c4:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPeSOR5b+fSnr8OszTEI1OQDBUYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRC NEI0RTc4NjAeFw0yNTA3MjEyMDM3MjJaFw0yNTA3MjUwMDQyMjJaMDMxMTAvBgNV BAMTKERDMzQzNzEzMUIxRUY3REZBNTJDREYxRDFBQThGRTM1MTcxNzM0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHv3ULVUu65/p8clBw+ky5ENTz 1TFu2riV8b7dpCZZOEqnGEW6h0UQX6FA2Y8Px/n6FFJmKc4S1MW3xZ2L4m+w4KEt 46M1ln76kzBh5bgQ4FPMC5ORAicApHhFijHBiYofsq8m/rvht4o4BpKbuxry3Z7G mun8VQ64plagpKOCDSGI+97uqxjaA/h91tjsGwDL/cOTO6ADnIeCsAS2/EF8hsmH WfpfxSpEXm3ElqYWQ8RYGwPBvlFmChNCLCN180OAtU8nXfSFVhDjr87cP4Tdo16w aYv79xrzrZz3uk2b1JmoNRDga3WDAILsl4eHPR7+li9DW5t1c2MX+5f7tu6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3DQ3Exse99+lLN8dGqj+NRcXNBswHwYDVR0j BBgwFoAUQQcarwwOa9hId2gDNLT2BLS054YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTI3YjNlMS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMC80MTA3MUFBRjBD MEU2QkQ4NDg3NzY4MDMzNEI0RjYwNEI0QjRFNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRCNEI0 RTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UyN2IzZTEtZjYxMS00YWZlLTlh NDktNWZhNGZkNTU3NjUzLzAvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2 MDRCNEI0RTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLrDuPIFyotqH6hce+fhfFE551lbEgxVdu2 ccFhsr14biN5DWUWGopPzsDgusNz7GNTbcfRWT5a2jHUasLEItcK1gsOWCkH4FF4 z86C7E4YWc2yU9JSt5FD7LkSvglpY95whDDMTYUeaEompeUeuz/H12oJdOrG1Gri gOirWwPsjxSYTdMvkzYV34oluoIQZFQbBQCWfKeJKeTZuCJzx1E51YdTksU38ktB aRQ/FYLJLuqI/vPdK3O0i/Z3zQlTggq5L/7lveQnaInGkLRbQYDR13Y42zsvIw12 8v62OA6wWx/HckGSYQr+jRERJ5pIUEW6sanmV4Xm+i26iPOYxLU= -----END CERTIFICATE-----Generated at Wed Jul 23 02:11:41 2025 by rpki-client