$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json) Hash identifier: qVAJbu1gF1/y7cPSEp9psoxPe913DdB/kjAeTScO0fc= Subject key identifier: AB:73:D6:39:B4:3A:7E:4B:1E:93:EA:7D:DC:88:14:AB:B2:7B:AA:7C Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Certificate serial: 3FC1C84B76344E8C9911D8FB58657B6E97C1670B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft Manifest number: 0523 Signing time: Thu 13 Nov 2025 02:13:03 +0000 Manifest this update: Thu 13 Nov 2025 02:08:03 +0000 Manifest next update: Sun 16 Nov 2025 06:00:03 +0000 Files and hashes: 1: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: qk2K9tsVKADc9K/AUl8+l2y0KBigmRK4m2sqSYNI9lE=) 2: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: 4Nmw1fLmOShLUzPpmEzdZOQ+qEZBBauKqV3+7mgcSNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Nov 2025 06:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c1:c8:4b:76:34:4e:8c:99:11:d8:fb:58:65:7b:6e:97:c1:67:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Validity Not Before: Nov 13 02:08:03 2025 GMT Not After : Nov 16 06:00:03 2025 GMT Subject: CN=AB73D639B43A7E4B1E93EA7DDC8814ABB27BAA7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:99:16:d8:d8:c8:88:73:d9:73:d7:a7:77:20: 7d:2f:3b:a9:b8:0f:c1:65:f2:c5:b8:e2:23:54:9c: dc:3f:56:fe:51:a8:82:8d:2e:f9:5d:95:42:75:64: fb:2c:06:66:1b:e3:96:d6:40:4e:96:da:31:ac:5e: 31:19:a0:8b:7b:22:3e:b1:66:7c:05:de:1a:c4:2b: a5:47:a4:df:16:1e:fb:d3:fa:7b:00:8f:b4:54:e3: 31:34:49:ec:99:7e:09:f0:7a:7b:e7:3a:6a:ad:93: ec:26:ff:86:e9:f2:cf:10:fe:02:4d:2d:7a:8b:46: 8b:b5:d7:e7:a5:db:7a:a4:8e:0d:bc:6e:47:fd:eb: c6:e0:07:df:81:13:d6:10:ce:fe:8d:d6:da:7c:95: d5:3f:d3:75:fa:c3:8b:41:3d:6d:d3:e8:2a:21:12: 94:67:66:41:13:8d:51:e3:a9:a1:33:85:8a:99:5a: c8:f6:90:99:d5:eb:34:2e:22:5e:27:ef:cd:e5:8b: c1:bc:55:ca:e9:33:75:75:0a:66:98:e4:28:cf:a6: 00:0e:2b:47:5a:2f:79:32:ff:44:7f:bd:61:b1:a8: ad:cb:39:e6:4c:02:96:38:8d:8e:45:56:ff:4c:a8: 4a:01:fb:c0:61:8f:30:61:eb:b4:23:29:c5:ac:a5: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:73:D6:39:B4:3A:7E:4B:1E:93:EA:7D:DC:88:14:AB:B2:7B:AA:7C X509v3 Authority Key Identifier: keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3a:d7:dd:26:e4:5c:02:09:67:a7:21:01:57:3c:63:84:5c: 23:77:dd:4d:58:52:4e:e5:3b:eb:19:b2:78:3f:3f:4e:74:68: 2c:9c:66:b9:25:af:a1:e2:16:1c:1e:e2:db:0c:2f:16:e4:fa: bc:f2:42:1a:5a:64:71:bd:4c:b1:c5:32:dc:3a:0a:bd:95:8d: f9:70:cb:94:a0:22:3c:0c:80:c8:23:59:81:41:2a:44:86:d2: e4:d8:b2:a7:fa:da:68:71:41:a0:fe:e7:50:5f:2f:e7:0f:85: 77:f3:d6:53:a0:d3:1c:d9:04:a4:9b:3f:34:cf:b7:b3:91:ab: 8d:be:94:d4:98:de:6a:ff:18:72:96:89:ad:fa:9e:fb:34:bd: 27:30:c0:09:8c:d5:91:95:22:9d:7d:74:c1:19:7d:2e:87:95: 82:32:c7:08:78:bb:f4:7b:48:8f:fb:33:58:82:af:66:f4:0d: f9:d5:29:3e:ad:5e:9a:e0:04:55:30:78:b6:85:fe:c8:47:f2: 17:d6:f9:81:b9:41:5a:7c:fb:a2:75:11:a3:f7:b7:d9:93:d7: 10:60:2a:c6:94:30:0c:0c:17:9b:47:92:6c:5b:ee:c9:30:89: 8a:ff:ef:ae:e5:d8:e5:60:4a:55:81:65:c2:36:b2:27:37:3a: 6a:e8:46:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8HIS3Y0ToyZEdj7WGV7bpfBZwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAy QTA5NjYyMDAeFw0yNTExMTMwMjA4MDNaFw0yNTExMTYwNjAwMDNaMDMxMTAvBgNV BAMTKEFCNzNENjM5QjQzQTdFNEIxRTkzRUE3RERDODgxNEFCQjI3QkFBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnmRbY2MiIc9lz16d3IH0vO6m4 D8Fl8sW44iNUnNw/Vv5RqIKNLvldlUJ1ZPssBmYb45bWQE6W2jGsXjEZoIt7Ij6x ZnwF3hrEK6VHpN8WHvvT+nsAj7RU4zE0SeyZfgnwenvnOmqtk+wm/4bp8s8Q/gJN LXqLRou11+el23qkjg28bkf968bgB9+BE9YQzv6N1tp8ldU/03X6w4tBPW3T6Coh EpRnZkETjVHjqaEzhYqZWsj2kJnV6zQuIl4n783li8G8VcrpM3V1CmaY5CjPpgAO K0daL3ky/0R/vWGxqK3LOeZMApY4jY5FVv9MqEoB+8BhjzBh67QjKcWspWZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3PWObQ6fksek+p93IgUq7J7qnwwHwYDVR0j BBgwFoAUQav3ktFBIqqmfkK9Quu44CoJZiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTQ1ZWJhYi1lYzE2LTQ1ODktYTlhNi04YTM2NjFkNDNlM2UvMC80MUFCRjc5MkQx NDEyMkFBQTY3RTQyQkQ0MkVCQjhFMDJBMDk2NjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAyQTA5 NjYyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5 YTYtOGEzNjYxZDQzZTNlLzAvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4 RTAyQTA5NjYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG46190m5FwCCWenIQFXPGOEXCN33U1YUk7l O+sZsng/P050aCycZrklr6HiFhwe4tsMLxbk+rzyQhpaZHG9TLHFMtw6Cr2Vjflw y5SgIjwMgMgjWYFBKkSG0uTYsqf62mhxQaD+51BfL+cPhXfz1lOg0xzZBKSbPzTP t7ORq42+lNSY3mr/GHKWia36nvs0vScwwAmM1ZGVIp19dMEZfS6HlYIyxwh4u/R7 SI/7M1iCr2b0DfnVKT6tXprgBFUweLaF/shH8hfW+YG5QVp8+6J1EaP3t9mT1xBg KsaUMAwMF5tHkmxb7skwiYr/767l2OVgSlWBZcI2sic3OmroRgU= -----END CERTIFICATE-----Generated at Thu Nov 13 20:02:10 2025 by rpki-client