$ rpki-client -vvf repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft File: 41820333252DF92B1DBA238F558CC8D822C768EF.mft (raw, json) Hash identifier: bYQOhg4WuN459Z3eF5dN4s/1P0Y6aeOv1c7oRnErUko= Subject key identifier: 83:20:0E:68:C3:28:50:94:9D:7D:97:A9:60:A4:B5:EB:9E:CC:8F:4E Authority key identifier: 41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF Certificate issuer: /CN=41820333252DF92B1DBA238F558CC8D822C768EF Certificate serial: 41F411B971148B333E45E0A0EB1F706D4C581E3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft Manifest number: 018B Signing time: Tue 22 Jul 2025 01:01:10 +0000 Manifest this update: Tue 22 Jul 2025 00:56:10 +0000 Manifest next update: Fri 25 Jul 2025 10:03:10 +0000 Files and hashes: 1: 3130332e36392e36312e302f32342d3234203d3e20313530353239.roa (hash: eG3L50RlSnDUuOVwkVlYnQebEQc3JXkDObYN4u0w6z8=) 2: 41820333252DF92B1DBA238F558CC8D822C768EF.crl (hash: ItfrqGcmgpSPvoBAc6xUgtcumsAEQSlbn/gA208w3jk=) 3: 3130332e36392e36302e302f32342d3234203d3e20313530353239.roa (hash: Y9d4RL5lwPJKIYYz/S5GmByBdyf8v8c66+665Lm4cNc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 10:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f4:11:b9:71:14:8b:33:3e:45:e0:a0:eb:1f:70:6d:4c:58:1e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41820333252DF92B1DBA238F558CC8D822C768EF Validity Not Before: Jul 22 00:56:10 2025 GMT Not After : Jul 25 10:03:10 2025 GMT Subject: CN=83200E68C32850949D7D97A960A4B5EB9ECC8F4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3e:f3:19:09:19:01:f3:d3:64:7a:7a:db:d0: 2a:3a:5c:66:a4:81:ce:5a:1c:21:a2:82:c6:ab:0a: ec:17:91:3d:a9:2b:e5:e1:c2:9b:0e:0d:c2:fe:4d: 0c:23:1c:8c:b8:aa:75:1a:f6:3a:28:6b:63:b3:5f: 8f:6e:16:44:ef:19:16:97:50:05:f8:0f:d8:ca:08: 6a:94:e9:e3:55:64:eb:85:de:cd:1e:47:c3:50:b9: b2:d2:73:7e:a8:1f:3b:52:a9:8f:7d:b2:4c:56:ec: 27:15:63:06:60:13:4e:4c:05:f3:fc:b1:cb:f1:2a: 17:3b:4c:22:d9:70:64:bd:48:1f:35:80:3a:ed:de: 70:d0:01:d4:da:75:7d:7e:38:86:88:7f:bc:d6:dc: 46:2d:ae:13:b9:7b:ad:fa:e8:21:84:e9:ae:3d:a9: 27:97:ee:8d:cc:9e:61:27:b2:c6:71:5b:ec:4a:d6: ae:86:fb:bf:36:bf:c4:5e:08:23:91:33:14:d3:3b: a4:b3:3b:93:39:7d:90:a2:63:50:70:99:8f:2a:ad: 39:5f:59:9c:a8:8a:14:99:97:a7:73:af:16:21:63: 8a:9d:60:23:3f:5e:3a:33:d9:66:e3:3b:86:5a:78: ae:5c:8f:a4:28:1e:04:03:a3:71:85:51:d5:3d:e9: 04:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:20:0E:68:C3:28:50:94:9D:7D:97:A9:60:A4:B5:EB:9E:CC:8F:4E X509v3 Authority Key Identifier: keyid:41:82:03:33:25:2D:F9:2B:1D:BA:23:8F:55:8C:C8:D8:22:C7:68:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41820333252DF92B1DBA238F558CC8D822C768EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85971ae9-5cdd-4d41-b62a-5c284aa8098e/0/41820333252DF92B1DBA238F558CC8D822C768EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:5b:2f:5f:ce:63:dd:63:c9:e0:b9:ae:8e:42:77:e5:d5:37: fa:b8:b7:5a:e4:c6:f8:1f:58:35:33:03:d8:40:32:a9:80:3a: 0b:5d:55:fd:72:95:47:f5:6c:4c:18:2d:3e:22:eb:8e:26:42: 00:0b:04:5d:3e:ec:1e:ac:86:09:af:d5:65:ed:d1:7f:63:27: 02:0b:31:3c:95:98:e4:1b:9b:93:d1:dd:81:19:11:cb:f8:73: cb:8a:e2:08:16:00:d3:b5:89:fc:b8:fa:49:19:53:f2:ff:dc: 5c:78:45:c2:0b:9f:59:2b:f5:b6:85:12:3f:8e:a5:6d:e4:38: 7a:e3:4a:27:39:67:c1:3d:f0:1c:be:9e:d0:40:95:dc:e9:28: c3:ef:74:6d:2f:b5:3a:64:cb:99:8b:49:a8:ec:a7:55:1c:3e: c4:d0:3e:2d:4c:29:f4:57:d0:e4:16:83:79:2f:a8:86:d4:a0: f7:6c:e1:fe:55:0d:2c:53:a7:66:56:6d:ad:81:66:79:fa:39: c1:84:57:8f:12:7d:2d:6f:b0:54:9e:20:dd:37:5b:d3:b9:91: 22:f5:f3:be:96:f2:e0:63:12:7d:e2:5c:e3:86:8e:8a:07:cb: 74:49:a0:19:8a:ab:99:1a:80:3f:e2:e6:1f:a8:fe:20:80:56: a2:57:29:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQfQRuXEUizM+ReCg6x9wbUxYHj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgy MkM3NjhFRjAeFw0yNTA3MjIwMDU2MTBaFw0yNTA3MjUxMDAzMTBaMDMxMTAvBgNV BAMTKDgzMjAwRTY4QzMyODUwOTQ5RDdEOTdBOTYwQTRCNUVCOUVDQzhGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPvMZCRkB89Nkenrb0Co6XGak gc5aHCGigsarCuwXkT2pK+XhwpsODcL+TQwjHIy4qnUa9jooa2OzX49uFkTvGRaX UAX4D9jKCGqU6eNVZOuF3s0eR8NQubLSc36oHztSqY99skxW7CcVYwZgE05MBfP8 scvxKhc7TCLZcGS9SB81gDrt3nDQAdTadX1+OIaIf7zW3EYtrhO5e6366CGE6a49 qSeX7o3MnmEnssZxW+xK1q6G+782v8ReCCORMxTTO6SzO5M5fZCiY1BwmY8qrTlf WZyoihSZl6dzrxYhY4qdYCM/Xjoz2WbjO4ZaeK5cj6QoHgQDo3GFUdU96QRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgyAOaMMoUJSdfZepYKS1657Mj04wHwYDVR0j BBgwFoAUQYIDMyUt+SsduiOPVYzI2CLHaO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NTk3MWFlOS01Y2RkLTRkNDEtYjYyYS01YzI4NGFhODA5OGUvMC80MTgyMDMzMzI1 MkRGOTJCMURCQTIzOEY1NThDQzhEODIyQzc2OEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4RDgyMkM3 NjhFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODU5NzFhZTktNWNkZC00ZDQxLWI2 MmEtNWMyODRhYTgwOThlLzAvNDE4MjAzMzMyNTJERjkyQjFEQkEyMzhGNTU4Q0M4 RDgyMkM3NjhFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9bL1/OY91jyeC5ro5Cd+XVN/q4t1rkxvgf WDUzA9hAMqmAOgtdVf1ylUf1bEwYLT4i644mQgALBF0+7B6shgmv1WXt0X9jJwIL MTyVmOQbm5PR3YEZEcv4c8uK4ggWANO1ify4+kkZU/L/3Fx4RcILn1kr9baFEj+O pW3kOHrjSic5Z8E98By+ntBAldzpKMPvdG0vtTpky5mLSajsp1UcPsTQPi1MKfRX 0OQWg3kvqIbUoPds4f5VDSxTp2ZWba2BZnn6OcGEV48SfS1vsFSeIN03W9O5kSL1 876W8uBjEn3iXOOGjooHy3RJoBmKq5kagD/i5h+o/iCAVqJXKWA= -----END CERTIFICATE-----Generated at Tue Jul 22 20:52:12 2025 by rpki-client