$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: rLaSpNr394Ue2bq0RyBatdpCzdA3ta4YrJItuaYXzD0= Subject key identifier: F2:05:BE:AA:F5:66:8D:91:B8:C2:5A:05:9E:88:3B:EE:D6:14:E0:6C Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 49CF9653FBEC01BF652BECEDB415820AAC8C2CED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: DD Signing time: Sun 20 Jul 2025 13:10:34 +0000 Manifest this update: Sun 20 Jul 2025 13:05:34 +0000 Manifest next update: Wed 23 Jul 2025 17:14:34 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) 2: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: ygFuS65mbHhiAFj7xS6q6i5QW2ukVo9ZyXrmgxVDfGk=) 3: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) 4: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 17:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:cf:96:53:fb:ec:01:bf:65:2b:ec:ed:b4:15:82:0a:ac:8c:2c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Jul 20 13:05:34 2025 GMT Not After : Jul 23 17:14:34 2025 GMT Subject: CN=F205BEAAF5668D91B8C25A059E883BEED614E06C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:00:31:c6:f0:b0:2b:aa:a8:3e:17:c0:e4: 53:0f:ed:22:fc:2f:58:63:6c:93:74:a7:5a:da:e9: 26:40:fb:93:d4:ef:e3:54:38:9e:32:62:43:ca:41: 51:1f:41:46:fc:20:3f:2d:ae:7b:e7:cf:64:f6:27: 86:99:04:3c:09:f5:23:2b:a8:73:af:74:9f:c8:e8: 26:63:aa:cb:a9:c6:df:24:e8:2a:28:73:b4:a6:13: ef:71:45:37:b0:95:f5:6b:0a:aa:cd:a1:c0:a6:71: e9:f7:bd:25:6e:67:d7:9d:ef:e8:0f:aa:be:05:cb: a2:d0:d6:30:49:99:d4:76:5e:13:07:6f:f8:f4:89: 83:90:7d:af:14:06:57:e4:2e:99:e6:5e:e1:cb:cf: 06:a4:14:43:d6:9d:42:75:25:d5:74:be:4e:9d:db: 10:ba:ff:92:79:61:52:76:44:97:70:0e:1a:c0:8a: 24:46:8e:9a:f9:05:5e:94:41:01:de:41:4e:56:19: 14:11:62:05:eb:5f:8a:94:06:5a:90:87:b5:e9:06: cb:fe:4a:1b:1f:ab:08:80:53:61:96:56:6e:1d:ee: 7f:14:a8:b2:f5:5e:de:73:87:0c:39:96:3e:d8:d9: a8:ea:65:5f:c4:82:57:1e:67:b8:ae:bc:d7:1d:87: 3e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:05:BE:AA:F5:66:8D:91:B8:C2:5A:05:9E:88:3B:EE:D6:14:E0:6C X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:35:81:dc:a2:15:e0:0b:9f:5f:b8:29:54:0a:f2:08:82:c8: 19:11:6f:e9:17:f6:b6:bd:99:db:27:23:c9:e0:82:d4:68:37: 3d:b4:38:1b:6a:40:f3:91:7b:ff:7d:bd:c0:e1:b3:94:f0:8a: ed:ee:eb:6c:f9:92:ac:7d:4c:69:97:50:f0:ed:82:31:d4:79: 1b:25:60:37:a2:6b:ac:9f:18:ec:18:46:48:8b:30:16:01:79: 5c:3c:35:84:09:61:a1:40:94:cc:0e:50:b0:3f:cf:f0:2d:a7: 08:0b:6f:34:b6:c4:72:e8:75:1b:e8:08:08:24:49:d0:87:d8: 6c:ae:f5:87:b7:cf:c6:2b:62:ef:98:6d:bc:b9:15:81:4d:85: 4e:83:75:83:89:1e:b1:7e:5d:34:cd:97:d6:27:ca:ed:3f:bc: 8e:17:12:c1:13:c3:2b:bd:f4:9c:c8:e8:56:a8:01:5f:31:53: b2:76:e0:e7:50:a3:7a:7e:17:43:26:38:74:1a:65:e5:bb:1d: a4:ed:aa:61:39:50:9f:91:e4:13:b7:c5:7c:e7:23:8e:e3:13: 4b:c0:1e:90:45:23:04:d8:66:09:8b:97:7a:42:40:90:0a:31: e9:83:a6:2b:ae:e8:e3:4e:1b:02:d6:05:5c:0a:85:f0:55:95: d3:73:41:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSc+WU/vsAb9lK+zttBWCCqyMLO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNTA3MjAxMzA1MzRaFw0yNTA3MjMxNzE0MzRaMDMxMTAvBgNV BAMTKEYyMDVCRUFBRjU2NjhEOTFCOEMyNUEwNTlFODgzQkVFRDYxNEUwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf9wAxxvCwK6qoPhfA5FMP7SL8 L1hjbJN0p1ra6SZA+5PU7+NUOJ4yYkPKQVEfQUb8ID8trnvnz2T2J4aZBDwJ9SMr qHOvdJ/I6CZjqsupxt8k6Cooc7SmE+9xRTewlfVrCqrNocCmcen3vSVuZ9ed7+gP qr4Fy6LQ1jBJmdR2XhMHb/j0iYOQfa8UBlfkLpnmXuHLzwakFEPWnUJ1JdV0vk6d 2xC6/5J5YVJ2RJdwDhrAiiRGjpr5BV6UQQHeQU5WGRQRYgXrX4qUBlqQh7XpBsv+ ShsfqwiAU2GWVm4d7n8UqLL1Xt5zhww5lj7Y2ajqZV/EglceZ7iuvNcdhz6hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8gW+qvVmjZG4wloFnog77tYU4GwwHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGU1gdyiFeALn1+4KVQK8giCyBkRb+kX9ra9 mdsnI8nggtRoNz20OBtqQPORe/99vcDhs5Twiu3u62z5kqx9TGmXUPDtgjHUeRsl YDeia6yfGOwYRkiLMBYBeVw8NYQJYaFAlMwOULA/z/AtpwgLbzS2xHLodRvoCAgk SdCH2Gyu9Ye3z8YrYu+Ybby5FYFNhU6DdYOJHrF+XTTNl9Ynyu0/vI4XEsETwyu9 9JzI6FaoAV8xU7J24OdQo3p+F0MmOHQaZeW7HaTtqmE5UJ+R5BO3xXznI47jE0vA HpBFIwTYZgmLl3pCQJAKMemDpiuu6ONOGwLWBVwKhfBVldNzQUY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:03:53 2025 by rpki-client