$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: ZS8nfGdSLYxmQ4J/go+l5TEw+G85zzBZ/YgTPYIEBiM= Subject key identifier: B5:68:3B:90:E2:B5:6C:A1:13:AD:A1:43:CE:AD:BF:E8:1B:9F:8A:94 Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 1C1009539182DA4D049CA05085AD11D731829ACC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: C9 Signing time: Fri 06 Jun 2025 02:20:35 +0000 Manifest this update: Fri 06 Jun 2025 02:15:35 +0000 Manifest next update: Mon 09 Jun 2025 11:17:35 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) 2: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: Lz5vBwSuA7W3kAVyvR50tIhdB2dOxB5oKngL6seBlpE=) 3: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) 4: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:10:09:53:91:82:da:4d:04:9c:a0:50:85:ad:11:d7:31:82:9a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Jun 6 02:15:35 2025 GMT Not After : Jun 9 11:17:35 2025 GMT Subject: CN=B5683B90E2B56CA113ADA143CEADBFE81B9F8A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:28:36:50:04:bc:38:7f:32:c2:81:14:ac: 8e:2a:87:8b:3e:21:06:63:ee:fc:fc:3c:4e:fe:6a: eb:e0:cf:9a:a2:b7:8f:b5:10:88:2d:03:3a:bb:e6: 17:19:5d:7f:16:b5:a8:ff:79:70:70:3c:52:ea:25: 49:90:63:62:3b:46:21:d4:14:eb:a8:25:74:4e:cf: ef:c3:ea:9b:cf:6e:6d:f8:a4:81:f0:7a:8f:ba:70: e6:ef:7c:95:b7:c6:ed:36:9d:1d:34:e9:a8:c4:cd: 81:57:70:e0:79:44:8b:17:b0:12:0f:c8:f5:3c:3c: e2:78:f4:2e:ce:58:e5:d3:83:65:91:0d:0f:b0:ab: a9:42:f1:6d:5e:59:04:d3:48:2e:0a:6e:3d:98:48: 9d:c2:b3:73:89:b3:d2:44:8b:21:74:9d:9d:66:38: 84:4a:d6:b2:d5:fa:4c:7c:51:b6:6f:62:2e:ce:d9: f3:94:08:bc:8f:7d:10:35:0d:fe:e5:dd:2d:c3:f4: ee:95:f4:c4:58:5f:36:93:56:06:7a:a1:bc:72:99: 91:11:4a:a8:ce:63:29:eb:93:c7:9e:dd:70:9a:ee: c9:16:a4:86:9a:f3:db:f7:65:33:5d:b8:89:61:60: a2:40:85:b6:83:e8:ac:65:20:93:6a:88:52:86:c5: f1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:68:3B:90:E2:B5:6C:A1:13:AD:A1:43:CE:AD:BF:E8:1B:9F:8A:94 X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2d:fd:50:cb:82:14:4d:30:30:b8:f3:ec:64:ff:ac:a4:3b: c3:48:c3:3e:49:6c:8c:27:08:13:4c:96:71:6c:53:ad:2a:51: df:fa:8a:66:0a:60:99:76:b3:37:d4:e4:19:aa:a0:1c:a8:d8: ae:f6:82:56:58:1a:72:c0:50:f8:f4:5b:e2:ee:92:07:11:21: 45:c0:e7:05:4b:7d:d4:bc:23:df:db:dc:ca:90:c7:b4:99:b0: 7a:2f:0a:af:7b:2f:8f:18:c9:6d:b0:dd:48:71:26:44:59:b6: 8b:c9:8c:ee:9d:18:18:d1:6c:7e:6c:8c:17:2e:bb:a2:46:7a: a4:c5:cb:6f:b6:fa:8e:14:fb:2c:e8:3f:2f:fc:3e:24:f8:7a: d4:74:73:39:04:e7:98:c0:bc:20:dd:0b:fe:25:e2:37:7c:17: 20:15:a1:2a:10:68:38:cf:23:fd:95:7e:95:c9:88:77:8a:de: a5:c4:cd:51:81:59:7c:c1:ef:a3:da:09:12:b1:92:fc:08:7e: fb:b9:c6:8e:14:d7:d4:ff:67:a9:32:c2:eb:a7:05:90:04:eb: 47:5a:13:6c:2c:c7:37:d4:5c:8f:cb:22:ed:c3:c2:c7:fa:73: 48:5b:51:51:22:ae:cc:d8:b5:46:62:a5:91:3a:c4:5b:5e:21: ee:2c:4a:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHBAJU5GC2k0EnKBQha0R1zGCmswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNTA2MDYwMjE1MzVaFw0yNTA2MDkxMTE3MzVaMDMxMTAvBgNV BAMTKEI1NjgzQjkwRTJCNTZDQTExM0FEQTE0M0NFQURCRkU4MUI5RjhBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKyg2UAS8OH8ywoEUrI4qh4s+ IQZj7vz8PE7+auvgz5qit4+1EIgtAzq75hcZXX8Wtaj/eXBwPFLqJUmQY2I7RiHU FOuoJXROz+/D6pvPbm34pIHweo+6cObvfJW3xu02nR006ajEzYFXcOB5RIsXsBIP yPU8POJ49C7OWOXTg2WRDQ+wq6lC8W1eWQTTSC4Kbj2YSJ3Cs3OJs9JEiyF0nZ1m OIRK1rLV+kx8UbZvYi7O2fOUCLyPfRA1Df7l3S3D9O6V9MRYXzaTVgZ6obxymZER SqjOYynrk8ee3XCa7skWpIaa89v3ZTNduIlhYKJAhbaD6KxlIJNqiFKGxfHfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtWg7kOK1bKETraFDzq2/6BufipQwHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8t/VDLghRNMDC48+xk/6ykO8NIwz5JbIwn CBNMlnFsU60qUd/6imYKYJl2szfU5BmqoByo2K72glZYGnLAUPj0W+LukgcRIUXA 5wVLfdS8I9/b3MqQx7SZsHovCq97L48YyW2w3UhxJkRZtovJjO6dGBjRbH5sjBcu u6JGeqTFy2+2+o4U+yzoPy/8PiT4etR0czkE55jAvCDdC/4l4jd8FyAVoSoQaDjP I/2VfpXJiHeK3qXEzVGBWXzB76PaCRKxkvwIfvu5xo4U19T/Z6kywuunBZAE60da E2wsxzfUXI/LIu3Dwsf6c0hbUVEirszYtUZipZE6xFteIe4sSio= -----END CERTIFICATE-----Generated at Fri Jun 6 04:58:29 2025 by rpki-client