$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: n8YXFBsI4pcKDGB9VcF+kbgKOvA0fz/AjR0xcVSXNCY= Subject key identifier: FC:68:BB:7A:DB:F5:7C:06:E9:70:56:AE:93:89:11:6F:F1:FC:89:72 Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 199C6953DF9C2C39CE1BE14CCCA7936BD0E1B498 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: F3 Signing time: Mon 08 Sep 2025 03:00:35 +0000 Manifest this update: Mon 08 Sep 2025 02:55:35 +0000 Manifest next update: Thu 11 Sep 2025 04:47:35 +0000 Files and hashes: 1: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) 2: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) 3: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: AaCvoIYZycukJunJl6xZuGWgUMpF7HDKKDoLP4xU5oY=) 4: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 04:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9c:69:53:df:9c:2c:39:ce:1b:e1:4c:cc:a7:93:6b:d0:e1:b4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Sep 8 02:55:35 2025 GMT Not After : Sep 11 04:47:35 2025 GMT Subject: CN=FC68BB7ADBF57C06E97056AE9389116FF1FC8972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5a:97:9d:f1:73:79:91:c8:30:6e:ed:d0:a5: 91:13:fb:6b:4c:d8:1f:5e:23:37:b8:ad:07:60:dc: c8:c0:43:f2:17:c2:60:27:42:e1:ef:d8:2c:de:df: c3:33:dc:eb:e7:37:01:4c:d7:b2:28:1b:8d:78:9d: 95:26:28:17:f0:ca:11:27:f4:08:29:45:69:36:33: d5:ba:5f:44:0e:a7:33:ac:f3:c1:86:0c:cd:15:45: e0:6c:05:b2:8c:82:18:cd:d4:1f:05:2d:81:01:e6: 0d:03:18:3c:0b:13:3c:a8:b3:d5:27:6d:34:f9:69: 9d:43:f7:32:32:8e:a0:fd:69:6e:f8:03:a5:90:10: 74:98:ad:4a:1e:aa:46:fb:4a:84:d4:42:55:7e:32: 42:62:9a:65:b8:c9:bf:2b:ed:41:b9:2b:b7:f1:52: b1:38:4d:8c:d8:85:98:f7:92:57:32:f5:9a:67:bd: 05:00:b8:e7:fc:5f:f6:0c:2d:94:ae:f6:97:b8:af: 06:57:c3:a7:0e:0b:89:05:fd:e7:eb:0e:13:d2:1b: ff:33:4c:8b:1b:3a:05:0b:00:7d:34:5c:72:6d:b4: 8e:fc:1a:2f:cf:f7:19:3b:06:4f:e4:c9:e4:27:11: ba:45:b2:ef:c5:97:49:af:f7:6a:22:fb:55:b5:5f: fc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:68:BB:7A:DB:F5:7C:06:E9:70:56:AE:93:89:11:6F:F1:FC:89:72 X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d4:cc:26:d2:ee:23:17:54:95:e8:d1:60:7b:8e:ed:5c:f6: 01:e7:e6:be:93:a9:a0:0b:0b:3f:26:8a:d8:25:9c:8d:70:9d: 88:44:1d:99:45:6d:05:8c:3a:83:b1:ad:d3:04:d8:25:f6:b5: 82:13:49:dd:29:0a:ea:fb:88:a4:8b:7d:e8:39:44:20:77:34: 48:19:c4:93:fc:33:ee:3a:61:8d:19:8c:59:de:78:7e:95:54: 66:3b:cf:a5:ae:d4:c5:d7:bb:bf:26:b3:f0:d1:62:04:29:b0: fc:9f:8f:7f:6b:71:3b:3e:86:eb:33:24:db:97:a6:78:6c:d2: d4:20:8e:2a:77:1d:78:ba:df:a7:c3:49:4b:99:f7:eb:80:94: c0:bd:76:36:b8:d5:3f:c6:10:d3:ab:92:53:35:38:b6:c3:f5: 2d:ad:76:47:35:ad:79:fb:a3:0e:4d:75:88:28:e0:48:4b:c0: 4a:f7:d5:5b:00:9c:a8:00:0c:bd:4d:ab:ef:30:81:33:d6:a6: 1a:6b:68:01:6b:50:b8:09:80:4f:d5:9c:0a:15:12:4c:51:ec: d5:9c:02:e0:dc:c1:71:48:2a:a8:5c:43:8a:ae:2f:1c:d0:e7: 01:21:c6:2b:9f:29:53:37:2a:cc:c0:94:49:23:ae:a7:39:ef: ab:d0:87:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZxpU9+cLDnOG+FMzKeTa9DhtJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNTA5MDgwMjU1MzVaFw0yNTA5MTEwNDQ3MzVaMDMxMTAvBgNV BAMTKEZDNjhCQjdBREJGNTdDMDZFOTcwNTZBRTkzODkxMTZGRjFGQzg5NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtWped8XN5kcgwbu3QpZET+2tM 2B9eIze4rQdg3MjAQ/IXwmAnQuHv2Cze38Mz3OvnNwFM17IoG414nZUmKBfwyhEn 9AgpRWk2M9W6X0QOpzOs88GGDM0VReBsBbKMghjN1B8FLYEB5g0DGDwLEzyos9Un bTT5aZ1D9zIyjqD9aW74A6WQEHSYrUoeqkb7SoTUQlV+MkJimmW4yb8r7UG5K7fx UrE4TYzYhZj3klcy9ZpnvQUAuOf8X/YMLZSu9pe4rwZXw6cOC4kF/efrDhPSG/8z TIsbOgULAH00XHJttI78Gi/P9xk7Bk/kyeQnEbpFsu/Fl0mv92oi+1W1X/xVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Gi7etv1fAbpcFauk4kRb/H8iXIwHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/UzCbS7iMXVJXo0WB7ju1c9gHn5r6TqaAL Cz8mitglnI1wnYhEHZlFbQWMOoOxrdME2CX2tYITSd0pCur7iKSLfeg5RCB3NEgZ xJP8M+46YY0ZjFneeH6VVGY7z6Wu1MXXu78ms/DRYgQpsPyfj39rcTs+huszJNuX pnhs0tQgjip3HXi636fDSUuZ9+uAlMC9dja41T/GENOrklM1OLbD9S2tdkc1rXn7 ow5NdYgo4EhLwEr31VsAnKgADL1Nq+8wgTPWphpraAFrULgJgE/VnAoVEkxR7NWc AuDcwXFIKqhcQ4quLxzQ5wEhxiufKVM3KszAlEkjrqc576vQh1o= -----END CERTIFICATE-----Generated at Mon Sep 8 10:38:20 2025 by rpki-client