$ rpki-client -vvf repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft File: 41ABF792D14122AAA67E42BD42EBB8E02A096620.mft (raw, json) Hash identifier: C/mfPGc9x5aJh8UQnke/IIXocHmOjMF9pOxiPTjpXVc= Subject key identifier: 63:0E:42:89:77:2E:E2:B4:F1:D2:87:36:A0:C0:A6:9F:25:CA:DE:53 Authority key identifier: 41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 Certificate issuer: /CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Certificate serial: 145A39B24117B5F0559EFEC7F9AAC2F20F4068B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft Manifest number: 04DC Signing time: Fri 06 Jun 2025 22:32:26 +0000 Manifest this update: Fri 06 Jun 2025 22:27:26 +0000 Manifest next update: Tue 10 Jun 2025 04:19:26 +0000 Files and hashes: 1: 41ABF792D14122AAA67E42BD42EBB8E02A096620.crl (hash: /slGGV5YtfTQFtLlP60kAdRJx0PRJwFG5TXfcmmHZyE=) 2: 3130332e39352e34302e302f32322d3234203d3e203538343935.roa (hash: 4Nmw1fLmOShLUzPpmEzdZOQ+qEZBBauKqV3+7mgcSNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5a:39:b2:41:17:b5:f0:55:9e:fe:c7:f9:aa:c2:f2:0f:40:68:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41ABF792D14122AAA67E42BD42EBB8E02A096620 Validity Not Before: Jun 6 22:27:26 2025 GMT Not After : Jun 10 04:19:26 2025 GMT Subject: CN=630E4289772EE2B4F1D28736A0C0A69F25CADE53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e4:21:a3:2d:3b:62:ab:d5:f7:6a:c9:67:da: b0:57:25:0e:c2:10:25:b9:72:cb:95:d3:65:11:a6: 47:bf:6b:c7:71:fd:02:53:ac:dc:29:f0:3d:39:ec: 8d:cf:f1:9d:b6:09:f2:57:71:a2:8f:5c:bd:9c:cd: 85:4a:d7:99:7c:79:9b:f0:6f:b9:e2:f9:a0:7c:f3: f1:a5:b0:17:d2:ad:c4:84:49:62:46:45:b9:79:f3: e6:05:b2:4e:64:60:88:a7:9c:0e:2b:85:a9:15:67: 64:be:e5:c3:94:c0:20:0d:52:3d:e2:52:03:1c:c2: a4:e7:e2:87:59:93:6b:c9:1c:cf:b1:4a:ee:cb:1f: 3e:73:fd:dc:57:58:e1:45:dd:3e:ab:65:9b:b6:67: b9:8c:76:f2:02:2c:48:19:3e:92:20:b4:9b:fe:99: a9:9c:00:59:74:97:a9:2e:ee:72:ca:4a:ab:f7:44: 0b:c3:d6:c4:50:00:da:50:a2:7f:63:bb:86:d6:18: 5d:f2:41:6a:bd:6f:3d:32:97:0d:5a:56:55:f5:6d: 45:35:e5:19:34:cc:bc:e3:56:ad:5f:1c:89:b9:62: 7b:a2:a7:de:8f:e1:1c:0e:d6:a5:82:61:7c:da:4c: f6:f8:15:8d:0c:38:12:61:a1:62:25:33:41:9a:2b: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0E:42:89:77:2E:E2:B4:F1:D2:87:36:A0:C0:A6:9F:25:CA:DE:53 X509v3 Authority Key Identifier: keyid:41:AB:F7:92:D1:41:22:AA:A6:7E:42:BD:42:EB:B8:E0:2A:09:66:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41ABF792D14122AAA67E42BD42EBB8E02A096620.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e45ebab-ec16-4589-a9a6-8a3661d43e3e/0/41ABF792D14122AAA67E42BD42EBB8E02A096620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b1:4d:fd:22:0a:cb:3b:88:e7:da:bc:6d:0c:54:85:2c:82: 53:c6:e1:85:69:9a:f1:87:05:d4:30:09:9a:38:85:df:88:2f: 1e:8b:8e:cc:53:9a:7d:bf:a2:95:39:77:5e:b4:f7:b9:5a:f5: 7c:e9:36:71:5f:c0:cc:85:89:8c:73:39:8e:d9:a9:4c:51:d8: 23:f2:03:bb:23:9d:50:a3:af:d8:01:44:d6:88:7c:af:75:68: a9:1a:65:08:8d:1c:6a:7c:e1:c4:80:51:2d:c9:b5:f9:54:d9: f4:4e:c3:d4:4b:b5:27:59:ec:f4:f9:78:12:ee:23:11:d6:6a: fb:19:ea:5d:e2:9c:46:e8:98:27:2f:c7:7e:a8:72:4b:a5:f2: 4c:cd:1e:69:e1:40:b5:fa:47:da:36:da:68:45:4d:fa:20:5e: a2:fa:86:26:f6:de:60:c3:75:9a:e8:29:dd:99:ff:15:7a:a4: 15:32:30:35:f5:70:80:9a:54:0f:81:4e:2b:93:22:6c:d3:ea: a8:ad:fe:6b:13:e4:76:0c:b3:87:e7:23:a6:a4:ac:15:3e:2f: d1:0b:bd:5b:42:ba:97:94:34:3d:c9:93:34:0f:c9:7d:c4:f7: 7f:69:dd:dc:b8:0c:46:53:a9:2a:31:84:d2:8b:5a:20:59:76: da:35:f7:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFFo5skEXtfBVnv7H+arC8g9AaLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAy QTA5NjYyMDAeFw0yNTA2MDYyMjI3MjZaFw0yNTA2MTAwNDE5MjZaMDMxMTAvBgNV BAMTKDYzMEU0Mjg5NzcyRUUyQjRGMUQyODczNkEwQzBBNjlGMjVDQURFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5CGjLTtiq9X3asln2rBXJQ7C ECW5csuV02URpke/a8dx/QJTrNwp8D057I3P8Z22CfJXcaKPXL2czYVK15l8eZvw b7ni+aB88/GlsBfSrcSESWJGRbl58+YFsk5kYIinnA4rhakVZ2S+5cOUwCANUj3i UgMcwqTn4odZk2vJHM+xSu7LHz5z/dxXWOFF3T6rZZu2Z7mMdvICLEgZPpIgtJv+ mamcAFl0l6ku7nLKSqv3RAvD1sRQANpQon9ju4bWGF3yQWq9bz0ylw1aVlX1bUU1 5Rk0zLzjVq1fHIm5Ynuip96P4RwO1qWCYXzaTPb4FY0MOBJhoWIlM0GaK++DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYw5CiXcu4rTx0oc2oMCmnyXK3lMwHwYDVR0j BBgwFoAUQav3ktFBIqqmfkK9Quu44CoJZiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTQ1ZWJhYi1lYzE2LTQ1ODktYTlhNi04YTM2NjFkNDNlM2UvMC80MUFCRjc5MkQx NDEyMkFBQTY3RTQyQkQ0MkVCQjhFMDJBMDk2NjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4RTAyQTA5 NjYyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U0NWViYWItZWMxNi00NTg5LWE5 YTYtOGEzNjYxZDQzZTNlLzAvNDFBQkY3OTJEMTQxMjJBQUE2N0U0MkJENDJFQkI4 RTAyQTA5NjYyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2xTf0iCss7iOfavG0MVIUsglPG4YVpmvGH BdQwCZo4hd+ILx6LjsxTmn2/opU5d16097la9XzpNnFfwMyFiYxzOY7ZqUxR2CPy A7sjnVCjr9gBRNaIfK91aKkaZQiNHGp84cSAUS3JtflU2fROw9RLtSdZ7PT5eBLu IxHWavsZ6l3inEbomCcvx36ockul8kzNHmnhQLX6R9o22mhFTfogXqL6hib23mDD dZroKd2Z/xV6pBUyMDX1cICaVA+BTiuTImzT6qit/msT5HYMs4fnI6akrBU+L9EL vVtCupeUND3JkzQPyX3E939p3dy4DEZTqSoxhNKLWiBZdto19z4= -----END CERTIFICATE-----Generated at Sun Jun 8 07:43:24 2025 by rpki-client