$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: 0aRQUclbLkK6ffEP3hZvrpb635TasonRdWL+KFcLQwA= Subject key identifier: D7:87:88:6F:58:CC:18:21:6A:EB:59:9D:69:08:3B:DB:3D:04:7F:F1 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 2D88109F135A408A239DEB00A44E01B33A97E62D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 01A3 Signing time: Fri 04 Apr 2025 09:01:50 +0000 Manifest this update: Fri 04 Apr 2025 08:56:50 +0000 Manifest next update: Mon 07 Apr 2025 15:24:50 +0000 Files and hashes: 1: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: xfIhG1WqC8mycFYz+vcqQY0Ov8VUQ3o8w6al6PEEFwc=) 2: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: FIe+WS/OiVin97O0KJNUJJvzbdx6sKXtuoa3lDeAKcU=) 3: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: a7mgV41OX87LjUgmR9JI4fbD1k92EJK28gdqBsIBQfU=) 4: 3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (hash: auLcgmSGCQAKQQp7IS/UW/PKknCFg/ObGvfBAC+PkNE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 15:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:88:10:9f:13:5a:40:8a:23:9d:eb:00:a4:4e:01:b3:3a:97:e6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Apr 4 08:56:50 2025 GMT Not After : Apr 7 15:24:50 2025 GMT Subject: CN=D787886F58CC18216AEB599D69083BDB3D047FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b2:06:24:a1:7a:f0:59:80:c8:99:1e:ab:e4: a6:d8:2f:7f:19:db:07:07:77:8e:2a:12:37:42:4e: d3:fb:27:15:94:95:37:51:ea:6a:f6:a9:eb:fc:bd: d8:3a:ab:98:ed:04:47:e5:11:35:4a:35:1e:76:7a: d0:df:10:62:66:01:dd:d6:6b:69:07:43:f9:d2:c7: 4c:87:c3:2a:20:cb:98:42:6d:57:3c:0c:a8:19:10: 1b:69:d2:bb:6a:5e:aa:ce:10:96:51:0b:fb:59:e1: cd:ef:f8:8c:9f:70:3b:a6:20:9d:6c:78:3a:8e:f4: de:1c:c8:05:ec:a1:67:7f:2b:ae:04:32:f0:2a:be: f6:7e:f5:36:ba:ec:39:79:a6:9f:e3:6f:21:cd:7b: 13:89:df:9d:80:30:89:f7:c5:da:dd:13:c9:49:f6: 8d:59:c6:0e:ab:ce:e2:51:d1:45:8d:64:5b:7c:9a: db:f3:c8:c3:28:43:d2:1d:27:f5:8a:d1:da:09:02: 0b:2a:4a:98:67:2b:bf:3c:bb:34:87:69:bb:f4:84: 82:52:21:66:ec:f0:12:06:0d:27:94:59:f8:6c:59: 91:79:81:67:bf:a0:5c:08:ae:82:23:03:af:20:fe: ea:d7:1c:d0:ec:9b:13:0a:7d:3e:d6:fd:59:84:63: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:87:88:6F:58:CC:18:21:6A:EB:59:9D:69:08:3B:DB:3D:04:7F:F1 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:af:79:ff:6f:48:a5:4d:27:be:87:bd:4e:1a:21:03:45:af: a8:44:09:62:22:8c:dc:b0:41:8b:a3:d4:9c:f9:9c:a1:82:20: 1d:df:fd:f3:6a:3a:0c:ca:fe:5b:58:57:8b:1d:47:80:fb:96: 93:86:02:89:f7:0c:47:df:d2:e4:75:f7:1e:7b:25:97:98:f1: f2:48:77:54:21:db:7c:8c:a3:b5:49:ee:e1:2c:91:bc:2c:c3: 28:bf:67:69:b8:aa:38:60:03:9b:75:b0:05:08:79:02:cf:40: 25:b4:9a:d3:b4:82:cb:85:b1:00:37:8c:55:2f:83:79:66:a7: 8d:3f:b2:69:7e:43:e4:5b:7e:c6:7c:88:c1:87:8f:0f:40:4b: 92:35:38:58:86:56:b0:7b:15:bb:84:23:6b:26:86:af:31:00: c1:92:d2:c0:a7:a4:d6:57:28:8b:f8:e7:9f:a5:29:eb:90:9d: ad:43:79:7c:94:db:51:01:1f:3c:ea:df:53:52:ec:1c:4a:0d: 67:2f:d4:62:d9:80:e5:99:a7:f5:7e:3c:0c:16:e5:24:ab:4d: c0:4e:38:48:5c:3d:22:86:18:6f:8e:aa:8f:81:fd:95:6d:d5: ab:97:86:79:dd:0b:04:25:80:38:ca:e1:ab:3c:18:6d:66:24: 0e:f0:83:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYgQnxNaQIojnesApE4BszqX5i0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNTA0MDQwODU2NTBaFw0yNTA0MDcxNTI0NTBaMDMxMTAvBgNV BAMTKEQ3ODc4ODZGNThDQzE4MjE2QUVCNTk5RDY5MDgzQkRCM0QwNDdGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXsgYkoXrwWYDImR6r5KbYL38Z 2wcHd44qEjdCTtP7JxWUlTdR6mr2qev8vdg6q5jtBEflETVKNR52etDfEGJmAd3W a2kHQ/nSx0yHwyogy5hCbVc8DKgZEBtp0rtqXqrOEJZRC/tZ4c3v+IyfcDumIJ1s eDqO9N4cyAXsoWd/K64EMvAqvvZ+9Ta67Dl5pp/jbyHNexOJ352AMIn3xdrdE8lJ 9o1Zxg6rzuJR0UWNZFt8mtvzyMMoQ9IdJ/WK0doJAgsqSphnK788uzSHabv0hIJS IWbs8BIGDSeUWfhsWZF5gWe/oFwIroIjA68g/urXHNDsmxMKfT7W/VmEY3/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU14eIb1jMGCFq61mdaQg72z0Ef/EwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFavef9vSKVNJ76HvU4aIQNFr6hECWIijNyw QYuj1Jz5nKGCIB3f/fNqOgzK/ltYV4sdR4D7lpOGAon3DEff0uR19x57JZeY8fJI d1Qh23yMo7VJ7uEskbwswyi/Z2m4qjhgA5t1sAUIeQLPQCW0mtO0gsuFsQA3jFUv g3lmp40/sml+Q+RbfsZ8iMGHjw9AS5I1OFiGVrB7FbuEI2smhq8xAMGS0sCnpNZX KIv455+lKeuQna1DeXyU21EBHzzq31NS7BxKDWcv1GLZgOWZp/V+PAwW5SSrTcBO OEhcPSKGGG+Oqo+B/ZVt1auXhnndCwQlgDjK4as8GG1mJA7wg90= -----END CERTIFICATE-----Generated at Sat Apr 5 21:21:06 2025 by rpki-client