$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: r33pk0WLAbEUYeOEbu7GRhd9r0AvAvNa+g0OiV0TPPg= Subject key identifier: 23:E6:E4:6E:F1:12:34:20:14:85:8B:16:52:EA:0E:7F:5F:7D:27:89 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 324077D0C95FB407EC5162108846EB9C098A5E2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 01E9 Signing time: Thu 04 Sep 2025 11:21:51 +0000 Manifest this update: Thu 04 Sep 2025 11:16:51 +0000 Manifest next update: Sun 07 Sep 2025 23:01:51 +0000 Files and hashes: 1: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: HLjZFq4/Jnmag82Gv7W9QKBRIGp+gW90e9wOgTOi2PE=) 2: 3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (hash: K+vQljm+ExeOXd+J7K26cCdQKnYakCROUmRDg3WOiF4=) 3: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: QBY9Am08xO4Hm3iZd9mX7T1L3EviBFC4k5GYk4zwVFk=) 4: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: s3cZDsm3eCD/zirL0oonykymWlAaugzxDIFPlg5sAUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 23:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:40:77:d0:c9:5f:b4:07:ec:51:62:10:88:46:eb:9c:09:8a:5e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Sep 4 11:16:51 2025 GMT Not After : Sep 7 23:01:51 2025 GMT Subject: CN=23E6E46EF112342014858B1652EA0E7F5F7D2789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:ea:fb:95:ab:fb:1a:60:cd:c6:62:ad:ec: 02:78:98:9a:ff:fc:d9:a8:e5:c0:2a:97:38:c0:56: fc:b1:17:a2:0f:55:1d:85:f8:8e:c9:07:0e:c6:1e: f9:93:6c:9f:ea:b9:d2:33:32:11:a2:e4:c6:70:4e: 58:06:80:52:da:05:32:5f:70:96:d8:07:f5:e5:6d: ce:a8:6b:63:d4:f3:de:fd:07:5b:cd:fc:06:b4:42: 39:44:16:ee:11:f8:48:7f:0a:68:e6:5c:b4:d3:60: be:e9:65:c0:96:99:02:31:93:01:07:a4:30:61:1e: 18:7d:19:c3:3d:c2:f4:e2:f9:14:ef:65:a3:f2:7b: 11:dc:33:28:48:b0:27:ee:14:09:8f:a3:92:d1:4e: 1a:83:83:8b:e2:6d:dc:dd:5d:22:dd:92:e8:16:4d: 79:2e:b7:f1:b9:2f:ee:ec:ac:8d:a5:25:e3:eb:b2: 96:df:97:a4:d9:41:fe:26:46:aa:ad:44:3a:02:d3: 3d:79:9d:49:43:fa:2e:3a:70:8e:12:a7:f0:70:0a: 66:89:34:6b:ab:7e:98:a7:0a:33:1a:6f:6b:6f:42: 65:a4:24:20:b7:58:4c:68:ca:c3:80:31:91:84:56: eb:58:26:f7:84:21:66:84:25:e4:a2:41:38:f2:c6: 35:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E6:E4:6E:F1:12:34:20:14:85:8B:16:52:EA:0E:7F:5F:7D:27:89 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a3:d1:da:17:fc:87:1d:33:33:c9:8a:a4:b2:e3:f1:3b:07: 6f:b0:37:34:80:f2:ff:96:3c:41:28:d6:63:09:80:8e:b1:ee: 2b:88:b1:76:df:50:6d:d0:49:e3:c2:53:c3:e9:f8:03:91:68: a8:04:dc:e6:c8:93:5e:ca:29:ed:ef:a1:d6:7f:b2:86:8c:58: 01:a9:28:d9:c8:84:cc:07:97:a8:d7:5d:1a:1a:dc:80:a3:ba: 29:2c:f8:97:e8:ad:d6:b1:3d:4a:8f:d0:e9:8c:30:b7:43:4a: 7e:55:50:8f:91:23:c3:08:98:e8:f8:61:60:91:c8:e5:c1:81: 75:4d:84:da:de:be:81:a0:f7:f2:cc:5b:c9:ac:07:88:9d:b5: 21:c9:35:da:e4:b1:4f:a9:ea:1b:d7:b0:84:de:68:2d:73:80: ed:f7:22:d5:6d:c5:84:48:b6:80:7b:71:a5:1c:4b:3e:b8:05: 68:e6:8b:a4:24:1c:bc:19:fd:b2:51:ab:f0:0e:1c:30:a0:6b: 9f:ad:2b:3e:47:8e:4b:3a:4a:ed:2d:14:85:4f:19:64:7d:b6: ee:55:84:51:96:c8:94:e8:c8:c9:0d:8b:c2:8f:79:f0:c7:67: d8:50:f5:f7:0f:a7:ff:33:f2:a1:83:d2:f3:43:d6:a9:48:00: c4:2a:83:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMkB30MlftAfsUWIQiEbrnAmKXiswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNTA5MDQxMTE2NTFaFw0yNTA5MDcyMzAxNTFaMDMxMTAvBgNV BAMTKDIzRTZFNDZFRjExMjM0MjAxNDg1OEIxNjUyRUEwRTdGNUY3RDI3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKa+r7lav7GmDNxmKt7AJ4mJr/ /Nmo5cAqlzjAVvyxF6IPVR2F+I7JBw7GHvmTbJ/qudIzMhGi5MZwTlgGgFLaBTJf cJbYB/Xlbc6oa2PU8979B1vN/Aa0QjlEFu4R+Eh/CmjmXLTTYL7pZcCWmQIxkwEH pDBhHhh9GcM9wvTi+RTvZaPyexHcMyhIsCfuFAmPo5LRThqDg4vibdzdXSLdkugW TXkut/G5L+7srI2lJePrspbfl6TZQf4mRqqtRDoC0z15nUlD+i46cI4Sp/BwCmaJ NGurfpinCjMab2tvQmWkJCC3WExoysOAMZGEVutYJveEIWaEJeSiQTjyxjXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI+bkbvESNCAUhYsWUuoOf199J4kwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6j0doX/IcdMzPJiqSy4/E7B2+wNzSA8v+W PEEo1mMJgI6x7iuIsXbfUG3QSePCU8Pp+AORaKgE3ObIk17KKe3vodZ/soaMWAGp KNnIhMwHl6jXXRoa3ICjuiks+JfordaxPUqP0OmMMLdDSn5VUI+RI8MImOj4YWCR yOXBgXVNhNrevoGg9/LMW8msB4idtSHJNdrksU+p6hvXsITeaC1zgO33ItVtxYRI toB7caUcSz64BWjmi6QkHLwZ/bJRq/AOHDCga5+tKz5Hjks6Su0tFIVPGWR9tu5V hFGWyJToyMkNi8KPefDHZ9hQ9fcPp/8z8qGD0vND1qlIAMQqgzE= -----END CERTIFICATE-----Generated at Fri Sep 5 19:32:38 2025 by rpki-client