$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: sgxqRipLSTMbemvIqFMCC/6JIHCWm3BMym7uwl6DeZ0= Subject key identifier: 7D:4E:8E:79:44:42:01:E1:62:88:59:A2:48:D4:BB:F5:DC:BE:24:DA Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 1C5D227CC33AE1BCFB3A44820EEEB1A5FBD29150 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: CD Signing time: Sun 15 Jun 2025 01:20:35 +0000 Manifest this update: Sun 15 Jun 2025 01:15:35 +0000 Manifest next update: Wed 18 Jun 2025 01:40:35 +0000 Files and hashes: 1: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: ILZX7yzDIdinLp2C/CKo6txIHXdgQ7xKIJFxFA6OmHQ=) 2: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) 3: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) 4: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5d:22:7c:c3:3a:e1:bc:fb:3a:44:82:0e:ee:b1:a5:fb:d2:91:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Jun 15 01:15:35 2025 GMT Not After : Jun 18 01:40:35 2025 GMT Subject: CN=7D4E8E79444201E1628859A248D4BBF5DCBE24DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:7f:b2:25:00:fc:b6:95:04:95:f0:42:84: 28:1b:f2:90:fb:3c:57:3a:82:4a:3e:74:74:52:35: 28:e0:01:6c:de:98:eb:f3:ab:11:86:c0:46:19:f4: f5:4a:5d:af:d6:eb:7d:63:90:18:54:81:d6:1d:80: 7a:55:8a:91:0d:25:78:1d:1d:c0:4f:24:3d:78:b1: 1f:f3:60:1d:2a:83:75:d0:56:99:24:16:86:d8:d8: 83:b2:2b:0d:8a:ef:45:8f:16:cf:40:30:5d:d7:e4: 1d:ac:e9:25:58:ac:64:f0:b0:a3:3f:98:45:99:64: d5:54:2f:44:7d:07:07:19:6b:b2:9d:24:60:19:c7: 75:ac:99:93:2a:a7:95:58:fc:07:56:1b:32:b5:3b: f2:53:15:ef:d1:c7:8d:5d:0e:83:4c:8e:d2:90:40: 27:de:59:85:25:60:3f:87:b2:25:8d:3b:b9:56:22: 1c:f7:bd:eb:09:c3:75:49:20:7b:bb:0f:c8:cc:ec: 40:57:06:a3:54:2f:2e:60:df:5e:5a:63:63:b8:e5: 7f:ed:77:3d:75:f2:c2:98:7d:2c:fc:3a:6e:c0:36: d8:c7:18:8b:6b:89:fe:98:f9:35:06:85:73:ef:73: 0b:76:ea:96:f1:ad:b2:c7:e5:d8:ec:de:80:96:45: a1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4E:8E:79:44:42:01:E1:62:88:59:A2:48:D4:BB:F5:DC:BE:24:DA X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:93:37:d4:65:d6:09:71:fb:4c:7e:a5:93:d1:17:f4:f5:c9: 8e:0f:e5:e9:5b:20:25:be:e5:bc:f4:28:9c:10:6e:fb:56:20: cc:22:70:4e:9a:a6:d9:47:36:88:7e:82:ae:2e:04:57:f6:35: 81:9d:76:be:02:24:b1:e7:5b:d3:f3:7c:17:01:8d:ea:29:25: 7d:12:e2:df:4b:56:d9:ba:65:58:96:30:c4:c3:53:4c:13:1f: 36:95:d2:ac:80:44:25:06:30:97:80:a9:86:00:c3:1d:df:16: 05:65:8c:65:a3:a4:90:f9:69:16:f2:c2:4b:e2:a9:2e:68:da: 5b:4e:0b:68:60:8f:cf:13:7c:2c:15:da:f8:ea:81:e7:b6:00: a2:6f:4c:ca:09:16:c8:4a:a6:03:74:0d:e9:e5:c6:b4:af:f7: 52:ab:5b:a4:60:c8:33:c2:97:da:81:7f:69:37:51:0e:8e:41: 47:36:73:69:02:d3:c1:df:85:99:6c:d3:29:88:9f:e2:28:e3: 1e:0e:68:b3:44:50:ef:6e:a2:63:8b:e8:eb:cc:f5:7f:02:13: cc:91:b0:2d:84:f7:73:91:1b:88:a6:ce:bd:dc:4d:88:cd:0d: 4e:25:10:c8:a3:36:a0:f1:4a:f5:ce:a6:91:d9:4e:f0:00:af: d7:82:1d:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHF0ifMM64bz7OkSCDu6xpfvSkVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNTA2MTUwMTE1MzVaFw0yNTA2MTgwMTQwMzVaMDMxMTAvBgNV BAMTKDdENEU4RTc5NDQ0MjAxRTE2Mjg4NTlBMjQ4RDRCQkY1RENCRTI0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xH+yJQD8tpUElfBChCgb8pD7 PFc6gko+dHRSNSjgAWzemOvzqxGGwEYZ9PVKXa/W631jkBhUgdYdgHpVipENJXgd HcBPJD14sR/zYB0qg3XQVpkkFobY2IOyKw2K70WPFs9AMF3X5B2s6SVYrGTwsKM/ mEWZZNVUL0R9BwcZa7KdJGAZx3WsmZMqp5VY/AdWGzK1O/JTFe/Rx41dDoNMjtKQ QCfeWYUlYD+HsiWNO7lWIhz3vesJw3VJIHu7D8jM7EBXBqNULy5g315aY2O45X/t dz118sKYfSz8Om7ANtjHGItrif6Y+TUGhXPvcwt26pbxrbLH5djs3oCWRaH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfU6OeURCAeFiiFmiSNS79dy+JNowHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWTN9Rl1glx+0x+pZPRF/T1yY4P5elbICW+ 5bz0KJwQbvtWIMwicE6aptlHNoh+gq4uBFf2NYGddr4CJLHnW9PzfBcBjeopJX0S 4t9LVtm6ZViWMMTDU0wTHzaV0qyARCUGMJeAqYYAwx3fFgVljGWjpJD5aRbywkvi qS5o2ltOC2hgj88TfCwV2vjqgee2AKJvTMoJFshKpgN0DenlxrSv91KrW6RgyDPC l9qBf2k3UQ6OQUc2c2kC08HfhZls0ymIn+Io4x4OaLNEUO9uomOL6OvM9X8CE8yR sC2E93ORG4imzr3cTYjNDU4lEMijNqDxSvXOppHZTvAAr9eCHaA= -----END CERTIFICATE-----Generated at Mon Jun 16 01:47:08 2025 by rpki-client