$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: fPwqQwkxWWPLW4ymQ1A6zfXk6UI8Kbp1BIpXukqSS04= Subject key identifier: 5A:6C:4A:47:39:78:78:F1:74:9F:EA:1F:D9:04:F3:7B:5A:86:A7:94 Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 23D03132A74C676186D699DB62678A0395350892 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: E4 Signing time: Tue 05 Aug 2025 00:50:36 +0000 Manifest this update: Tue 05 Aug 2025 00:45:36 +0000 Manifest next update: Fri 08 Aug 2025 11:16:36 +0000 Files and hashes: 1: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: Y0kRFSDgxvLBd57ZjVr6mtVFcWByL9fI9oGGCsIG72c=) 2: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: le1R9LsAJppqPYkVWs7sPDuE078rrP2+t7Tv4zWW31I=) 3: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: dEP/NYxkSWrofSp9FjUF1UULkvgWkwTtnjo7ldEjW28=) 4: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: h4eKvxQSRIMrD2t91GjH5fzQW4Tjr+F6OLK3lJkLRQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:d0:31:32:a7:4c:67:61:86:d6:99:db:62:67:8a:03:95:35:08:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Aug 5 00:45:36 2025 GMT Not After : Aug 8 11:16:36 2025 GMT Subject: CN=5A6C4A47397878F1749FEA1FD904F37B5A86A794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2b:41:c4:97:0f:af:64:6a:64:8e:1a:4d:e8: 53:03:1e:3a:ec:e8:3d:c3:97:d9:e9:0c:5a:7d:fc: 76:75:94:0e:f1:bb:74:de:c8:20:42:35:79:6c:20: 64:12:28:c0:6d:e8:22:56:b5:87:60:34:06:30:88: a7:56:ab:dc:e5:f8:ad:52:fb:c2:6b:fc:4f:f0:9a: 23:86:06:39:15:c6:ff:9f:4e:91:99:d8:96:5c:ff: 5b:9f:fa:4b:dc:18:00:0d:c9:85:03:24:39:d9:f4: ed:a6:fb:bd:aa:b1:11:d7:03:e5:cb:29:33:df:7b: d6:48:b5:d7:23:4d:a4:39:63:93:12:ad:3d:00:db: 05:1d:0a:1d:d3:61:e4:95:ab:c6:8d:b7:3c:58:fd: cc:35:34:13:83:83:fd:26:08:09:97:ab:38:89:9f: 8c:01:89:f3:3c:04:c0:2b:1d:74:37:56:d0:be:b2: c3:63:01:04:5b:5b:38:32:ac:49:2f:88:cc:4b:82: f7:4c:49:44:ce:11:41:4b:0f:62:9b:ef:84:b5:a5: 77:72:ee:da:d1:3a:e5:68:a4:09:4a:79:86:b1:41: 6a:42:fd:67:1c:02:e3:59:b3:80:ba:65:43:e7:2f: 82:35:ec:46:d2:c8:dc:7f:83:57:d0:e9:a9:23:82: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6C:4A:47:39:78:78:F1:74:9F:EA:1F:D9:04:F3:7B:5A:86:A7:94 X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b0:0c:4c:a4:f6:5b:6c:e1:c3:2d:d5:53:40:20:f6:e0:a4: 02:46:27:e9:86:b1:ef:bb:1f:e7:e5:9f:76:65:46:17:bd:28: 8c:14:1e:d4:5b:13:81:c9:86:6b:45:e3:ac:3f:51:94:b7:2c: 66:42:7c:fd:67:0c:83:1a:ef:78:42:bd:96:22:b8:1a:f8:07: 35:e1:bc:16:55:b6:bd:1b:51:95:44:4f:21:ae:9d:0e:fc:1e: 7b:e2:72:76:f2:26:79:0c:7f:f7:a5:70:9d:8a:76:94:2b:5a: 69:14:5b:10:44:04:a0:5e:e0:73:22:77:fc:7b:ef:db:17:96: 86:9a:07:09:ec:a6:e1:c1:40:03:91:1b:80:9c:5a:50:a3:e7: 37:06:3f:c1:ca:17:76:ec:ad:66:5a:7f:5c:48:9d:63:9b:f8: 27:cd:67:99:40:66:cb:f3:cb:92:22:f5:2a:05:c7:be:c4:b0: 00:e4:19:b4:c8:0d:78:72:9b:bd:ef:85:58:93:96:09:da:88: 11:e7:aa:23:45:46:ed:eb:c7:11:f4:27:96:ae:67:19:f7:5c: bf:85:68:6b:2f:69:18:db:6f:52:a5:e9:f0:55:aa:ed:de:63: e7:21:e7:51:86:68:22:56:a5:8f:44:cb:9d:d7:b6:0e:fb:33: ec:b5:dd:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI9AxMqdMZ2GG1pnbYmeKA5U1CJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNTA4MDUwMDQ1MzZaFw0yNTA4MDgxMTE2MzZaMDMxMTAvBgNV BAMTKDVBNkM0QTQ3Mzk3ODc4RjE3NDlGRUExRkQ5MDRGMzdCNUE4NkE3OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVK0HElw+vZGpkjhpN6FMDHjrs 6D3Dl9npDFp9/HZ1lA7xu3TeyCBCNXlsIGQSKMBt6CJWtYdgNAYwiKdWq9zl+K1S +8Jr/E/wmiOGBjkVxv+fTpGZ2JZc/1uf+kvcGAANyYUDJDnZ9O2m+72qsRHXA+XL KTPfe9ZItdcjTaQ5Y5MSrT0A2wUdCh3TYeSVq8aNtzxY/cw1NBODg/0mCAmXqziJ n4wBifM8BMArHXQ3VtC+ssNjAQRbWzgyrEkviMxLgvdMSUTOEUFLD2Kb74S1pXdy 7trROuVopAlKeYaxQWpC/WccAuNZs4C6ZUPnL4I17EbSyNx/g1fQ6akjgnETAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWmxKRzl4ePF0n+of2QTze1qGp5QwHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqwDEyk9lts4cMt1VNAIPbgpAJGJ+mGse+7 H+fln3ZlRhe9KIwUHtRbE4HJhmtF46w/UZS3LGZCfP1nDIMa73hCvZYiuBr4BzXh vBZVtr0bUZVETyGunQ78HnvicnbyJnkMf/elcJ2KdpQrWmkUWxBEBKBe4HMid/x7 79sXloaaBwnspuHBQAORG4CcWlCj5zcGP8HKF3bsrWZaf1xInWOb+CfNZ5lAZsvz y5Ii9SoFx77EsADkGbTIDXhym73vhViTlgnaiBHnqiNFRu3rxxH0J5auZxn3XL+F aGsvaRjbb1Kl6fBVqu3eY+ch51GGaCJWpY9Ey53Xtg77M+y13SY= -----END CERTIFICATE-----Generated at Wed Aug 6 18:24:42 2025 by rpki-client