$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: PqLDGe+05VO1CgN73oPGzxsj3qKxv1UJ+6rU5EAiCOQ= Subject key identifier: F2:EC:A8:F3:08:9C:23:E1:C8:B6:F6:09:77:19:B9:7A:26:3A:2C:82 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 3F64FB8C5DDEC42A68E661D550F8AAEADD2E8CEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 04FE Signing time: Sun 10 Aug 2025 22:21:50 +0000 Manifest this update: Sun 10 Aug 2025 22:16:50 +0000 Manifest next update: Thu 14 Aug 2025 01:05:50 +0000 Files and hashes: 1: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: HELC9mdQ84lzVVvguuZaZieGiyQ03u73Eihy4Pkp6bs=) 2: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: yc4Mla3DcXft+d8TKQcSCEWpk/9GqliwTVV07ATUOoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 01:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:64:fb:8c:5d:de:c4:2a:68:e6:61:d5:50:f8:aa:ea:dd:2e:8c:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Aug 10 22:16:50 2025 GMT Not After : Aug 14 01:05:50 2025 GMT Subject: CN=F2ECA8F3089C23E1C8B6F6097719B97A263A2C82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:71:31:65:c5:fa:6c:55:33:9a:4d:cb:6a:1c: 9f:b9:07:46:ab:aa:9e:41:b5:b5:e5:42:e1:3d:05: d3:f4:7a:63:8f:61:39:02:12:ee:5d:93:fa:02:23: 71:7c:41:34:e4:39:b4:9c:6c:95:0b:6c:ed:cc:3f: 57:1c:6b:e8:2c:fc:45:c1:1c:be:9f:b4:e3:40:2a: 1f:42:e7:2d:78:4a:62:4e:f3:4c:a2:31:d8:13:b6: e6:b2:22:3b:74:e5:93:ca:2d:e4:c5:97:a6:0c:eb: 11:39:13:a5:29:5f:2c:9f:22:4c:fb:89:5f:c6:8f: d7:2a:4d:00:bd:97:a9:bb:7a:0d:3c:f3:29:b6:16: 85:14:18:8a:d6:d3:b1:e6:4c:98:5e:d6:87:98:2c: 85:d5:f8:ca:1f:55:49:ed:cc:11:5b:64:9b:87:f5: 18:e5:26:9f:0e:ed:e8:25:19:d9:39:d8:ce:e6:3d: 05:c6:7c:66:9f:f8:41:06:4f:92:52:7f:37:85:21: b8:f4:dc:0b:f7:97:1a:34:93:f0:84:6d:b0:a5:e7: 70:5d:fc:65:2c:28:a0:55:ec:18:90:4d:00:57:cb: c9:ab:e0:f4:1b:95:d9:74:27:c7:ec:40:a0:c0:ac: 46:cc:b6:9d:68:4b:63:95:07:6b:b3:64:a8:2c:c4: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EC:A8:F3:08:9C:23:E1:C8:B6:F6:09:77:19:B9:7A:26:3A:2C:82 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:63:a7:b4:4d:5a:d2:ec:8f:99:78:d7:f1:00:3d:c7:01:14: 93:4e:a6:b3:48:ff:5c:73:90:b6:cd:e0:16:5d:2e:3e:66:a2: 25:66:2e:ee:06:8f:e0:09:8b:9b:9a:4a:05:e7:38:a9:f5:1e: 43:36:d2:4b:2c:ac:97:a1:41:e1:fa:4c:a8:c3:49:7b:60:f8: 6f:aa:ef:4c:0e:9b:67:96:7b:f2:0f:c8:c8:72:94:14:34:f8: 91:ba:a6:ce:19:aa:00:d0:f7:11:9c:56:93:81:e7:f6:c2:80: 92:70:fd:1b:4f:17:02:36:d1:f3:91:89:f7:6f:20:10:87:32: 1b:1f:b3:b6:18:90:62:fc:e6:01:be:c3:b7:bb:3e:21:d7:e1: 67:90:30:cd:73:2c:6b:54:83:e4:42:ec:78:ed:e6:1e:71:2d: f1:f5:82:2e:3b:3f:43:a8:6a:95:6e:a5:7b:77:af:37:dc:59: dc:05:6f:27:89:c1:86:0e:34:08:d0:76:c6:31:42:d9:54:ab: 5f:81:66:39:03:cc:8d:33:03:2b:bb:95:7c:95:d6:14:c6:7e: 47:b3:41:c2:b8:20:8a:2f:35:2f:57:2b:e1:bb:96:8d:32:11: a3:3f:55:4a:e3:b2:42:cb:9b:d6:d3:e6:de:4b:64:19:c9:47: 48:52:77:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP2T7jF3exCpo5mHVUPiq6t0ujOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNTA4MTAyMjE2NTBaFw0yNTA4MTQwMTA1NTBaMDMxMTAvBgNV BAMTKEYyRUNBOEYzMDg5QzIzRTFDOEI2RjYwOTc3MTlCOTdBMjYzQTJDODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcTFlxfpsVTOaTctqHJ+5B0ar qp5BtbXlQuE9BdP0emOPYTkCEu5dk/oCI3F8QTTkObScbJULbO3MP1cca+gs/EXB HL6ftONAKh9C5y14SmJO80yiMdgTtuayIjt05ZPKLeTFl6YM6xE5E6UpXyyfIkz7 iV/Gj9cqTQC9l6m7eg088ym2FoUUGIrW07HmTJhe1oeYLIXV+MofVUntzBFbZJuH 9RjlJp8O7eglGdk52M7mPQXGfGaf+EEGT5JSfzeFIbj03Av3lxo0k/CEbbCl53Bd /GUsKKBV7BiQTQBXy8mr4PQbldl0J8fsQKDArEbMtp1oS2OVB2uzZKgsxB7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8uyo8wicI+HItvYJdxm5eiY6LIIwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZjp7RNWtLsj5l41/EAPccBFJNOprNI/1xz kLbN4BZdLj5moiVmLu4Gj+AJi5uaSgXnOKn1HkM20kssrJehQeH6TKjDSXtg+G+q 70wOm2eWe/IPyMhylBQ0+JG6ps4ZqgDQ9xGcVpOB5/bCgJJw/RtPFwI20fORifdv IBCHMhsfs7YYkGL85gG+w7e7PiHX4WeQMM1zLGtUg+RC7Hjt5h5xLfH1gi47P0Oo apVupXt3rzfcWdwFbyeJwYYONAjQdsYxQtlUq1+BZjkDzI0zAyu7lXyV1hTGfkez QcK4IIovNS9XK+G7lo0yEaM/VUrjskLLm9bT5t5LZBnJR0hSd/k= -----END CERTIFICATE-----Generated at Mon Aug 11 04:08:23 2025 by rpki-client