$ rpki-client -vvf repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft File: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft (raw, json) Hash identifier: L+7rhL4jU3sXea8lWvBNp3NBo4RUnzizm8ATO7S+TW8= Subject key identifier: 9D:91:3E:D6:19:3E:48:37:33:66:7B:11:72:F5:FE:E4:BA:B2:FB:37 Authority key identifier: CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B Certificate issuer: /CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Certificate serial: 0AAEAF55303A82BA0BFA368F4CA1B6798ACDB934 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft Manifest number: 0524 Signing time: Mon 03 Nov 2025 07:41:51 +0000 Manifest this update: Mon 03 Nov 2025 07:36:50 +0000 Manifest next update: Thu 06 Nov 2025 16:55:50 +0000 Files and hashes: 1: CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl (hash: 3c9RXlxwvI8meh5Ldq/Po/McMihdeBE8ozSk9SHNOc8=) 2: 3130332e36362e38362e302f32342d3234203d3e20313431313037.roa (hash: HELC9mdQ84lzVVvguuZaZieGiyQ03u73Eihy4Pkp6bs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ae:af:55:30:3a:82:ba:0b:fa:36:8f:4c:a1:b6:79:8a:cd:b9:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA41DDE3591DCF89BBD15BC96E05BDC73214099B Validity Not Before: Nov 3 07:36:50 2025 GMT Not After : Nov 6 16:55:50 2025 GMT Subject: CN=9D913ED6193E483733667B1172F5FEE4BAB2FB37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bb:b5:73:3d:6a:29:91:f9:e0:28:d3:03:7f: e2:39:05:d2:e3:6b:df:54:0b:80:be:10:6d:51:b5: 2e:03:19:56:89:8c:a9:5a:5e:1f:26:46:09:0a:21: 65:ab:d2:c9:43:db:19:e7:71:9c:0f:09:d5:0b:94: b1:ec:09:38:7b:57:24:5e:b5:eb:f2:c6:40:df:6a: 88:a2:9b:26:00:57:25:0c:01:d7:0d:50:50:36:a0: f5:9d:f4:17:9a:e1:26:0c:0b:8a:cc:e3:2d:9e:4c: 59:03:0c:74:28:75:8c:3c:91:f0:de:a5:91:28:6e: 47:7d:55:8c:1f:ce:c7:fb:4e:3b:f1:f8:70:62:a2: d5:80:02:3c:ac:64:4a:17:b9:ba:85:cb:e5:58:d4: dc:25:64:14:f6:8d:66:7c:58:20:4b:aa:ba:ff:1c: 7c:09:99:1d:a7:44:14:a5:10:2a:a5:77:24:03:e4: 71:75:0a:a2:93:91:5b:cd:b2:32:73:15:df:7d:3f: 8c:74:47:65:6a:35:28:6f:9b:d7:c6:69:b1:7d:a6: b8:e3:cb:26:ad:a9:c4:fd:e7:eb:d0:3f:8b:30:30: 47:44:f0:ba:75:32:38:99:22:ef:ce:b4:b3:c8:19: 2c:60:dc:6e:f3:80:d0:f9:f7:b9:03:4a:29:d5:86: e4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:91:3E:D6:19:3E:48:37:33:66:7B:11:72:F5:FE:E4:BA:B2:FB:37 X509v3 Authority Key Identifier: keyid:CA:41:DD:E3:59:1D:CF:89:BB:D1:5B:C9:6E:05:BD:C7:32:14:09:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fcc2d44-9418-4013-9723-a978f8bd8b6b/0/CA41DDE3591DCF89BBD15BC96E05BDC73214099B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ac:5e:21:b3:a0:05:36:38:58:3c:71:5e:1b:ae:ee:93:b6: 90:3e:65:89:8c:64:1e:05:88:2c:a7:bb:ce:f9:26:76:7d:70: 67:61:60:63:22:34:24:ee:f3:41:b4:1f:62:48:3d:4c:d2:e4: 78:40:89:dd:ba:4a:e9:e6:85:3c:2b:43:0d:90:75:60:9a:40: 3a:dc:a0:d4:8c:e3:15:8b:d1:ce:e2:75:1a:fc:9d:ae:4f:b6: 4b:63:19:1d:b9:26:a1:1b:75:81:bf:73:1b:fe:bb:fa:0a:b5: e3:63:27:d6:4b:da:87:37:d7:f1:60:64:97:a1:14:ce:93:d7: c6:f2:86:a5:39:01:79:f6:42:ff:2c:93:a4:67:29:ab:b3:c4: 1f:30:8b:17:c5:3a:02:91:d7:f4:ce:2f:cc:42:ba:1b:ef:e9: a7:47:d1:5e:88:71:9f:73:db:ae:b7:d8:e1:18:e8:bf:38:e4: 09:82:c3:5a:1f:36:4f:c7:34:64:9a:12:25:c7:5f:c7:a1:05: a2:c8:7b:a4:7c:1e:e8:22:dd:a1:70:8f:0b:4a:59:81:76:8d: 04:74:76:44:3e:a5:75:db:48:12:91:12:b3:05:28:fe:89:7c: d5:6e:44:e9:e4:cc:46:53:f5:6c:28:2e:c4:61:65:07:f9:bc: 5a:c1:dd:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCq6vVTA6groL+jaPTKG2eYrNuTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzcz MjE0MDk5QjAeFw0yNTExMDMwNzM2NTBaFw0yNTExMDYxNjU1NTBaMDMxMTAvBgNV BAMTKDlEOTEzRUQ2MTkzRTQ4MzczMzY2N0IxMTcyRjVGRUU0QkFCMkZCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxu7VzPWopkfngKNMDf+I5BdLj a99UC4C+EG1RtS4DGVaJjKlaXh8mRgkKIWWr0slD2xnncZwPCdULlLHsCTh7VyRe tevyxkDfaoiimyYAVyUMAdcNUFA2oPWd9Bea4SYMC4rM4y2eTFkDDHQodYw8kfDe pZEobkd9VYwfzsf7Tjvx+HBiotWAAjysZEoXubqFy+VY1NwlZBT2jWZ8WCBLqrr/ HHwJmR2nRBSlECqldyQD5HF1CqKTkVvNsjJzFd99P4x0R2VqNShvm9fGabF9prjj yyatqcT95+vQP4swMEdE8Lp1MjiZIu/OtLPIGSxg3G7zgND597kDSinVhuTBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZE+1hk+SDczZnsRcvX+5Lqy+zcwHwYDVR0j BBgwFoAUykHd41kdz4m70VvJbgW9xzIUCZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmNjMmQ0NC05NDE4LTQwMTMtOTcyMy1hOTc4ZjhiZDhiNmIvMC9DQTQxRERFMzU5 MURDRjg5QkJEMTVCQzk2RTA1QkRDNzMyMTQwOTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJEQzczMjE0 MDk5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZjYzJkNDQtOTQxOC00MDEzLTk3 MjMtYTk3OGY4YmQ4YjZiLzAvQ0E0MURERTM1OTFEQ0Y4OUJCRDE1QkM5NkUwNUJE QzczMjE0MDk5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+sXiGzoAU2OFg8cV4bru6TtpA+ZYmMZB4F iCynu875JnZ9cGdhYGMiNCTu80G0H2JIPUzS5HhAid26SunmhTwrQw2QdWCaQDrc oNSM4xWL0c7idRr8na5PtktjGR25JqEbdYG/cxv+u/oKteNjJ9ZL2oc31/FgZJeh FM6T18byhqU5AXn2Qv8sk6RnKauzxB8wixfFOgKR1/TOL8xCuhvv6adH0V6IcZ9z 26632OEY6L845AmCw1ofNk/HNGSaEiXHX8ehBaLIe6R8Hugi3aFwjwtKWYF2jQR0 dkQ+pXXbSBKRErMFKP6JfNVuROnkzEZT9WwoLsRhZQf5vFrB3YA= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:00 2025 by rpki-client