$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft File: 407919FF69A512DDAE7CCD48BE288F17073A5512.mft (raw, json) Hash identifier: Cy5R+EFps+YJy6pFefd7KXwwClNpg/64qvmnmC5fm7Y= Subject key identifier: 73:BE:3B:A5:91:AF:31:4A:EA:F7:10:23:B0:E4:A1:FB:FF:AC:CF:A7 Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Certificate serial: 18402DE2396A6F94116856DEA79F6F7E92C876B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft Manifest number: A1 Signing time: Wed 06 Aug 2025 01:41:45 +0000 Manifest this update: Wed 06 Aug 2025 01:36:45 +0000 Manifest next update: Sat 09 Aug 2025 05:37:45 +0000 Files and hashes: 1: 407919FF69A512DDAE7CCD48BE288F17073A5512.crl (hash: 1Aszv37dlfSZL5LH9/uisnsmXzsJ6dI6wjXTca9CKlA=) 2: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: rgW49bD9jOG05sHGGVXJ7K4U0Fs52fl5W3GSqo/JMxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:40:2d:e2:39:6a:6f:94:11:68:56:de:a7:9f:6f:7e:92:c8:76:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Validity Not Before: Aug 6 01:36:45 2025 GMT Not After : Aug 9 05:37:45 2025 GMT Subject: CN=73BE3BA591AF314AEAF71023B0E4A1FBFFACCFA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:60:32:e0:0f:23:d4:a7:18:69:67:60:ba: db:e8:39:f1:7d:42:f3:a6:2c:98:ae:af:4d:b7:2e: 48:31:71:fc:63:15:17:2e:06:db:fa:ba:ab:1f:1c: 99:c3:27:5d:61:05:fb:c8:d8:2c:f0:fc:b5:ea:8a: 04:3a:c4:f2:5b:7f:27:61:d7:e0:78:33:75:eb:ca: 1c:6d:bf:5f:67:28:5d:44:0e:75:35:cb:12:71:5c: c0:6f:ff:98:3e:92:7a:c8:8e:75:c7:09:39:8f:18: 90:e8:ca:06:1c:11:a4:c5:1b:32:95:0d:d0:26:be: a8:78:3c:b2:69:6b:cf:33:b5:c5:fc:b3:cb:d4:a3: be:cd:1a:e2:48:b6:75:3e:22:63:81:75:55:eb:e8: b0:aa:06:67:9a:fd:46:c3:76:ea:a2:c8:fe:dc:0c: 89:df:d2:97:b9:a2:53:44:a3:39:48:81:c5:6d:b1: e1:e9:46:38:fa:cf:c4:af:b1:2b:24:49:c4:17:38: af:73:eb:51:db:11:3c:82:15:4c:a7:89:7f:7a:30: f9:3c:fa:e9:2b:65:c8:74:35:e2:28:bf:d9:5d:96: 66:08:cb:45:41:e4:25:8e:3a:97:15:31:91:02:1f: 91:a4:32:42:92:2b:6d:d0:ee:ba:4e:00:dc:b5:af: ef:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BE:3B:A5:91:AF:31:4A:EA:F7:10:23:B0:E4:A1:FB:FF:AC:CF:A7 X509v3 Authority Key Identifier: keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f8:b7:a2:4d:28:56:78:ff:9b:95:7d:19:d7:0e:ff:e7:95: 2b:06:48:86:0a:d6:9b:66:ac:a7:8c:43:b8:d1:c2:10:6a:9a: ee:83:17:b8:4f:fa:ec:5e:c9:f0:06:37:65:89:34:ca:5d:e2: 30:85:c9:23:88:7e:58:65:21:0d:d2:48:c4:2c:fa:38:59:60: 54:b3:b0:38:1d:77:8f:1a:0e:bf:44:69:de:1a:11:de:36:f7: 48:27:a0:cc:a4:9a:3a:03:49:58:91:10:ca:43:f8:4f:77:0c: a4:eb:6c:ce:56:ad:14:04:ae:ae:7e:30:d2:c8:86:0d:b7:9e: 4b:95:d1:37:a9:c3:03:dc:70:47:62:98:87:c5:e3:49:17:7d: 74:b7:c5:b9:1d:54:1d:75:ed:c0:d0:b2:d1:b0:65:1e:05:fe: 5d:88:a8:c2:a3:6f:3b:f5:23:54:31:d1:09:fd:0b:f8:7e:50: 60:c0:85:63:7f:ab:fe:8d:b2:6a:62:d9:59:8e:43:1a:27:11: 42:8f:f6:3f:e7:06:9e:48:dd:5e:d9:e5:53:3e:5b:22:25:b3: 0c:d5:10:8a:1e:3a:42:d0:5b:d0:52:2f:44:9c:29:17:3a:00: 58:09:94:0e:48:24:64:60:56:2a:5a:19:71:01:ea:52:5c:a8: cc:e3:86:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEAt4jlqb5QRaFbep59vfpLIdrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw NzNBNTUxMjAeFw0yNTA4MDYwMTM2NDVaFw0yNTA4MDkwNTM3NDVaMDMxMTAvBgNV BAMTKDczQkUzQkE1OTFBRjMxNEFFQUY3MTAyM0IwRTRBMUZCRkZBQ0NGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9M2Ay4A8j1KcYaWdgutvoOfF9 QvOmLJiur023LkgxcfxjFRcuBtv6uqsfHJnDJ11hBfvI2Czw/LXqigQ6xPJbfydh 1+B4M3Xryhxtv19nKF1EDnU1yxJxXMBv/5g+knrIjnXHCTmPGJDoygYcEaTFGzKV DdAmvqh4PLJpa88ztcX8s8vUo77NGuJItnU+ImOBdVXr6LCqBmea/UbDduqiyP7c DInf0pe5olNEozlIgcVtseHpRjj6z8SvsSskScQXOK9z61HbETyCFUyniX96MPk8 +ukrZch0NeIov9ldlmYIy0VB5CWOOpcVMZECH5GkMkKSK23Q7rpOANy1r+9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc747pZGvMUrq9xAjsOSh+/+sz6cwHwYDVR0j BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5 QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB NTUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw MjYtYTIzOGZmNDQ4MDcwLzAvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhG MTcwNzNBNTUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKL4t6JNKFZ4/5uVfRnXDv/nlSsGSIYK1ptm rKeMQ7jRwhBqmu6DF7hP+uxeyfAGN2WJNMpd4jCFySOIflhlIQ3SSMQs+jhZYFSz sDgdd48aDr9Ead4aEd4290gnoMykmjoDSViREMpD+E93DKTrbM5WrRQErq5+MNLI hg23nkuV0TepwwPccEdimIfF40kXfXS3xbkdVB117cDQstGwZR4F/l2IqMKjbzv1 I1Qx0Qn9C/h+UGDAhWN/q/6Nsmpi2VmOQxonEUKP9j/nBp5I3V7Z5VM+WyIlswzV EIoeOkLQW9BSL0ScKRc6AFgJlA5IJGRgVipaGXEB6lJcqMzjhjQ= -----END CERTIFICATE-----Generated at Fri Aug 8 00:13:20 2025 by rpki-client