$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: y98O9goIGreUs0ZF+dp+MIHvrKi6uRPm6Ww5L4+JG+Q= Subject key identifier: 2E:CF:BB:2A:C4:1F:C6:03:92:D8:05:D7:95:B5:2C:55:66:B4:F5:D6 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 77BAF16EF8596CBEC9F4975E25648F575F92220F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 01DB Signing time: Wed 06 Aug 2025 07:11:53 +0000 Manifest this update: Wed 06 Aug 2025 07:06:53 +0000 Manifest next update: Sat 09 Aug 2025 07:47:53 +0000 Files and hashes: 1: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: naD31Ff9hBxN+Ol6mQuEktyeRzGH9FUu+aGIWvOV4YA=) 2: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: s3cZDsm3eCD/zirL0oonykymWlAaugzxDIFPlg5sAUQ=) 3: 3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (hash: K+vQljm+ExeOXd+J7K26cCdQKnYakCROUmRDg3WOiF4=) 4: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: a7mgV41OX87LjUgmR9JI4fbD1k92EJK28gdqBsIBQfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 07:47:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ba:f1:6e:f8:59:6c:be:c9:f4:97:5e:25:64:8f:57:5f:92:22:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Aug 6 07:06:53 2025 GMT Not After : Aug 9 07:47:53 2025 GMT Subject: CN=2ECFBB2AC41FC60392D805D795B52C5566B4F5D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:b5:aa:78:17:35:76:28:cc:12:d3:2c:56: 5b:2d:be:b8:2f:33:34:73:e9:4f:42:a7:e3:4c:3e: fe:06:68:f7:3b:15:25:0c:88:bb:5b:b4:d0:b9:3d: c5:bc:4a:4d:fc:19:42:ba:95:86:b4:f4:af:07:f3: bf:60:eb:bd:f4:89:17:7c:d0:f5:e1:f4:c5:ec:99: 62:6f:9b:76:75:21:33:39:c9:a5:9e:4f:66:4c:10: fb:1d:96:87:c7:9e:f8:bf:20:b8:38:76:50:a6:9e: 3e:81:f8:13:97:a7:95:72:02:55:65:7b:c8:2f:84: 89:3a:b5:f3:30:43:8a:cc:e0:fa:ad:cb:13:cd:1a: dd:49:6a:68:c8:ad:a7:79:50:20:a1:81:17:7d:89: ca:c1:45:5d:e1:6a:d1:5e:c9:62:ca:00:9e:c9:88: b8:13:8d:db:9e:fb:de:03:5c:3d:0b:9d:f5:f2:24: 1e:ec:1a:b5:cc:ae:cc:50:7e:8e:f6:b9:8f:54:de: 9b:d8:2b:ac:7c:06:23:4d:ef:ae:91:f9:58:b2:34: b4:ff:a1:66:81:cc:f8:4c:30:e7:7e:c7:54:18:c6: 84:cc:d4:d8:10:bf:0d:18:7d:3f:8c:1b:0c:21:04: df:19:4c:28:6c:fa:c5:60:98:d1:7b:8f:b8:b8:f3: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CF:BB:2A:C4:1F:C6:03:92:D8:05:D7:95:B5:2C:55:66:B4:F5:D6 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1c:a4:74:8e:46:04:de:99:ee:0e:f2:2a:d0:a4:9d:da:46: 36:9c:18:cf:70:48:ca:51:9b:b6:b9:d6:2e:aa:4c:69:4b:8f: 34:a1:a6:1f:69:9d:86:16:c2:0f:3a:26:7b:ed:6a:9e:b3:8c: 85:73:07:aa:1f:60:19:22:07:8f:a8:98:ae:3d:1e:8d:1a:fe: 0b:2b:9f:a6:72:0c:a6:eb:a4:94:12:5f:1c:03:4b:c6:0c:3f: 1a:d3:1f:14:cd:d1:01:ff:64:ff:03:a2:79:34:12:7d:b5:42: 2d:e0:3f:00:b3:11:5c:38:93:85:9f:11:fe:16:de:b6:cb:f6: 6e:04:ea:6c:36:37:ac:d0:4f:30:9c:75:f8:e6:03:01:ac:5c: 84:c5:66:70:80:10:ab:ac:c4:f2:f3:2e:d6:43:de:40:35:be: 5b:d7:4a:50:cd:72:ee:bf:21:b5:28:d3:84:fc:27:2e:bb:14: 48:20:2f:7d:c4:25:e4:6e:dd:4d:b5:9a:bd:7c:95:41:b7:6e: 15:72:3b:67:98:0a:9d:0e:4a:33:06:cf:50:e1:24:1b:7c:5d: ad:72:50:12:dd:10:a0:34:a7:bf:82:94:92:82:da:12:8a:53: 06:ba:e1:e8:51:f1:4b:2d:9f:70:01:b3:51:29:d8:35:db:f7: 34:e3:e2:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd7rxbvhZbL7J9JdeJWSPV1+SIg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNTA4MDYwNzA2NTNaFw0yNTA4MDkwNzQ3NTNaMDMxMTAvBgNV BAMTKDJFQ0ZCQjJBQzQxRkM2MDM5MkQ4MDVENzk1QjUyQzU1NjZCNEY1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQD7WqeBc1dijMEtMsVlstvrgv MzRz6U9Cp+NMPv4GaPc7FSUMiLtbtNC5PcW8Sk38GUK6lYa09K8H879g6730iRd8 0PXh9MXsmWJvm3Z1ITM5yaWeT2ZMEPsdlofHnvi/ILg4dlCmnj6B+BOXp5VyAlVl e8gvhIk6tfMwQ4rM4PqtyxPNGt1JamjIrad5UCChgRd9icrBRV3hatFeyWLKAJ7J iLgTjdue+94DXD0LnfXyJB7sGrXMrsxQfo72uY9U3pvYK6x8BiNN766R+ViyNLT/ oWaBzPhMMOd+x1QYxoTM1NgQvw0YfT+MGwwhBN8ZTChs+sVgmNF7j7i48zRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULs+7KsQfxgOS2AXXlbUsVWa09dYwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYcpHSORgTeme4O8irQpJ3aRjacGM9wSMpR m7a51i6qTGlLjzShph9pnYYWwg86Jnvtap6zjIVzB6ofYBkiB4+omK49Ho0a/gsr n6ZyDKbrpJQSXxwDS8YMPxrTHxTN0QH/ZP8Donk0En21Qi3gPwCzEVw4k4WfEf4W 3rbL9m4E6mw2N6zQTzCcdfjmAwGsXITFZnCAEKusxPLzLtZD3kA1vlvXSlDNcu6/ IbUo04T8Jy67FEggL33EJeRu3U21mr18lUG3bhVyO2eYCp0OSjMGz1DhJBt8Xa1y UBLdEKA0p7+ClJKC2hKKUwa64ehR8Ustn3ABs1Ep2DXb9zTj4j0= -----END CERTIFICATE-----Generated at Thu Aug 7 13:10:21 2025 by rpki-client