$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: /HMOE8MkKw3mQ6U18eUoenSiMC8u6FnrhqwOPBDFeLU= Subject key identifier: 7B:E2:6C:B6:B2:F4:BB:AF:20:2C:F0:62:E8:60:38:9A:AC:01:02:FE Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 0CE30CCBB47EF97854A3EB100995F6717D0680F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 01AE Signing time: Tue 29 Apr 2025 05:11:48 +0000 Manifest this update: Tue 29 Apr 2025 05:06:48 +0000 Manifest next update: Fri 02 May 2025 11:47:48 +0000 Files and hashes: 1: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: a7mgV41OX87LjUgmR9JI4fbD1k92EJK28gdqBsIBQfU=) 2: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: bhsynQCLWK1eBOVzXykgApWM/EgjxnNhzW3gsQIpoKE=) 3: 3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (hash: auLcgmSGCQAKQQp7IS/UW/PKknCFg/ObGvfBAC+PkNE=) 4: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: xfIhG1WqC8mycFYz+vcqQY0Ov8VUQ3o8w6al6PEEFwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 11:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e3:0c:cb:b4:7e:f9:78:54:a3:eb:10:09:95:f6:71:7d:06:80:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Apr 29 05:06:48 2025 GMT Not After : May 2 11:47:48 2025 GMT Subject: CN=7BE26CB6B2F4BBAF202CF062E860389AAC0102FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:db:1e:24:94:96:67:dd:ce:07:a7:a0:fa: 5d:90:5e:c9:44:cc:cd:40:d6:ad:ac:fa:13:98:82: 5e:61:56:77:db:cc:a8:fc:6b:5a:5f:6e:97:cc:17: 42:db:41:0f:d4:4a:79:2b:f8:ea:50:87:1f:37:84: 6f:0e:10:a2:2b:a7:7d:ef:bc:c1:6e:a3:4c:72:12: f1:2d:a2:73:67:dd:cb:e1:83:c7:5a:64:17:90:2d: 0e:0a:f4:8b:7e:62:58:f0:a4:32:72:1e:a6:35:58: 45:56:94:10:dc:ae:c5:50:05:e9:ff:b4:c6:86:1a: f5:49:77:ab:40:cd:75:6b:31:e5:9d:37:f7:bc:b2: 96:a2:c1:bf:fe:e9:f7:42:5b:52:cf:01:1f:25:7b: 73:52:99:16:5a:77:77:fc:b9:98:9e:b4:83:d1:a6: ab:20:2c:6d:81:61:cb:9c:24:76:e7:4b:e9:19:1b: b2:fe:ae:fd:90:97:7d:b6:ee:fb:a2:ff:ec:06:6d: a1:69:c6:90:14:48:d8:d0:e9:d5:85:ad:07:82:97: a2:17:e0:8a:3e:38:80:45:8a:75:15:f2:93:ab:eb: 71:d9:0c:31:4c:f9:2f:76:58:63:4c:35:f8:4f:fd: cb:ea:4c:15:3c:e1:33:7c:74:1e:c5:de:f1:cf:12: ce:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E2:6C:B6:B2:F4:BB:AF:20:2C:F0:62:E8:60:38:9A:AC:01:02:FE X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c8:00:e9:ff:da:a6:42:d4:bd:d9:a3:a4:e9:09:81:af:f4: 77:bd:70:4d:b0:fc:28:17:d7:d3:19:f5:9f:1c:bc:b1:03:8e: 1e:5d:84:bf:16:03:d9:76:75:32:dd:9b:3a:f7:23:e2:8c:20: 8f:98:c0:f7:db:15:a5:8d:9e:5b:e1:90:68:64:57:51:93:e9: bc:5d:7c:df:1a:93:98:ad:df:74:02:4a:8b:9e:d9:27:62:bc: ab:ef:87:94:77:1c:d9:d8:4b:00:de:3b:a2:bc:13:38:97:1d: 55:9d:d1:db:76:e9:de:9f:9f:01:8c:e3:b2:21:6b:7f:13:01: 11:e6:11:e5:e8:40:d0:77:c8:a0:3b:69:f8:a7:02:cd:d7:5d: 3a:bc:02:4d:d1:2b:37:d1:12:5d:82:74:98:76:d7:87:1e:57: 26:75:8c:c9:ac:ae:af:fa:f9:d1:7f:8b:bf:fe:df:8e:0f:49: b7:f3:da:8e:68:f5:d0:4f:b0:9b:a6:1c:37:b7:80:1e:39:d7: af:d9:86:9b:d6:95:48:ca:2d:96:96:c4:e4:7f:f4:47:f4:28: bf:05:1f:13:97:c2:04:dc:56:7a:ec:b7:5c:b9:4a:c2:2f:06: 53:ee:c7:7f:85:bf:32:29:69:67:f3:9f:50:f0:bd:ca:70:56: 7a:9d:8c:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOMMy7R++XhUo+sQCZX2cX0GgPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNTA0MjkwNTA2NDhaFw0yNTA1MDIxMTQ3NDhaMDMxMTAvBgNV BAMTKDdCRTI2Q0I2QjJGNEJCQUYyMDJDRjA2MkU4NjAzODlBQUMwMTAyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34NseJJSWZ93OB6eg+l2QXslE zM1A1q2s+hOYgl5hVnfbzKj8a1pfbpfMF0LbQQ/USnkr+OpQhx83hG8OEKIrp33v vMFuo0xyEvEtonNn3cvhg8daZBeQLQ4K9It+YljwpDJyHqY1WEVWlBDcrsVQBen/ tMaGGvVJd6tAzXVrMeWdN/e8spaiwb/+6fdCW1LPAR8le3NSmRZad3f8uZietIPR pqsgLG2BYcucJHbnS+kZG7L+rv2Ql3227vui/+wGbaFpxpAUSNjQ6dWFrQeCl6IX 4Io+OIBFinUV8pOr63HZDDFM+S92WGNMNfhP/cvqTBU84TN8dB7F3vHPEs6ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe+JstrL0u68gLPBi6GA4mqwBAv4wHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTIAOn/2qZC1L3Zo6TpCYGv9He9cE2w/CgX 19MZ9Z8cvLEDjh5dhL8WA9l2dTLdmzr3I+KMII+YwPfbFaWNnlvhkGhkV1GT6bxd fN8ak5it33QCSoue2SdivKvvh5R3HNnYSwDeO6K8EziXHVWd0dt26d6fnwGM47Ih a38TARHmEeXoQNB3yKA7afinAs3XXTq8Ak3RKzfREl2CdJh214ceVyZ1jMmsrq/6 +dF/i7/+344PSbfz2o5o9dBPsJumHDe3gB4516/ZhpvWlUjKLZaWxOR/9Ef0KL8F HxOXwgTcVnrst1y5SsIvBlPux3+FvzIpaWfzn1DwvcpwVnqdjJc= -----END CERTIFICATE-----Generated at Tue Apr 29 18:40:40 2025 by rpki-client