$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft (raw, json) Hash identifier: cX/Ex1cm9X+JCyxfmYWVh52d3knGP5mhqRJSNVLiu4w= Subject key identifier: A9:D8:BD:61:69:D8:A2:64:4D:28:F6:23:FF:32:9B:68:7D:9A:42:B9 Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Certificate issuer: /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Certificate serial: 1972A30BE3DD3B5955D0A2DC759BA9A6572A6210 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft Manifest number: 01C4 Signing time: Mon 16 Jun 2025 00:00:05 +0000 Manifest this update: Sun 15 Jun 2025 23:55:05 +0000 Manifest next update: Thu 19 Jun 2025 10:35:05 +0000 Files and hashes: 1: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl (hash: DVG3KRdQcQgJGX8jfF6OJL/fiGujCnyj4LutipcracM=) 2: 3130332e3136302e36392e302f32342d3234203d3e20313431363037.roa (hash: a7mgV41OX87LjUgmR9JI4fbD1k92EJK28gdqBsIBQfU=) 3: 3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (hash: K+vQljm+ExeOXd+J7K26cCdQKnYakCROUmRDg3WOiF4=) 4: 3130332e3136302e36382e302f32342d3234203d3e203438343635.roa (hash: s3cZDsm3eCD/zirL0oonykymWlAaugzxDIFPlg5sAUQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 10:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:72:a3:0b:e3:dd:3b:59:55:d0:a2:dc:75:9b:a9:a6:57:2a:62:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Validity Not Before: Jun 15 23:55:05 2025 GMT Not After : Jun 19 10:35:05 2025 GMT Subject: CN=A9D8BD6169D8A2644D28F623FF329B687D9A42B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:c9:6d:0a:83:e6:26:0e:c0:69:cd:f0:e7: 94:b7:f4:df:ce:cf:ae:c1:ae:c2:d1:7c:f9:42:b3: 31:ac:e0:c7:5f:8e:aa:fd:ba:55:f8:73:1e:81:78: 47:c9:e2:7d:f6:3c:2a:39:30:70:20:10:b0:4f:27: 82:0f:df:cb:80:fe:7e:57:ba:3e:94:fc:29:3b:04: b8:30:b7:34:8b:cb:ba:e0:b2:76:81:24:ae:8f:9a: fd:19:fb:09:67:8f:7d:85:9a:7b:25:17:a9:4c:fe: f2:2d:10:c7:6a:03:62:90:a8:54:bd:78:db:2d:92: 1c:11:57:85:b1:e0:ae:07:69:b1:09:58:d5:5f:1a: ee:48:a5:70:cb:7f:e1:ef:3d:19:68:1e:0f:4c:25: db:6d:9b:e2:39:ef:f2:67:bc:42:06:4f:5c:f7:ba: d0:f9:8f:58:f9:53:9e:6a:d4:a2:a6:31:f2:70:97: 40:a1:cb:4f:cc:2c:2c:3c:13:0b:a0:20:f6:fe:78: 64:37:70:d4:c2:49:9d:9b:24:b6:07:bb:ad:64:73: 6e:c0:47:ab:53:58:fb:46:4e:5d:aa:ee:3c:bf:59: f0:0d:23:a8:6b:7d:89:3f:b2:ff:ea:48:fb:04:d8: 51:87:c3:0c:02:3f:b4:36:7b:8a:e9:d2:4d:d3:ba: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D8:BD:61:69:D8:A2:64:4D:28:F6:23:FF:32:9B:68:7D:9A:42:B9 X509v3 Authority Key Identifier: keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c3:c4:29:1d:fb:4a:99:4b:8f:b8:f8:7c:02:3a:b0:eb:8c: 47:3e:af:fd:33:a2:83:56:2f:a2:81:54:f4:95:25:b6:62:cd: c6:60:02:b3:4a:64:5b:64:d9:6f:07:ca:4d:e4:67:50:03:55: a6:d2:74:34:d2:77:87:ec:05:4a:0c:c2:d1:d5:44:2e:82:65: 8c:78:1b:2b:05:5f:b9:10:6b:8c:2a:85:8f:b3:15:9a:05:86: 21:dd:68:52:0b:77:cc:63:18:00:13:88:dc:9a:80:cf:ef:af: bb:71:fc:e5:6c:de:6a:5a:b8:5d:51:8b:ef:b3:80:96:b4:d0: 9a:84:25:f7:80:66:ed:16:a7:06:e8:e6:ea:2c:e0:c2:fb:d0: a3:66:43:67:ad:2f:bb:4f:ea:e5:f4:65:32:95:82:a2:3e:90: 51:b2:8e:79:57:c8:dc:ff:30:51:d6:f6:c8:fa:3f:0c:79:f0: 17:2e:da:4b:d9:bf:f9:be:a2:4e:2e:c8:e8:7a:2b:69:10:ac: 48:6d:b1:82:c0:dd:de:5c:af:2c:d3:e3:77:df:eb:53:71:40: 9b:bc:bc:ad:41:b0:bb:e2:21:0b:8f:5d:63:b8:aa:d2:42:82: c3:c1:5a:bd:ba:bc:62:ee:28:2c:76:80:67:b6:0a:8f:1d:a7: 98:5b:80:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXKjC+PdO1lV0KLcdZupplcqYhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG OURERTNERDAeFw0yNTA2MTUyMzU1MDVaFw0yNTA2MTkxMDM1MDVaMDMxMTAvBgNV BAMTKEE5RDhCRDYxNjlEOEEyNjQ0RDI4RjYyM0ZGMzI5QjY4N0Q5QTQyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNMltCoPmJg7Aac3w55S39N/O z67BrsLRfPlCszGs4Mdfjqr9ulX4cx6BeEfJ4n32PCo5MHAgELBPJ4IP38uA/n5X uj6U/Ck7BLgwtzSLy7rgsnaBJK6Pmv0Z+wlnj32FmnslF6lM/vItEMdqA2KQqFS9 eNstkhwRV4Wx4K4HabEJWNVfGu5IpXDLf+HvPRloHg9MJdttm+I57/JnvEIGT1z3 utD5j1j5U55q1KKmMfJwl0Chy0/MLCw8EwugIPb+eGQ3cNTCSZ2bJLYHu61kc27A R6tTWPtGTl2q7jy/WfANI6hrfYk/sv/qSPsE2FGHwwwCP7Q2e4rp0k3TuijFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqdi9YWnYomRNKPYj/zKbaH2aQrkwHwYDVR0j BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1 OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE RTNERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjNzlmYmUtNDc5MC00NmJlLWI5 YjItMDM1OWIxYTE4ZTMzLzAvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUz RkZGOURERTNERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLDxCkd+0qZS4+4+HwCOrDrjEc+r/0zooNW L6KBVPSVJbZizcZgArNKZFtk2W8Hyk3kZ1ADVabSdDTSd4fsBUoMwtHVRC6CZYx4 GysFX7kQa4wqhY+zFZoFhiHdaFILd8xjGAATiNyagM/vr7tx/OVs3mpauF1Ri++z gJa00JqEJfeAZu0Wpwbo5uos4ML70KNmQ2etL7tP6uX0ZTKVgqI+kFGyjnlXyNz/ MFHW9sj6Pwx58Bcu2kvZv/m+ok4uyOh6K2kQrEhtsYLA3d5cryzT43ff61NxQJu8 vK1BsLviIQuPXWO4qtJCgsPBWr26vGLuKCx2gGe2Co8dp5hbgEI= -----END CERTIFICATE-----Generated at Tue Jun 17 13:26:26 2025 by rpki-client