$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: IxkyiFZHC1xlBiT2E/c5rZzdSn4+08Z7FziN9wTbqyM= Subject key identifier: A4:58:E7:95:35:B4:73:E8:80:25:BF:53:7F:05:2A:3F:9D:44:36:7F Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 1616D2EF977EB94EE1772E4422B4E45F220C167F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 02CA Signing time: Fri 25 Apr 2025 17:00:49 +0000 Manifest this update: Fri 25 Apr 2025 16:55:49 +0000 Manifest next update: Mon 28 Apr 2025 20:16:49 +0000 Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: kQvwhxRIr0c9iOlMTcfmOkNMf8BdxcPNv83PJwJ+47k=) 2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: lhBJnX5aDF8IGRHDkv78109WbEEQIYqKiGUXihcXMFU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 20:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:16:d2:ef:97:7e:b9:4e:e1:77:2e:44:22:b4:e4:5f:22:0c:16:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Apr 25 16:55:49 2025 GMT Not After : Apr 28 20:16:49 2025 GMT Subject: CN=A458E79535B473E88025BF537F052A3F9D44367F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:bf:c8:a4:89:40:92:2a:67:ba:78:f0:19: 72:f2:a1:e5:f4:f5:0e:62:d6:73:42:2a:a3:44:62: 96:00:48:3d:95:ab:c1:87:57:22:92:fb:cf:eb:f3: 9e:5c:00:23:39:73:d4:b4:c6:3b:7e:a2:65:79:d9: 26:e8:e4:da:6c:9b:52:3e:8e:44:c6:77:49:58:0b: 54:fa:36:36:95:9d:92:ea:56:e5:0b:14:77:0a:ef: 5e:62:9b:0f:fe:09:39:3c:58:ae:cd:33:8d:4e:80: 5e:06:03:56:45:61:e4:bb:fb:15:d5:76:0e:cf:df: e8:94:49:08:db:1b:26:12:57:8b:6d:0f:fd:31:35: ce:14:2e:09:40:1d:d0:f1:34:b4:46:05:f7:09:16: f8:3a:20:19:14:fa:b5:0d:f3:85:6a:09:19:96:ae: 5f:58:e1:ab:28:62:0c:83:5c:6f:46:5a:8c:6a:61: 14:19:d9:b5:ab:12:07:51:21:a4:1b:6b:41:6d:30: ab:54:2b:e2:a3:46:c7:1b:a4:aa:6d:b3:24:7a:80: 06:9f:01:72:e5:7d:a7:a9:d1:76:b2:1c:05:55:79: 7a:0d:74:55:fd:b5:68:90:3d:b9:27:7f:89:96:b6: 0c:f9:54:7e:4d:28:88:66:25:67:82:3a:23:8e:4a: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:58:E7:95:35:B4:73:E8:80:25:BF:53:7F:05:2A:3F:9D:44:36:7F X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fa:ef:c3:b8:49:6b:75:7f:49:7d:41:92:52:af:cd:3f:31: 5c:63:4c:1a:14:20:04:81:be:f6:43:2d:b3:e2:c0:90:14:4c: 91:d9:9a:26:17:31:df:92:93:32:7c:cc:32:71:c5:13:9b:6a: a2:ce:23:d1:d8:d9:56:98:da:99:dc:76:f9:5d:24:df:4a:70: e4:21:51:61:64:81:b8:d0:e5:c0:af:38:a8:7e:a4:81:95:9e: 7e:7f:16:17:93:74:48:5f:e6:a3:46:f5:18:fe:17:01:9d:d0: 7f:6c:80:92:16:09:58:d4:c3:38:44:f8:14:b0:54:44:62:81: b4:cc:d1:13:f1:11:96:ff:19:d0:d6:ee:77:71:e1:8e:00:c5: bb:6d:85:95:35:64:5a:96:38:10:3b:89:f4:8d:95:19:f7:9b: 9d:4a:31:90:a0:52:3d:98:7d:2a:1e:7a:81:98:9b:9d:6e:7e: d4:78:12:d2:60:e9:59:54:2f:14:a9:fa:70:ca:52:35:bd:ac: 23:d9:60:a7:5c:c9:4e:e5:2c:c1:1f:0f:6c:e0:78:e7:8f:50: ff:64:a6:8b:e7:57:21:5a:b3:55:c2:7e:be:2b:48:b7:06:45: 1c:83:4e:6f:c3:99:0e:4f:f5:fe:1d:b9:a2:c1:11:fe:1d:5d: 69:91:c6:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFhbS75d+uU7hdy5EIrTkXyIMFn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNTA0MjUxNjU1NDlaFw0yNTA0MjgyMDE2NDlaMDMxMTAvBgNV BAMTKEE0NThFNzk1MzVCNDczRTg4MDI1QkY1MzdGMDUyQTNGOUQ0NDM2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+L/IpIlAkipnunjwGXLyoeX0 9Q5i1nNCKqNEYpYASD2Vq8GHVyKS+8/r855cACM5c9S0xjt+omV52Sbo5Npsm1I+ jkTGd0lYC1T6NjaVnZLqVuULFHcK715imw/+CTk8WK7NM41OgF4GA1ZFYeS7+xXV dg7P3+iUSQjbGyYSV4ttD/0xNc4ULglAHdDxNLRGBfcJFvg6IBkU+rUN84VqCRmW rl9Y4asoYgyDXG9GWoxqYRQZ2bWrEgdRIaQba0FtMKtUK+KjRscbpKptsyR6gAaf AXLlfaep0XayHAVVeXoNdFX9tWiQPbknf4mWtgz5VH5NKIhmJWeCOiOOSvp5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpFjnlTW0c+iAJb9TfwUqP51ENn8wHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/678O4SWt1f0l9QZJSr80/MVxjTBoUIASB vvZDLbPiwJAUTJHZmiYXMd+SkzJ8zDJxxRObaqLOI9HY2VaY2pncdvldJN9KcOQh UWFkgbjQ5cCvOKh+pIGVnn5/FheTdEhf5qNG9Rj+FwGd0H9sgJIWCVjUwzhE+BSw VERigbTM0RPxEZb/GdDW7ndx4Y4AxbtthZU1ZFqWOBA7ifSNlRn3m51KMZCgUj2Y fSoeeoGYm51uftR4EtJg6VlULxSp+nDKUjW9rCPZYKdcyU7lLMEfD2zgeOePUP9k povnVyFas1XCfr4rSLcGRRyDTm/DmQ5P9f4duaLBEf4dXWmRxmk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:39:00 2025 by rpki-client